diff --git a/docs/data-sources/acme_cert_manager_io_challenge_v1_manifest.md b/docs/data-sources/acme_cert_manager_io_challenge_v1_manifest.md
index ae002f9e2..d5326fa09 100644
--- a/docs/data-sources/acme_cert_manager_io_challenge_v1_manifest.md
+++ b/docs/data-sources/acme_cert_manager_io_challenge_v1_manifest.md
@@ -433,6 +433,7 @@ Optional:
- `labels` (Map of String) Custom labels that will be applied to HTTPRoutes created by cert-managerwhile solving HTTP-01 challenges.
- `parent_refs` (Attributes List) When solving an HTTP-01 challenge, cert-manager creates an HTTPRoute.cert-manager needs to know which parentRefs should be used when creatingthe HTTPRoute. Usually, the parentRef references a Gateway. See:https://gateway-api.sigs.k8s.io/api-types/httproute/#attaching-to-gateways (see [below for nested schema](#nestedatt--spec--solver--http01--gateway_http_route--parent_refs))
+- `pod_template` (Attributes) Optional pod template used to configure the ACME challenge solver podsused for HTTP01 challenges. (see [below for nested schema](#nestedatt--spec--solver--http01--gateway_http_route--pod_template))
- `service_type` (String) Optional service type for Kubernetes solver service. Supported valuesare NodePort or ClusterIP. If unset, defaults to NodePort.
@@ -451,6 +452,488 @@ Optional:
- `section_name` (String) SectionName is the name of a section within the target resource. In thefollowing resources, SectionName is interpreted as the following:* Gateway: Listener name. When both Port (experimental) and SectionNameare specified, the name and port of the selected listener must matchboth specified values.* Service: Port name. When both Port (experimental) and SectionNameare specified, the name and port of the selected listener must matchboth specified values.Implementations MAY choose to support attaching Routes to other resources.If that is the case, they MUST clearly document how SectionName isinterpreted.When unspecified (empty string), this will reference the entire resource.For the purpose of status, an attachment is considered successful if atleast one section in the parent resource accepts it. For example, Gatewaylisteners can restrict which Routes can attach to them by Route kind,namespace, or hostname. If 1 of 2 Gateway listeners accept attachment fromthe referencing Route, the Route MUST be considered successfullyattached. If no Gateway listeners accept attachment from this Route, theRoute MUST be considered detached from the Gateway.Support: Core
+
+### Nested Schema for `spec.solver.http01.gateway_http_route.pod_template`
+
+Optional:
+
+- `metadata` (Attributes) ObjectMeta overrides for the pod used to solve HTTP01 challenges.Only the 'labels' and 'annotations' fields may be set.If labels or annotations overlap with in-built values, the values herewill override the in-built values. (see [below for nested schema](#nestedatt--spec--solver--http01--gateway_http_route--pod_template--metadata))
+- `spec` (Attributes) PodSpec defines overrides for the HTTP01 challenge solver pod.Check ACMEChallengeSolverHTTP01IngressPodSpec to find out currently supported fields.All other fields will be ignored. (see [below for nested schema](#nestedatt--spec--solver--http01--gateway_http_route--pod_template--spec))
+
+
+### Nested Schema for `spec.solver.http01.gateway_http_route.pod_template.metadata`
+
+Optional:
+
+- `annotations` (Map of String) Annotations that should be added to the create ACME HTTP01 solver pods.
+- `labels` (Map of String) Labels that should be added to the created ACME HTTP01 solver pods.
+
+
+
+### Nested Schema for `spec.solver.http01.gateway_http_route.pod_template.spec`
+
+Optional:
+
+- `affinity` (Attributes) If specified, the pod's scheduling constraints (see [below for nested schema](#nestedatt--spec--solver--http01--gateway_http_route--pod_template--spec--affinity))
+- `image_pull_secrets` (Attributes List) If specified, the pod's imagePullSecrets (see [below for nested schema](#nestedatt--spec--solver--http01--gateway_http_route--pod_template--spec--image_pull_secrets))
+- `node_selector` (Map of String) NodeSelector is a selector which must be true for the pod to fit on a node.Selector which must match a node's labels for the pod to be scheduled on that node.More info: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/
+- `priority_class_name` (String) If specified, the pod's priorityClassName.
+- `security_context` (Attributes) If specified, the pod's security context (see [below for nested schema](#nestedatt--spec--solver--http01--gateway_http_route--pod_template--spec--security_context))
+- `service_account_name` (String) If specified, the pod's service account
+- `tolerations` (Attributes List) If specified, the pod's tolerations. (see [below for nested schema](#nestedatt--spec--solver--http01--gateway_http_route--pod_template--spec--tolerations))
+
+
+### Nested Schema for `spec.solver.http01.gateway_http_route.pod_template.spec.affinity`
+
+Optional:
+
+- `node_affinity` (Attributes) Describes node affinity scheduling rules for the pod. (see [below for nested schema](#nestedatt--spec--solver--http01--gateway_http_route--pod_template--spec--affinity--node_affinity))
+- `pod_affinity` (Attributes) Describes pod affinity scheduling rules (e.g. co-locate this pod in the same node, zone, etc. as some other pod(s)). (see [below for nested schema](#nestedatt--spec--solver--http01--gateway_http_route--pod_template--spec--affinity--pod_affinity))
+- `pod_anti_affinity` (Attributes) Describes pod anti-affinity scheduling rules (e.g. avoid putting this pod in the same node, zone, etc. as some other pod(s)). (see [below for nested schema](#nestedatt--spec--solver--http01--gateway_http_route--pod_template--spec--affinity--pod_anti_affinity))
+
+
+### Nested Schema for `spec.solver.http01.gateway_http_route.pod_template.spec.affinity.node_affinity`
+
+Optional:
+
+- `preferred_during_scheduling_ignored_during_execution` (Attributes List) The scheduler will prefer to schedule pods to nodes that satisfythe affinity expressions specified by this field, but it may choosea node that violates one or more of the expressions. The node that ismost preferred is the one with the greatest sum of weights, i.e.for each node that meets all of the scheduling requirements (resourcerequest, requiredDuringScheduling affinity expressions, etc.),compute a sum by iterating through the elements of this field and adding'weight' to the sum if the node matches the corresponding matchExpressions; thenode(s) with the highest sum are the most preferred. (see [below for nested schema](#nestedatt--spec--solver--http01--gateway_http_route--pod_template--spec--affinity--node_affinity--preferred_during_scheduling_ignored_during_execution))
+- `required_during_scheduling_ignored_during_execution` (Attributes) If the affinity requirements specified by this field are not met atscheduling time, the pod will not be scheduled onto the node.If the affinity requirements specified by this field cease to be metat some point during pod execution (e.g. due to an update), the systemmay or may not try to eventually evict the pod from its node. (see [below for nested schema](#nestedatt--spec--solver--http01--gateway_http_route--pod_template--spec--affinity--node_affinity--required_during_scheduling_ignored_during_execution))
+
+
+### Nested Schema for `spec.solver.http01.gateway_http_route.pod_template.spec.affinity.node_affinity.preferred_during_scheduling_ignored_during_execution`
+
+Required:
+
+- `preference` (Attributes) A node selector term, associated with the corresponding weight. (see [below for nested schema](#nestedatt--spec--solver--http01--gateway_http_route--pod_template--spec--affinity--node_affinity--preferred_during_scheduling_ignored_during_execution--preference))
+- `weight` (Number) Weight associated with matching the corresponding nodeSelectorTerm, in the range 1-100.
+
+
+### Nested Schema for `spec.solver.http01.gateway_http_route.pod_template.spec.affinity.node_affinity.preferred_during_scheduling_ignored_during_execution.preference`
+
+Optional:
+
+- `match_expressions` (Attributes List) A list of node selector requirements by node's labels. (see [below for nested schema](#nestedatt--spec--solver--http01--gateway_http_route--pod_template--spec--affinity--node_affinity--preferred_during_scheduling_ignored_during_execution--preference--match_expressions))
+- `match_fields` (Attributes List) A list of node selector requirements by node's fields. (see [below for nested schema](#nestedatt--spec--solver--http01--gateway_http_route--pod_template--spec--affinity--node_affinity--preferred_during_scheduling_ignored_during_execution--preference--match_fields))
+
+
+### Nested Schema for `spec.solver.http01.gateway_http_route.pod_template.spec.affinity.node_affinity.preferred_during_scheduling_ignored_during_execution.preference.match_expressions`
+
+Required:
+
+- `key` (String) The label key that the selector applies to.
+- `operator` (String) Represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt.
+
+Optional:
+
+- `values` (List of String) An array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. If the operator is Gt or Lt, the valuesarray must have a single element, which will be interpreted as an integer.This array is replaced during a strategic merge patch.
+
+
+
+### Nested Schema for `spec.solver.http01.gateway_http_route.pod_template.spec.affinity.node_affinity.preferred_during_scheduling_ignored_during_execution.preference.match_fields`
+
+Required:
+
+- `key` (String) The label key that the selector applies to.
+- `operator` (String) Represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt.
+
+Optional:
+
+- `values` (List of String) An array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. If the operator is Gt or Lt, the valuesarray must have a single element, which will be interpreted as an integer.This array is replaced during a strategic merge patch.
+
+
+
+
+
+### Nested Schema for `spec.solver.http01.gateway_http_route.pod_template.spec.affinity.node_affinity.required_during_scheduling_ignored_during_execution`
+
+Required:
+
+- `node_selector_terms` (Attributes List) Required. A list of node selector terms. The terms are ORed. (see [below for nested schema](#nestedatt--spec--solver--http01--gateway_http_route--pod_template--spec--affinity--node_affinity--required_during_scheduling_ignored_during_execution--node_selector_terms))
+
+
+### Nested Schema for `spec.solver.http01.gateway_http_route.pod_template.spec.affinity.node_affinity.required_during_scheduling_ignored_during_execution.node_selector_terms`
+
+Optional:
+
+- `match_expressions` (Attributes List) A list of node selector requirements by node's labels. (see [below for nested schema](#nestedatt--spec--solver--http01--gateway_http_route--pod_template--spec--affinity--node_affinity--required_during_scheduling_ignored_during_execution--node_selector_terms--match_expressions))
+- `match_fields` (Attributes List) A list of node selector requirements by node's fields. (see [below for nested schema](#nestedatt--spec--solver--http01--gateway_http_route--pod_template--spec--affinity--node_affinity--required_during_scheduling_ignored_during_execution--node_selector_terms--match_fields))
+
+
+### Nested Schema for `spec.solver.http01.gateway_http_route.pod_template.spec.affinity.node_affinity.required_during_scheduling_ignored_during_execution.node_selector_terms.match_expressions`
+
+Required:
+
+- `key` (String) The label key that the selector applies to.
+- `operator` (String) Represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt.
+
+Optional:
+
+- `values` (List of String) An array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. If the operator is Gt or Lt, the valuesarray must have a single element, which will be interpreted as an integer.This array is replaced during a strategic merge patch.
+
+
+
+### Nested Schema for `spec.solver.http01.gateway_http_route.pod_template.spec.affinity.node_affinity.required_during_scheduling_ignored_during_execution.node_selector_terms.match_fields`
+
+Required:
+
+- `key` (String) The label key that the selector applies to.
+- `operator` (String) Represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt.
+
+Optional:
+
+- `values` (List of String) An array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. If the operator is Gt or Lt, the valuesarray must have a single element, which will be interpreted as an integer.This array is replaced during a strategic merge patch.
+
+
+
+
+
+
+### Nested Schema for `spec.solver.http01.gateway_http_route.pod_template.spec.affinity.pod_affinity`
+
+Optional:
+
+- `preferred_during_scheduling_ignored_during_execution` (Attributes List) The scheduler will prefer to schedule pods to nodes that satisfythe affinity expressions specified by this field, but it may choosea node that violates one or more of the expressions. The node that ismost preferred is the one with the greatest sum of weights, i.e.for each node that meets all of the scheduling requirements (resourcerequest, requiredDuringScheduling affinity expressions, etc.),compute a sum by iterating through the elements of this field and adding'weight' to the sum if the node has pods which matches the corresponding podAffinityTerm; thenode(s) with the highest sum are the most preferred. (see [below for nested schema](#nestedatt--spec--solver--http01--gateway_http_route--pod_template--spec--affinity--pod_affinity--preferred_during_scheduling_ignored_during_execution))
+- `required_during_scheduling_ignored_during_execution` (Attributes List) If the affinity requirements specified by this field are not met atscheduling time, the pod will not be scheduled onto the node.If the affinity requirements specified by this field cease to be metat some point during pod execution (e.g. due to a pod label update), thesystem may or may not try to eventually evict the pod from its node.When there are multiple elements, the lists of nodes corresponding to eachpodAffinityTerm are intersected, i.e. all terms must be satisfied. (see [below for nested schema](#nestedatt--spec--solver--http01--gateway_http_route--pod_template--spec--affinity--pod_affinity--required_during_scheduling_ignored_during_execution))
+
+
+### Nested Schema for `spec.solver.http01.gateway_http_route.pod_template.spec.affinity.pod_affinity.preferred_during_scheduling_ignored_during_execution`
+
+Required:
+
+- `pod_affinity_term` (Attributes) Required. A pod affinity term, associated with the corresponding weight. (see [below for nested schema](#nestedatt--spec--solver--http01--gateway_http_route--pod_template--spec--affinity--pod_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term))
+- `weight` (Number) weight associated with matching the corresponding podAffinityTerm,in the range 1-100.
+
+
+### Nested Schema for `spec.solver.http01.gateway_http_route.pod_template.spec.affinity.pod_affinity.preferred_during_scheduling_ignored_during_execution.pod_affinity_term`
+
+Required:
+
+- `topology_key` (String) This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matchingthe labelSelector in the specified namespaces, where co-located is defined as running on a nodewhose value of the label with key topologyKey matches that of any node on which any of theselected pods is running.Empty topologyKey is not allowed.
+
+Optional:
+
+- `label_selector` (Attributes) A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods. (see [below for nested schema](#nestedatt--spec--solver--http01--gateway_http_route--pod_template--spec--affinity--pod_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--label_selector))
+- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
+- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
+- `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--solver--http01--gateway_http_route--pod_template--spec--affinity--pod_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--namespace_selector))
+- `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.
+
+
+### Nested Schema for `spec.solver.http01.gateway_http_route.pod_template.spec.affinity.pod_affinity.preferred_during_scheduling_ignored_during_execution.pod_affinity_term.label_selector`
+
+Optional:
+
+- `match_expressions` (Attributes List) matchExpressions is a list of label selector requirements. The requirements are ANDed. (see [below for nested schema](#nestedatt--spec--solver--http01--gateway_http_route--pod_template--spec--affinity--pod_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--label_selector--match_expressions))
+- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.
+
+
+### Nested Schema for `spec.solver.http01.gateway_http_route.pod_template.spec.affinity.pod_affinity.preferred_during_scheduling_ignored_during_execution.pod_affinity_term.label_selector.match_expressions`
+
+Required:
+
+- `key` (String) key is the label key that the selector applies to.
+- `operator` (String) operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.
+
+Optional:
+
+- `values` (List of String) values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.
+
+
+
+
+### Nested Schema for `spec.solver.http01.gateway_http_route.pod_template.spec.affinity.pod_affinity.preferred_during_scheduling_ignored_during_execution.pod_affinity_term.namespace_selector`
+
+Optional:
+
+- `match_expressions` (Attributes List) matchExpressions is a list of label selector requirements. The requirements are ANDed. (see [below for nested schema](#nestedatt--spec--solver--http01--gateway_http_route--pod_template--spec--affinity--pod_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--namespace_selector--match_expressions))
+- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.
+
+
+### Nested Schema for `spec.solver.http01.gateway_http_route.pod_template.spec.affinity.pod_affinity.preferred_during_scheduling_ignored_during_execution.pod_affinity_term.namespace_selector.match_expressions`
+
+Required:
+
+- `key` (String) key is the label key that the selector applies to.
+- `operator` (String) operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.
+
+Optional:
+
+- `values` (List of String) values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.
+
+
+
+
+
+
+### Nested Schema for `spec.solver.http01.gateway_http_route.pod_template.spec.affinity.pod_affinity.required_during_scheduling_ignored_during_execution`
+
+Required:
+
+- `topology_key` (String) This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matchingthe labelSelector in the specified namespaces, where co-located is defined as running on a nodewhose value of the label with key topologyKey matches that of any node on which any of theselected pods is running.Empty topologyKey is not allowed.
+
+Optional:
+
+- `label_selector` (Attributes) A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods. (see [below for nested schema](#nestedatt--spec--solver--http01--gateway_http_route--pod_template--spec--affinity--pod_affinity--required_during_scheduling_ignored_during_execution--label_selector))
+- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
+- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
+- `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--solver--http01--gateway_http_route--pod_template--spec--affinity--pod_affinity--required_during_scheduling_ignored_during_execution--namespace_selector))
+- `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.
+
+
+### Nested Schema for `spec.solver.http01.gateway_http_route.pod_template.spec.affinity.pod_affinity.required_during_scheduling_ignored_during_execution.label_selector`
+
+Optional:
+
+- `match_expressions` (Attributes List) matchExpressions is a list of label selector requirements. The requirements are ANDed. (see [below for nested schema](#nestedatt--spec--solver--http01--gateway_http_route--pod_template--spec--affinity--pod_affinity--required_during_scheduling_ignored_during_execution--label_selector--match_expressions))
+- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.
+
+
+### Nested Schema for `spec.solver.http01.gateway_http_route.pod_template.spec.affinity.pod_affinity.required_during_scheduling_ignored_during_execution.label_selector.match_expressions`
+
+Required:
+
+- `key` (String) key is the label key that the selector applies to.
+- `operator` (String) operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.
+
+Optional:
+
+- `values` (List of String) values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.
+
+
+
+
+### Nested Schema for `spec.solver.http01.gateway_http_route.pod_template.spec.affinity.pod_affinity.required_during_scheduling_ignored_during_execution.namespace_selector`
+
+Optional:
+
+- `match_expressions` (Attributes List) matchExpressions is a list of label selector requirements. The requirements are ANDed. (see [below for nested schema](#nestedatt--spec--solver--http01--gateway_http_route--pod_template--spec--affinity--pod_affinity--required_during_scheduling_ignored_during_execution--namespace_selector--match_expressions))
+- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.
+
+
+### Nested Schema for `spec.solver.http01.gateway_http_route.pod_template.spec.affinity.pod_affinity.required_during_scheduling_ignored_during_execution.namespace_selector.match_expressions`
+
+Required:
+
+- `key` (String) key is the label key that the selector applies to.
+- `operator` (String) operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.
+
+Optional:
+
+- `values` (List of String) values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.
+
+
+
+
+
+
+### Nested Schema for `spec.solver.http01.gateway_http_route.pod_template.spec.affinity.pod_anti_affinity`
+
+Optional:
+
+- `preferred_during_scheduling_ignored_during_execution` (Attributes List) The scheduler will prefer to schedule pods to nodes that satisfythe anti-affinity expressions specified by this field, but it may choosea node that violates one or more of the expressions. The node that ismost preferred is the one with the greatest sum of weights, i.e.for each node that meets all of the scheduling requirements (resourcerequest, requiredDuringScheduling anti-affinity expressions, etc.),compute a sum by iterating through the elements of this field and adding'weight' to the sum if the node has pods which matches the corresponding podAffinityTerm; thenode(s) with the highest sum are the most preferred. (see [below for nested schema](#nestedatt--spec--solver--http01--gateway_http_route--pod_template--spec--affinity--pod_anti_affinity--preferred_during_scheduling_ignored_during_execution))
+- `required_during_scheduling_ignored_during_execution` (Attributes List) If the anti-affinity requirements specified by this field are not met atscheduling time, the pod will not be scheduled onto the node.If the anti-affinity requirements specified by this field cease to be metat some point during pod execution (e.g. due to a pod label update), thesystem may or may not try to eventually evict the pod from its node.When there are multiple elements, the lists of nodes corresponding to eachpodAffinityTerm are intersected, i.e. all terms must be satisfied. (see [below for nested schema](#nestedatt--spec--solver--http01--gateway_http_route--pod_template--spec--affinity--pod_anti_affinity--required_during_scheduling_ignored_during_execution))
+
+
+### Nested Schema for `spec.solver.http01.gateway_http_route.pod_template.spec.affinity.pod_anti_affinity.preferred_during_scheduling_ignored_during_execution`
+
+Required:
+
+- `pod_affinity_term` (Attributes) Required. A pod affinity term, associated with the corresponding weight. (see [below for nested schema](#nestedatt--spec--solver--http01--gateway_http_route--pod_template--spec--affinity--pod_anti_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term))
+- `weight` (Number) weight associated with matching the corresponding podAffinityTerm,in the range 1-100.
+
+
+### Nested Schema for `spec.solver.http01.gateway_http_route.pod_template.spec.affinity.pod_anti_affinity.preferred_during_scheduling_ignored_during_execution.pod_affinity_term`
+
+Required:
+
+- `topology_key` (String) This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matchingthe labelSelector in the specified namespaces, where co-located is defined as running on a nodewhose value of the label with key topologyKey matches that of any node on which any of theselected pods is running.Empty topologyKey is not allowed.
+
+Optional:
+
+- `label_selector` (Attributes) A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods. (see [below for nested schema](#nestedatt--spec--solver--http01--gateway_http_route--pod_template--spec--affinity--pod_anti_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--label_selector))
+- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
+- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
+- `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--solver--http01--gateway_http_route--pod_template--spec--affinity--pod_anti_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--namespace_selector))
+- `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.
+
+
+### Nested Schema for `spec.solver.http01.gateway_http_route.pod_template.spec.affinity.pod_anti_affinity.preferred_during_scheduling_ignored_during_execution.pod_affinity_term.label_selector`
+
+Optional:
+
+- `match_expressions` (Attributes List) matchExpressions is a list of label selector requirements. The requirements are ANDed. (see [below for nested schema](#nestedatt--spec--solver--http01--gateway_http_route--pod_template--spec--affinity--pod_anti_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--label_selector--match_expressions))
+- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.
+
+
+### Nested Schema for `spec.solver.http01.gateway_http_route.pod_template.spec.affinity.pod_anti_affinity.preferred_during_scheduling_ignored_during_execution.pod_affinity_term.label_selector.match_expressions`
+
+Required:
+
+- `key` (String) key is the label key that the selector applies to.
+- `operator` (String) operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.
+
+Optional:
+
+- `values` (List of String) values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.
+
+
+
+
+### Nested Schema for `spec.solver.http01.gateway_http_route.pod_template.spec.affinity.pod_anti_affinity.preferred_during_scheduling_ignored_during_execution.pod_affinity_term.namespace_selector`
+
+Optional:
+
+- `match_expressions` (Attributes List) matchExpressions is a list of label selector requirements. The requirements are ANDed. (see [below for nested schema](#nestedatt--spec--solver--http01--gateway_http_route--pod_template--spec--affinity--pod_anti_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--namespace_selector--match_expressions))
+- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.
+
+
+### Nested Schema for `spec.solver.http01.gateway_http_route.pod_template.spec.affinity.pod_anti_affinity.preferred_during_scheduling_ignored_during_execution.pod_affinity_term.namespace_selector.match_expressions`
+
+Required:
+
+- `key` (String) key is the label key that the selector applies to.
+- `operator` (String) operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.
+
+Optional:
+
+- `values` (List of String) values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.
+
+
+
+
+
+
+### Nested Schema for `spec.solver.http01.gateway_http_route.pod_template.spec.affinity.pod_anti_affinity.required_during_scheduling_ignored_during_execution`
+
+Required:
+
+- `topology_key` (String) This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matchingthe labelSelector in the specified namespaces, where co-located is defined as running on a nodewhose value of the label with key topologyKey matches that of any node on which any of theselected pods is running.Empty topologyKey is not allowed.
+
+Optional:
+
+- `label_selector` (Attributes) A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods. (see [below for nested schema](#nestedatt--spec--solver--http01--gateway_http_route--pod_template--spec--affinity--pod_anti_affinity--required_during_scheduling_ignored_during_execution--label_selector))
+- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
+- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
+- `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--solver--http01--gateway_http_route--pod_template--spec--affinity--pod_anti_affinity--required_during_scheduling_ignored_during_execution--namespace_selector))
+- `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.
+
+
+### Nested Schema for `spec.solver.http01.gateway_http_route.pod_template.spec.affinity.pod_anti_affinity.required_during_scheduling_ignored_during_execution.label_selector`
+
+Optional:
+
+- `match_expressions` (Attributes List) matchExpressions is a list of label selector requirements. The requirements are ANDed. (see [below for nested schema](#nestedatt--spec--solver--http01--gateway_http_route--pod_template--spec--affinity--pod_anti_affinity--required_during_scheduling_ignored_during_execution--label_selector--match_expressions))
+- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.
+
+
+### Nested Schema for `spec.solver.http01.gateway_http_route.pod_template.spec.affinity.pod_anti_affinity.required_during_scheduling_ignored_during_execution.label_selector.match_expressions`
+
+Required:
+
+- `key` (String) key is the label key that the selector applies to.
+- `operator` (String) operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.
+
+Optional:
+
+- `values` (List of String) values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.
+
+
+
+
+### Nested Schema for `spec.solver.http01.gateway_http_route.pod_template.spec.affinity.pod_anti_affinity.required_during_scheduling_ignored_during_execution.namespace_selector`
+
+Optional:
+
+- `match_expressions` (Attributes List) matchExpressions is a list of label selector requirements. The requirements are ANDed. (see [below for nested schema](#nestedatt--spec--solver--http01--gateway_http_route--pod_template--spec--affinity--pod_anti_affinity--required_during_scheduling_ignored_during_execution--namespace_selector--match_expressions))
+- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.
+
+
+### Nested Schema for `spec.solver.http01.gateway_http_route.pod_template.spec.affinity.pod_anti_affinity.required_during_scheduling_ignored_during_execution.namespace_selector.match_expressions`
+
+Required:
+
+- `key` (String) key is the label key that the selector applies to.
+- `operator` (String) operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.
+
+Optional:
+
+- `values` (List of String) values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.
+
+
+
+
+
+
+
+### Nested Schema for `spec.solver.http01.gateway_http_route.pod_template.spec.image_pull_secrets`
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+
+
+
+### Nested Schema for `spec.solver.http01.gateway_http_route.pod_template.spec.security_context`
+
+Optional:
+
+- `fs_group` (Number) A special supplemental group that applies to all containers in a pod.Some volume types allow the Kubelet to change the ownership of that volumeto be owned by the pod:1. The owning GID will be the FSGroup2. The setgid bit is set (new files created in the volume will be owned by FSGroup)3. The permission bits are OR'd with rw-rw----If unset, the Kubelet will not modify the ownership and permissions of any volume.Note that this field cannot be set when spec.os.name is windows.
+- `fs_group_change_policy` (String) fsGroupChangePolicy defines behavior of changing ownership and permission of the volumebefore being exposed inside Pod. This field will only apply tovolume types which support fsGroup based ownership(and permissions).It will have no effect on ephemeral volume types such as: secret, configmapsand emptydir.Valid values are 'OnRootMismatch' and 'Always'. If not specified, 'Always' is used.Note that this field cannot be set when spec.os.name is windows.
+- `run_as_group` (Number) The GID to run the entrypoint of the container process.Uses runtime default if unset.May also be set in SecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedencefor that container.Note that this field cannot be set when spec.os.name is windows.
+- `run_as_non_root` (Boolean) Indicates that the container must run as a non-root user.If true, the Kubelet will validate the image at runtime to ensure that itdoes not run as UID 0 (root) and fail to start the container if it does.If unset or false, no such validation will be performed.May also be set in SecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.
+- `run_as_user` (Number) The UID to run the entrypoint of the container process.Defaults to user specified in image metadata if unspecified.May also be set in SecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedencefor that container.Note that this field cannot be set when spec.os.name is windows.
+- `se_linux_options` (Attributes) The SELinux context to be applied to all containers.If unspecified, the container runtime will allocate a random SELinux context for eachcontainer. May also be set in SecurityContext. If set inboth SecurityContext and PodSecurityContext, the value specified in SecurityContexttakes precedence for that container.Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--solver--http01--gateway_http_route--pod_template--spec--security_context--se_linux_options))
+- `seccomp_profile` (Attributes) The seccomp options to use by the containers in this pod.Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--solver--http01--gateway_http_route--pod_template--spec--security_context--seccomp_profile))
+- `supplemental_groups` (List of String) A list of groups applied to the first process run in each container, in additionto the container's primary GID, the fsGroup (if specified), and group membershipsdefined in the container image for the uid of the container process. If unspecified,no additional groups are added to any container. Note that group membershipsdefined in the container image for the uid of the container process are still effective,even if they are not included in this list.Note that this field cannot be set when spec.os.name is windows.
+- `sysctls` (Attributes List) Sysctls hold a list of namespaced sysctls used for the pod. Pods with unsupportedsysctls (by the container runtime) might fail to launch.Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--solver--http01--gateway_http_route--pod_template--spec--security_context--sysctls))
+
+
+### Nested Schema for `spec.solver.http01.gateway_http_route.pod_template.spec.security_context.se_linux_options`
+
+Optional:
+
+- `level` (String) Level is SELinux level label that applies to the container.
+- `role` (String) Role is a SELinux role label that applies to the container.
+- `type` (String) Type is a SELinux type label that applies to the container.
+- `user` (String) User is a SELinux user label that applies to the container.
+
+
+
+### Nested Schema for `spec.solver.http01.gateway_http_route.pod_template.spec.security_context.seccomp_profile`
+
+Required:
+
+- `type` (String) type indicates which kind of seccomp profile will be applied.Valid options are:Localhost - a profile defined in a file on the node should be used.RuntimeDefault - the container runtime default profile should be used.Unconfined - no profile should be applied.
+
+Optional:
+
+- `localhost_profile` (String) localhostProfile indicates a profile defined in a file on the node should be used.The profile must be preconfigured on the node to work.Must be a descending path, relative to the kubelet's configured seccomp profile location.Must be set if type is 'Localhost'. Must NOT be set for any other type.
+
+
+
+### Nested Schema for `spec.solver.http01.gateway_http_route.pod_template.spec.security_context.sysctls`
+
+Required:
+
+- `name` (String) Name of a property to set
+- `value` (String) Value of a property to set
+
+
+
+
+### Nested Schema for `spec.solver.http01.gateway_http_route.pod_template.spec.tolerations`
+
+Optional:
+
+- `effect` (String) Effect indicates the taint effect to match. Empty means match all taint effects.When specified, allowed values are NoSchedule, PreferNoSchedule and NoExecute.
+- `key` (String) Key is the taint key that the toleration applies to. Empty means match all taint keys.If the key is empty, operator must be Exists; this combination means to match all values and all keys.
+- `operator` (String) Operator represents a key's relationship to the value.Valid operators are Exists and Equal. Defaults to Equal.Exists is equivalent to wildcard for value, so that a pod cantolerate all taints of a particular category.
+- `toleration_seconds` (Number) TolerationSeconds represents the period of time the toleration (which must beof effect NoExecute, otherwise this field is ignored) tolerates the taint. By default,it is not set, which means tolerate the taint forever (do not evict). Zero andnegative values will be treated as 0 (evict immediately) by the system.
+- `value` (String) Value is the taint value the toleration matches to.If the operator is Exists, the value should be empty, otherwise just a regular string.
+
+
+
+
### Nested Schema for `spec.solver.http01.ingress`
@@ -507,6 +990,7 @@ Optional:
- `image_pull_secrets` (Attributes List) If specified, the pod's imagePullSecrets (see [below for nested schema](#nestedatt--spec--solver--http01--ingress--pod_template--spec--image_pull_secrets))
- `node_selector` (Map of String) NodeSelector is a selector which must be true for the pod to fit on a node.Selector which must match a node's labels for the pod to be scheduled on that node.More info: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/
- `priority_class_name` (String) If specified, the pod's priorityClassName.
+- `security_context` (Attributes) If specified, the pod's security context (see [below for nested schema](#nestedatt--spec--solver--http01--ingress--pod_template--spec--security_context))
- `service_account_name` (String) If specified, the pod's service account
- `tolerations` (Attributes List) If specified, the pod's tolerations. (see [below for nested schema](#nestedatt--spec--solver--http01--ingress--pod_template--spec--tolerations))
@@ -900,6 +1384,54 @@ Optional:
- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+
+### Nested Schema for `spec.solver.http01.ingress.pod_template.spec.security_context`
+
+Optional:
+
+- `fs_group` (Number) A special supplemental group that applies to all containers in a pod.Some volume types allow the Kubelet to change the ownership of that volumeto be owned by the pod:1. The owning GID will be the FSGroup2. The setgid bit is set (new files created in the volume will be owned by FSGroup)3. The permission bits are OR'd with rw-rw----If unset, the Kubelet will not modify the ownership and permissions of any volume.Note that this field cannot be set when spec.os.name is windows.
+- `fs_group_change_policy` (String) fsGroupChangePolicy defines behavior of changing ownership and permission of the volumebefore being exposed inside Pod. This field will only apply tovolume types which support fsGroup based ownership(and permissions).It will have no effect on ephemeral volume types such as: secret, configmapsand emptydir.Valid values are 'OnRootMismatch' and 'Always'. If not specified, 'Always' is used.Note that this field cannot be set when spec.os.name is windows.
+- `run_as_group` (Number) The GID to run the entrypoint of the container process.Uses runtime default if unset.May also be set in SecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedencefor that container.Note that this field cannot be set when spec.os.name is windows.
+- `run_as_non_root` (Boolean) Indicates that the container must run as a non-root user.If true, the Kubelet will validate the image at runtime to ensure that itdoes not run as UID 0 (root) and fail to start the container if it does.If unset or false, no such validation will be performed.May also be set in SecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.
+- `run_as_user` (Number) The UID to run the entrypoint of the container process.Defaults to user specified in image metadata if unspecified.May also be set in SecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedencefor that container.Note that this field cannot be set when spec.os.name is windows.
+- `se_linux_options` (Attributes) The SELinux context to be applied to all containers.If unspecified, the container runtime will allocate a random SELinux context for eachcontainer. May also be set in SecurityContext. If set inboth SecurityContext and PodSecurityContext, the value specified in SecurityContexttakes precedence for that container.Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--solver--http01--ingress--pod_template--spec--security_context--se_linux_options))
+- `seccomp_profile` (Attributes) The seccomp options to use by the containers in this pod.Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--solver--http01--ingress--pod_template--spec--security_context--seccomp_profile))
+- `supplemental_groups` (List of String) A list of groups applied to the first process run in each container, in additionto the container's primary GID, the fsGroup (if specified), and group membershipsdefined in the container image for the uid of the container process. If unspecified,no additional groups are added to any container. Note that group membershipsdefined in the container image for the uid of the container process are still effective,even if they are not included in this list.Note that this field cannot be set when spec.os.name is windows.
+- `sysctls` (Attributes List) Sysctls hold a list of namespaced sysctls used for the pod. Pods with unsupportedsysctls (by the container runtime) might fail to launch.Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--solver--http01--ingress--pod_template--spec--security_context--sysctls))
+
+
+### Nested Schema for `spec.solver.http01.ingress.pod_template.spec.security_context.se_linux_options`
+
+Optional:
+
+- `level` (String) Level is SELinux level label that applies to the container.
+- `role` (String) Role is a SELinux role label that applies to the container.
+- `type` (String) Type is a SELinux type label that applies to the container.
+- `user` (String) User is a SELinux user label that applies to the container.
+
+
+
+### Nested Schema for `spec.solver.http01.ingress.pod_template.spec.security_context.seccomp_profile`
+
+Required:
+
+- `type` (String) type indicates which kind of seccomp profile will be applied.Valid options are:Localhost - a profile defined in a file on the node should be used.RuntimeDefault - the container runtime default profile should be used.Unconfined - no profile should be applied.
+
+Optional:
+
+- `localhost_profile` (String) localhostProfile indicates a profile defined in a file on the node should be used.The profile must be preconfigured on the node to work.Must be a descending path, relative to the kubelet's configured seccomp profile location.Must be set if type is 'Localhost'. Must NOT be set for any other type.
+
+
+
+### Nested Schema for `spec.solver.http01.ingress.pod_template.spec.security_context.sysctls`
+
+Required:
+
+- `name` (String) Name of a property to set
+- `value` (String) Value of a property to set
+
+
+
### Nested Schema for `spec.solver.http01.ingress.pod_template.spec.tolerations`
diff --git a/docs/data-sources/acmpca_services_k8s_aws_certificate_authority_activation_v1alpha1_manifest.md b/docs/data-sources/acmpca_services_k8s_aws_certificate_authority_activation_v1alpha1_manifest.md
index 5ca74151a..c650436e0 100644
--- a/docs/data-sources/acmpca_services_k8s_aws_certificate_authority_activation_v1alpha1_manifest.md
+++ b/docs/data-sources/acmpca_services_k8s_aws_certificate_authority_activation_v1alpha1_manifest.md
@@ -90,6 +90,7 @@ Optional:
Optional:
- `name` (String)
+- `namespace` (String)
diff --git a/docs/data-sources/acmpca_services_k8s_aws_certificate_v1alpha1_manifest.md b/docs/data-sources/acmpca_services_k8s_aws_certificate_v1alpha1_manifest.md
index eaeb8520e..fe1030961 100644
--- a/docs/data-sources/acmpca_services_k8s_aws_certificate_v1alpha1_manifest.md
+++ b/docs/data-sources/acmpca_services_k8s_aws_certificate_v1alpha1_manifest.md
@@ -267,6 +267,7 @@ Optional:
Optional:
- `name` (String)
+- `namespace` (String)
@@ -283,6 +284,7 @@ Optional:
Optional:
- `name` (String)
+- `namespace` (String)
diff --git a/docs/data-sources/anywhere_eks_amazonaws_com_bundles_v1alpha1_manifest.md b/docs/data-sources/anywhere_eks_amazonaws_com_bundles_v1alpha1_manifest.md
index 18f40aeac..e7503cc5e 100644
--- a/docs/data-sources/anywhere_eks_amazonaws_com_bundles_v1alpha1_manifest.md
+++ b/docs/data-sources/anywhere_eks_amazonaws_com_bundles_v1alpha1_manifest.md
@@ -1870,6 +1870,8 @@ Required:
- `nginx` (Attributes) (see [below for nested schema](#nestedatt--spec--versions_bundles--tinkerbell--tinkerbell_stack--tink--nginx))
- `tink_controller` (Attributes) (see [below for nested schema](#nestedatt--spec--versions_bundles--tinkerbell--tinkerbell_stack--tink--tink_controller))
+- `tink_relay` (Attributes) (see [below for nested schema](#nestedatt--spec--versions_bundles--tinkerbell--tinkerbell_stack--tink--tink_relay))
+- `tink_relay_init` (Attributes) (see [below for nested schema](#nestedatt--spec--versions_bundles--tinkerbell--tinkerbell_stack--tink--tink_relay_init))
- `tink_server` (Attributes) (see [below for nested schema](#nestedatt--spec--versions_bundles--tinkerbell--tinkerbell_stack--tink--tink_server))
- `tink_worker` (Attributes) (see [below for nested schema](#nestedatt--spec--versions_bundles--tinkerbell--tinkerbell_stack--tink--tink_worker))
@@ -1901,6 +1903,34 @@ Optional:
- `uri` (String) The image repository, name, and tag
+
+### Nested Schema for `spec.versions_bundles.tinkerbell.tinkerbell_stack.tink.tink_relay`
+
+Optional:
+
+- `arch` (List of String) Architectures of the asset
+- `description` (String)
+- `image_digest` (String) The SHA256 digest of the image manifest
+- `name` (String) The asset name
+- `os` (String) Operating system of the asset
+- `os_name` (String) Name of the OS like ubuntu, bottlerocket
+- `uri` (String) The image repository, name, and tag
+
+
+
+### Nested Schema for `spec.versions_bundles.tinkerbell.tinkerbell_stack.tink.tink_relay_init`
+
+Optional:
+
+- `arch` (List of String) Architectures of the asset
+- `description` (String)
+- `image_digest` (String) The SHA256 digest of the image manifest
+- `name` (String) The asset name
+- `os` (String) Operating system of the asset
+- `os_name` (String) Name of the OS like ubuntu, bottlerocket
+- `uri` (String) The image repository, name, and tag
+
+
### Nested Schema for `spec.versions_bundles.tinkerbell.tinkerbell_stack.tink.tink_server`
diff --git a/docs/data-sources/apigatewayv2_services_k8s_aws_authorizer_v1alpha1_manifest.md b/docs/data-sources/apigatewayv2_services_k8s_aws_authorizer_v1alpha1_manifest.md
index 6f1f4378f..be71f9acc 100644
--- a/docs/data-sources/apigatewayv2_services_k8s_aws_authorizer_v1alpha1_manifest.md
+++ b/docs/data-sources/apigatewayv2_services_k8s_aws_authorizer_v1alpha1_manifest.md
@@ -84,6 +84,7 @@ Optional:
Optional:
- `name` (String)
+- `namespace` (String)
diff --git a/docs/data-sources/apigatewayv2_services_k8s_aws_deployment_v1alpha1_manifest.md b/docs/data-sources/apigatewayv2_services_k8s_aws_deployment_v1alpha1_manifest.md
index afbaa7608..95aaea1a9 100644
--- a/docs/data-sources/apigatewayv2_services_k8s_aws_deployment_v1alpha1_manifest.md
+++ b/docs/data-sources/apigatewayv2_services_k8s_aws_deployment_v1alpha1_manifest.md
@@ -73,3 +73,4 @@ Optional:
Optional:
- `name` (String)
+- `namespace` (String)
diff --git a/docs/data-sources/apigatewayv2_services_k8s_aws_integration_v1alpha1_manifest.md b/docs/data-sources/apigatewayv2_services_k8s_aws_integration_v1alpha1_manifest.md
index 1e03c12b4..ff6bd5c75 100644
--- a/docs/data-sources/apigatewayv2_services_k8s_aws_integration_v1alpha1_manifest.md
+++ b/docs/data-sources/apigatewayv2_services_k8s_aws_integration_v1alpha1_manifest.md
@@ -92,6 +92,7 @@ Optional:
Optional:
- `name` (String)
+- `namespace` (String)
@@ -108,6 +109,7 @@ Optional:
Optional:
- `name` (String)
+- `namespace` (String)
diff --git a/docs/data-sources/apigatewayv2_services_k8s_aws_route_v1alpha1_manifest.md b/docs/data-sources/apigatewayv2_services_k8s_aws_route_v1alpha1_manifest.md
index e7f5a6b02..636403d9f 100644
--- a/docs/data-sources/apigatewayv2_services_k8s_aws_route_v1alpha1_manifest.md
+++ b/docs/data-sources/apigatewayv2_services_k8s_aws_route_v1alpha1_manifest.md
@@ -87,6 +87,7 @@ Optional:
Optional:
- `name` (String)
+- `namespace` (String)
@@ -103,6 +104,7 @@ Optional:
Optional:
- `name` (String)
+- `namespace` (String)
@@ -127,3 +129,4 @@ Optional:
Optional:
- `name` (String)
+- `namespace` (String)
diff --git a/docs/data-sources/apigatewayv2_services_k8s_aws_stage_v1alpha1_manifest.md b/docs/data-sources/apigatewayv2_services_k8s_aws_stage_v1alpha1_manifest.md
index b90cbdd11..e7ed9ed7a 100644
--- a/docs/data-sources/apigatewayv2_services_k8s_aws_stage_v1alpha1_manifest.md
+++ b/docs/data-sources/apigatewayv2_services_k8s_aws_stage_v1alpha1_manifest.md
@@ -94,6 +94,7 @@ Optional:
Optional:
- `name` (String)
+- `namespace` (String)
@@ -122,6 +123,7 @@ Optional:
Optional:
- `name` (String)
+- `namespace` (String)
diff --git a/docs/data-sources/apps_kubeblocks_io_backup_policy_template_v1alpha1_manifest.md b/docs/data-sources/apps_kubeblocks_io_backup_policy_template_v1alpha1_manifest.md
index c33125373..a010db874 100644
--- a/docs/data-sources/apps_kubeblocks_io_backup_policy_template_v1alpha1_manifest.md
+++ b/docs/data-sources/apps_kubeblocks_io_backup_policy_template_v1alpha1_manifest.md
@@ -58,7 +58,6 @@ Required:
Optional:
-- `cluster_definition_ref` (String) Specifies the name of a ClusterDefinition.This is an immutable attribute that cannot be changed after creation.And this field is deprecated since v0.9, consider using the ComponentDef instead.
- `identifier` (String) Specifies a unique identifier for the BackupPolicyTemplate.This identifier will be used as the suffix of the name of automatically generated BackupPolicy.This prevents unintended overwriting of BackupPolicies due to name conflicts when multiple BackupPolicyTemplatesare present.For instance, using 'backup-policy' for regular backups and 'backup-policy-hscale' for horizontal-scale opscan differentiate the policies.
@@ -71,7 +70,6 @@ Required:
Optional:
- `backoff_limit` (Number) Specifies the maximum number of retry attempts for a backup before it is considered a failure.
-- `component_def_ref` (String) Specifies the name of ClusterComponentDefinition defined in the ClusterDefinition.Must comply with the IANA Service Naming rule.Deprecated since v0.9, should use 'componentDefs' instead.This field is maintained for backward compatibility and its use is discouraged.Existing usage should be updated to the current preferred approach to avoid compatibility issues in future releases.
- `component_defs` (List of String) Specifies a list of names of ComponentDefinitions that the specified ClusterDefinition references.They should be different versions of definitions of the same component,thus allowing them to share a single BackupPolicy.Each name must adhere to the IANA Service Naming rule.
- `schedules` (Attributes List) Defines the execution plans for backup tasks, specifying when and how backups should occur,and the retention period of backup files. (see [below for nested schema](#nestedatt--spec--backup_policies--schedules))
- `target` (Attributes) Defines the selection criteria of instance to be backed up, and the connection credential to be usedduring the backup process. (see [below for nested schema](#nestedatt--spec--backup_policies--target))
@@ -240,9 +238,9 @@ Required:
Optional:
-- `account` (String) If 'backupPolicy.componentDefs' is set, this field is required to specify the system account name.This account must match one listed in 'componentDefinition.spec.systemAccounts[*].name'.The corresponding secret created by this account is used to connect to the database.If 'backupPolicy.componentDefRef' (a legacy and deprecated API) is set, the secret defined in'clusterDefinition.spec.ConnectionCredential' is used instead.
+- `account` (String) If 'backupPolicy.componentDefs' is set, this field is required to specify the system account name.This account must match one listed in 'componentDefinition.spec.systemAccounts[*].name'.The corresponding secret created by this account is used to connect to the database.
- `connection_credential` (Attributes) Specifies the connection credential to connect to the target database cluster. (see [below for nested schema](#nestedatt--spec--backup_policies--backup_methods--target--connection_credential))
-- `connection_credential_key` (Attributes) Specifies the keys of the connection credential secret defined in 'clusterDefinition.spec.ConnectionCredential'.It will be ignored when the 'account' is set. (see [below for nested schema](#nestedatt--spec--backup_policies--backup_methods--target--connection_credential_key))
+- `fallback_role` (String) Specifies the fallback role to select one replica for backup, this only takes effect when the'strategy' field below is set to 'Any'.
- `name` (String) Specifies a mandatory and unique identifier for each target when using the 'targets' field.The backup data for the current target is stored in a uniquely named subdirectory.
- `pod_selector` (Attributes) Used to find the target pod. The volumes of the target pod will be backed up. (see [below for nested schema](#nestedatt--spec--backup_policies--backup_methods--target--pod_selector))
- `resources` (Attributes) Specifies the kubernetes resources to back up. (see [below for nested schema](#nestedatt--spec--backup_policies--backup_methods--target--resources))
@@ -264,26 +262,38 @@ Optional:
- `username_key` (String) Specifies the map key of the user in the connection credential secret.
-
-### Nested Schema for `spec.backup_policies.backup_methods.target.connection_credential_key`
-
-Optional:
-
-- `host_key` (String) Defines the key of the host in the connection credential secret.
-- `password_key` (String) Represents the key of the password in the connection credential secret.If not specified, the default key 'password' is used.
-- `port_key` (String) Indicates map key of the port in the connection credential secret.
-- `username_key` (String) Represents the key of the username in the connection credential secret.If not specified, the default key 'username' is used.
-
-
### Nested Schema for `spec.backup_policies.backup_methods.target.pod_selector`
Optional:
+- `fallback_label_selector` (Attributes) fallbackLabelSelector is used to filter available pods when the labelSelector fails.This only takes effect when the 'strategy' field below is set to 'Any'. (see [below for nested schema](#nestedatt--spec--backup_policies--backup_methods--target--pod_selector--fallback_label_selector))
- `match_expressions` (Attributes List) matchExpressions is a list of label selector requirements. The requirements are ANDed. (see [below for nested schema](#nestedatt--spec--backup_policies--backup_methods--target--pod_selector--match_expressions))
- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.
- `strategy` (String) Specifies the strategy to select the target pod when multiple pods are selected.Valid values are:- 'Any': select any one pod that match the labelsSelector.- 'All': select all pods that match the labelsSelector. The backup data for the current podwill be stored in a subdirectory named after the pod.
+
+### Nested Schema for `spec.backup_policies.backup_methods.target.pod_selector.fallback_label_selector`
+
+Optional:
+
+- `match_expressions` (Attributes List) matchExpressions is a list of label selector requirements. The requirements are ANDed. (see [below for nested schema](#nestedatt--spec--backup_policies--backup_methods--target--pod_selector--fallback_label_selector--match_expressions))
+- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.
+
+
+### Nested Schema for `spec.backup_policies.backup_methods.target.pod_selector.fallback_label_selector.match_expressions`
+
+Required:
+
+- `key` (String) key is the label key that the selector applies to.
+- `operator` (String) operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.
+
+Optional:
+
+- `values` (List of String) values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.
+
+
+
### Nested Schema for `spec.backup_policies.backup_methods.target.pod_selector.match_expressions`
@@ -387,10 +397,33 @@ Optional:
Optional:
+- `fallback_label_selector` (Attributes) fallbackLabelSelector is used to filter available pods when the labelSelector fails.This only takes effect when the 'strategy' field below is set to 'Any'. (see [below for nested schema](#nestedatt--spec--backup_policies--backup_methods--targets--pod_selector--fallback_label_selector))
- `match_expressions` (Attributes List) matchExpressions is a list of label selector requirements. The requirements are ANDed. (see [below for nested schema](#nestedatt--spec--backup_policies--backup_methods--targets--pod_selector--match_expressions))
- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.
- `strategy` (String) Specifies the strategy to select the target pod when multiple pods are selected.Valid values are:- 'Any': select any one pod that match the labelsSelector.- 'All': select all pods that match the labelsSelector. The backup data for the current podwill be stored in a subdirectory named after the pod.
+
+### Nested Schema for `spec.backup_policies.backup_methods.targets.pod_selector.fallback_label_selector`
+
+Optional:
+
+- `match_expressions` (Attributes List) matchExpressions is a list of label selector requirements. The requirements are ANDed. (see [below for nested schema](#nestedatt--spec--backup_policies--backup_methods--targets--pod_selector--fallback_label_selector--match_expressions))
+- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.
+
+
+### Nested Schema for `spec.backup_policies.backup_methods.targets.pod_selector.fallback_label_selector.match_expressions`
+
+Required:
+
+- `key` (String) key is the label key that the selector applies to.
+- `operator` (String) operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.
+
+Optional:
+
+- `values` (List of String) values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.
+
+
+
### Nested Schema for `spec.backup_policies.backup_methods.targets.pod_selector.match_expressions`
@@ -462,16 +495,6 @@ Required:
Optional:
-- `account` (String) If 'backupPolicy.componentDefs' is set, this field is required to specify the system account name.This account must match one listed in 'componentDefinition.spec.systemAccounts[*].name'.The corresponding secret created by this account is used to connect to the database.If 'backupPolicy.componentDefRef' (a legacy and deprecated API) is set, the secret defined in'clusterDefinition.spec.ConnectionCredential' is used instead.
-- `connection_credential_key` (Attributes) Specifies the keys of the connection credential secret defined in 'clusterDefinition.spec.ConnectionCredential'.It will be ignored when the 'account' is set. (see [below for nested schema](#nestedatt--spec--backup_policies--target--connection_credential_key))
+- `account` (String) If 'backupPolicy.componentDefs' is set, this field is required to specify the system account name.This account must match one listed in 'componentDefinition.spec.systemAccounts[*].name'.The corresponding secret created by this account is used to connect to the database.
+- `fallback_role` (String) Specifies the fallback role to select one replica for backup, this only takes effect when the'strategy' field below is set to 'Any'.
- `strategy` (String) Specifies the PodSelectionStrategy to use when multiple pods areselected for the backup target.Valid values are:- Any: Selects any one pod that matches the labelsSelector.- All: Selects all pods that match the labelsSelector.
-
-
-### Nested Schema for `spec.backup_policies.target.connection_credential_key`
-
-Optional:
-
-- `host_key` (String) Defines the key of the host in the connection credential secret.
-- `password_key` (String) Represents the key of the password in the connection credential secret.If not specified, the default key 'password' is used.
-- `port_key` (String) Indicates map key of the port in the connection credential secret.
-- `username_key` (String) Represents the key of the username in the connection credential secret.If not specified, the default key 'username' is used.
diff --git a/docs/data-sources/apps_kubeblocks_io_cluster_definition_v1alpha1_manifest.md b/docs/data-sources/apps_kubeblocks_io_cluster_definition_v1alpha1_manifest.md
index 7880f94ca..cf780a0c2 100644
--- a/docs/data-sources/apps_kubeblocks_io_cluster_definition_v1alpha1_manifest.md
+++ b/docs/data-sources/apps_kubeblocks_io_cluster_definition_v1alpha1_manifest.md
@@ -54,3969 +54,8 @@ Optional:
Optional:
-- `component_defs` (Attributes List) Provides the definitions for the cluster components.Deprecated since v0.9.Components should now be individually defined using ComponentDefinition andcollectively referenced via 'topology.components'.This field is maintained for backward compatibility and its use is discouraged.Existing usage should be updated to the current preferred approach to avoid compatibility issues in future releases. (see [below for nested schema](#nestedatt--spec--component_defs))
-- `connection_credential` (Map of String) Connection credential template used for creating a connection credential secret for cluster objects.Built-in objects are:- '$(RANDOM_PASSWD)' random 8 characters.- '$(STRONG_RANDOM_PASSWD)' random 16 characters, with mixed cases, digits and symbols.- '$(UUID)' generate a random UUID v4 string.- '$(UUID_B64)' generate a random UUID v4 BASE64 encoded string.- '$(UUID_STR_B64)' generate a random UUID v4 string then BASE64 encoded.- '$(UUID_HEX)' generate a random UUID v4 HEX representation.- '$(HEADLESS_SVC_FQDN)' headless service FQDN placeholder, value pattern is '$(CLUSTER_NAME)-$(1ST_COMP_NAME)-headless.$(NAMESPACE).svc', where 1ST_COMP_NAME is the 1st component that provide 'ClusterDefinition.spec.componentDefs[].service' attribute;- '$(SVC_FQDN)' service FQDN placeholder, value pattern is '$(CLUSTER_NAME)-$(1ST_COMP_NAME).$(NAMESPACE).svc', where 1ST_COMP_NAME is the 1st component that provide 'ClusterDefinition.spec.componentDefs[].service' attribute;- '$(SVC_PORT_{PORT-NAME})' is ServicePort's port value with specified port name, i.e, a servicePort JSON struct: '{'name': 'mysql', 'targetPort': 'mysqlContainerPort', 'port': 3306}', and '$(SVC_PORT_mysql)' in the connection credential value is 3306.Deprecated since v0.9.This field is maintained for backward compatibility and its use is discouraged.Existing usage should be updated to the current preferred approach to avoid compatibility issues in future releases.
- `topologies` (Attributes List) Topologies defines all possible topologies within the cluster. (see [below for nested schema](#nestedatt--spec--topologies))
-
-### Nested Schema for `spec.component_defs`
-
-Required:
-
-- `name` (String) This name could be used as default name of 'cluster.spec.componentSpecs.name', and needs to conform with samevalidation rules as 'cluster.spec.componentSpecs.name', currently complying with IANA Service Naming rule.This name will apply to cluster objects as the value of label 'apps.kubeblocks.io/component-name'.
-- `workload_type` (String) Defines the type of the workload.- 'Stateless' describes stateless applications.- 'Stateful' describes common stateful applications.- 'Consensus' describes applications based on consensus protocols, such as raft and paxos.- 'Replication' describes applications based on the primary-secondary data replication protocol.
-
-Optional:
-
-- `character_type` (String) Defines well-known database component name, such as mongos(mongodb), proxy(redis), mariadb(mysql).
-- `component_def_ref` (Attributes List) Used to inject values from other components into the current component. Values will be saved and updated in aconfigmap and mounted to the current component. (see [below for nested schema](#nestedatt--spec--component_defs--component_def_ref))
-- `config_specs` (Attributes List) Defines the template of configurations. (see [below for nested schema](#nestedatt--spec--component_defs--config_specs))
-- `consensus_spec` (Attributes) Defines spec for 'Consensus' workloads. It's required if the workload type is 'Consensus'. (see [below for nested schema](#nestedatt--spec--component_defs--consensus_spec))
-- `horizontal_scale_policy` (Attributes) Defines the behavior of horizontal scale. (see [below for nested schema](#nestedatt--spec--component_defs--horizontal_scale_policy))
-- `log_configs` (Attributes List) Specify the logging files which can be observed and configured by cluster users. (see [below for nested schema](#nestedatt--spec--component_defs--log_configs))
-- `pod_spec` (Attributes) Defines the pod spec template of component. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec))
-- `post_start_spec` (Attributes) Defines the command to be executed when the component is ready, and the command will only be executed once afterthe component becomes ready. (see [below for nested schema](#nestedatt--spec--component_defs--post_start_spec))
-- `probes` (Attributes) Settings for health checks. (see [below for nested schema](#nestedatt--spec--component_defs--probes))
-- `replication_spec` (Attributes) Defines spec for 'Replication' workloads. (see [below for nested schema](#nestedatt--spec--component_defs--replication_spec))
-- `rsm_spec` (Attributes) Defines workload spec of this component.From KB 0.7.0, RSM(InstanceSetSpec) will be the underlying CR which powers all kinds of workload in KB.RSM is an enhanced stateful workload extension dedicated for heavy-state workloads like databases. (see [below for nested schema](#nestedatt--spec--component_defs--rsm_spec))
-- `script_specs` (Attributes List) Defines the template of scripts. (see [below for nested schema](#nestedatt--spec--component_defs--script_specs))
-- `service` (Attributes) Defines the service spec. (see [below for nested schema](#nestedatt--spec--component_defs--service))
-- `service_ref_declarations` (Attributes List) Used to declare the service reference of the current component. (see [below for nested schema](#nestedatt--spec--component_defs--service_ref_declarations))
-- `stateful_spec` (Attributes) Defines spec for 'Stateful' workloads. (see [below for nested schema](#nestedatt--spec--component_defs--stateful_spec))
-- `stateless_spec` (Attributes) Defines spec for 'Stateless' workloads. (see [below for nested schema](#nestedatt--spec--component_defs--stateless_spec))
-- `switchover_spec` (Attributes) Defines command to do switchover.In particular, when workloadType=Replication, the command defined in switchoverSpec will only be executed underthe condition of cluster.componentSpecs[x].SwitchPolicy.type=Noop. (see [below for nested schema](#nestedatt--spec--component_defs--switchover_spec))
-- `system_accounts` (Attributes) Defines system accounts needed to manage the component, and the statement to create them. (see [below for nested schema](#nestedatt--spec--component_defs--system_accounts))
-- `volume_protection_spec` (Attributes) Defines settings to do volume protect. (see [below for nested schema](#nestedatt--spec--component_defs--volume_protection_spec))
-- `volume_types` (Attributes List) Used to describe the purpose of the volumes mapping the name of the VolumeMounts in the PodSpec.Container field,such as data volume, log volume, etc. When backing up the volume, the volume can be correctly backed up accordingto the volumeType.For example:- 'name: data, type: data' means that the volume named 'data' is used to store 'data'.- 'name: binlog, type: log' means that the volume named 'binlog' is used to store 'log'.NOTE: When volumeTypes is not defined, the backup function will not be supported, even if a persistent volume hasbeen specified. (see [below for nested schema](#nestedatt--spec--component_defs--volume_types))
-
-
-### Nested Schema for `spec.component_defs.component_def_ref`
-
-Required:
-
-- `component_def_name` (String) The name of the componentDef to be selected.
-
-Optional:
-
-- `component_ref_env` (Attributes List) The values that are to be injected as environment variables into each component. (see [below for nested schema](#nestedatt--spec--component_defs--component_def_ref--component_ref_env))
-- `failure_policy` (String) Defines the policy to be followed in case of a failure in finding the component.
-
-
-### Nested Schema for `spec.component_defs.component_def_ref.component_ref_env`
-
-Required:
-
-- `name` (String) The name of the env, it must be a C identifier.
-
-Optional:
-
-- `value` (String) The value of the env.
-- `value_from` (Attributes) The source from which the value of the env. (see [below for nested schema](#nestedatt--spec--component_defs--component_def_ref--component_ref_env--value_from))
-
-
-### Nested Schema for `spec.component_defs.component_def_ref.component_ref_env.value_from`
-
-Required:
-
-- `type` (String) Specifies the source to select. It can be one of three types: 'FieldRef', 'ServiceRef', 'HeadlessServiceRef'.
-
-Optional:
-
-- `field_path` (String) The jsonpath of the source to select when the Type is 'FieldRef'.Two objects are registered in the jsonpath: 'componentDef' and 'components':- 'componentDef' is the component definition object specified in 'componentRef.componentDefName'.- 'components' are the component list objects referring to the component definition object.
-- `format` (String) Defines the format of each headless service address.Three builtin variables can be used as placeholders: '$POD_ORDINAL', '$POD_FQDN', '$POD_NAME'- '$POD_ORDINAL' represents the ordinal of the pod.- '$POD_FQDN' represents the fully qualified domain name of the pod.- '$POD_NAME' represents the name of the pod.
-- `join_with` (String) The string used to join the values of headless service addresses.
-
-
-
-
-
-### Nested Schema for `spec.component_defs.config_specs`
-
-Required:
-
-- `name` (String) Specifies the name of the configuration template.
-- `volume_name` (String) Refers to the volume name of PodTemplate. The configuration file produced through the configurationtemplate will be mounted to the corresponding volume. Must be a DNS_LABEL name.The volume name must be defined in podSpec.containers[*].volumeMounts.
-
-Optional:
-
-- `as_env_from` (List of String) Specifies the containers to inject the ConfigMap parameters as environment variables.This is useful when application images accept parameters through environment variables andgenerate the final configuration file in the startup script based on these variables.This field allows users to specify a list of container names, and KubeBlocks will inject the environmentvariables converted from the ConfigMap into these designated containers. This provides a flexible way topass the configuration items from the ConfigMap to the container without modifying the image.Deprecated: 'asEnvFrom' has been deprecated since 0.9.0 and will be removed in 0.10.0.Use 'injectEnvTo' instead.
-- `constraint_ref` (String) Specifies the name of the referenced configuration constraints object.
-- `default_mode` (Number) The operator attempts to set default file permissions for scripts (0555) and configurations (0444).However, certain database engines may require different file permissions.You can specify the desired file permissions here.Must be specified as an octal value between 0000 and 0777 (inclusive),or as a decimal value between 0 and 511 (inclusive).YAML supports both octal and decimal values for file permissions.Please note that this setting only affects the permissions of the files themselves.Directories within the specified path are not impacted by this setting.It's important to be aware that this setting might conflict with other optionsthat influence the file mode, such as fsGroup.In such cases, the resulting file mode may have additional bits set.Refers to documents of k8s.ConfigMapVolumeSource.defaultMode for more information.
-- `inject_env_to` (List of String) Specifies the containers to inject the ConfigMap parameters as environment variables.This is useful when application images accept parameters through environment variables andgenerate the final configuration file in the startup script based on these variables.This field allows users to specify a list of container names, and KubeBlocks will inject the environmentvariables converted from the ConfigMap into these designated containers. This provides a flexible way topass the configuration items from the ConfigMap to the container without modifying the image.
-- `keys` (List of String) Specifies the configuration files within the ConfigMap that support dynamic updates.A configuration template (provided in the form of a ConfigMap) may contain templates for multipleconfiguration files.Each configuration file corresponds to a key in the ConfigMap.Some of these configuration files may support dynamic modification and reloading without requiringa pod restart.If empty or omitted, all configuration files in the ConfigMap are assumed to support dynamic updates,and ConfigConstraint applies to all keys.
-- `legacy_rendered_config_spec` (Attributes) Specifies the secondary rendered config spec for pod-specific customization.The template is rendered inside the pod (by the 'config-manager' sidecar container) and merged with the maintemplate's render result to generate the final configuration file.This field is intended to handle scenarios where different pods within the same Component havevarying configurations. It allows for pod-specific customization of the configuration.Note: This field will be deprecated in future versions, and the functionality will be moved to'cluster.spec.componentSpecs[*].instances[*]'. (see [below for nested schema](#nestedatt--spec--component_defs--config_specs--legacy_rendered_config_spec))
-- `namespace` (String) Specifies the namespace of the referenced configuration template ConfigMap object.An empty namespace is equivalent to the 'default' namespace.
-- `re_render_resource_types` (List of String) Specifies whether the configuration needs to be re-rendered after v-scale or h-scale operations to reflect changes.In some scenarios, the configuration may need to be updated to reflect the changes in resource allocationor cluster topology. Examples:- Redis: adjust maxmemory after v-scale operation.- MySQL: increase max connections after v-scale operation.- Zookeeper: update zoo.cfg with new node addresses after h-scale operation.
-- `template_ref` (String) Specifies the name of the referenced configuration template ConfigMap object.
-
-
-### Nested Schema for `spec.component_defs.config_specs.legacy_rendered_config_spec`
-
-Required:
-
-- `template_ref` (String) Specifies the name of the referenced configuration template ConfigMap object.
-
-Optional:
-
-- `namespace` (String) Specifies the namespace of the referenced configuration template ConfigMap object.An empty namespace is equivalent to the 'default' namespace.
-- `policy` (String) Defines the strategy for merging externally imported templates into component templates.
-
-
-
-
-### Nested Schema for `spec.component_defs.consensus_spec`
-
-Required:
-
-- `leader` (Attributes) Represents a single leader in the consensus set. (see [below for nested schema](#nestedatt--spec--component_defs--consensus_spec--leader))
-
-Optional:
-
-- `followers` (Attributes List) Members of the consensus set that have voting rights but are not the leader. (see [below for nested schema](#nestedatt--spec--component_defs--consensus_spec--followers))
-- `learner` (Attributes) Represents a member of the consensus set that does not have voting rights. (see [below for nested schema](#nestedatt--spec--component_defs--consensus_spec--learner))
-- `ll_pod_management_policy` (String) Controls the creation of pods during initial scale up, replacement of pods on nodes, and scaling down.- 'OrderedReady': Creates pods in increasing order (pod-0, then pod-1, etc). The controller waits until each podis ready before continuing. Pods are removed in reverse order when scaling down.- 'Parallel': Creates pods in parallel to match the desired scale without waiting. All pods are deleted at oncewhen scaling down.
-- `ll_update_strategy` (Attributes) Specifies the low-level StatefulSetUpdateStrategy to be used when updating Pods in the StatefulSet upon arevision to the Template.'UpdateStrategy' will be ignored if this is provided. (see [below for nested schema](#nestedatt--spec--component_defs--consensus_spec--ll_update_strategy))
-- `update_strategy` (String) Specifies the strategy for updating Pods.For workloadType='Consensus', the update strategy can be one of the following:- 'Serial': Updates Members sequentially to minimize component downtime.- 'BestEffortParallel': Updates Members in parallel to minimize component write downtime. Majority remains onlineat all times.- 'Parallel': Forces parallel updates.
-
-
-### Nested Schema for `spec.component_defs.consensus_spec.leader`
-
-Required:
-
-- `access_mode` (String) Specifies the services that this member is capable of providing.
-- `name` (String) Specifies the name of the consensus member.
-
-Optional:
-
-- `replicas` (Number) Indicates the number of Pods that perform this role.The default is 1 for 'Leader', 0 for 'Learner', others for 'Followers'.
-
-
-
-### Nested Schema for `spec.component_defs.consensus_spec.followers`
-
-Required:
-
-- `access_mode` (String) Specifies the services that this member is capable of providing.
-- `name` (String) Specifies the name of the consensus member.
-
-Optional:
-
-- `replicas` (Number) Indicates the number of Pods that perform this role.The default is 1 for 'Leader', 0 for 'Learner', others for 'Followers'.
-
-
-
-### Nested Schema for `spec.component_defs.consensus_spec.learner`
-
-Required:
-
-- `access_mode` (String) Specifies the services that this member is capable of providing.
-- `name` (String) Specifies the name of the consensus member.
-
-Optional:
-
-- `replicas` (Number) Indicates the number of Pods that perform this role.The default is 1 for 'Leader', 0 for 'Learner', others for 'Followers'.
-
-
-
-### Nested Schema for `spec.component_defs.consensus_spec.ll_update_strategy`
-
-Optional:
-
-- `rolling_update` (Attributes) RollingUpdate is used to communicate parameters when Type is RollingUpdateStatefulSetStrategyType. (see [below for nested schema](#nestedatt--spec--component_defs--consensus_spec--ll_update_strategy--rolling_update))
-- `type` (String) Type indicates the type of the StatefulSetUpdateStrategy.Default is RollingUpdate.
-
-
-### Nested Schema for `spec.component_defs.consensus_spec.ll_update_strategy.rolling_update`
-
-Optional:
-
-- `max_unavailable` (String) The maximum number of pods that can be unavailable during the update.Value can be an absolute number (ex: 5) or a percentage of desired pods (ex: 10%).Absolute number is calculated from percentage by rounding up. This can not be 0.Defaults to 1. This field is alpha-level and is only honored by servers that enable theMaxUnavailableStatefulSet feature. The field applies to all pods in the range 0 toReplicas-1. That means if there is any unavailable pod in the range 0 to Replicas-1, itwill be counted towards MaxUnavailable.
-- `partition` (Number) Partition indicates the ordinal at which the StatefulSet should be partitionedfor updates. During a rolling update, all pods from ordinal Replicas-1 toPartition are updated. All pods from ordinal Partition-1 to 0 remain untouched.This is helpful in being able to do a canary based deployment. The default value is 0.
-
-
-
-
-
-### Nested Schema for `spec.component_defs.horizontal_scale_policy`
-
-Optional:
-
-- `backup_policy_template_name` (String) Refers to the backup policy template.
-- `type` (String) Determines the data synchronization method when a component scales out.The policy can be one of the following: {None, CloneVolume}. The default policy is 'None'.- 'None': This is the default policy. It creates an empty volume without data cloning.- 'CloneVolume': This policy clones data to newly scaled pods. It first tries to use a volume snapshot. If volume snapshot is not enabled, it will attempt to use a backup tool. If neither method works, it will report an error.- 'Snapshot': This policy is deprecated and is an alias for CloneVolume.
-- `volume_mounts_name` (String) Specifies the volumeMount of the container to backup.This only works if Type is not None. If not specified, the first volumeMount will be selected.
-
-
-
-### Nested Schema for `spec.component_defs.log_configs`
-
-Required:
-
-- `file_path_pattern` (String) Specifies the paths or patterns identifying where the log files are stored.This field allows the system to locate and manage log files effectively.Examples:- /home/postgres/pgdata/pgroot/data/log/postgresql-*- /data/mysql/log/mysqld-error.log
-- `name` (String) Specifies a descriptive label for the log type, such as 'slow' for a MySQL slow log file.It provides a clear identification of the log's purpose and content.
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec`
-
-Required:
-
-- `containers` (Attributes List) List of containers belonging to the pod.Containers cannot currently be added or removed.There must be at least one container in a Pod.Cannot be updated. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--containers))
-
-Optional:
-
-- `active_deadline_seconds` (Number) Optional duration in seconds the pod may be active on the node relative toStartTime before the system will actively try to mark it failed and kill associated containers.Value must be a positive integer.
-- `affinity` (Attributes) If specified, the pod's scheduling constraints (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--affinity))
-- `automount_service_account_token` (Boolean) AutomountServiceAccountToken indicates whether a service account token should be automatically mounted.
-- `dns_config` (Attributes) Specifies the DNS parameters of a pod.Parameters specified here will be merged to the generated DNSconfiguration based on DNSPolicy. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--dns_config))
-- `dns_policy` (String) Set DNS policy for the pod.Defaults to 'ClusterFirst'.Valid values are 'ClusterFirstWithHostNet', 'ClusterFirst', 'Default' or 'None'.DNS parameters given in DNSConfig will be merged with the policy selected with DNSPolicy.To have DNS options set along with hostNetwork, you have to specify DNS policyexplicitly to 'ClusterFirstWithHostNet'.
-- `enable_service_links` (Boolean) EnableServiceLinks indicates whether information about services should be injected into pod'senvironment variables, matching the syntax of Docker links.Optional: Defaults to true.
-- `ephemeral_containers` (Attributes List) List of ephemeral containers run in this pod. Ephemeral containers may be run in an existingpod to perform user-initiated actions such as debugging. This list cannot be specified whencreating a pod, and it cannot be modified by updating the pod spec. In order to add anephemeral container to an existing pod, use the pod's ephemeralcontainers subresource. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--ephemeral_containers))
-- `host_aliases` (Attributes List) HostAliases is an optional list of hosts and IPs that will be injected into the pod's hostsfile if specified. This is only valid for non-hostNetwork pods. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--host_aliases))
-- `host_ipc` (Boolean) Use the host's ipc namespace.Optional: Default to false.
-- `host_network` (Boolean) Host networking requested for this pod. Use the host's network namespace.If this option is set, the ports that will be used must be specified.Default to false.
-- `host_pid` (Boolean) Use the host's pid namespace.Optional: Default to false.
-- `host_users` (Boolean) Use the host's user namespace.Optional: Default to true.If set to true or not present, the pod will be run in the host user namespace, usefulfor when the pod needs a feature only available to the host user namespace, such asloading a kernel module with CAP_SYS_MODULE.When set to false, a new userns is created for the pod. Setting false is useful formitigating container breakout vulnerabilities even allowing users to run theircontainers as root without actually having root privileges on the host.This field is alpha-level and is only honored by servers that enable the UserNamespacesSupport feature.
-- `hostname` (String) Specifies the hostname of the PodIf not specified, the pod's hostname will be set to a system-defined value.
-- `image_pull_secrets` (Attributes List) ImagePullSecrets is an optional list of references to secrets in the same namespace to use for pulling any of the images used by this PodSpec.If specified, these secrets will be passed to individual puller implementations for them to use.More info: https://kubernetes.io/docs/concepts/containers/images#specifying-imagepullsecrets-on-a-pod (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--image_pull_secrets))
-- `init_containers` (Attributes List) List of initialization containers belonging to the pod.Init containers are executed in order prior to containers being started. If anyinit container fails, the pod is considered to have failed and is handled accordingto its restartPolicy. The name for an init container or normal container must beunique among all containers.Init containers may not have Lifecycle actions, Readiness probes, Liveness probes, or Startup probes.The resourceRequirements of an init container are taken into account during schedulingby finding the highest request/limit for each resource type, and then using the max ofof that value or the sum of the normal containers. Limits are applied to init containersin a similar fashion.Init containers cannot currently be added or removed.Cannot be updated.More info: https://kubernetes.io/docs/concepts/workloads/pods/init-containers/ (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--init_containers))
-- `node_name` (String) NodeName is a request to schedule this pod onto a specific node. If it is non-empty,the scheduler simply schedules this pod onto that node, assuming that it fits resourcerequirements.
-- `node_selector` (Map of String) NodeSelector is a selector which must be true for the pod to fit on a node.Selector which must match a node's labels for the pod to be scheduled on that node.More info: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/
-- `os` (Attributes) Specifies the OS of the containers in the pod.Some pod and container fields are restricted if this is set.If the OS field is set to linux, the following fields must be unset:-securityContext.windowsOptionsIf the OS field is set to windows, following fields must be unset:- spec.hostPID- spec.hostIPC- spec.hostUsers- spec.securityContext.seLinuxOptions- spec.securityContext.seccompProfile- spec.securityContext.fsGroup- spec.securityContext.fsGroupChangePolicy- spec.securityContext.sysctls- spec.shareProcessNamespace- spec.securityContext.runAsUser- spec.securityContext.runAsGroup- spec.securityContext.supplementalGroups- spec.containers[*].securityContext.seLinuxOptions- spec.containers[*].securityContext.seccompProfile- spec.containers[*].securityContext.capabilities- spec.containers[*].securityContext.readOnlyRootFilesystem- spec.containers[*].securityContext.privileged- spec.containers[*].securityContext.allowPrivilegeEscalation- spec.containers[*].securityContext.procMount- spec.containers[*].securityContext.runAsUser- spec.containers[*].securityContext.runAsGroup (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--os))
-- `overhead` (Map of String) Overhead represents the resource overhead associated with running a pod for a given RuntimeClass.This field will be autopopulated at admission time by the RuntimeClass admission controller. Ifthe RuntimeClass admission controller is enabled, overhead must not be set in Pod create requests.The RuntimeClass admission controller will reject Pod create requests which have the overhead alreadyset. If RuntimeClass is configured and selected in the PodSpec, Overhead will be set to the valuedefined in the corresponding RuntimeClass, otherwise it will remain unset and treated as zero.More info: https://git.k8s.io/enhancements/keps/sig-node/688-pod-overhead/README.md
-- `preemption_policy` (String) PreemptionPolicy is the Policy for preempting pods with lower priority.One of Never, PreemptLowerPriority.Defaults to PreemptLowerPriority if unset.
-- `priority` (Number) The priority value. Various system components use this field to find thepriority of the pod. When Priority Admission Controller is enabled, itprevents users from setting this field. The admission controller populatesthis field from PriorityClassName.The higher the value, the higher the priority.
-- `priority_class_name` (String) If specified, indicates the pod's priority. 'system-node-critical' and'system-cluster-critical' are two special keywords which indicate thehighest priorities with the former being the highest priority. Any othername must be defined by creating a PriorityClass object with that name.If not specified, the pod priority will be default or zero if there is nodefault.
-- `readiness_gates` (Attributes List) If specified, all readiness gates will be evaluated for pod readiness.A pod is ready when all its containers are ready ANDall conditions specified in the readiness gates have status equal to 'True'More info: https://git.k8s.io/enhancements/keps/sig-network/580-pod-readiness-gates (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--readiness_gates))
-- `resource_claims` (Attributes List) ResourceClaims defines which ResourceClaims must be allocatedand reserved before the Pod is allowed to start. The resourceswill be made available to those containers which consume themby name.This is an alpha field and requires enabling theDynamicResourceAllocation feature gate.This field is immutable. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--resource_claims))
-- `restart_policy` (String) Restart policy for all containers within the pod.One of Always, OnFailure, Never. In some contexts, only a subset of those values may be permitted.Default to Always.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle/#restart-policy
-- `runtime_class_name` (String) RuntimeClassName refers to a RuntimeClass object in the node.k8s.io group, which should be usedto run this pod. If no RuntimeClass resource matches the named class, the pod will not be run.If unset or empty, the 'legacy' RuntimeClass will be used, which is an implicit class with anempty definition that uses the default runtime handler.More info: https://git.k8s.io/enhancements/keps/sig-node/585-runtime-class
-- `scheduler_name` (String) If specified, the pod will be dispatched by specified scheduler.If not specified, the pod will be dispatched by default scheduler.
-- `scheduling_gates` (Attributes List) SchedulingGates is an opaque list of values that if specified will block scheduling the pod.If schedulingGates is not empty, the pod will stay in the SchedulingGated state and thescheduler will not attempt to schedule the pod.SchedulingGates can only be set at pod creation time, and be removed only afterwards.This is a beta feature enabled by the PodSchedulingReadiness feature gate. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--scheduling_gates))
-- `security_context` (Attributes) SecurityContext holds pod-level security attributes and common container settings.Optional: Defaults to empty. See type description for default values of each field. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--security_context))
-- `service_account` (String) DeprecatedServiceAccount is a depreciated alias for ServiceAccountName.Deprecated: Use serviceAccountName instead.
-- `service_account_name` (String) ServiceAccountName is the name of the ServiceAccount to use to run this pod.More info: https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/
-- `set_hostname_as_fqdn` (Boolean) If true the pod's hostname will be configured as the pod's FQDN, rather than the leaf name (the default).In Linux containers, this means setting the FQDN in the hostname field of the kernel (the nodename field of struct utsname).In Windows containers, this means setting the registry value of hostname for the registry key HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParameters to FQDN.If a pod does not have FQDN, this has no effect.Default to false.
-- `share_process_namespace` (Boolean) Share a single process namespace between all of the containers in a pod.When this is set containers will be able to view and signal processes from other containersin the same pod, and the first process in each container will not be assigned PID 1.HostPID and ShareProcessNamespace cannot both be set.Optional: Default to false.
-- `subdomain` (String) If specified, the fully qualified Pod hostname will be '...svc.'.If not specified, the pod will not have a domainname at all.
-- `termination_grace_period_seconds` (Number) Optional duration in seconds the pod needs to terminate gracefully. May be decreased in delete request.Value must be non-negative integer. The value zero indicates stop immediately viathe kill signal (no opportunity to shut down).If this value is nil, the default grace period will be used instead.The grace period is the duration in seconds after the processes running in the pod are senta termination signal and the time when the processes are forcibly halted with a kill signal.Set this value longer than the expected cleanup time for your process.Defaults to 30 seconds.
-- `tolerations` (Attributes List) If specified, the pod's tolerations. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--tolerations))
-- `topology_spread_constraints` (Attributes List) TopologySpreadConstraints describes how a group of pods ought to spread across topologydomains. Scheduler will schedule pods in a way which abides by the constraints.All topologySpreadConstraints are ANDed. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--topology_spread_constraints))
-- `volumes` (Attributes List) List of volumes that can be mounted by containers belonging to the pod.More info: https://kubernetes.io/docs/concepts/storage/volumes (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--volumes))
-
-
-### Nested Schema for `spec.component_defs.pod_spec.containers`
-
-Required:
-
-- `name` (String) Name of the container specified as a DNS_LABEL.Each container in a pod must have a unique name (DNS_LABEL).Cannot be updated.
-
-Optional:
-
-- `args` (List of String) Arguments to the entrypoint.The container image's CMD is used if this is not provided.Variable references $(VAR_NAME) are expanded using the container's environment. If a variablecannot be resolved, the reference in the input string will be unchanged. Double $$ are reducedto a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. '$$(VAR_NAME)' willproduce the string literal '$(VAR_NAME)'. Escaped references will never be expanded, regardlessof whether the variable exists or not. Cannot be updated.More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
-- `command` (List of String) Entrypoint array. Not executed within a shell.The container image's ENTRYPOINT is used if this is not provided.Variable references $(VAR_NAME) are expanded using the container's environment. If a variablecannot be resolved, the reference in the input string will be unchanged. Double $$ are reducedto a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. '$$(VAR_NAME)' willproduce the string literal '$(VAR_NAME)'. Escaped references will never be expanded, regardlessof whether the variable exists or not. Cannot be updated.More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
-- `env` (Attributes List) List of environment variables to set in the container.Cannot be updated. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--containers--env))
-- `env_from` (Attributes List) List of sources to populate environment variables in the container.The keys defined within a source must be a C_IDENTIFIER. All invalid keyswill be reported as an event when the container is starting. When a key exists in multiplesources, the value associated with the last source will take precedence.Values defined by an Env with a duplicate key will take precedence.Cannot be updated. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--containers--env_from))
-- `image` (String) Container image name.More info: https://kubernetes.io/docs/concepts/containers/imagesThis field is optional to allow higher level config management to default or overridecontainer images in workload controllers like Deployments and StatefulSets.
-- `image_pull_policy` (String) Image pull policy.One of Always, Never, IfNotPresent.Defaults to Always if :latest tag is specified, or IfNotPresent otherwise.Cannot be updated.More info: https://kubernetes.io/docs/concepts/containers/images#updating-images
-- `lifecycle` (Attributes) Actions that the management system should take in response to container lifecycle events.Cannot be updated. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--containers--lifecycle))
-- `liveness_probe` (Attributes) Periodic probe of container liveness.Container will be restarted if the probe fails.Cannot be updated.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--containers--liveness_probe))
-- `ports` (Attributes List) List of ports to expose from the container. Not specifying a port hereDOES NOT prevent that port from being exposed. Any port which islistening on the default '0.0.0.0' address inside a container will beaccessible from the network.Modifying this array with strategic merge patch may corrupt the data.For more information See https://github.com/kubernetes/kubernetes/issues/108255.Cannot be updated. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--containers--ports))
-- `readiness_probe` (Attributes) Periodic probe of container service readiness.Container will be removed from service endpoints if the probe fails.Cannot be updated.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--containers--readiness_probe))
-- `resize_policy` (Attributes List) Resources resize policy for the container. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--containers--resize_policy))
-- `resources` (Attributes) Compute Resources required by this container.Cannot be updated.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/ (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--containers--resources))
-- `restart_policy` (String) RestartPolicy defines the restart behavior of individual containers in a pod.This field may only be set for init containers, and the only allowed value is 'Always'.For non-init containers or when this field is not specified,the restart behavior is defined by the Pod's restart policy and the container type.Setting the RestartPolicy as 'Always' for the init container will have the following effect:this init container will be continually restarted onexit until all regular containers have terminated. Once all regularcontainers have completed, all init containers with restartPolicy 'Always'will be shut down. This lifecycle differs from normal init containers andis often referred to as a 'sidecar' container. Although this initcontainer still starts in the init container sequence, it does not waitfor the container to complete before proceeding to the next initcontainer. Instead, the next init container starts immediately after thisinit container is started, or after any startupProbe has successfullycompleted.
-- `security_context` (Attributes) SecurityContext defines the security options the container should be run with.If set, the fields of SecurityContext override the equivalent fields of PodSecurityContext.More info: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--containers--security_context))
-- `startup_probe` (Attributes) StartupProbe indicates that the Pod has successfully initialized.If specified, no other probes are executed until this completes successfully.If this probe fails, the Pod will be restarted, just as if the livenessProbe failed.This can be used to provide different probe parameters at the beginning of a Pod's lifecycle,when it might take a long time to load data or warm a cache, than during steady-state operation.This cannot be updated.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--containers--startup_probe))
-- `stdin` (Boolean) Whether this container should allocate a buffer for stdin in the container runtime. If thisis not set, reads from stdin in the container will always result in EOF.Default is false.
-- `stdin_once` (Boolean) Whether the container runtime should close the stdin channel after it has been opened bya single attach. When stdin is true the stdin stream will remain open across multiple attachsessions. If stdinOnce is set to true, stdin is opened on container start, is empty until thefirst client attaches to stdin, and then remains open and accepts data until the client disconnects,at which time stdin is closed and remains closed until the container is restarted. If thisflag is false, a container processes that reads from stdin will never receive an EOF.Default is false
-- `termination_message_path` (String) Optional: Path at which the file to which the container's termination messagewill be written is mounted into the container's filesystem.Message written is intended to be brief final status, such as an assertion failure message.Will be truncated by the node if greater than 4096 bytes. The total message length acrossall containers will be limited to 12kb.Defaults to /dev/termination-log.Cannot be updated.
-- `termination_message_policy` (String) Indicate how the termination message should be populated. File will use the contents ofterminationMessagePath to populate the container status message on both success and failure.FallbackToLogsOnError will use the last chunk of container log output if the terminationmessage file is empty and the container exited with an error.The log output is limited to 2048 bytes or 80 lines, whichever is smaller.Defaults to File.Cannot be updated.
-- `tty` (Boolean) Whether this container should allocate a TTY for itself, also requires 'stdin' to be true.Default is false.
-- `volume_devices` (Attributes List) volumeDevices is the list of block devices to be used by the container. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--containers--volume_devices))
-- `volume_mounts` (Attributes List) Pod volumes to mount into the container's filesystem.Cannot be updated. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--containers--volume_mounts))
-- `working_dir` (String) Container's working directory.If not specified, the container runtime's default will be used, whichmight be configured in the container image.Cannot be updated.
-
-
-### Nested Schema for `spec.component_defs.pod_spec.containers.env`
-
-Required:
-
-- `name` (String) Name of the environment variable. Must be a C_IDENTIFIER.
-
-Optional:
-
-- `value` (String) Variable references $(VAR_NAME) are expandedusing the previously defined environment variables in the container andany service environment variables. If a variable cannot be resolved,the reference in the input string will be unchanged. Double $$ are reducedto a single $, which allows for escaping the $(VAR_NAME) syntax: i.e.'$$(VAR_NAME)' will produce the string literal '$(VAR_NAME)'.Escaped references will never be expanded, regardless of whether the variableexists or not.Defaults to ''.
-- `value_from` (Attributes) Source for the environment variable's value. Cannot be used if value is not empty. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--containers--env--value_from))
-
-
-### Nested Schema for `spec.component_defs.pod_spec.containers.env.value_from`
-
-Optional:
-
-- `config_map_key_ref` (Attributes) Selects a key of a ConfigMap. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--containers--env--value_from--config_map_key_ref))
-- `field_ref` (Attributes) Selects a field of the pod: supports metadata.name, metadata.namespace, 'metadata.labels['']', 'metadata.annotations['']',spec.nodeName, spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--containers--env--value_from--field_ref))
-- `resource_field_ref` (Attributes) Selects a resource of the container: only resources limits and requests(limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu, requests.memory and requests.ephemeral-storage) are currently supported. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--containers--env--value_from--resource_field_ref))
-- `secret_key_ref` (Attributes) Selects a key of a secret in the pod's namespace (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--containers--env--value_from--secret_key_ref))
-
-
-### Nested Schema for `spec.component_defs.pod_spec.containers.env.value_from.config_map_key_ref`
-
-Required:
-
-- `key` (String) The key to select.
-
-Optional:
-
-- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
-- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.containers.env.value_from.field_ref`
-
-Required:
-
-- `field_path` (String) Path of the field to select in the specified API version.
-
-Optional:
-
-- `api_version` (String) Version of the schema the FieldPath is written in terms of, defaults to 'v1'.
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.containers.env.value_from.resource_field_ref`
-
-Required:
-
-- `resource` (String) Required: resource to select
-
-Optional:
-
-- `container_name` (String) Container name: required for volumes, optional for env vars
-- `divisor` (String) Specifies the output format of the exposed resources, defaults to '1'
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.containers.env.value_from.secret_key_ref`
-
-Required:
-
-- `key` (String) The key of the secret to select from. Must be a valid secret key.
-
-Optional:
-
-- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
-- `optional` (Boolean) Specify whether the Secret or its key must be defined
-
-
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.containers.env_from`
-
-Optional:
-
-- `config_map_ref` (Attributes) The ConfigMap to select from (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--containers--env_from--config_map_ref))
-- `prefix` (String) An optional identifier to prepend to each key in the ConfigMap. Must be a C_IDENTIFIER.
-- `secret_ref` (Attributes) The Secret to select from (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--containers--env_from--secret_ref))
-
-
-### Nested Schema for `spec.component_defs.pod_spec.containers.env_from.config_map_ref`
-
-Optional:
-
-- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
-- `optional` (Boolean) Specify whether the ConfigMap must be defined
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.containers.env_from.secret_ref`
-
-Optional:
-
-- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
-- `optional` (Boolean) Specify whether the Secret must be defined
-
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.containers.lifecycle`
-
-Optional:
-
-- `post_start` (Attributes) PostStart is called immediately after a container is created. If the handler fails,the container is terminated and restarted according to its restart policy.Other management of the container blocks until the hook completes.More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--containers--lifecycle--post_start))
-- `pre_stop` (Attributes) PreStop is called immediately before a container is terminated due to anAPI request or management event such as liveness/startup probe failure,preemption, resource contention, etc. The handler is not called if thecontainer crashes or exits. The Pod's termination grace period countdown begins before thePreStop hook is executed. Regardless of the outcome of the handler, thecontainer will eventually terminate within the Pod's termination graceperiod (unless delayed by finalizers). Other management of the container blocks until the hook completesor until the termination grace period is reached.More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--containers--lifecycle--pre_stop))
-
-
-### Nested Schema for `spec.component_defs.pod_spec.containers.lifecycle.post_start`
-
-Optional:
-
-- `exec` (Attributes) Exec specifies the action to take. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--containers--lifecycle--post_start--exec))
-- `http_get` (Attributes) HTTPGet specifies the http request to perform. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--containers--lifecycle--post_start--http_get))
-- `tcp_socket` (Attributes) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and keptfor the backward compatibility. There are no validation of this field andlifecycle hooks will fail in runtime when tcp handler is specified. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--containers--lifecycle--post_start--tcp_socket))
-
-
-### Nested Schema for `spec.component_defs.pod_spec.containers.lifecycle.post_start.exec`
-
-Optional:
-
-- `command` (List of String) Command is the command line to execute inside the container, the working directory for thecommand is root ('/') in the container's filesystem. The command is simply exec'd, it isnot run inside a shell, so traditional shell instructions ('|', etc) won't work. To usea shell, you need to explicitly call out to that shell.Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.containers.lifecycle.post_start.http_get`
-
-Required:
-
-- `port` (String) Name or number of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
-
-Optional:
-
-- `host` (String) Host name to connect to, defaults to the pod IP. You probably want to set'Host' in httpHeaders instead.
-- `http_headers` (Attributes List) Custom headers to set in the request. HTTP allows repeated headers. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--containers--lifecycle--post_start--http_get--http_headers))
-- `path` (String) Path to access on the HTTP server.
-- `scheme` (String) Scheme to use for connecting to the host.Defaults to HTTP.
-
-
-### Nested Schema for `spec.component_defs.pod_spec.containers.lifecycle.post_start.http_get.http_headers`
-
-Required:
-
-- `name` (String) The header field name.This will be canonicalized upon output, so case-variant names will be understood as the same header.
-- `value` (String) The header field value
-
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.containers.lifecycle.post_start.tcp_socket`
-
-Required:
-
-- `port` (String) Number or name of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
-
-Optional:
-
-- `host` (String) Optional: Host name to connect to, defaults to the pod IP.
-
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.containers.lifecycle.pre_stop`
-
-Optional:
-
-- `exec` (Attributes) Exec specifies the action to take. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--containers--lifecycle--pre_stop--exec))
-- `http_get` (Attributes) HTTPGet specifies the http request to perform. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--containers--lifecycle--pre_stop--http_get))
-- `tcp_socket` (Attributes) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and keptfor the backward compatibility. There are no validation of this field andlifecycle hooks will fail in runtime when tcp handler is specified. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--containers--lifecycle--pre_stop--tcp_socket))
-
-
-### Nested Schema for `spec.component_defs.pod_spec.containers.lifecycle.pre_stop.exec`
-
-Optional:
-
-- `command` (List of String) Command is the command line to execute inside the container, the working directory for thecommand is root ('/') in the container's filesystem. The command is simply exec'd, it isnot run inside a shell, so traditional shell instructions ('|', etc) won't work. To usea shell, you need to explicitly call out to that shell.Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.containers.lifecycle.pre_stop.http_get`
-
-Required:
-
-- `port` (String) Name or number of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
-
-Optional:
-
-- `host` (String) Host name to connect to, defaults to the pod IP. You probably want to set'Host' in httpHeaders instead.
-- `http_headers` (Attributes List) Custom headers to set in the request. HTTP allows repeated headers. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--containers--lifecycle--pre_stop--http_get--http_headers))
-- `path` (String) Path to access on the HTTP server.
-- `scheme` (String) Scheme to use for connecting to the host.Defaults to HTTP.
-
-
-### Nested Schema for `spec.component_defs.pod_spec.containers.lifecycle.pre_stop.http_get.http_headers`
-
-Required:
-
-- `name` (String) The header field name.This will be canonicalized upon output, so case-variant names will be understood as the same header.
-- `value` (String) The header field value
-
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.containers.lifecycle.pre_stop.tcp_socket`
-
-Required:
-
-- `port` (String) Number or name of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
-
-Optional:
-
-- `host` (String) Optional: Host name to connect to, defaults to the pod IP.
-
-
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.containers.liveness_probe`
-
-Optional:
-
-- `exec` (Attributes) Exec specifies the action to take. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--containers--liveness_probe--exec))
-- `failure_threshold` (Number) Minimum consecutive failures for the probe to be considered failed after having succeeded.Defaults to 3. Minimum value is 1.
-- `grpc` (Attributes) GRPC specifies an action involving a GRPC port. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--containers--liveness_probe--grpc))
-- `http_get` (Attributes) HTTPGet specifies the http request to perform. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--containers--liveness_probe--http_get))
-- `initial_delay_seconds` (Number) Number of seconds after the container has started before liveness probes are initiated.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-- `period_seconds` (Number) How often (in seconds) to perform the probe.Default to 10 seconds. Minimum value is 1.
-- `success_threshold` (Number) Minimum consecutive successes for the probe to be considered successful after having failed.Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
-- `tcp_socket` (Attributes) TCPSocket specifies an action involving a TCP port. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--containers--liveness_probe--tcp_socket))
-- `termination_grace_period_seconds` (Number) Optional duration in seconds the pod needs to terminate gracefully upon probe failure.The grace period is the duration in seconds after the processes running in the pod are senta termination signal and the time when the processes are forcibly halted with a kill signal.Set this value longer than the expected cleanup time for your process.If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, thisvalue overrides the value provided by the pod spec.Value must be non-negative integer. The value zero indicates stop immediately viathe kill signal (no opportunity to shut down).This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate.Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
-- `timeout_seconds` (Number) Number of seconds after which the probe times out.Defaults to 1 second. Minimum value is 1.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
-
-### Nested Schema for `spec.component_defs.pod_spec.containers.liveness_probe.exec`
-
-Optional:
-
-- `command` (List of String) Command is the command line to execute inside the container, the working directory for thecommand is root ('/') in the container's filesystem. The command is simply exec'd, it isnot run inside a shell, so traditional shell instructions ('|', etc) won't work. To usea shell, you need to explicitly call out to that shell.Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.containers.liveness_probe.grpc`
-
-Required:
-
-- `port` (Number) Port number of the gRPC service. Number must be in the range 1 to 65535.
-
-Optional:
-
-- `service` (String) Service is the name of the service to place in the gRPC HealthCheckRequest(see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).If this is not specified, the default behavior is defined by gRPC.
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.containers.liveness_probe.http_get`
-
-Required:
-
-- `port` (String) Name or number of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
-
-Optional:
-
-- `host` (String) Host name to connect to, defaults to the pod IP. You probably want to set'Host' in httpHeaders instead.
-- `http_headers` (Attributes List) Custom headers to set in the request. HTTP allows repeated headers. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--containers--liveness_probe--http_get--http_headers))
-- `path` (String) Path to access on the HTTP server.
-- `scheme` (String) Scheme to use for connecting to the host.Defaults to HTTP.
-
-
-### Nested Schema for `spec.component_defs.pod_spec.containers.liveness_probe.http_get.http_headers`
-
-Required:
-
-- `name` (String) The header field name.This will be canonicalized upon output, so case-variant names will be understood as the same header.
-- `value` (String) The header field value
-
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.containers.liveness_probe.tcp_socket`
-
-Required:
-
-- `port` (String) Number or name of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
-
-Optional:
-
-- `host` (String) Optional: Host name to connect to, defaults to the pod IP.
-
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.containers.ports`
-
-Required:
-
-- `container_port` (Number) Number of port to expose on the pod's IP address.This must be a valid port number, 0 < x < 65536.
-
-Optional:
-
-- `host_ip` (String) What host IP to bind the external port to.
-- `host_port` (Number) Number of port to expose on the host.If specified, this must be a valid port number, 0 < x < 65536.If HostNetwork is specified, this must match ContainerPort.Most containers do not need this.
-- `name` (String) If specified, this must be an IANA_SVC_NAME and unique within the pod. Eachnamed port in a pod must have a unique name. Name for the port that can bereferred to by services.
-- `protocol` (String) Protocol for port. Must be UDP, TCP, or SCTP.Defaults to 'TCP'.
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.containers.readiness_probe`
-
-Optional:
-
-- `exec` (Attributes) Exec specifies the action to take. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--containers--readiness_probe--exec))
-- `failure_threshold` (Number) Minimum consecutive failures for the probe to be considered failed after having succeeded.Defaults to 3. Minimum value is 1.
-- `grpc` (Attributes) GRPC specifies an action involving a GRPC port. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--containers--readiness_probe--grpc))
-- `http_get` (Attributes) HTTPGet specifies the http request to perform. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--containers--readiness_probe--http_get))
-- `initial_delay_seconds` (Number) Number of seconds after the container has started before liveness probes are initiated.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-- `period_seconds` (Number) How often (in seconds) to perform the probe.Default to 10 seconds. Minimum value is 1.
-- `success_threshold` (Number) Minimum consecutive successes for the probe to be considered successful after having failed.Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
-- `tcp_socket` (Attributes) TCPSocket specifies an action involving a TCP port. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--containers--readiness_probe--tcp_socket))
-- `termination_grace_period_seconds` (Number) Optional duration in seconds the pod needs to terminate gracefully upon probe failure.The grace period is the duration in seconds after the processes running in the pod are senta termination signal and the time when the processes are forcibly halted with a kill signal.Set this value longer than the expected cleanup time for your process.If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, thisvalue overrides the value provided by the pod spec.Value must be non-negative integer. The value zero indicates stop immediately viathe kill signal (no opportunity to shut down).This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate.Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
-- `timeout_seconds` (Number) Number of seconds after which the probe times out.Defaults to 1 second. Minimum value is 1.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
-
-### Nested Schema for `spec.component_defs.pod_spec.containers.readiness_probe.exec`
-
-Optional:
-
-- `command` (List of String) Command is the command line to execute inside the container, the working directory for thecommand is root ('/') in the container's filesystem. The command is simply exec'd, it isnot run inside a shell, so traditional shell instructions ('|', etc) won't work. To usea shell, you need to explicitly call out to that shell.Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.containers.readiness_probe.grpc`
-
-Required:
-
-- `port` (Number) Port number of the gRPC service. Number must be in the range 1 to 65535.
-
-Optional:
-
-- `service` (String) Service is the name of the service to place in the gRPC HealthCheckRequest(see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).If this is not specified, the default behavior is defined by gRPC.
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.containers.readiness_probe.http_get`
-
-Required:
-
-- `port` (String) Name or number of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
-
-Optional:
-
-- `host` (String) Host name to connect to, defaults to the pod IP. You probably want to set'Host' in httpHeaders instead.
-- `http_headers` (Attributes List) Custom headers to set in the request. HTTP allows repeated headers. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--containers--readiness_probe--http_get--http_headers))
-- `path` (String) Path to access on the HTTP server.
-- `scheme` (String) Scheme to use for connecting to the host.Defaults to HTTP.
-
-
-### Nested Schema for `spec.component_defs.pod_spec.containers.readiness_probe.http_get.http_headers`
-
-Required:
-
-- `name` (String) The header field name.This will be canonicalized upon output, so case-variant names will be understood as the same header.
-- `value` (String) The header field value
-
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.containers.readiness_probe.tcp_socket`
-
-Required:
-
-- `port` (String) Number or name of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
-
-Optional:
-
-- `host` (String) Optional: Host name to connect to, defaults to the pod IP.
-
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.containers.resize_policy`
-
-Required:
-
-- `resource_name` (String) Name of the resource to which this resource resize policy applies.Supported values: cpu, memory.
-- `restart_policy` (String) Restart policy to apply when specified resource is resized.If not specified, it defaults to NotRequired.
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.containers.resources`
-
-Optional:
-
-- `claims` (Attributes List) Claims lists the names of resources, defined in spec.resourceClaims,that are used by this container.This is an alpha field and requires enabling theDynamicResourceAllocation feature gate.This field is immutable. It can only be set for containers. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--containers--resources--claims))
-- `limits` (Map of String) Limits describes the maximum amount of compute resources allowed.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-- `requests` (Map of String) Requests describes the minimum amount of compute resources required.If Requests is omitted for a container, it defaults to Limits if that is explicitly specified,otherwise to an implementation-defined value. Requests cannot exceed Limits.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-
-
-### Nested Schema for `spec.component_defs.pod_spec.containers.resources.claims`
-
-Required:
-
-- `name` (String) Name must match the name of one entry in pod.spec.resourceClaims ofthe Pod where this field is used. It makes that resource availableinside a container.
-
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.containers.security_context`
-
-Optional:
-
-- `allow_privilege_escalation` (Boolean) AllowPrivilegeEscalation controls whether a process can gain moreprivileges than its parent process. This bool directly controls ifthe no_new_privs flag will be set on the container process.AllowPrivilegeEscalation is true always when the container is:1) run as Privileged2) has CAP_SYS_ADMINNote that this field cannot be set when spec.os.name is windows.
-- `capabilities` (Attributes) The capabilities to add/drop when running containers.Defaults to the default set of capabilities granted by the container runtime.Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--containers--security_context--capabilities))
-- `privileged` (Boolean) Run container in privileged mode.Processes in privileged containers are essentially equivalent to root on the host.Defaults to false.Note that this field cannot be set when spec.os.name is windows.
-- `proc_mount` (String) procMount denotes the type of proc mount to use for the containers.The default is DefaultProcMount which uses the container runtime defaults forreadonly paths and masked paths.This requires the ProcMountType feature flag to be enabled.Note that this field cannot be set when spec.os.name is windows.
-- `read_only_root_filesystem` (Boolean) Whether this container has a read-only root filesystem.Default is false.Note that this field cannot be set when spec.os.name is windows.
-- `run_as_group` (Number) The GID to run the entrypoint of the container process.Uses runtime default if unset.May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.Note that this field cannot be set when spec.os.name is windows.
-- `run_as_non_root` (Boolean) Indicates that the container must run as a non-root user.If true, the Kubelet will validate the image at runtime to ensure that itdoes not run as UID 0 (root) and fail to start the container if it does.If unset or false, no such validation will be performed.May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.
-- `run_as_user` (Number) The UID to run the entrypoint of the container process.Defaults to user specified in image metadata if unspecified.May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.Note that this field cannot be set when spec.os.name is windows.
-- `se_linux_options` (Attributes) The SELinux context to be applied to the container.If unspecified, the container runtime will allocate a random SELinux context for eachcontainer. May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--containers--security_context--se_linux_options))
-- `seccomp_profile` (Attributes) The seccomp options to use by this container. If seccomp options areprovided at both the pod & container level, the container optionsoverride the pod options.Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--containers--security_context--seccomp_profile))
-- `windows_options` (Attributes) The Windows specific settings applied to all containers.If unspecified, the options from the PodSecurityContext will be used.If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.Note that this field cannot be set when spec.os.name is linux. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--containers--security_context--windows_options))
-
-
-### Nested Schema for `spec.component_defs.pod_spec.containers.security_context.capabilities`
-
-Optional:
-
-- `add` (List of String) Added capabilities
-- `drop` (List of String) Removed capabilities
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.containers.security_context.se_linux_options`
-
-Optional:
-
-- `level` (String) Level is SELinux level label that applies to the container.
-- `role` (String) Role is a SELinux role label that applies to the container.
-- `type` (String) Type is a SELinux type label that applies to the container.
-- `user` (String) User is a SELinux user label that applies to the container.
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.containers.security_context.seccomp_profile`
-
-Required:
-
-- `type` (String) type indicates which kind of seccomp profile will be applied.Valid options are:Localhost - a profile defined in a file on the node should be used.RuntimeDefault - the container runtime default profile should be used.Unconfined - no profile should be applied.
-
-Optional:
-
-- `localhost_profile` (String) localhostProfile indicates a profile defined in a file on the node should be used.The profile must be preconfigured on the node to work.Must be a descending path, relative to the kubelet's configured seccomp profile location.Must be set if type is 'Localhost'. Must NOT be set for any other type.
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.containers.security_context.windows_options`
-
-Optional:
-
-- `gmsa_credential_spec` (String) GMSACredentialSpec is where the GMSA admission webhook(https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of theGMSA credential spec named by the GMSACredentialSpecName field.
-- `gmsa_credential_spec_name` (String) GMSACredentialSpecName is the name of the GMSA credential spec to use.
-- `host_process` (Boolean) HostProcess determines if a container should be run as a 'Host Process' container.All of a Pod's containers must have the same effective HostProcess value(it is not allowed to have a mix of HostProcess containers and non-HostProcess containers).In addition, if HostProcess is true then HostNetwork must also be set to true.
-- `run_as_user_name` (String) The UserName in Windows to run the entrypoint of the container process.Defaults to the user specified in image metadata if unspecified.May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.
-
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.containers.startup_probe`
-
-Optional:
-
-- `exec` (Attributes) Exec specifies the action to take. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--containers--startup_probe--exec))
-- `failure_threshold` (Number) Minimum consecutive failures for the probe to be considered failed after having succeeded.Defaults to 3. Minimum value is 1.
-- `grpc` (Attributes) GRPC specifies an action involving a GRPC port. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--containers--startup_probe--grpc))
-- `http_get` (Attributes) HTTPGet specifies the http request to perform. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--containers--startup_probe--http_get))
-- `initial_delay_seconds` (Number) Number of seconds after the container has started before liveness probes are initiated.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-- `period_seconds` (Number) How often (in seconds) to perform the probe.Default to 10 seconds. Minimum value is 1.
-- `success_threshold` (Number) Minimum consecutive successes for the probe to be considered successful after having failed.Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
-- `tcp_socket` (Attributes) TCPSocket specifies an action involving a TCP port. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--containers--startup_probe--tcp_socket))
-- `termination_grace_period_seconds` (Number) Optional duration in seconds the pod needs to terminate gracefully upon probe failure.The grace period is the duration in seconds after the processes running in the pod are senta termination signal and the time when the processes are forcibly halted with a kill signal.Set this value longer than the expected cleanup time for your process.If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, thisvalue overrides the value provided by the pod spec.Value must be non-negative integer. The value zero indicates stop immediately viathe kill signal (no opportunity to shut down).This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate.Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
-- `timeout_seconds` (Number) Number of seconds after which the probe times out.Defaults to 1 second. Minimum value is 1.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
-
-### Nested Schema for `spec.component_defs.pod_spec.containers.startup_probe.exec`
-
-Optional:
-
-- `command` (List of String) Command is the command line to execute inside the container, the working directory for thecommand is root ('/') in the container's filesystem. The command is simply exec'd, it isnot run inside a shell, so traditional shell instructions ('|', etc) won't work. To usea shell, you need to explicitly call out to that shell.Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.containers.startup_probe.grpc`
-
-Required:
-
-- `port` (Number) Port number of the gRPC service. Number must be in the range 1 to 65535.
-
-Optional:
-
-- `service` (String) Service is the name of the service to place in the gRPC HealthCheckRequest(see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).If this is not specified, the default behavior is defined by gRPC.
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.containers.startup_probe.http_get`
-
-Required:
-
-- `port` (String) Name or number of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
-
-Optional:
-
-- `host` (String) Host name to connect to, defaults to the pod IP. You probably want to set'Host' in httpHeaders instead.
-- `http_headers` (Attributes List) Custom headers to set in the request. HTTP allows repeated headers. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--containers--startup_probe--http_get--http_headers))
-- `path` (String) Path to access on the HTTP server.
-- `scheme` (String) Scheme to use for connecting to the host.Defaults to HTTP.
-
-
-### Nested Schema for `spec.component_defs.pod_spec.containers.startup_probe.http_get.http_headers`
-
-Required:
-
-- `name` (String) The header field name.This will be canonicalized upon output, so case-variant names will be understood as the same header.
-- `value` (String) The header field value
-
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.containers.startup_probe.tcp_socket`
-
-Required:
-
-- `port` (String) Number or name of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
-
-Optional:
-
-- `host` (String) Optional: Host name to connect to, defaults to the pod IP.
-
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.containers.volume_devices`
-
-Required:
-
-- `device_path` (String) devicePath is the path inside of the container that the device will be mapped to.
-- `name` (String) name must match the name of a persistentVolumeClaim in the pod
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.containers.volume_mounts`
-
-Required:
-
-- `mount_path` (String) Path within the container at which the volume should be mounted. Mustnot contain ':'.
-- `name` (String) This must match the Name of a Volume.
-
-Optional:
-
-- `mount_propagation` (String) mountPropagation determines how mounts are propagated from the hostto container and the other way around.When not set, MountPropagationNone is used.This field is beta in 1.10.
-- `read_only` (Boolean) Mounted read-only if true, read-write otherwise (false or unspecified).Defaults to false.
-- `sub_path` (String) Path within the volume from which the container's volume should be mounted.Defaults to '' (volume's root).
-- `sub_path_expr` (String) Expanded path within the volume from which the container's volume should be mounted.Behaves similarly to SubPath but environment variable references $(VAR_NAME) are expanded using the container's environment.Defaults to '' (volume's root).SubPathExpr and SubPath are mutually exclusive.
-
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.affinity`
-
-Optional:
-
-- `node_affinity` (Attributes) Describes node affinity scheduling rules for the pod. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--affinity--node_affinity))
-- `pod_affinity` (Attributes) Describes pod affinity scheduling rules (e.g. co-locate this pod in the same node, zone, etc. as some other pod(s)). (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--affinity--pod_affinity))
-- `pod_anti_affinity` (Attributes) Describes pod anti-affinity scheduling rules (e.g. avoid putting this pod in the same node, zone, etc. as some other pod(s)). (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--affinity--pod_anti_affinity))
-
-
-### Nested Schema for `spec.component_defs.pod_spec.affinity.node_affinity`
-
-Optional:
-
-- `preferred_during_scheduling_ignored_during_execution` (Attributes List) The scheduler will prefer to schedule pods to nodes that satisfythe affinity expressions specified by this field, but it may choosea node that violates one or more of the expressions. The node that ismost preferred is the one with the greatest sum of weights, i.e.for each node that meets all of the scheduling requirements (resourcerequest, requiredDuringScheduling affinity expressions, etc.),compute a sum by iterating through the elements of this field and adding'weight' to the sum if the node matches the corresponding matchExpressions; thenode(s) with the highest sum are the most preferred. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--affinity--node_affinity--preferred_during_scheduling_ignored_during_execution))
-- `required_during_scheduling_ignored_during_execution` (Attributes) If the affinity requirements specified by this field are not met atscheduling time, the pod will not be scheduled onto the node.If the affinity requirements specified by this field cease to be metat some point during pod execution (e.g. due to an update), the systemmay or may not try to eventually evict the pod from its node. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--affinity--node_affinity--required_during_scheduling_ignored_during_execution))
-
-
-### Nested Schema for `spec.component_defs.pod_spec.affinity.node_affinity.preferred_during_scheduling_ignored_during_execution`
-
-Required:
-
-- `preference` (Attributes) A node selector term, associated with the corresponding weight. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--affinity--node_affinity--preferred_during_scheduling_ignored_during_execution--preference))
-- `weight` (Number) Weight associated with matching the corresponding nodeSelectorTerm, in the range 1-100.
-
-
-### Nested Schema for `spec.component_defs.pod_spec.affinity.node_affinity.preferred_during_scheduling_ignored_during_execution.preference`
-
-Optional:
-
-- `match_expressions` (Attributes List) A list of node selector requirements by node's labels. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--affinity--node_affinity--preferred_during_scheduling_ignored_during_execution--preference--match_expressions))
-- `match_fields` (Attributes List) A list of node selector requirements by node's fields. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--affinity--node_affinity--preferred_during_scheduling_ignored_during_execution--preference--match_fields))
-
-
-### Nested Schema for `spec.component_defs.pod_spec.affinity.node_affinity.preferred_during_scheduling_ignored_during_execution.preference.match_expressions`
-
-Required:
-
-- `key` (String) The label key that the selector applies to.
-- `operator` (String) Represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt.
-
-Optional:
-
-- `values` (List of String) An array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. If the operator is Gt or Lt, the valuesarray must have a single element, which will be interpreted as an integer.This array is replaced during a strategic merge patch.
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.affinity.node_affinity.preferred_during_scheduling_ignored_during_execution.preference.match_fields`
-
-Required:
-
-- `key` (String) The label key that the selector applies to.
-- `operator` (String) Represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt.
-
-Optional:
-
-- `values` (List of String) An array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. If the operator is Gt or Lt, the valuesarray must have a single element, which will be interpreted as an integer.This array is replaced during a strategic merge patch.
-
-
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.affinity.node_affinity.required_during_scheduling_ignored_during_execution`
-
-Required:
-
-- `node_selector_terms` (Attributes List) Required. A list of node selector terms. The terms are ORed. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--affinity--node_affinity--required_during_scheduling_ignored_during_execution--node_selector_terms))
-
-
-### Nested Schema for `spec.component_defs.pod_spec.affinity.node_affinity.required_during_scheduling_ignored_during_execution.node_selector_terms`
-
-Optional:
-
-- `match_expressions` (Attributes List) A list of node selector requirements by node's labels. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--affinity--node_affinity--required_during_scheduling_ignored_during_execution--node_selector_terms--match_expressions))
-- `match_fields` (Attributes List) A list of node selector requirements by node's fields. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--affinity--node_affinity--required_during_scheduling_ignored_during_execution--node_selector_terms--match_fields))
-
-
-### Nested Schema for `spec.component_defs.pod_spec.affinity.node_affinity.required_during_scheduling_ignored_during_execution.node_selector_terms.match_expressions`
-
-Required:
-
-- `key` (String) The label key that the selector applies to.
-- `operator` (String) Represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt.
-
-Optional:
-
-- `values` (List of String) An array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. If the operator is Gt or Lt, the valuesarray must have a single element, which will be interpreted as an integer.This array is replaced during a strategic merge patch.
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.affinity.node_affinity.required_during_scheduling_ignored_during_execution.node_selector_terms.match_fields`
-
-Required:
-
-- `key` (String) The label key that the selector applies to.
-- `operator` (String) Represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt.
-
-Optional:
-
-- `values` (List of String) An array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. If the operator is Gt or Lt, the valuesarray must have a single element, which will be interpreted as an integer.This array is replaced during a strategic merge patch.
-
-
-
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.affinity.pod_affinity`
-
-Optional:
-
-- `preferred_during_scheduling_ignored_during_execution` (Attributes List) The scheduler will prefer to schedule pods to nodes that satisfythe affinity expressions specified by this field, but it may choosea node that violates one or more of the expressions. The node that ismost preferred is the one with the greatest sum of weights, i.e.for each node that meets all of the scheduling requirements (resourcerequest, requiredDuringScheduling affinity expressions, etc.),compute a sum by iterating through the elements of this field and adding'weight' to the sum if the node has pods which matches the corresponding podAffinityTerm; thenode(s) with the highest sum are the most preferred. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--affinity--pod_affinity--preferred_during_scheduling_ignored_during_execution))
-- `required_during_scheduling_ignored_during_execution` (Attributes List) If the affinity requirements specified by this field are not met atscheduling time, the pod will not be scheduled onto the node.If the affinity requirements specified by this field cease to be metat some point during pod execution (e.g. due to a pod label update), thesystem may or may not try to eventually evict the pod from its node.When there are multiple elements, the lists of nodes corresponding to eachpodAffinityTerm are intersected, i.e. all terms must be satisfied. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--affinity--pod_affinity--required_during_scheduling_ignored_during_execution))
-
-
-### Nested Schema for `spec.component_defs.pod_spec.affinity.pod_affinity.preferred_during_scheduling_ignored_during_execution`
-
-Required:
-
-- `pod_affinity_term` (Attributes) Required. A pod affinity term, associated with the corresponding weight. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--affinity--pod_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term))
-- `weight` (Number) weight associated with matching the corresponding podAffinityTerm,in the range 1-100.
-
-
-### Nested Schema for `spec.component_defs.pod_spec.affinity.pod_affinity.preferred_during_scheduling_ignored_during_execution.pod_affinity_term`
-
-Required:
-
-- `topology_key` (String) This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matchingthe labelSelector in the specified namespaces, where co-located is defined as running on a nodewhose value of the label with key topologyKey matches that of any node on which any of theselected pods is running.Empty topologyKey is not allowed.
-
-Optional:
-
-- `label_selector` (Attributes) A label query over a set of resources, in this case pods. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--affinity--pod_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--label_selector))
-- `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--affinity--pod_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--namespace_selector))
-- `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.
-
-
-### Nested Schema for `spec.component_defs.pod_spec.affinity.pod_affinity.preferred_during_scheduling_ignored_during_execution.pod_affinity_term.label_selector`
-
-Optional:
-
-- `match_expressions` (Attributes List) matchExpressions is a list of label selector requirements. The requirements are ANDed. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--affinity--pod_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--label_selector--match_expressions))
-- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.
-
-
-### Nested Schema for `spec.component_defs.pod_spec.affinity.pod_affinity.preferred_during_scheduling_ignored_during_execution.pod_affinity_term.label_selector.match_expressions`
-
-Required:
-
-- `key` (String) key is the label key that the selector applies to.
-- `operator` (String) operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.
-
-Optional:
-
-- `values` (List of String) values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.
-
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.affinity.pod_affinity.preferred_during_scheduling_ignored_during_execution.pod_affinity_term.namespace_selector`
-
-Optional:
-
-- `match_expressions` (Attributes List) matchExpressions is a list of label selector requirements. The requirements are ANDed. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--affinity--pod_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--namespace_selector--match_expressions))
-- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.
-
-
-### Nested Schema for `spec.component_defs.pod_spec.affinity.pod_affinity.preferred_during_scheduling_ignored_during_execution.pod_affinity_term.namespace_selector.match_expressions`
-
-Required:
-
-- `key` (String) key is the label key that the selector applies to.
-- `operator` (String) operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.
-
-Optional:
-
-- `values` (List of String) values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.
-
-
-
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.affinity.pod_affinity.required_during_scheduling_ignored_during_execution`
-
-Required:
-
-- `topology_key` (String) This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matchingthe labelSelector in the specified namespaces, where co-located is defined as running on a nodewhose value of the label with key topologyKey matches that of any node on which any of theselected pods is running.Empty topologyKey is not allowed.
-
-Optional:
-
-- `label_selector` (Attributes) A label query over a set of resources, in this case pods. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--affinity--pod_affinity--required_during_scheduling_ignored_during_execution--label_selector))
-- `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--affinity--pod_affinity--required_during_scheduling_ignored_during_execution--namespace_selector))
-- `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.
-
-
-### Nested Schema for `spec.component_defs.pod_spec.affinity.pod_affinity.required_during_scheduling_ignored_during_execution.label_selector`
-
-Optional:
-
-- `match_expressions` (Attributes List) matchExpressions is a list of label selector requirements. The requirements are ANDed. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--affinity--pod_affinity--required_during_scheduling_ignored_during_execution--label_selector--match_expressions))
-- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.
-
-
-### Nested Schema for `spec.component_defs.pod_spec.affinity.pod_affinity.required_during_scheduling_ignored_during_execution.label_selector.match_expressions`
-
-Required:
-
-- `key` (String) key is the label key that the selector applies to.
-- `operator` (String) operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.
-
-Optional:
-
-- `values` (List of String) values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.
-
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.affinity.pod_affinity.required_during_scheduling_ignored_during_execution.namespace_selector`
-
-Optional:
-
-- `match_expressions` (Attributes List) matchExpressions is a list of label selector requirements. The requirements are ANDed. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--affinity--pod_affinity--required_during_scheduling_ignored_during_execution--namespace_selector--match_expressions))
-- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.
-
-
-### Nested Schema for `spec.component_defs.pod_spec.affinity.pod_affinity.required_during_scheduling_ignored_during_execution.namespace_selector.match_expressions`
-
-Required:
-
-- `key` (String) key is the label key that the selector applies to.
-- `operator` (String) operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.
-
-Optional:
-
-- `values` (List of String) values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.
-
-
-
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.affinity.pod_anti_affinity`
-
-Optional:
-
-- `preferred_during_scheduling_ignored_during_execution` (Attributes List) The scheduler will prefer to schedule pods to nodes that satisfythe anti-affinity expressions specified by this field, but it may choosea node that violates one or more of the expressions. The node that ismost preferred is the one with the greatest sum of weights, i.e.for each node that meets all of the scheduling requirements (resourcerequest, requiredDuringScheduling anti-affinity expressions, etc.),compute a sum by iterating through the elements of this field and adding'weight' to the sum if the node has pods which matches the corresponding podAffinityTerm; thenode(s) with the highest sum are the most preferred. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--affinity--pod_anti_affinity--preferred_during_scheduling_ignored_during_execution))
-- `required_during_scheduling_ignored_during_execution` (Attributes List) If the anti-affinity requirements specified by this field are not met atscheduling time, the pod will not be scheduled onto the node.If the anti-affinity requirements specified by this field cease to be metat some point during pod execution (e.g. due to a pod label update), thesystem may or may not try to eventually evict the pod from its node.When there are multiple elements, the lists of nodes corresponding to eachpodAffinityTerm are intersected, i.e. all terms must be satisfied. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--affinity--pod_anti_affinity--required_during_scheduling_ignored_during_execution))
-
-
-### Nested Schema for `spec.component_defs.pod_spec.affinity.pod_anti_affinity.preferred_during_scheduling_ignored_during_execution`
-
-Required:
-
-- `pod_affinity_term` (Attributes) Required. A pod affinity term, associated with the corresponding weight. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--affinity--pod_anti_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term))
-- `weight` (Number) weight associated with matching the corresponding podAffinityTerm,in the range 1-100.
-
-
-### Nested Schema for `spec.component_defs.pod_spec.affinity.pod_anti_affinity.preferred_during_scheduling_ignored_during_execution.pod_affinity_term`
-
-Required:
-
-- `topology_key` (String) This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matchingthe labelSelector in the specified namespaces, where co-located is defined as running on a nodewhose value of the label with key topologyKey matches that of any node on which any of theselected pods is running.Empty topologyKey is not allowed.
-
-Optional:
-
-- `label_selector` (Attributes) A label query over a set of resources, in this case pods. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--affinity--pod_anti_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--label_selector))
-- `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--affinity--pod_anti_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--namespace_selector))
-- `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.
-
-
-### Nested Schema for `spec.component_defs.pod_spec.affinity.pod_anti_affinity.preferred_during_scheduling_ignored_during_execution.pod_affinity_term.label_selector`
-
-Optional:
-
-- `match_expressions` (Attributes List) matchExpressions is a list of label selector requirements. The requirements are ANDed. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--affinity--pod_anti_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--label_selector--match_expressions))
-- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.
-
-
-### Nested Schema for `spec.component_defs.pod_spec.affinity.pod_anti_affinity.preferred_during_scheduling_ignored_during_execution.pod_affinity_term.label_selector.match_expressions`
-
-Required:
-
-- `key` (String) key is the label key that the selector applies to.
-- `operator` (String) operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.
-
-Optional:
-
-- `values` (List of String) values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.
-
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.affinity.pod_anti_affinity.preferred_during_scheduling_ignored_during_execution.pod_affinity_term.namespace_selector`
-
-Optional:
-
-- `match_expressions` (Attributes List) matchExpressions is a list of label selector requirements. The requirements are ANDed. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--affinity--pod_anti_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--namespace_selector--match_expressions))
-- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.
-
-
-### Nested Schema for `spec.component_defs.pod_spec.affinity.pod_anti_affinity.preferred_during_scheduling_ignored_during_execution.pod_affinity_term.namespace_selector.match_expressions`
-
-Required:
-
-- `key` (String) key is the label key that the selector applies to.
-- `operator` (String) operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.
-
-Optional:
-
-- `values` (List of String) values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.
-
-
-
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.affinity.pod_anti_affinity.required_during_scheduling_ignored_during_execution`
-
-Required:
-
-- `topology_key` (String) This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matchingthe labelSelector in the specified namespaces, where co-located is defined as running on a nodewhose value of the label with key topologyKey matches that of any node on which any of theselected pods is running.Empty topologyKey is not allowed.
-
-Optional:
-
-- `label_selector` (Attributes) A label query over a set of resources, in this case pods. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--affinity--pod_anti_affinity--required_during_scheduling_ignored_during_execution--label_selector))
-- `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--affinity--pod_anti_affinity--required_during_scheduling_ignored_during_execution--namespace_selector))
-- `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.
-
-
-### Nested Schema for `spec.component_defs.pod_spec.affinity.pod_anti_affinity.required_during_scheduling_ignored_during_execution.label_selector`
-
-Optional:
-
-- `match_expressions` (Attributes List) matchExpressions is a list of label selector requirements. The requirements are ANDed. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--affinity--pod_anti_affinity--required_during_scheduling_ignored_during_execution--label_selector--match_expressions))
-- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.
-
-
-### Nested Schema for `spec.component_defs.pod_spec.affinity.pod_anti_affinity.required_during_scheduling_ignored_during_execution.label_selector.match_expressions`
-
-Required:
-
-- `key` (String) key is the label key that the selector applies to.
-- `operator` (String) operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.
-
-Optional:
-
-- `values` (List of String) values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.
-
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.affinity.pod_anti_affinity.required_during_scheduling_ignored_during_execution.namespace_selector`
-
-Optional:
-
-- `match_expressions` (Attributes List) matchExpressions is a list of label selector requirements. The requirements are ANDed. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--affinity--pod_anti_affinity--required_during_scheduling_ignored_during_execution--namespace_selector--match_expressions))
-- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.
-
-
-### Nested Schema for `spec.component_defs.pod_spec.affinity.pod_anti_affinity.required_during_scheduling_ignored_during_execution.namespace_selector.match_expressions`
-
-Required:
-
-- `key` (String) key is the label key that the selector applies to.
-- `operator` (String) operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.
-
-Optional:
-
-- `values` (List of String) values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.
-
-
-
-
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.dns_config`
-
-Optional:
-
-- `nameservers` (List of String) A list of DNS name server IP addresses.This will be appended to the base nameservers generated from DNSPolicy.Duplicated nameservers will be removed.
-- `options` (Attributes List) A list of DNS resolver options.This will be merged with the base options generated from DNSPolicy.Duplicated entries will be removed. Resolution options given in Optionswill override those that appear in the base DNSPolicy. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--dns_config--options))
-- `searches` (List of String) A list of DNS search domains for host-name lookup.This will be appended to the base search paths generated from DNSPolicy.Duplicated search paths will be removed.
-
-
-### Nested Schema for `spec.component_defs.pod_spec.dns_config.options`
-
-Optional:
-
-- `name` (String) Required.
-- `value` (String)
-
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.ephemeral_containers`
-
-Required:
-
-- `name` (String) Name of the ephemeral container specified as a DNS_LABEL.This name must be unique among all containers, init containers and ephemeral containers.
-
-Optional:
-
-- `args` (List of String) Arguments to the entrypoint.The image's CMD is used if this is not provided.Variable references $(VAR_NAME) are expanded using the container's environment. If a variablecannot be resolved, the reference in the input string will be unchanged. Double $$ are reducedto a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. '$$(VAR_NAME)' willproduce the string literal '$(VAR_NAME)'. Escaped references will never be expanded, regardlessof whether the variable exists or not. Cannot be updated.More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
-- `command` (List of String) Entrypoint array. Not executed within a shell.The image's ENTRYPOINT is used if this is not provided.Variable references $(VAR_NAME) are expanded using the container's environment. If a variablecannot be resolved, the reference in the input string will be unchanged. Double $$ are reducedto a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. '$$(VAR_NAME)' willproduce the string literal '$(VAR_NAME)'. Escaped references will never be expanded, regardlessof whether the variable exists or not. Cannot be updated.More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
-- `env` (Attributes List) List of environment variables to set in the container.Cannot be updated. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--ephemeral_containers--env))
-- `env_from` (Attributes List) List of sources to populate environment variables in the container.The keys defined within a source must be a C_IDENTIFIER. All invalid keyswill be reported as an event when the container is starting. When a key exists in multiplesources, the value associated with the last source will take precedence.Values defined by an Env with a duplicate key will take precedence.Cannot be updated. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--ephemeral_containers--env_from))
-- `image` (String) Container image name.More info: https://kubernetes.io/docs/concepts/containers/images
-- `image_pull_policy` (String) Image pull policy.One of Always, Never, IfNotPresent.Defaults to Always if :latest tag is specified, or IfNotPresent otherwise.Cannot be updated.More info: https://kubernetes.io/docs/concepts/containers/images#updating-images
-- `lifecycle` (Attributes) Lifecycle is not allowed for ephemeral containers. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--ephemeral_containers--lifecycle))
-- `liveness_probe` (Attributes) Probes are not allowed for ephemeral containers. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--ephemeral_containers--liveness_probe))
-- `ports` (Attributes List) Ports are not allowed for ephemeral containers. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--ephemeral_containers--ports))
-- `readiness_probe` (Attributes) Probes are not allowed for ephemeral containers. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--ephemeral_containers--readiness_probe))
-- `resize_policy` (Attributes List) Resources resize policy for the container. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--ephemeral_containers--resize_policy))
-- `resources` (Attributes) Resources are not allowed for ephemeral containers. Ephemeral containers use spare resourcesalready allocated to the pod. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--ephemeral_containers--resources))
-- `restart_policy` (String) Restart policy for the container to manage the restart behavior of eachcontainer within a pod.This may only be set for init containers. You cannot set this field onephemeral containers.
-- `security_context` (Attributes) Optional: SecurityContext defines the security options the ephemeral container should be run with.If set, the fields of SecurityContext override the equivalent fields of PodSecurityContext. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--ephemeral_containers--security_context))
-- `startup_probe` (Attributes) Probes are not allowed for ephemeral containers. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--ephemeral_containers--startup_probe))
-- `stdin` (Boolean) Whether this container should allocate a buffer for stdin in the container runtime. If thisis not set, reads from stdin in the container will always result in EOF.Default is false.
-- `stdin_once` (Boolean) Whether the container runtime should close the stdin channel after it has been opened bya single attach. When stdin is true the stdin stream will remain open across multiple attachsessions. If stdinOnce is set to true, stdin is opened on container start, is empty until thefirst client attaches to stdin, and then remains open and accepts data until the client disconnects,at which time stdin is closed and remains closed until the container is restarted. If thisflag is false, a container processes that reads from stdin will never receive an EOF.Default is false
-- `target_container_name` (String) If set, the name of the container from PodSpec that this ephemeral container targets.The ephemeral container will be run in the namespaces (IPC, PID, etc) of this container.If not set then the ephemeral container uses the namespaces configured in the Pod spec.The container runtime must implement support for this feature. If the runtime does notsupport namespace targeting then the result of setting this field is undefined.
-- `termination_message_path` (String) Optional: Path at which the file to which the container's termination messagewill be written is mounted into the container's filesystem.Message written is intended to be brief final status, such as an assertion failure message.Will be truncated by the node if greater than 4096 bytes. The total message length acrossall containers will be limited to 12kb.Defaults to /dev/termination-log.Cannot be updated.
-- `termination_message_policy` (String) Indicate how the termination message should be populated. File will use the contents ofterminationMessagePath to populate the container status message on both success and failure.FallbackToLogsOnError will use the last chunk of container log output if the terminationmessage file is empty and the container exited with an error.The log output is limited to 2048 bytes or 80 lines, whichever is smaller.Defaults to File.Cannot be updated.
-- `tty` (Boolean) Whether this container should allocate a TTY for itself, also requires 'stdin' to be true.Default is false.
-- `volume_devices` (Attributes List) volumeDevices is the list of block devices to be used by the container. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--ephemeral_containers--volume_devices))
-- `volume_mounts` (Attributes List) Pod volumes to mount into the container's filesystem. Subpath mounts are not allowed for ephemeral containers.Cannot be updated. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--ephemeral_containers--volume_mounts))
-- `working_dir` (String) Container's working directory.If not specified, the container runtime's default will be used, whichmight be configured in the container image.Cannot be updated.
-
-
-### Nested Schema for `spec.component_defs.pod_spec.ephemeral_containers.env`
-
-Required:
-
-- `name` (String) Name of the environment variable. Must be a C_IDENTIFIER.
-
-Optional:
-
-- `value` (String) Variable references $(VAR_NAME) are expandedusing the previously defined environment variables in the container andany service environment variables. If a variable cannot be resolved,the reference in the input string will be unchanged. Double $$ are reducedto a single $, which allows for escaping the $(VAR_NAME) syntax: i.e.'$$(VAR_NAME)' will produce the string literal '$(VAR_NAME)'.Escaped references will never be expanded, regardless of whether the variableexists or not.Defaults to ''.
-- `value_from` (Attributes) Source for the environment variable's value. Cannot be used if value is not empty. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--ephemeral_containers--env--value_from))
-
-
-### Nested Schema for `spec.component_defs.pod_spec.ephemeral_containers.env.value_from`
-
-Optional:
-
-- `config_map_key_ref` (Attributes) Selects a key of a ConfigMap. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--ephemeral_containers--env--value_from--config_map_key_ref))
-- `field_ref` (Attributes) Selects a field of the pod: supports metadata.name, metadata.namespace, 'metadata.labels['']', 'metadata.annotations['']',spec.nodeName, spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--ephemeral_containers--env--value_from--field_ref))
-- `resource_field_ref` (Attributes) Selects a resource of the container: only resources limits and requests(limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu, requests.memory and requests.ephemeral-storage) are currently supported. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--ephemeral_containers--env--value_from--resource_field_ref))
-- `secret_key_ref` (Attributes) Selects a key of a secret in the pod's namespace (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--ephemeral_containers--env--value_from--secret_key_ref))
-
-
-### Nested Schema for `spec.component_defs.pod_spec.ephemeral_containers.env.value_from.config_map_key_ref`
-
-Required:
-
-- `key` (String) The key to select.
-
-Optional:
-
-- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
-- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.ephemeral_containers.env.value_from.field_ref`
-
-Required:
-
-- `field_path` (String) Path of the field to select in the specified API version.
-
-Optional:
-
-- `api_version` (String) Version of the schema the FieldPath is written in terms of, defaults to 'v1'.
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.ephemeral_containers.env.value_from.resource_field_ref`
-
-Required:
-
-- `resource` (String) Required: resource to select
-
-Optional:
-
-- `container_name` (String) Container name: required for volumes, optional for env vars
-- `divisor` (String) Specifies the output format of the exposed resources, defaults to '1'
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.ephemeral_containers.env.value_from.secret_key_ref`
-
-Required:
-
-- `key` (String) The key of the secret to select from. Must be a valid secret key.
-
-Optional:
-
-- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
-- `optional` (Boolean) Specify whether the Secret or its key must be defined
-
-
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.ephemeral_containers.env_from`
-
-Optional:
-
-- `config_map_ref` (Attributes) The ConfigMap to select from (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--ephemeral_containers--env_from--config_map_ref))
-- `prefix` (String) An optional identifier to prepend to each key in the ConfigMap. Must be a C_IDENTIFIER.
-- `secret_ref` (Attributes) The Secret to select from (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--ephemeral_containers--env_from--secret_ref))
-
-
-### Nested Schema for `spec.component_defs.pod_spec.ephemeral_containers.env_from.config_map_ref`
-
-Optional:
-
-- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
-- `optional` (Boolean) Specify whether the ConfigMap must be defined
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.ephemeral_containers.env_from.secret_ref`
-
-Optional:
-
-- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
-- `optional` (Boolean) Specify whether the Secret must be defined
-
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.ephemeral_containers.lifecycle`
-
-Optional:
-
-- `post_start` (Attributes) PostStart is called immediately after a container is created. If the handler fails,the container is terminated and restarted according to its restart policy.Other management of the container blocks until the hook completes.More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--ephemeral_containers--lifecycle--post_start))
-- `pre_stop` (Attributes) PreStop is called immediately before a container is terminated due to anAPI request or management event such as liveness/startup probe failure,preemption, resource contention, etc. The handler is not called if thecontainer crashes or exits. The Pod's termination grace period countdown begins before thePreStop hook is executed. Regardless of the outcome of the handler, thecontainer will eventually terminate within the Pod's termination graceperiod (unless delayed by finalizers). Other management of the container blocks until the hook completesor until the termination grace period is reached.More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--ephemeral_containers--lifecycle--pre_stop))
-
-
-### Nested Schema for `spec.component_defs.pod_spec.ephemeral_containers.lifecycle.post_start`
-
-Optional:
-
-- `exec` (Attributes) Exec specifies the action to take. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--ephemeral_containers--lifecycle--post_start--exec))
-- `http_get` (Attributes) HTTPGet specifies the http request to perform. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--ephemeral_containers--lifecycle--post_start--http_get))
-- `tcp_socket` (Attributes) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and keptfor the backward compatibility. There are no validation of this field andlifecycle hooks will fail in runtime when tcp handler is specified. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--ephemeral_containers--lifecycle--post_start--tcp_socket))
-
-
-### Nested Schema for `spec.component_defs.pod_spec.ephemeral_containers.lifecycle.post_start.exec`
-
-Optional:
-
-- `command` (List of String) Command is the command line to execute inside the container, the working directory for thecommand is root ('/') in the container's filesystem. The command is simply exec'd, it isnot run inside a shell, so traditional shell instructions ('|', etc) won't work. To usea shell, you need to explicitly call out to that shell.Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.ephemeral_containers.lifecycle.post_start.http_get`
-
-Required:
-
-- `port` (String) Name or number of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
-
-Optional:
-
-- `host` (String) Host name to connect to, defaults to the pod IP. You probably want to set'Host' in httpHeaders instead.
-- `http_headers` (Attributes List) Custom headers to set in the request. HTTP allows repeated headers. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--ephemeral_containers--lifecycle--post_start--http_get--http_headers))
-- `path` (String) Path to access on the HTTP server.
-- `scheme` (String) Scheme to use for connecting to the host.Defaults to HTTP.
-
-
-### Nested Schema for `spec.component_defs.pod_spec.ephemeral_containers.lifecycle.post_start.http_get.http_headers`
-
-Required:
-
-- `name` (String) The header field name.This will be canonicalized upon output, so case-variant names will be understood as the same header.
-- `value` (String) The header field value
-
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.ephemeral_containers.lifecycle.post_start.tcp_socket`
-
-Required:
-
-- `port` (String) Number or name of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
-
-Optional:
-
-- `host` (String) Optional: Host name to connect to, defaults to the pod IP.
-
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.ephemeral_containers.lifecycle.pre_stop`
-
-Optional:
-
-- `exec` (Attributes) Exec specifies the action to take. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--ephemeral_containers--lifecycle--pre_stop--exec))
-- `http_get` (Attributes) HTTPGet specifies the http request to perform. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--ephemeral_containers--lifecycle--pre_stop--http_get))
-- `tcp_socket` (Attributes) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and keptfor the backward compatibility. There are no validation of this field andlifecycle hooks will fail in runtime when tcp handler is specified. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--ephemeral_containers--lifecycle--pre_stop--tcp_socket))
-
-
-### Nested Schema for `spec.component_defs.pod_spec.ephemeral_containers.lifecycle.pre_stop.exec`
-
-Optional:
-
-- `command` (List of String) Command is the command line to execute inside the container, the working directory for thecommand is root ('/') in the container's filesystem. The command is simply exec'd, it isnot run inside a shell, so traditional shell instructions ('|', etc) won't work. To usea shell, you need to explicitly call out to that shell.Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.ephemeral_containers.lifecycle.pre_stop.http_get`
-
-Required:
-
-- `port` (String) Name or number of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
-
-Optional:
-
-- `host` (String) Host name to connect to, defaults to the pod IP. You probably want to set'Host' in httpHeaders instead.
-- `http_headers` (Attributes List) Custom headers to set in the request. HTTP allows repeated headers. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--ephemeral_containers--lifecycle--pre_stop--http_get--http_headers))
-- `path` (String) Path to access on the HTTP server.
-- `scheme` (String) Scheme to use for connecting to the host.Defaults to HTTP.
-
-
-### Nested Schema for `spec.component_defs.pod_spec.ephemeral_containers.lifecycle.pre_stop.http_get.http_headers`
-
-Required:
-
-- `name` (String) The header field name.This will be canonicalized upon output, so case-variant names will be understood as the same header.
-- `value` (String) The header field value
-
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.ephemeral_containers.lifecycle.pre_stop.tcp_socket`
-
-Required:
-
-- `port` (String) Number or name of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
-
-Optional:
-
-- `host` (String) Optional: Host name to connect to, defaults to the pod IP.
-
-
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.ephemeral_containers.liveness_probe`
-
-Optional:
-
-- `exec` (Attributes) Exec specifies the action to take. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--ephemeral_containers--liveness_probe--exec))
-- `failure_threshold` (Number) Minimum consecutive failures for the probe to be considered failed after having succeeded.Defaults to 3. Minimum value is 1.
-- `grpc` (Attributes) GRPC specifies an action involving a GRPC port. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--ephemeral_containers--liveness_probe--grpc))
-- `http_get` (Attributes) HTTPGet specifies the http request to perform. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--ephemeral_containers--liveness_probe--http_get))
-- `initial_delay_seconds` (Number) Number of seconds after the container has started before liveness probes are initiated.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-- `period_seconds` (Number) How often (in seconds) to perform the probe.Default to 10 seconds. Minimum value is 1.
-- `success_threshold` (Number) Minimum consecutive successes for the probe to be considered successful after having failed.Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
-- `tcp_socket` (Attributes) TCPSocket specifies an action involving a TCP port. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--ephemeral_containers--liveness_probe--tcp_socket))
-- `termination_grace_period_seconds` (Number) Optional duration in seconds the pod needs to terminate gracefully upon probe failure.The grace period is the duration in seconds after the processes running in the pod are senta termination signal and the time when the processes are forcibly halted with a kill signal.Set this value longer than the expected cleanup time for your process.If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, thisvalue overrides the value provided by the pod spec.Value must be non-negative integer. The value zero indicates stop immediately viathe kill signal (no opportunity to shut down).This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate.Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
-- `timeout_seconds` (Number) Number of seconds after which the probe times out.Defaults to 1 second. Minimum value is 1.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
-
-### Nested Schema for `spec.component_defs.pod_spec.ephemeral_containers.liveness_probe.exec`
-
-Optional:
-
-- `command` (List of String) Command is the command line to execute inside the container, the working directory for thecommand is root ('/') in the container's filesystem. The command is simply exec'd, it isnot run inside a shell, so traditional shell instructions ('|', etc) won't work. To usea shell, you need to explicitly call out to that shell.Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.ephemeral_containers.liveness_probe.grpc`
-
-Required:
-
-- `port` (Number) Port number of the gRPC service. Number must be in the range 1 to 65535.
-
-Optional:
-
-- `service` (String) Service is the name of the service to place in the gRPC HealthCheckRequest(see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).If this is not specified, the default behavior is defined by gRPC.
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.ephemeral_containers.liveness_probe.http_get`
-
-Required:
-
-- `port` (String) Name or number of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
-
-Optional:
-
-- `host` (String) Host name to connect to, defaults to the pod IP. You probably want to set'Host' in httpHeaders instead.
-- `http_headers` (Attributes List) Custom headers to set in the request. HTTP allows repeated headers. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--ephemeral_containers--liveness_probe--http_get--http_headers))
-- `path` (String) Path to access on the HTTP server.
-- `scheme` (String) Scheme to use for connecting to the host.Defaults to HTTP.
-
-
-### Nested Schema for `spec.component_defs.pod_spec.ephemeral_containers.liveness_probe.http_get.http_headers`
-
-Required:
-
-- `name` (String) The header field name.This will be canonicalized upon output, so case-variant names will be understood as the same header.
-- `value` (String) The header field value
-
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.ephemeral_containers.liveness_probe.tcp_socket`
-
-Required:
-
-- `port` (String) Number or name of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
-
-Optional:
-
-- `host` (String) Optional: Host name to connect to, defaults to the pod IP.
-
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.ephemeral_containers.ports`
-
-Required:
-
-- `container_port` (Number) Number of port to expose on the pod's IP address.This must be a valid port number, 0 < x < 65536.
-
-Optional:
-
-- `host_ip` (String) What host IP to bind the external port to.
-- `host_port` (Number) Number of port to expose on the host.If specified, this must be a valid port number, 0 < x < 65536.If HostNetwork is specified, this must match ContainerPort.Most containers do not need this.
-- `name` (String) If specified, this must be an IANA_SVC_NAME and unique within the pod. Eachnamed port in a pod must have a unique name. Name for the port that can bereferred to by services.
-- `protocol` (String) Protocol for port. Must be UDP, TCP, or SCTP.Defaults to 'TCP'.
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.ephemeral_containers.readiness_probe`
-
-Optional:
-
-- `exec` (Attributes) Exec specifies the action to take. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--ephemeral_containers--readiness_probe--exec))
-- `failure_threshold` (Number) Minimum consecutive failures for the probe to be considered failed after having succeeded.Defaults to 3. Minimum value is 1.
-- `grpc` (Attributes) GRPC specifies an action involving a GRPC port. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--ephemeral_containers--readiness_probe--grpc))
-- `http_get` (Attributes) HTTPGet specifies the http request to perform. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--ephemeral_containers--readiness_probe--http_get))
-- `initial_delay_seconds` (Number) Number of seconds after the container has started before liveness probes are initiated.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-- `period_seconds` (Number) How often (in seconds) to perform the probe.Default to 10 seconds. Minimum value is 1.
-- `success_threshold` (Number) Minimum consecutive successes for the probe to be considered successful after having failed.Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
-- `tcp_socket` (Attributes) TCPSocket specifies an action involving a TCP port. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--ephemeral_containers--readiness_probe--tcp_socket))
-- `termination_grace_period_seconds` (Number) Optional duration in seconds the pod needs to terminate gracefully upon probe failure.The grace period is the duration in seconds after the processes running in the pod are senta termination signal and the time when the processes are forcibly halted with a kill signal.Set this value longer than the expected cleanup time for your process.If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, thisvalue overrides the value provided by the pod spec.Value must be non-negative integer. The value zero indicates stop immediately viathe kill signal (no opportunity to shut down).This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate.Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
-- `timeout_seconds` (Number) Number of seconds after which the probe times out.Defaults to 1 second. Minimum value is 1.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
-
-### Nested Schema for `spec.component_defs.pod_spec.ephemeral_containers.readiness_probe.exec`
-
-Optional:
-
-- `command` (List of String) Command is the command line to execute inside the container, the working directory for thecommand is root ('/') in the container's filesystem. The command is simply exec'd, it isnot run inside a shell, so traditional shell instructions ('|', etc) won't work. To usea shell, you need to explicitly call out to that shell.Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.ephemeral_containers.readiness_probe.grpc`
-
-Required:
-
-- `port` (Number) Port number of the gRPC service. Number must be in the range 1 to 65535.
-
-Optional:
-
-- `service` (String) Service is the name of the service to place in the gRPC HealthCheckRequest(see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).If this is not specified, the default behavior is defined by gRPC.
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.ephemeral_containers.readiness_probe.http_get`
-
-Required:
-
-- `port` (String) Name or number of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
-
-Optional:
-
-- `host` (String) Host name to connect to, defaults to the pod IP. You probably want to set'Host' in httpHeaders instead.
-- `http_headers` (Attributes List) Custom headers to set in the request. HTTP allows repeated headers. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--ephemeral_containers--readiness_probe--http_get--http_headers))
-- `path` (String) Path to access on the HTTP server.
-- `scheme` (String) Scheme to use for connecting to the host.Defaults to HTTP.
-
-
-### Nested Schema for `spec.component_defs.pod_spec.ephemeral_containers.readiness_probe.http_get.http_headers`
-
-Required:
-
-- `name` (String) The header field name.This will be canonicalized upon output, so case-variant names will be understood as the same header.
-- `value` (String) The header field value
-
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.ephemeral_containers.readiness_probe.tcp_socket`
-
-Required:
-
-- `port` (String) Number or name of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
-
-Optional:
-
-- `host` (String) Optional: Host name to connect to, defaults to the pod IP.
-
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.ephemeral_containers.resize_policy`
-
-Required:
-
-- `resource_name` (String) Name of the resource to which this resource resize policy applies.Supported values: cpu, memory.
-- `restart_policy` (String) Restart policy to apply when specified resource is resized.If not specified, it defaults to NotRequired.
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.ephemeral_containers.resources`
-
-Optional:
-
-- `claims` (Attributes List) Claims lists the names of resources, defined in spec.resourceClaims,that are used by this container.This is an alpha field and requires enabling theDynamicResourceAllocation feature gate.This field is immutable. It can only be set for containers. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--ephemeral_containers--resources--claims))
-- `limits` (Map of String) Limits describes the maximum amount of compute resources allowed.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-- `requests` (Map of String) Requests describes the minimum amount of compute resources required.If Requests is omitted for a container, it defaults to Limits if that is explicitly specified,otherwise to an implementation-defined value. Requests cannot exceed Limits.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-
-
-### Nested Schema for `spec.component_defs.pod_spec.ephemeral_containers.resources.claims`
-
-Required:
-
-- `name` (String) Name must match the name of one entry in pod.spec.resourceClaims ofthe Pod where this field is used. It makes that resource availableinside a container.
-
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.ephemeral_containers.security_context`
-
-Optional:
-
-- `allow_privilege_escalation` (Boolean) AllowPrivilegeEscalation controls whether a process can gain moreprivileges than its parent process. This bool directly controls ifthe no_new_privs flag will be set on the container process.AllowPrivilegeEscalation is true always when the container is:1) run as Privileged2) has CAP_SYS_ADMINNote that this field cannot be set when spec.os.name is windows.
-- `capabilities` (Attributes) The capabilities to add/drop when running containers.Defaults to the default set of capabilities granted by the container runtime.Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--ephemeral_containers--security_context--capabilities))
-- `privileged` (Boolean) Run container in privileged mode.Processes in privileged containers are essentially equivalent to root on the host.Defaults to false.Note that this field cannot be set when spec.os.name is windows.
-- `proc_mount` (String) procMount denotes the type of proc mount to use for the containers.The default is DefaultProcMount which uses the container runtime defaults forreadonly paths and masked paths.This requires the ProcMountType feature flag to be enabled.Note that this field cannot be set when spec.os.name is windows.
-- `read_only_root_filesystem` (Boolean) Whether this container has a read-only root filesystem.Default is false.Note that this field cannot be set when spec.os.name is windows.
-- `run_as_group` (Number) The GID to run the entrypoint of the container process.Uses runtime default if unset.May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.Note that this field cannot be set when spec.os.name is windows.
-- `run_as_non_root` (Boolean) Indicates that the container must run as a non-root user.If true, the Kubelet will validate the image at runtime to ensure that itdoes not run as UID 0 (root) and fail to start the container if it does.If unset or false, no such validation will be performed.May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.
-- `run_as_user` (Number) The UID to run the entrypoint of the container process.Defaults to user specified in image metadata if unspecified.May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.Note that this field cannot be set when spec.os.name is windows.
-- `se_linux_options` (Attributes) The SELinux context to be applied to the container.If unspecified, the container runtime will allocate a random SELinux context for eachcontainer. May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--ephemeral_containers--security_context--se_linux_options))
-- `seccomp_profile` (Attributes) The seccomp options to use by this container. If seccomp options areprovided at both the pod & container level, the container optionsoverride the pod options.Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--ephemeral_containers--security_context--seccomp_profile))
-- `windows_options` (Attributes) The Windows specific settings applied to all containers.If unspecified, the options from the PodSecurityContext will be used.If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.Note that this field cannot be set when spec.os.name is linux. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--ephemeral_containers--security_context--windows_options))
-
-
-### Nested Schema for `spec.component_defs.pod_spec.ephemeral_containers.security_context.capabilities`
-
-Optional:
-
-- `add` (List of String) Added capabilities
-- `drop` (List of String) Removed capabilities
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.ephemeral_containers.security_context.se_linux_options`
-
-Optional:
-
-- `level` (String) Level is SELinux level label that applies to the container.
-- `role` (String) Role is a SELinux role label that applies to the container.
-- `type` (String) Type is a SELinux type label that applies to the container.
-- `user` (String) User is a SELinux user label that applies to the container.
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.ephemeral_containers.security_context.seccomp_profile`
-
-Required:
-
-- `type` (String) type indicates which kind of seccomp profile will be applied.Valid options are:Localhost - a profile defined in a file on the node should be used.RuntimeDefault - the container runtime default profile should be used.Unconfined - no profile should be applied.
-
-Optional:
-
-- `localhost_profile` (String) localhostProfile indicates a profile defined in a file on the node should be used.The profile must be preconfigured on the node to work.Must be a descending path, relative to the kubelet's configured seccomp profile location.Must be set if type is 'Localhost'. Must NOT be set for any other type.
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.ephemeral_containers.security_context.windows_options`
-
-Optional:
-
-- `gmsa_credential_spec` (String) GMSACredentialSpec is where the GMSA admission webhook(https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of theGMSA credential spec named by the GMSACredentialSpecName field.
-- `gmsa_credential_spec_name` (String) GMSACredentialSpecName is the name of the GMSA credential spec to use.
-- `host_process` (Boolean) HostProcess determines if a container should be run as a 'Host Process' container.All of a Pod's containers must have the same effective HostProcess value(it is not allowed to have a mix of HostProcess containers and non-HostProcess containers).In addition, if HostProcess is true then HostNetwork must also be set to true.
-- `run_as_user_name` (String) The UserName in Windows to run the entrypoint of the container process.Defaults to the user specified in image metadata if unspecified.May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.
-
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.ephemeral_containers.startup_probe`
-
-Optional:
-
-- `exec` (Attributes) Exec specifies the action to take. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--ephemeral_containers--startup_probe--exec))
-- `failure_threshold` (Number) Minimum consecutive failures for the probe to be considered failed after having succeeded.Defaults to 3. Minimum value is 1.
-- `grpc` (Attributes) GRPC specifies an action involving a GRPC port. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--ephemeral_containers--startup_probe--grpc))
-- `http_get` (Attributes) HTTPGet specifies the http request to perform. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--ephemeral_containers--startup_probe--http_get))
-- `initial_delay_seconds` (Number) Number of seconds after the container has started before liveness probes are initiated.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-- `period_seconds` (Number) How often (in seconds) to perform the probe.Default to 10 seconds. Minimum value is 1.
-- `success_threshold` (Number) Minimum consecutive successes for the probe to be considered successful after having failed.Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
-- `tcp_socket` (Attributes) TCPSocket specifies an action involving a TCP port. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--ephemeral_containers--startup_probe--tcp_socket))
-- `termination_grace_period_seconds` (Number) Optional duration in seconds the pod needs to terminate gracefully upon probe failure.The grace period is the duration in seconds after the processes running in the pod are senta termination signal and the time when the processes are forcibly halted with a kill signal.Set this value longer than the expected cleanup time for your process.If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, thisvalue overrides the value provided by the pod spec.Value must be non-negative integer. The value zero indicates stop immediately viathe kill signal (no opportunity to shut down).This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate.Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
-- `timeout_seconds` (Number) Number of seconds after which the probe times out.Defaults to 1 second. Minimum value is 1.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
-
-### Nested Schema for `spec.component_defs.pod_spec.ephemeral_containers.startup_probe.exec`
-
-Optional:
-
-- `command` (List of String) Command is the command line to execute inside the container, the working directory for thecommand is root ('/') in the container's filesystem. The command is simply exec'd, it isnot run inside a shell, so traditional shell instructions ('|', etc) won't work. To usea shell, you need to explicitly call out to that shell.Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.ephemeral_containers.startup_probe.grpc`
-
-Required:
-
-- `port` (Number) Port number of the gRPC service. Number must be in the range 1 to 65535.
-
-Optional:
-
-- `service` (String) Service is the name of the service to place in the gRPC HealthCheckRequest(see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).If this is not specified, the default behavior is defined by gRPC.
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.ephemeral_containers.startup_probe.http_get`
-
-Required:
-
-- `port` (String) Name or number of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
-
-Optional:
-
-- `host` (String) Host name to connect to, defaults to the pod IP. You probably want to set'Host' in httpHeaders instead.
-- `http_headers` (Attributes List) Custom headers to set in the request. HTTP allows repeated headers. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--ephemeral_containers--startup_probe--http_get--http_headers))
-- `path` (String) Path to access on the HTTP server.
-- `scheme` (String) Scheme to use for connecting to the host.Defaults to HTTP.
-
-
-### Nested Schema for `spec.component_defs.pod_spec.ephemeral_containers.startup_probe.http_get.http_headers`
-
-Required:
-
-- `name` (String) The header field name.This will be canonicalized upon output, so case-variant names will be understood as the same header.
-- `value` (String) The header field value
-
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.ephemeral_containers.startup_probe.tcp_socket`
-
-Required:
-
-- `port` (String) Number or name of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
-
-Optional:
-
-- `host` (String) Optional: Host name to connect to, defaults to the pod IP.
-
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.ephemeral_containers.volume_devices`
-
-Required:
-
-- `device_path` (String) devicePath is the path inside of the container that the device will be mapped to.
-- `name` (String) name must match the name of a persistentVolumeClaim in the pod
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.ephemeral_containers.volume_mounts`
-
-Required:
-
-- `mount_path` (String) Path within the container at which the volume should be mounted. Mustnot contain ':'.
-- `name` (String) This must match the Name of a Volume.
-
-Optional:
-
-- `mount_propagation` (String) mountPropagation determines how mounts are propagated from the hostto container and the other way around.When not set, MountPropagationNone is used.This field is beta in 1.10.
-- `read_only` (Boolean) Mounted read-only if true, read-write otherwise (false or unspecified).Defaults to false.
-- `sub_path` (String) Path within the volume from which the container's volume should be mounted.Defaults to '' (volume's root).
-- `sub_path_expr` (String) Expanded path within the volume from which the container's volume should be mounted.Behaves similarly to SubPath but environment variable references $(VAR_NAME) are expanded using the container's environment.Defaults to '' (volume's root).SubPathExpr and SubPath are mutually exclusive.
-
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.host_aliases`
-
-Optional:
-
-- `hostnames` (List of String) Hostnames for the above IP address.
-- `ip` (String) IP address of the host file entry.
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.image_pull_secrets`
-
-Optional:
-
-- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.init_containers`
-
-Required:
-
-- `name` (String) Name of the container specified as a DNS_LABEL.Each container in a pod must have a unique name (DNS_LABEL).Cannot be updated.
-
-Optional:
-
-- `args` (List of String) Arguments to the entrypoint.The container image's CMD is used if this is not provided.Variable references $(VAR_NAME) are expanded using the container's environment. If a variablecannot be resolved, the reference in the input string will be unchanged. Double $$ are reducedto a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. '$$(VAR_NAME)' willproduce the string literal '$(VAR_NAME)'. Escaped references will never be expanded, regardlessof whether the variable exists or not. Cannot be updated.More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
-- `command` (List of String) Entrypoint array. Not executed within a shell.The container image's ENTRYPOINT is used if this is not provided.Variable references $(VAR_NAME) are expanded using the container's environment. If a variablecannot be resolved, the reference in the input string will be unchanged. Double $$ are reducedto a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. '$$(VAR_NAME)' willproduce the string literal '$(VAR_NAME)'. Escaped references will never be expanded, regardlessof whether the variable exists or not. Cannot be updated.More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
-- `env` (Attributes List) List of environment variables to set in the container.Cannot be updated. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--init_containers--env))
-- `env_from` (Attributes List) List of sources to populate environment variables in the container.The keys defined within a source must be a C_IDENTIFIER. All invalid keyswill be reported as an event when the container is starting. When a key exists in multiplesources, the value associated with the last source will take precedence.Values defined by an Env with a duplicate key will take precedence.Cannot be updated. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--init_containers--env_from))
-- `image` (String) Container image name.More info: https://kubernetes.io/docs/concepts/containers/imagesThis field is optional to allow higher level config management to default or overridecontainer images in workload controllers like Deployments and StatefulSets.
-- `image_pull_policy` (String) Image pull policy.One of Always, Never, IfNotPresent.Defaults to Always if :latest tag is specified, or IfNotPresent otherwise.Cannot be updated.More info: https://kubernetes.io/docs/concepts/containers/images#updating-images
-- `lifecycle` (Attributes) Actions that the management system should take in response to container lifecycle events.Cannot be updated. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--init_containers--lifecycle))
-- `liveness_probe` (Attributes) Periodic probe of container liveness.Container will be restarted if the probe fails.Cannot be updated.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--init_containers--liveness_probe))
-- `ports` (Attributes List) List of ports to expose from the container. Not specifying a port hereDOES NOT prevent that port from being exposed. Any port which islistening on the default '0.0.0.0' address inside a container will beaccessible from the network.Modifying this array with strategic merge patch may corrupt the data.For more information See https://github.com/kubernetes/kubernetes/issues/108255.Cannot be updated. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--init_containers--ports))
-- `readiness_probe` (Attributes) Periodic probe of container service readiness.Container will be removed from service endpoints if the probe fails.Cannot be updated.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--init_containers--readiness_probe))
-- `resize_policy` (Attributes List) Resources resize policy for the container. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--init_containers--resize_policy))
-- `resources` (Attributes) Compute Resources required by this container.Cannot be updated.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/ (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--init_containers--resources))
-- `restart_policy` (String) RestartPolicy defines the restart behavior of individual containers in a pod.This field may only be set for init containers, and the only allowed value is 'Always'.For non-init containers or when this field is not specified,the restart behavior is defined by the Pod's restart policy and the container type.Setting the RestartPolicy as 'Always' for the init container will have the following effect:this init container will be continually restarted onexit until all regular containers have terminated. Once all regularcontainers have completed, all init containers with restartPolicy 'Always'will be shut down. This lifecycle differs from normal init containers andis often referred to as a 'sidecar' container. Although this initcontainer still starts in the init container sequence, it does not waitfor the container to complete before proceeding to the next initcontainer. Instead, the next init container starts immediately after thisinit container is started, or after any startupProbe has successfullycompleted.
-- `security_context` (Attributes) SecurityContext defines the security options the container should be run with.If set, the fields of SecurityContext override the equivalent fields of PodSecurityContext.More info: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--init_containers--security_context))
-- `startup_probe` (Attributes) StartupProbe indicates that the Pod has successfully initialized.If specified, no other probes are executed until this completes successfully.If this probe fails, the Pod will be restarted, just as if the livenessProbe failed.This can be used to provide different probe parameters at the beginning of a Pod's lifecycle,when it might take a long time to load data or warm a cache, than during steady-state operation.This cannot be updated.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--init_containers--startup_probe))
-- `stdin` (Boolean) Whether this container should allocate a buffer for stdin in the container runtime. If thisis not set, reads from stdin in the container will always result in EOF.Default is false.
-- `stdin_once` (Boolean) Whether the container runtime should close the stdin channel after it has been opened bya single attach. When stdin is true the stdin stream will remain open across multiple attachsessions. If stdinOnce is set to true, stdin is opened on container start, is empty until thefirst client attaches to stdin, and then remains open and accepts data until the client disconnects,at which time stdin is closed and remains closed until the container is restarted. If thisflag is false, a container processes that reads from stdin will never receive an EOF.Default is false
-- `termination_message_path` (String) Optional: Path at which the file to which the container's termination messagewill be written is mounted into the container's filesystem.Message written is intended to be brief final status, such as an assertion failure message.Will be truncated by the node if greater than 4096 bytes. The total message length acrossall containers will be limited to 12kb.Defaults to /dev/termination-log.Cannot be updated.
-- `termination_message_policy` (String) Indicate how the termination message should be populated. File will use the contents ofterminationMessagePath to populate the container status message on both success and failure.FallbackToLogsOnError will use the last chunk of container log output if the terminationmessage file is empty and the container exited with an error.The log output is limited to 2048 bytes or 80 lines, whichever is smaller.Defaults to File.Cannot be updated.
-- `tty` (Boolean) Whether this container should allocate a TTY for itself, also requires 'stdin' to be true.Default is false.
-- `volume_devices` (Attributes List) volumeDevices is the list of block devices to be used by the container. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--init_containers--volume_devices))
-- `volume_mounts` (Attributes List) Pod volumes to mount into the container's filesystem.Cannot be updated. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--init_containers--volume_mounts))
-- `working_dir` (String) Container's working directory.If not specified, the container runtime's default will be used, whichmight be configured in the container image.Cannot be updated.
-
-
-### Nested Schema for `spec.component_defs.pod_spec.init_containers.env`
-
-Required:
-
-- `name` (String) Name of the environment variable. Must be a C_IDENTIFIER.
-
-Optional:
-
-- `value` (String) Variable references $(VAR_NAME) are expandedusing the previously defined environment variables in the container andany service environment variables. If a variable cannot be resolved,the reference in the input string will be unchanged. Double $$ are reducedto a single $, which allows for escaping the $(VAR_NAME) syntax: i.e.'$$(VAR_NAME)' will produce the string literal '$(VAR_NAME)'.Escaped references will never be expanded, regardless of whether the variableexists or not.Defaults to ''.
-- `value_from` (Attributes) Source for the environment variable's value. Cannot be used if value is not empty. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--init_containers--env--value_from))
-
-
-### Nested Schema for `spec.component_defs.pod_spec.init_containers.env.value_from`
-
-Optional:
-
-- `config_map_key_ref` (Attributes) Selects a key of a ConfigMap. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--init_containers--env--value_from--config_map_key_ref))
-- `field_ref` (Attributes) Selects a field of the pod: supports metadata.name, metadata.namespace, 'metadata.labels['']', 'metadata.annotations['']',spec.nodeName, spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--init_containers--env--value_from--field_ref))
-- `resource_field_ref` (Attributes) Selects a resource of the container: only resources limits and requests(limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu, requests.memory and requests.ephemeral-storage) are currently supported. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--init_containers--env--value_from--resource_field_ref))
-- `secret_key_ref` (Attributes) Selects a key of a secret in the pod's namespace (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--init_containers--env--value_from--secret_key_ref))
-
-
-### Nested Schema for `spec.component_defs.pod_spec.init_containers.env.value_from.config_map_key_ref`
-
-Required:
-
-- `key` (String) The key to select.
-
-Optional:
-
-- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
-- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.init_containers.env.value_from.field_ref`
-
-Required:
-
-- `field_path` (String) Path of the field to select in the specified API version.
-
-Optional:
-
-- `api_version` (String) Version of the schema the FieldPath is written in terms of, defaults to 'v1'.
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.init_containers.env.value_from.resource_field_ref`
-
-Required:
-
-- `resource` (String) Required: resource to select
-
-Optional:
-
-- `container_name` (String) Container name: required for volumes, optional for env vars
-- `divisor` (String) Specifies the output format of the exposed resources, defaults to '1'
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.init_containers.env.value_from.secret_key_ref`
-
-Required:
-
-- `key` (String) The key of the secret to select from. Must be a valid secret key.
-
-Optional:
-
-- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
-- `optional` (Boolean) Specify whether the Secret or its key must be defined
-
-
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.init_containers.env_from`
-
-Optional:
-
-- `config_map_ref` (Attributes) The ConfigMap to select from (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--init_containers--env_from--config_map_ref))
-- `prefix` (String) An optional identifier to prepend to each key in the ConfigMap. Must be a C_IDENTIFIER.
-- `secret_ref` (Attributes) The Secret to select from (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--init_containers--env_from--secret_ref))
-
-
-### Nested Schema for `spec.component_defs.pod_spec.init_containers.env_from.config_map_ref`
-
-Optional:
-
-- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
-- `optional` (Boolean) Specify whether the ConfigMap must be defined
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.init_containers.env_from.secret_ref`
-
-Optional:
-
-- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
-- `optional` (Boolean) Specify whether the Secret must be defined
-
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.init_containers.lifecycle`
-
-Optional:
-
-- `post_start` (Attributes) PostStart is called immediately after a container is created. If the handler fails,the container is terminated and restarted according to its restart policy.Other management of the container blocks until the hook completes.More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--init_containers--lifecycle--post_start))
-- `pre_stop` (Attributes) PreStop is called immediately before a container is terminated due to anAPI request or management event such as liveness/startup probe failure,preemption, resource contention, etc. The handler is not called if thecontainer crashes or exits. The Pod's termination grace period countdown begins before thePreStop hook is executed. Regardless of the outcome of the handler, thecontainer will eventually terminate within the Pod's termination graceperiod (unless delayed by finalizers). Other management of the container blocks until the hook completesor until the termination grace period is reached.More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--init_containers--lifecycle--pre_stop))
-
-
-### Nested Schema for `spec.component_defs.pod_spec.init_containers.lifecycle.post_start`
-
-Optional:
-
-- `exec` (Attributes) Exec specifies the action to take. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--init_containers--lifecycle--post_start--exec))
-- `http_get` (Attributes) HTTPGet specifies the http request to perform. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--init_containers--lifecycle--post_start--http_get))
-- `tcp_socket` (Attributes) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and keptfor the backward compatibility. There are no validation of this field andlifecycle hooks will fail in runtime when tcp handler is specified. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--init_containers--lifecycle--post_start--tcp_socket))
-
-
-### Nested Schema for `spec.component_defs.pod_spec.init_containers.lifecycle.post_start.exec`
-
-Optional:
-
-- `command` (List of String) Command is the command line to execute inside the container, the working directory for thecommand is root ('/') in the container's filesystem. The command is simply exec'd, it isnot run inside a shell, so traditional shell instructions ('|', etc) won't work. To usea shell, you need to explicitly call out to that shell.Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.init_containers.lifecycle.post_start.http_get`
-
-Required:
-
-- `port` (String) Name or number of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
-
-Optional:
-
-- `host` (String) Host name to connect to, defaults to the pod IP. You probably want to set'Host' in httpHeaders instead.
-- `http_headers` (Attributes List) Custom headers to set in the request. HTTP allows repeated headers. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--init_containers--lifecycle--post_start--http_get--http_headers))
-- `path` (String) Path to access on the HTTP server.
-- `scheme` (String) Scheme to use for connecting to the host.Defaults to HTTP.
-
-
-### Nested Schema for `spec.component_defs.pod_spec.init_containers.lifecycle.post_start.http_get.http_headers`
-
-Required:
-
-- `name` (String) The header field name.This will be canonicalized upon output, so case-variant names will be understood as the same header.
-- `value` (String) The header field value
-
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.init_containers.lifecycle.post_start.tcp_socket`
-
-Required:
-
-- `port` (String) Number or name of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
-
-Optional:
-
-- `host` (String) Optional: Host name to connect to, defaults to the pod IP.
-
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.init_containers.lifecycle.pre_stop`
-
-Optional:
-
-- `exec` (Attributes) Exec specifies the action to take. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--init_containers--lifecycle--pre_stop--exec))
-- `http_get` (Attributes) HTTPGet specifies the http request to perform. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--init_containers--lifecycle--pre_stop--http_get))
-- `tcp_socket` (Attributes) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and keptfor the backward compatibility. There are no validation of this field andlifecycle hooks will fail in runtime when tcp handler is specified. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--init_containers--lifecycle--pre_stop--tcp_socket))
-
-
-### Nested Schema for `spec.component_defs.pod_spec.init_containers.lifecycle.pre_stop.exec`
-
-Optional:
-
-- `command` (List of String) Command is the command line to execute inside the container, the working directory for thecommand is root ('/') in the container's filesystem. The command is simply exec'd, it isnot run inside a shell, so traditional shell instructions ('|', etc) won't work. To usea shell, you need to explicitly call out to that shell.Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.init_containers.lifecycle.pre_stop.http_get`
-
-Required:
-
-- `port` (String) Name or number of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
-
-Optional:
-
-- `host` (String) Host name to connect to, defaults to the pod IP. You probably want to set'Host' in httpHeaders instead.
-- `http_headers` (Attributes List) Custom headers to set in the request. HTTP allows repeated headers. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--init_containers--lifecycle--pre_stop--http_get--http_headers))
-- `path` (String) Path to access on the HTTP server.
-- `scheme` (String) Scheme to use for connecting to the host.Defaults to HTTP.
-
-
-### Nested Schema for `spec.component_defs.pod_spec.init_containers.lifecycle.pre_stop.http_get.http_headers`
-
-Required:
-
-- `name` (String) The header field name.This will be canonicalized upon output, so case-variant names will be understood as the same header.
-- `value` (String) The header field value
-
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.init_containers.lifecycle.pre_stop.tcp_socket`
-
-Required:
-
-- `port` (String) Number or name of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
-
-Optional:
-
-- `host` (String) Optional: Host name to connect to, defaults to the pod IP.
-
-
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.init_containers.liveness_probe`
-
-Optional:
-
-- `exec` (Attributes) Exec specifies the action to take. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--init_containers--liveness_probe--exec))
-- `failure_threshold` (Number) Minimum consecutive failures for the probe to be considered failed after having succeeded.Defaults to 3. Minimum value is 1.
-- `grpc` (Attributes) GRPC specifies an action involving a GRPC port. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--init_containers--liveness_probe--grpc))
-- `http_get` (Attributes) HTTPGet specifies the http request to perform. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--init_containers--liveness_probe--http_get))
-- `initial_delay_seconds` (Number) Number of seconds after the container has started before liveness probes are initiated.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-- `period_seconds` (Number) How often (in seconds) to perform the probe.Default to 10 seconds. Minimum value is 1.
-- `success_threshold` (Number) Minimum consecutive successes for the probe to be considered successful after having failed.Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
-- `tcp_socket` (Attributes) TCPSocket specifies an action involving a TCP port. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--init_containers--liveness_probe--tcp_socket))
-- `termination_grace_period_seconds` (Number) Optional duration in seconds the pod needs to terminate gracefully upon probe failure.The grace period is the duration in seconds after the processes running in the pod are senta termination signal and the time when the processes are forcibly halted with a kill signal.Set this value longer than the expected cleanup time for your process.If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, thisvalue overrides the value provided by the pod spec.Value must be non-negative integer. The value zero indicates stop immediately viathe kill signal (no opportunity to shut down).This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate.Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
-- `timeout_seconds` (Number) Number of seconds after which the probe times out.Defaults to 1 second. Minimum value is 1.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
-
-### Nested Schema for `spec.component_defs.pod_spec.init_containers.liveness_probe.exec`
-
-Optional:
-
-- `command` (List of String) Command is the command line to execute inside the container, the working directory for thecommand is root ('/') in the container's filesystem. The command is simply exec'd, it isnot run inside a shell, so traditional shell instructions ('|', etc) won't work. To usea shell, you need to explicitly call out to that shell.Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.init_containers.liveness_probe.grpc`
-
-Required:
-
-- `port` (Number) Port number of the gRPC service. Number must be in the range 1 to 65535.
-
-Optional:
-
-- `service` (String) Service is the name of the service to place in the gRPC HealthCheckRequest(see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).If this is not specified, the default behavior is defined by gRPC.
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.init_containers.liveness_probe.http_get`
-
-Required:
-
-- `port` (String) Name or number of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
-
-Optional:
-
-- `host` (String) Host name to connect to, defaults to the pod IP. You probably want to set'Host' in httpHeaders instead.
-- `http_headers` (Attributes List) Custom headers to set in the request. HTTP allows repeated headers. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--init_containers--liveness_probe--http_get--http_headers))
-- `path` (String) Path to access on the HTTP server.
-- `scheme` (String) Scheme to use for connecting to the host.Defaults to HTTP.
-
-
-### Nested Schema for `spec.component_defs.pod_spec.init_containers.liveness_probe.http_get.http_headers`
-
-Required:
-
-- `name` (String) The header field name.This will be canonicalized upon output, so case-variant names will be understood as the same header.
-- `value` (String) The header field value
-
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.init_containers.liveness_probe.tcp_socket`
-
-Required:
-
-- `port` (String) Number or name of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
-
-Optional:
-
-- `host` (String) Optional: Host name to connect to, defaults to the pod IP.
-
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.init_containers.ports`
-
-Required:
-
-- `container_port` (Number) Number of port to expose on the pod's IP address.This must be a valid port number, 0 < x < 65536.
-
-Optional:
-
-- `host_ip` (String) What host IP to bind the external port to.
-- `host_port` (Number) Number of port to expose on the host.If specified, this must be a valid port number, 0 < x < 65536.If HostNetwork is specified, this must match ContainerPort.Most containers do not need this.
-- `name` (String) If specified, this must be an IANA_SVC_NAME and unique within the pod. Eachnamed port in a pod must have a unique name. Name for the port that can bereferred to by services.
-- `protocol` (String) Protocol for port. Must be UDP, TCP, or SCTP.Defaults to 'TCP'.
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.init_containers.readiness_probe`
-
-Optional:
-
-- `exec` (Attributes) Exec specifies the action to take. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--init_containers--readiness_probe--exec))
-- `failure_threshold` (Number) Minimum consecutive failures for the probe to be considered failed after having succeeded.Defaults to 3. Minimum value is 1.
-- `grpc` (Attributes) GRPC specifies an action involving a GRPC port. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--init_containers--readiness_probe--grpc))
-- `http_get` (Attributes) HTTPGet specifies the http request to perform. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--init_containers--readiness_probe--http_get))
-- `initial_delay_seconds` (Number) Number of seconds after the container has started before liveness probes are initiated.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-- `period_seconds` (Number) How often (in seconds) to perform the probe.Default to 10 seconds. Minimum value is 1.
-- `success_threshold` (Number) Minimum consecutive successes for the probe to be considered successful after having failed.Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
-- `tcp_socket` (Attributes) TCPSocket specifies an action involving a TCP port. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--init_containers--readiness_probe--tcp_socket))
-- `termination_grace_period_seconds` (Number) Optional duration in seconds the pod needs to terminate gracefully upon probe failure.The grace period is the duration in seconds after the processes running in the pod are senta termination signal and the time when the processes are forcibly halted with a kill signal.Set this value longer than the expected cleanup time for your process.If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, thisvalue overrides the value provided by the pod spec.Value must be non-negative integer. The value zero indicates stop immediately viathe kill signal (no opportunity to shut down).This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate.Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
-- `timeout_seconds` (Number) Number of seconds after which the probe times out.Defaults to 1 second. Minimum value is 1.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
-
-### Nested Schema for `spec.component_defs.pod_spec.init_containers.readiness_probe.exec`
-
-Optional:
-
-- `command` (List of String) Command is the command line to execute inside the container, the working directory for thecommand is root ('/') in the container's filesystem. The command is simply exec'd, it isnot run inside a shell, so traditional shell instructions ('|', etc) won't work. To usea shell, you need to explicitly call out to that shell.Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.init_containers.readiness_probe.grpc`
-
-Required:
-
-- `port` (Number) Port number of the gRPC service. Number must be in the range 1 to 65535.
-
-Optional:
-
-- `service` (String) Service is the name of the service to place in the gRPC HealthCheckRequest(see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).If this is not specified, the default behavior is defined by gRPC.
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.init_containers.readiness_probe.http_get`
-
-Required:
-
-- `port` (String) Name or number of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
-
-Optional:
-
-- `host` (String) Host name to connect to, defaults to the pod IP. You probably want to set'Host' in httpHeaders instead.
-- `http_headers` (Attributes List) Custom headers to set in the request. HTTP allows repeated headers. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--init_containers--readiness_probe--http_get--http_headers))
-- `path` (String) Path to access on the HTTP server.
-- `scheme` (String) Scheme to use for connecting to the host.Defaults to HTTP.
-
-
-### Nested Schema for `spec.component_defs.pod_spec.init_containers.readiness_probe.http_get.http_headers`
-
-Required:
-
-- `name` (String) The header field name.This will be canonicalized upon output, so case-variant names will be understood as the same header.
-- `value` (String) The header field value
-
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.init_containers.readiness_probe.tcp_socket`
-
-Required:
-
-- `port` (String) Number or name of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
-
-Optional:
-
-- `host` (String) Optional: Host name to connect to, defaults to the pod IP.
-
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.init_containers.resize_policy`
-
-Required:
-
-- `resource_name` (String) Name of the resource to which this resource resize policy applies.Supported values: cpu, memory.
-- `restart_policy` (String) Restart policy to apply when specified resource is resized.If not specified, it defaults to NotRequired.
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.init_containers.resources`
-
-Optional:
-
-- `claims` (Attributes List) Claims lists the names of resources, defined in spec.resourceClaims,that are used by this container.This is an alpha field and requires enabling theDynamicResourceAllocation feature gate.This field is immutable. It can only be set for containers. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--init_containers--resources--claims))
-- `limits` (Map of String) Limits describes the maximum amount of compute resources allowed.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-- `requests` (Map of String) Requests describes the minimum amount of compute resources required.If Requests is omitted for a container, it defaults to Limits if that is explicitly specified,otherwise to an implementation-defined value. Requests cannot exceed Limits.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-
-
-### Nested Schema for `spec.component_defs.pod_spec.init_containers.resources.claims`
-
-Required:
-
-- `name` (String) Name must match the name of one entry in pod.spec.resourceClaims ofthe Pod where this field is used. It makes that resource availableinside a container.
-
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.init_containers.security_context`
-
-Optional:
-
-- `allow_privilege_escalation` (Boolean) AllowPrivilegeEscalation controls whether a process can gain moreprivileges than its parent process. This bool directly controls ifthe no_new_privs flag will be set on the container process.AllowPrivilegeEscalation is true always when the container is:1) run as Privileged2) has CAP_SYS_ADMINNote that this field cannot be set when spec.os.name is windows.
-- `capabilities` (Attributes) The capabilities to add/drop when running containers.Defaults to the default set of capabilities granted by the container runtime.Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--init_containers--security_context--capabilities))
-- `privileged` (Boolean) Run container in privileged mode.Processes in privileged containers are essentially equivalent to root on the host.Defaults to false.Note that this field cannot be set when spec.os.name is windows.
-- `proc_mount` (String) procMount denotes the type of proc mount to use for the containers.The default is DefaultProcMount which uses the container runtime defaults forreadonly paths and masked paths.This requires the ProcMountType feature flag to be enabled.Note that this field cannot be set when spec.os.name is windows.
-- `read_only_root_filesystem` (Boolean) Whether this container has a read-only root filesystem.Default is false.Note that this field cannot be set when spec.os.name is windows.
-- `run_as_group` (Number) The GID to run the entrypoint of the container process.Uses runtime default if unset.May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.Note that this field cannot be set when spec.os.name is windows.
-- `run_as_non_root` (Boolean) Indicates that the container must run as a non-root user.If true, the Kubelet will validate the image at runtime to ensure that itdoes not run as UID 0 (root) and fail to start the container if it does.If unset or false, no such validation will be performed.May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.
-- `run_as_user` (Number) The UID to run the entrypoint of the container process.Defaults to user specified in image metadata if unspecified.May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.Note that this field cannot be set when spec.os.name is windows.
-- `se_linux_options` (Attributes) The SELinux context to be applied to the container.If unspecified, the container runtime will allocate a random SELinux context for eachcontainer. May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--init_containers--security_context--se_linux_options))
-- `seccomp_profile` (Attributes) The seccomp options to use by this container. If seccomp options areprovided at both the pod & container level, the container optionsoverride the pod options.Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--init_containers--security_context--seccomp_profile))
-- `windows_options` (Attributes) The Windows specific settings applied to all containers.If unspecified, the options from the PodSecurityContext will be used.If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.Note that this field cannot be set when spec.os.name is linux. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--init_containers--security_context--windows_options))
-
-
-### Nested Schema for `spec.component_defs.pod_spec.init_containers.security_context.capabilities`
-
-Optional:
-
-- `add` (List of String) Added capabilities
-- `drop` (List of String) Removed capabilities
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.init_containers.security_context.se_linux_options`
-
-Optional:
-
-- `level` (String) Level is SELinux level label that applies to the container.
-- `role` (String) Role is a SELinux role label that applies to the container.
-- `type` (String) Type is a SELinux type label that applies to the container.
-- `user` (String) User is a SELinux user label that applies to the container.
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.init_containers.security_context.seccomp_profile`
-
-Required:
-
-- `type` (String) type indicates which kind of seccomp profile will be applied.Valid options are:Localhost - a profile defined in a file on the node should be used.RuntimeDefault - the container runtime default profile should be used.Unconfined - no profile should be applied.
-
-Optional:
-
-- `localhost_profile` (String) localhostProfile indicates a profile defined in a file on the node should be used.The profile must be preconfigured on the node to work.Must be a descending path, relative to the kubelet's configured seccomp profile location.Must be set if type is 'Localhost'. Must NOT be set for any other type.
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.init_containers.security_context.windows_options`
-
-Optional:
-
-- `gmsa_credential_spec` (String) GMSACredentialSpec is where the GMSA admission webhook(https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of theGMSA credential spec named by the GMSACredentialSpecName field.
-- `gmsa_credential_spec_name` (String) GMSACredentialSpecName is the name of the GMSA credential spec to use.
-- `host_process` (Boolean) HostProcess determines if a container should be run as a 'Host Process' container.All of a Pod's containers must have the same effective HostProcess value(it is not allowed to have a mix of HostProcess containers and non-HostProcess containers).In addition, if HostProcess is true then HostNetwork must also be set to true.
-- `run_as_user_name` (String) The UserName in Windows to run the entrypoint of the container process.Defaults to the user specified in image metadata if unspecified.May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.
-
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.init_containers.startup_probe`
-
-Optional:
-
-- `exec` (Attributes) Exec specifies the action to take. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--init_containers--startup_probe--exec))
-- `failure_threshold` (Number) Minimum consecutive failures for the probe to be considered failed after having succeeded.Defaults to 3. Minimum value is 1.
-- `grpc` (Attributes) GRPC specifies an action involving a GRPC port. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--init_containers--startup_probe--grpc))
-- `http_get` (Attributes) HTTPGet specifies the http request to perform. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--init_containers--startup_probe--http_get))
-- `initial_delay_seconds` (Number) Number of seconds after the container has started before liveness probes are initiated.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-- `period_seconds` (Number) How often (in seconds) to perform the probe.Default to 10 seconds. Minimum value is 1.
-- `success_threshold` (Number) Minimum consecutive successes for the probe to be considered successful after having failed.Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
-- `tcp_socket` (Attributes) TCPSocket specifies an action involving a TCP port. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--init_containers--startup_probe--tcp_socket))
-- `termination_grace_period_seconds` (Number) Optional duration in seconds the pod needs to terminate gracefully upon probe failure.The grace period is the duration in seconds after the processes running in the pod are senta termination signal and the time when the processes are forcibly halted with a kill signal.Set this value longer than the expected cleanup time for your process.If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, thisvalue overrides the value provided by the pod spec.Value must be non-negative integer. The value zero indicates stop immediately viathe kill signal (no opportunity to shut down).This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate.Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
-- `timeout_seconds` (Number) Number of seconds after which the probe times out.Defaults to 1 second. Minimum value is 1.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
-
-### Nested Schema for `spec.component_defs.pod_spec.init_containers.startup_probe.exec`
-
-Optional:
-
-- `command` (List of String) Command is the command line to execute inside the container, the working directory for thecommand is root ('/') in the container's filesystem. The command is simply exec'd, it isnot run inside a shell, so traditional shell instructions ('|', etc) won't work. To usea shell, you need to explicitly call out to that shell.Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.init_containers.startup_probe.grpc`
-
-Required:
-
-- `port` (Number) Port number of the gRPC service. Number must be in the range 1 to 65535.
-
-Optional:
-
-- `service` (String) Service is the name of the service to place in the gRPC HealthCheckRequest(see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).If this is not specified, the default behavior is defined by gRPC.
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.init_containers.startup_probe.http_get`
-
-Required:
-
-- `port` (String) Name or number of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
-
-Optional:
-
-- `host` (String) Host name to connect to, defaults to the pod IP. You probably want to set'Host' in httpHeaders instead.
-- `http_headers` (Attributes List) Custom headers to set in the request. HTTP allows repeated headers. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--init_containers--startup_probe--http_get--http_headers))
-- `path` (String) Path to access on the HTTP server.
-- `scheme` (String) Scheme to use for connecting to the host.Defaults to HTTP.
-
-
-### Nested Schema for `spec.component_defs.pod_spec.init_containers.startup_probe.http_get.http_headers`
-
-Required:
-
-- `name` (String) The header field name.This will be canonicalized upon output, so case-variant names will be understood as the same header.
-- `value` (String) The header field value
-
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.init_containers.startup_probe.tcp_socket`
-
-Required:
-
-- `port` (String) Number or name of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
-
-Optional:
-
-- `host` (String) Optional: Host name to connect to, defaults to the pod IP.
-
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.init_containers.volume_devices`
-
-Required:
-
-- `device_path` (String) devicePath is the path inside of the container that the device will be mapped to.
-- `name` (String) name must match the name of a persistentVolumeClaim in the pod
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.init_containers.volume_mounts`
-
-Required:
-
-- `mount_path` (String) Path within the container at which the volume should be mounted. Mustnot contain ':'.
-- `name` (String) This must match the Name of a Volume.
-
-Optional:
-
-- `mount_propagation` (String) mountPropagation determines how mounts are propagated from the hostto container and the other way around.When not set, MountPropagationNone is used.This field is beta in 1.10.
-- `read_only` (Boolean) Mounted read-only if true, read-write otherwise (false or unspecified).Defaults to false.
-- `sub_path` (String) Path within the volume from which the container's volume should be mounted.Defaults to '' (volume's root).
-- `sub_path_expr` (String) Expanded path within the volume from which the container's volume should be mounted.Behaves similarly to SubPath but environment variable references $(VAR_NAME) are expanded using the container's environment.Defaults to '' (volume's root).SubPathExpr and SubPath are mutually exclusive.
-
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.os`
-
-Required:
-
-- `name` (String) Name is the name of the operating system. The currently supported values are linux and windows.Additional value may be defined in future and can be one of:https://github.com/opencontainers/runtime-spec/blob/master/config.md#platform-specific-configurationClients should expect to handle additional values and treat unrecognized values in this field as os: null
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.readiness_gates`
-
-Required:
-
-- `condition_type` (String) ConditionType refers to a condition in the pod's condition list with matching type.
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.resource_claims`
-
-Required:
-
-- `name` (String) Name uniquely identifies this resource claim inside the pod.This must be a DNS_LABEL.
-
-Optional:
-
-- `source` (Attributes) Source describes where to find the ResourceClaim. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--resource_claims--source))
-
-
-### Nested Schema for `spec.component_defs.pod_spec.resource_claims.source`
-
-Optional:
-
-- `resource_claim_name` (String) ResourceClaimName is the name of a ResourceClaim object in the samenamespace as this pod.
-- `resource_claim_template_name` (String) ResourceClaimTemplateName is the name of a ResourceClaimTemplateobject in the same namespace as this pod.The template will be used to create a new ResourceClaim, which willbe bound to this pod. When this pod is deleted, the ResourceClaimwill also be deleted. The pod name and resource name, along with agenerated component, will be used to form a unique name for theResourceClaim, which will be recorded in pod.status.resourceClaimStatuses.This field is immutable and no changes will be made to thecorresponding ResourceClaim by the control plane after creating theResourceClaim.
-
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.scheduling_gates`
-
-Required:
-
-- `name` (String) Name of the scheduling gate.Each scheduling gate must have a unique name field.
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.security_context`
-
-Optional:
-
-- `fs_group` (Number) A special supplemental group that applies to all containers in a pod.Some volume types allow the Kubelet to change the ownership of that volumeto be owned by the pod:1. The owning GID will be the FSGroup2. The setgid bit is set (new files created in the volume will be owned by FSGroup)3. The permission bits are OR'd with rw-rw----If unset, the Kubelet will not modify the ownership and permissions of any volume.Note that this field cannot be set when spec.os.name is windows.
-- `fs_group_change_policy` (String) fsGroupChangePolicy defines behavior of changing ownership and permission of the volumebefore being exposed inside Pod. This field will only apply tovolume types which support fsGroup based ownership(and permissions).It will have no effect on ephemeral volume types such as: secret, configmapsand emptydir.Valid values are 'OnRootMismatch' and 'Always'. If not specified, 'Always' is used.Note that this field cannot be set when spec.os.name is windows.
-- `run_as_group` (Number) The GID to run the entrypoint of the container process.Uses runtime default if unset.May also be set in SecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedencefor that container.Note that this field cannot be set when spec.os.name is windows.
-- `run_as_non_root` (Boolean) Indicates that the container must run as a non-root user.If true, the Kubelet will validate the image at runtime to ensure that itdoes not run as UID 0 (root) and fail to start the container if it does.If unset or false, no such validation will be performed.May also be set in SecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.
-- `run_as_user` (Number) The UID to run the entrypoint of the container process.Defaults to user specified in image metadata if unspecified.May also be set in SecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedencefor that container.Note that this field cannot be set when spec.os.name is windows.
-- `se_linux_options` (Attributes) The SELinux context to be applied to all containers.If unspecified, the container runtime will allocate a random SELinux context for eachcontainer. May also be set in SecurityContext. If set inboth SecurityContext and PodSecurityContext, the value specified in SecurityContexttakes precedence for that container.Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--security_context--se_linux_options))
-- `seccomp_profile` (Attributes) The seccomp options to use by the containers in this pod.Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--security_context--seccomp_profile))
-- `supplemental_groups` (List of String) A list of groups applied to the first process run in each container, in additionto the container's primary GID, the fsGroup (if specified), and group membershipsdefined in the container image for the uid of the container process. If unspecified,no additional groups are added to any container. Note that group membershipsdefined in the container image for the uid of the container process are still effective,even if they are not included in this list.Note that this field cannot be set when spec.os.name is windows.
-- `sysctls` (Attributes List) Sysctls hold a list of namespaced sysctls used for the pod. Pods with unsupportedsysctls (by the container runtime) might fail to launch.Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--security_context--sysctls))
-- `windows_options` (Attributes) The Windows specific settings applied to all containers.If unspecified, the options within a container's SecurityContext will be used.If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.Note that this field cannot be set when spec.os.name is linux. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--security_context--windows_options))
-
-
-### Nested Schema for `spec.component_defs.pod_spec.security_context.se_linux_options`
-
-Optional:
-
-- `level` (String) Level is SELinux level label that applies to the container.
-- `role` (String) Role is a SELinux role label that applies to the container.
-- `type` (String) Type is a SELinux type label that applies to the container.
-- `user` (String) User is a SELinux user label that applies to the container.
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.security_context.seccomp_profile`
-
-Required:
-
-- `type` (String) type indicates which kind of seccomp profile will be applied.Valid options are:Localhost - a profile defined in a file on the node should be used.RuntimeDefault - the container runtime default profile should be used.Unconfined - no profile should be applied.
-
-Optional:
-
-- `localhost_profile` (String) localhostProfile indicates a profile defined in a file on the node should be used.The profile must be preconfigured on the node to work.Must be a descending path, relative to the kubelet's configured seccomp profile location.Must be set if type is 'Localhost'. Must NOT be set for any other type.
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.security_context.sysctls`
-
-Required:
-
-- `name` (String) Name of a property to set
-- `value` (String) Value of a property to set
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.security_context.windows_options`
-
-Optional:
-
-- `gmsa_credential_spec` (String) GMSACredentialSpec is where the GMSA admission webhook(https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of theGMSA credential spec named by the GMSACredentialSpecName field.
-- `gmsa_credential_spec_name` (String) GMSACredentialSpecName is the name of the GMSA credential spec to use.
-- `host_process` (Boolean) HostProcess determines if a container should be run as a 'Host Process' container.All of a Pod's containers must have the same effective HostProcess value(it is not allowed to have a mix of HostProcess containers and non-HostProcess containers).In addition, if HostProcess is true then HostNetwork must also be set to true.
-- `run_as_user_name` (String) The UserName in Windows to run the entrypoint of the container process.Defaults to the user specified in image metadata if unspecified.May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.
-
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.tolerations`
-
-Optional:
-
-- `effect` (String) Effect indicates the taint effect to match. Empty means match all taint effects.When specified, allowed values are NoSchedule, PreferNoSchedule and NoExecute.
-- `key` (String) Key is the taint key that the toleration applies to. Empty means match all taint keys.If the key is empty, operator must be Exists; this combination means to match all values and all keys.
-- `operator` (String) Operator represents a key's relationship to the value.Valid operators are Exists and Equal. Defaults to Equal.Exists is equivalent to wildcard for value, so that a pod cantolerate all taints of a particular category.
-- `toleration_seconds` (Number) TolerationSeconds represents the period of time the toleration (which must beof effect NoExecute, otherwise this field is ignored) tolerates the taint. By default,it is not set, which means tolerate the taint forever (do not evict). Zero andnegative values will be treated as 0 (evict immediately) by the system.
-- `value` (String) Value is the taint value the toleration matches to.If the operator is Exists, the value should be empty, otherwise just a regular string.
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.topology_spread_constraints`
-
-Required:
-
-- `max_skew` (Number) MaxSkew describes the degree to which pods may be unevenly distributed.When 'whenUnsatisfiable=DoNotSchedule', it is the maximum permitted differencebetween the number of matching pods in the target topology and the global minimum.The global minimum is the minimum number of matching pods in an eligible domainor zero if the number of eligible domains is less than MinDomains.For example, in a 3-zone cluster, MaxSkew is set to 1, and pods with the samelabelSelector spread as 2/2/1:In this case, the global minimum is 1.| zone1 | zone2 | zone3 || P P | P P | P |- if MaxSkew is 1, incoming pod can only be scheduled to zone3 to become 2/2/2;scheduling it onto zone1(zone2) would make the ActualSkew(3-1) on zone1(zone2)violate MaxSkew(1).- if MaxSkew is 2, incoming pod can be scheduled onto any zone.When 'whenUnsatisfiable=ScheduleAnyway', it is used to give higher precedenceto topologies that satisfy it.It's a required field. Default value is 1 and 0 is not allowed.
-- `topology_key` (String) TopologyKey is the key of node labels. Nodes that have a label with this keyand identical values are considered to be in the same topology.We consider each as a 'bucket', and try to put balanced numberof pods into each bucket.We define a domain as a particular instance of a topology.Also, we define an eligible domain as a domain whose nodes meet the requirements ofnodeAffinityPolicy and nodeTaintsPolicy.e.g. If TopologyKey is 'kubernetes.io/hostname', each Node is a domain of that topology.And, if TopologyKey is 'topology.kubernetes.io/zone', each zone is a domain of that topology.It's a required field.
-- `when_unsatisfiable` (String) WhenUnsatisfiable indicates how to deal with a pod if it doesn't satisfythe spread constraint.- DoNotSchedule (default) tells the scheduler not to schedule it.- ScheduleAnyway tells the scheduler to schedule the pod in any location, but giving higher precedence to topologies that would help reduce the skew.A constraint is considered 'Unsatisfiable' for an incoming podif and only if every possible node assignment for that pod would violate'MaxSkew' on some topology.For example, in a 3-zone cluster, MaxSkew is set to 1, and pods with the samelabelSelector spread as 3/1/1:| zone1 | zone2 | zone3 || P P P | P | P |If WhenUnsatisfiable is set to DoNotSchedule, incoming pod can only be scheduledto zone2(zone3) to become 3/2/1(3/1/2) as ActualSkew(2-1) on zone2(zone3) satisfiesMaxSkew(1). In other words, the cluster can still be imbalanced, but schedulerwon't make it *more* imbalanced.It's a required field.
-
-Optional:
-
-- `label_selector` (Attributes) LabelSelector is used to find matching pods.Pods that match this label selector are counted to determine the number of podsin their corresponding topology domain. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--topology_spread_constraints--label_selector))
-- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select the pods over whichspreading will be calculated. The keys are used to lookup values from theincoming pod labels, those key-value labels are ANDed with labelSelectorto select the group of existing pods over which spreading will be calculatedfor the incoming pod. The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.MatchLabelKeys cannot be set when LabelSelector isn't set.Keys that don't exist in the incoming pod labels willbe ignored. A null or empty list means only match against labelSelector.This is a beta field and requires the MatchLabelKeysInPodTopologySpread feature gate to be enabled (enabled by default).
-- `min_domains` (Number) MinDomains indicates a minimum number of eligible domains.When the number of eligible domains with matching topology keys is less than minDomains,Pod Topology Spread treats 'global minimum' as 0, and then the calculation of Skew is performed.And when the number of eligible domains with matching topology keys equals or greater than minDomains,this value has no effect on scheduling.As a result, when the number of eligible domains is less than minDomains,scheduler won't schedule more than maxSkew Pods to those domains.If value is nil, the constraint behaves as if MinDomains is equal to 1.Valid values are integers greater than 0.When value is not nil, WhenUnsatisfiable must be DoNotSchedule.For example, in a 3-zone cluster, MaxSkew is set to 2, MinDomains is set to 5 and pods with the samelabelSelector spread as 2/2/2:| zone1 | zone2 | zone3 || P P | P P | P P |The number of domains is less than 5(MinDomains), so 'global minimum' is treated as 0.In this situation, new pod with the same labelSelector cannot be scheduled,because computed skew will be 3(3 - 0) if new Pod is scheduled to any of the three zones,it will violate MaxSkew.This is a beta field and requires the MinDomainsInPodTopologySpread feature gate to be enabled (enabled by default).
-- `node_affinity_policy` (String) NodeAffinityPolicy indicates how we will treat Pod's nodeAffinity/nodeSelectorwhen calculating pod topology spread skew. Options are:- Honor: only nodes matching nodeAffinity/nodeSelector are included in the calculations.- Ignore: nodeAffinity/nodeSelector are ignored. All nodes are included in the calculations.If this value is nil, the behavior is equivalent to the Honor policy.This is a beta-level feature default enabled by the NodeInclusionPolicyInPodTopologySpread feature flag.
-- `node_taints_policy` (String) NodeTaintsPolicy indicates how we will treat node taints when calculatingpod topology spread skew. Options are:- Honor: nodes without taints, along with tainted nodes for which the incoming podhas a toleration, are included.- Ignore: node taints are ignored. All nodes are included.If this value is nil, the behavior is equivalent to the Ignore policy.This is a beta-level feature default enabled by the NodeInclusionPolicyInPodTopologySpread feature flag.
-
-
-### Nested Schema for `spec.component_defs.pod_spec.topology_spread_constraints.label_selector`
-
-Optional:
-
-- `match_expressions` (Attributes List) matchExpressions is a list of label selector requirements. The requirements are ANDed. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--topology_spread_constraints--label_selector--match_expressions))
-- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.
-
-
-### Nested Schema for `spec.component_defs.pod_spec.topology_spread_constraints.label_selector.match_expressions`
-
-Required:
-
-- `key` (String) key is the label key that the selector applies to.
-- `operator` (String) operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.
-
-Optional:
-
-- `values` (List of String) values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.
-
-
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.volumes`
-
-Required:
-
-- `name` (String) name of the volume.Must be a DNS_LABEL and unique within the pod.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-
-Optional:
-
-- `aws_elastic_block_store` (Attributes) awsElasticBlockStore represents an AWS Disk resource that is attached to akubelet's host machine and then exposed to the pod.More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--volumes--aws_elastic_block_store))
-- `azure_disk` (Attributes) azureDisk represents an Azure Data Disk mount on the host and bind mount to the pod. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--volumes--azure_disk))
-- `azure_file` (Attributes) azureFile represents an Azure File Service mount on the host and bind mount to the pod. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--volumes--azure_file))
-- `cephfs` (Attributes) cephFS represents a Ceph FS mount on the host that shares a pod's lifetime (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--volumes--cephfs))
-- `cinder` (Attributes) cinder represents a cinder volume attached and mounted on kubelets host machine.More info: https://examples.k8s.io/mysql-cinder-pd/README.md (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--volumes--cinder))
-- `config_map` (Attributes) configMap represents a configMap that should populate this volume (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--volumes--config_map))
-- `csi` (Attributes) csi (Container Storage Interface) represents ephemeral storage that is handled by certain external CSI drivers (Beta feature). (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--volumes--csi))
-- `downward_api` (Attributes) downwardAPI represents downward API about the pod that should populate this volume (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--volumes--downward_api))
-- `empty_dir` (Attributes) emptyDir represents a temporary directory that shares a pod's lifetime.More info: https://kubernetes.io/docs/concepts/storage/volumes#emptydir (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--volumes--empty_dir))
-- `ephemeral` (Attributes) ephemeral represents a volume that is handled by a cluster storage driver.The volume's lifecycle is tied to the pod that defines it - it will be created before the pod starts,and deleted when the pod is removed.Use this if:a) the volume is only needed while the pod runs,b) features of normal volumes like restoring from snapshot or capacity tracking are needed,c) the storage driver is specified through a storage class, andd) the storage driver supports dynamic volume provisioning through a PersistentVolumeClaim (see EphemeralVolumeSource for more information on the connection between this volume type and PersistentVolumeClaim).Use PersistentVolumeClaim or one of the vendor-specificAPIs for volumes that persist for longer than the lifecycleof an individual pod.Use CSI for light-weight local ephemeral volumes if the CSI driver is meant tobe used that way - see the documentation of the driver formore information.A pod can use both types of ephemeral volumes andpersistent volumes at the same time. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--volumes--ephemeral))
-- `fc` (Attributes) fc represents a Fibre Channel resource that is attached to a kubelet's host machine and then exposed to the pod. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--volumes--fc))
-- `flex_volume` (Attributes) flexVolume represents a generic volume resource that isprovisioned/attached using an exec based plugin. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--volumes--flex_volume))
-- `flocker` (Attributes) flocker represents a Flocker volume attached to a kubelet's host machine. This depends on the Flocker control service being running (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--volumes--flocker))
-- `gce_persistent_disk` (Attributes) gcePersistentDisk represents a GCE Disk resource that is attached to akubelet's host machine and then exposed to the pod.More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--volumes--gce_persistent_disk))
-- `git_repo` (Attributes) gitRepo represents a git repository at a particular revision.DEPRECATED: GitRepo is deprecated. To provision a container with a git repo, mount anEmptyDir into an InitContainer that clones the repo using git, then mount the EmptyDirinto the Pod's container. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--volumes--git_repo))
-- `glusterfs` (Attributes) glusterfs represents a Glusterfs mount on the host that shares a pod's lifetime.More info: https://examples.k8s.io/volumes/glusterfs/README.md (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--volumes--glusterfs))
-- `host_path` (Attributes) hostPath represents a pre-existing file or directory on the hostmachine that is directly exposed to the container. This is generallyused for system agents or other privileged things that are allowedto see the host machine. Most containers will NOT need this.More info: https://kubernetes.io/docs/concepts/storage/volumes#hostpath---TODO(jonesdl) We need to restrict who can use host directory mounts and who can/can notmount host directories as read/write. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--volumes--host_path))
-- `iscsi` (Attributes) iscsi represents an ISCSI Disk resource that is attached to akubelet's host machine and then exposed to the pod.More info: https://examples.k8s.io/volumes/iscsi/README.md (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--volumes--iscsi))
-- `nfs` (Attributes) nfs represents an NFS mount on the host that shares a pod's lifetimeMore info: https://kubernetes.io/docs/concepts/storage/volumes#nfs (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--volumes--nfs))
-- `persistent_volume_claim` (Attributes) persistentVolumeClaimVolumeSource represents a reference to aPersistentVolumeClaim in the same namespace.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--volumes--persistent_volume_claim))
-- `photon_persistent_disk` (Attributes) photonPersistentDisk represents a PhotonController persistent disk attached and mounted on kubelets host machine (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--volumes--photon_persistent_disk))
-- `portworx_volume` (Attributes) portworxVolume represents a portworx volume attached and mounted on kubelets host machine (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--volumes--portworx_volume))
-- `projected` (Attributes) projected items for all in one resources secrets, configmaps, and downward API (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--volumes--projected))
-- `quobyte` (Attributes) quobyte represents a Quobyte mount on the host that shares a pod's lifetime (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--volumes--quobyte))
-- `rbd` (Attributes) rbd represents a Rados Block Device mount on the host that shares a pod's lifetime.More info: https://examples.k8s.io/volumes/rbd/README.md (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--volumes--rbd))
-- `scale_io` (Attributes) scaleIO represents a ScaleIO persistent volume attached and mounted on Kubernetes nodes. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--volumes--scale_io))
-- `secret` (Attributes) secret represents a secret that should populate this volume.More info: https://kubernetes.io/docs/concepts/storage/volumes#secret (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--volumes--secret))
-- `storageos` (Attributes) storageOS represents a StorageOS volume attached and mounted on Kubernetes nodes. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--volumes--storageos))
-- `vsphere_volume` (Attributes) vsphereVolume represents a vSphere volume attached and mounted on kubelets host machine (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--volumes--vsphere_volume))
-
-
-### Nested Schema for `spec.component_defs.pod_spec.volumes.aws_elastic_block_store`
-
-Required:
-
-- `volume_id` (String) volumeID is unique ID of the persistent disk resource in AWS (Amazon EBS volume).More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore
-
-Optional:
-
-- `fs_type` (String) fsType is the filesystem type of the volume that you want to mount.Tip: Ensure that the filesystem type is supported by the host operating system.Examples: 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified.More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstoreTODO: how do we prevent errors in the filesystem from compromising the machine
-- `partition` (Number) partition is the partition in the volume that you want to mount.If omitted, the default is to mount by volume name.Examples: For volume /dev/sda1, you specify the partition as '1'.Similarly, the volume partition for /dev/sda is '0' (or you can leave the property empty).
-- `read_only` (Boolean) readOnly value true will force the readOnly setting in VolumeMounts.More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.volumes.azure_disk`
-
-Required:
-
-- `disk_name` (String) diskName is the Name of the data disk in the blob storage
-- `disk_uri` (String) diskURI is the URI of data disk in the blob storage
-
-Optional:
-
-- `caching_mode` (String) cachingMode is the Host Caching mode: None, Read Only, Read Write.
-- `fs_type` (String) fsType is Filesystem type to mount.Must be a filesystem type supported by the host operating system.Ex. 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified.
-- `kind` (String) kind expected values are Shared: multiple blob disks per storage account Dedicated: single blob disk per storage account Managed: azure managed data disk (only in managed availability set). defaults to shared
-- `read_only` (Boolean) readOnly Defaults to false (read/write). ReadOnly here will forcethe ReadOnly setting in VolumeMounts.
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.volumes.azure_file`
-
-Required:
-
-- `secret_name` (String) secretName is the name of secret that contains Azure Storage Account Name and Key
-- `share_name` (String) shareName is the azure share Name
-
-Optional:
-
-- `read_only` (Boolean) readOnly defaults to false (read/write). ReadOnly here will forcethe ReadOnly setting in VolumeMounts.
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.volumes.cephfs`
-
-Required:
-
-- `monitors` (List of String) monitors is Required: Monitors is a collection of Ceph monitorsMore info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it
-
-Optional:
-
-- `path` (String) path is Optional: Used as the mounted root, rather than the full Ceph tree, default is /
-- `read_only` (Boolean) readOnly is Optional: Defaults to false (read/write). ReadOnly here will forcethe ReadOnly setting in VolumeMounts.More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it
-- `secret_file` (String) secretFile is Optional: SecretFile is the path to key ring for User, default is /etc/ceph/user.secretMore info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it
-- `secret_ref` (Attributes) secretRef is Optional: SecretRef is reference to the authentication secret for User, default is empty.More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--volumes--cephfs--secret_ref))
-- `user` (String) user is optional: User is the rados user name, default is adminMore info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it
-
-
-### Nested Schema for `spec.component_defs.pod_spec.volumes.cephfs.secret_ref`
-
-Optional:
-
-- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
-
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.volumes.cinder`
-
-Required:
-
-- `volume_id` (String) volumeID used to identify the volume in cinder.More info: https://examples.k8s.io/mysql-cinder-pd/README.md
-
-Optional:
-
-- `fs_type` (String) fsType is the filesystem type to mount.Must be a filesystem type supported by the host operating system.Examples: 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified.More info: https://examples.k8s.io/mysql-cinder-pd/README.md
-- `read_only` (Boolean) readOnly defaults to false (read/write). ReadOnly here will forcethe ReadOnly setting in VolumeMounts.More info: https://examples.k8s.io/mysql-cinder-pd/README.md
-- `secret_ref` (Attributes) secretRef is optional: points to a secret object containing parameters used to connectto OpenStack. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--volumes--cinder--secret_ref))
-
-
-### Nested Schema for `spec.component_defs.pod_spec.volumes.cinder.secret_ref`
-
-Optional:
-
-- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
-
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.volumes.config_map`
-
-Optional:
-
-- `default_mode` (Number) defaultMode is optional: mode bits used to set permissions on created files by default.Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511.YAML accepts both octal and decimal values, JSON requires decimal values for mode bits.Defaults to 0644.Directories within the path are not affected by this setting.This might be in conflict with other options that affect the filemode, like fsGroup, and the result can be other mode bits set.
-- `items` (Attributes List) items if unspecified, each key-value pair in the Data field of the referencedConfigMap will be projected into the volume as a file whose name is thekey and content is the value. If specified, the listed keys will beprojected into the specified paths, and unlisted keys will not bepresent. If a key is specified which is not present in the ConfigMap,the volume setup will error unless it is marked optional. Paths must berelative and may not contain the '..' path or start with '..'. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--volumes--config_map--items))
-- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
-- `optional` (Boolean) optional specify whether the ConfigMap or its keys must be defined
-
-
-### Nested Schema for `spec.component_defs.pod_spec.volumes.config_map.items`
-
-Required:
-
-- `key` (String) key is the key to project.
-- `path` (String) path is the relative path of the file to map the key to.May not be an absolute path.May not contain the path element '..'.May not start with the string '..'.
-
-Optional:
-
-- `mode` (Number) mode is Optional: mode bits used to set permissions on this file.Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511.YAML accepts both octal and decimal values, JSON requires decimal values for mode bits.If not specified, the volume defaultMode will be used.This might be in conflict with other options that affect the filemode, like fsGroup, and the result can be other mode bits set.
-
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.volumes.csi`
-
-Required:
-
-- `driver` (String) driver is the name of the CSI driver that handles this volume.Consult with your admin for the correct name as registered in the cluster.
-
-Optional:
-
-- `fs_type` (String) fsType to mount. Ex. 'ext4', 'xfs', 'ntfs'.If not provided, the empty value is passed to the associated CSI driverwhich will determine the default filesystem to apply.
-- `node_publish_secret_ref` (Attributes) nodePublishSecretRef is a reference to the secret object containingsensitive information to pass to the CSI driver to complete the CSINodePublishVolume and NodeUnpublishVolume calls.This field is optional, and may be empty if no secret is required. If thesecret object contains more than one secret, all secret references are passed. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--volumes--csi--node_publish_secret_ref))
-- `read_only` (Boolean) readOnly specifies a read-only configuration for the volume.Defaults to false (read/write).
-- `volume_attributes` (Map of String) volumeAttributes stores driver-specific properties that are passed to the CSIdriver. Consult your driver's documentation for supported values.
-
-
-### Nested Schema for `spec.component_defs.pod_spec.volumes.csi.node_publish_secret_ref`
-
-Optional:
-
-- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
-
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.volumes.downward_api`
-
-Optional:
-
-- `default_mode` (Number) Optional: mode bits to use on created files by default. Must be aOptional: mode bits used to set permissions on created files by default.Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511.YAML accepts both octal and decimal values, JSON requires decimal values for mode bits.Defaults to 0644.Directories within the path are not affected by this setting.This might be in conflict with other options that affect the filemode, like fsGroup, and the result can be other mode bits set.
-- `items` (Attributes List) Items is a list of downward API volume file (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--volumes--downward_api--items))
-
-
-### Nested Schema for `spec.component_defs.pod_spec.volumes.downward_api.items`
-
-Required:
-
-- `path` (String) Required: Path is the relative path name of the file to be created. Must not be absolute or contain the '..' path. Must be utf-8 encoded. The first item of the relative path must not start with '..'
-
-Optional:
-
-- `field_ref` (Attributes) Required: Selects a field of the pod: only annotations, labels, name and namespace are supported. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--volumes--downward_api--items--field_ref))
-- `mode` (Number) Optional: mode bits used to set permissions on this file, must be an octal valuebetween 0000 and 0777 or a decimal value between 0 and 511.YAML accepts both octal and decimal values, JSON requires decimal values for mode bits.If not specified, the volume defaultMode will be used.This might be in conflict with other options that affect the filemode, like fsGroup, and the result can be other mode bits set.
-- `resource_field_ref` (Attributes) Selects a resource of the container: only resources limits and requests(limits.cpu, limits.memory, requests.cpu and requests.memory) are currently supported. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--volumes--downward_api--items--resource_field_ref))
-
-
-### Nested Schema for `spec.component_defs.pod_spec.volumes.downward_api.items.field_ref`
-
-Required:
-
-- `field_path` (String) Path of the field to select in the specified API version.
-
-Optional:
-
-- `api_version` (String) Version of the schema the FieldPath is written in terms of, defaults to 'v1'.
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.volumes.downward_api.items.resource_field_ref`
-
-Required:
-
-- `resource` (String) Required: resource to select
-
-Optional:
-
-- `container_name` (String) Container name: required for volumes, optional for env vars
-- `divisor` (String) Specifies the output format of the exposed resources, defaults to '1'
-
-
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.volumes.empty_dir`
-
-Optional:
-
-- `medium` (String) medium represents what type of storage medium should back this directory.The default is '' which means to use the node's default medium.Must be an empty string (default) or Memory.More info: https://kubernetes.io/docs/concepts/storage/volumes#emptydir
-- `size_limit` (String) sizeLimit is the total amount of local storage required for this EmptyDir volume.The size limit is also applicable for memory medium.The maximum usage on memory medium EmptyDir would be the minimum value betweenthe SizeLimit specified here and the sum of memory limits of all containers in a pod.The default is nil which means that the limit is undefined.More info: https://kubernetes.io/docs/concepts/storage/volumes#emptydir
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.volumes.ephemeral`
-
-Optional:
-
-- `volume_claim_template` (Attributes) Will be used to create a stand-alone PVC to provision the volume.The pod in which this EphemeralVolumeSource is embedded will be theowner of the PVC, i.e. the PVC will be deleted together with thepod. The name of the PVC will be '-' where'' is the name from the 'PodSpec.Volumes' arrayentry. Pod validation will reject the pod if the concatenated nameis not valid for a PVC (for example, too long).An existing PVC with that name that is not owned by the podwill *not* be used for the pod to avoid using an unrelatedvolume by mistake. Starting the pod is then blocked untilthe unrelated PVC is removed. If such a pre-created PVC ismeant to be used by the pod, the PVC has to updated with anowner reference to the pod once the pod exists. Normallythis should not be necessary, but it may be useful whenmanually reconstructing a broken cluster.This field is read-only and no changes will be made by Kubernetesto the PVC after it has been created.Required, must not be nil. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--volumes--ephemeral--volume_claim_template))
-
-
-### Nested Schema for `spec.component_defs.pod_spec.volumes.ephemeral.volume_claim_template`
-
-Required:
-
-- `spec` (Attributes) The specification for the PersistentVolumeClaim. The entire content iscopied unchanged into the PVC that gets created from thistemplate. The same fields as in a PersistentVolumeClaimare also valid here. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--volumes--ephemeral--volume_claim_template--spec))
-
-Optional:
-
-- `metadata` (Attributes) May contain labels and annotations that will be copied into the PVCwhen creating it. No other fields are allowed and will be rejected duringvalidation. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--volumes--ephemeral--volume_claim_template--metadata))
-
-
-### Nested Schema for `spec.component_defs.pod_spec.volumes.ephemeral.volume_claim_template.spec`
-
-Optional:
-
-- `access_modes` (List of String) accessModes contains the desired access modes the volume should have.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#access-modes-1
-- `data_source` (Attributes) dataSource field can be used to specify either:* An existing VolumeSnapshot object (snapshot.storage.k8s.io/VolumeSnapshot)* An existing PVC (PersistentVolumeClaim)If the provisioner or an external controller can support the specified data source,it will create a new volume based on the contents of the specified data source.When the AnyVolumeDataSource feature gate is enabled, dataSource contents will be copied to dataSourceRef,and dataSourceRef contents will be copied to dataSource when dataSourceRef.namespace is not specified.If the namespace is specified, then dataSourceRef will not be copied to dataSource. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--volumes--ephemeral--volume_claim_template--spec--data_source))
-- `data_source_ref` (Attributes) dataSourceRef specifies the object from which to populate the volume with data, if a non-emptyvolume is desired. This may be any object from a non-empty API group (noncore object) or a PersistentVolumeClaim object.When this field is specified, volume binding will only succeed if the type ofthe specified object matches some installed volume populator or dynamicprovisioner.This field will replace the functionality of the dataSource field and as suchif both fields are non-empty, they must have the same value. For backwardscompatibility, when namespace isn't specified in dataSourceRef,both fields (dataSource and dataSourceRef) will be set to the samevalue automatically if one of them is empty and the other is non-empty.When namespace is specified in dataSourceRef,dataSource isn't set to the same value and must be empty.There are three important differences between dataSource and dataSourceRef:* While dataSource only allows two specific types of objects, dataSourceRef allows any non-core object, as well as PersistentVolumeClaim objects.* While dataSource ignores disallowed values (dropping them), dataSourceRef preserves all values, and generates an error if a disallowed value is specified.* While dataSource only allows local objects, dataSourceRef allows objects in any namespaces.(Beta) Using this field requires the AnyVolumeDataSource feature gate to be enabled.(Alpha) Using the namespace field of dataSourceRef requires the CrossNamespaceVolumeDataSource feature gate to be enabled. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--volumes--ephemeral--volume_claim_template--spec--data_source_ref))
-- `resources` (Attributes) resources represents the minimum resources the volume should have.If RecoverVolumeExpansionFailure feature is enabled users are allowed to specify resource requirementsthat are lower than previous value but must still be higher than capacity recorded in thestatus field of the claim.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--volumes--ephemeral--volume_claim_template--spec--resources))
-- `selector` (Attributes) selector is a label query over volumes to consider for binding. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--volumes--ephemeral--volume_claim_template--spec--selector))
-- `storage_class_name` (String) storageClassName is the name of the StorageClass required by the claim.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#class-1
-- `volume_mode` (String) volumeMode defines what type of volume is required by the claim.Value of Filesystem is implied when not included in claim spec.
-- `volume_name` (String) volumeName is the binding reference to the PersistentVolume backing this claim.
-
-
-### Nested Schema for `spec.component_defs.pod_spec.volumes.ephemeral.volume_claim_template.spec.data_source`
-
-Required:
-
-- `kind` (String) Kind is the type of resource being referenced
-- `name` (String) Name is the name of resource being referenced
-
-Optional:
-
-- `api_group` (String) APIGroup is the group for the resource being referenced.If APIGroup is not specified, the specified Kind must be in the core API group.For any other third-party types, APIGroup is required.
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.volumes.ephemeral.volume_claim_template.spec.data_source_ref`
-
-Required:
-
-- `kind` (String) Kind is the type of resource being referenced
-- `name` (String) Name is the name of resource being referenced
-
-Optional:
-
-- `api_group` (String) APIGroup is the group for the resource being referenced.If APIGroup is not specified, the specified Kind must be in the core API group.For any other third-party types, APIGroup is required.
-- `namespace` (String) Namespace is the namespace of resource being referencedNote that when a namespace is specified, a gateway.networking.k8s.io/ReferenceGrant object is required in the referent namespace to allow that namespace's owner to accept the reference. See the ReferenceGrant documentation for details.(Alpha) This field requires the CrossNamespaceVolumeDataSource feature gate to be enabled.
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.volumes.ephemeral.volume_claim_template.spec.resources`
-
-Optional:
-
-- `claims` (Attributes List) Claims lists the names of resources, defined in spec.resourceClaims,that are used by this container.This is an alpha field and requires enabling theDynamicResourceAllocation feature gate.This field is immutable. It can only be set for containers. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--volumes--ephemeral--volume_claim_template--spec--resources--claims))
-- `limits` (Map of String) Limits describes the maximum amount of compute resources allowed.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-- `requests` (Map of String) Requests describes the minimum amount of compute resources required.If Requests is omitted for a container, it defaults to Limits if that is explicitly specified,otherwise to an implementation-defined value. Requests cannot exceed Limits.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-
-
-### Nested Schema for `spec.component_defs.pod_spec.volumes.ephemeral.volume_claim_template.spec.resources.claims`
-
-Required:
-
-- `name` (String) Name must match the name of one entry in pod.spec.resourceClaims ofthe Pod where this field is used. It makes that resource availableinside a container.
-
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.volumes.ephemeral.volume_claim_template.spec.selector`
-
-Optional:
-
-- `match_expressions` (Attributes List) matchExpressions is a list of label selector requirements. The requirements are ANDed. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--volumes--ephemeral--volume_claim_template--spec--selector--match_expressions))
-- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.
-
-
-### Nested Schema for `spec.component_defs.pod_spec.volumes.ephemeral.volume_claim_template.spec.selector.match_expressions`
-
-Required:
-
-- `key` (String) key is the label key that the selector applies to.
-- `operator` (String) operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.
-
-Optional:
-
-- `values` (List of String) values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.
-
-
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.volumes.ephemeral.volume_claim_template.metadata`
-
-Optional:
-
-- `annotations` (Map of String)
-- `finalizers` (List of String)
-- `labels` (Map of String)
-- `name` (String)
-- `namespace` (String)
-
-
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.volumes.fc`
-
-Optional:
-
-- `fs_type` (String) fsType is the filesystem type to mount.Must be a filesystem type supported by the host operating system.Ex. 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified.TODO: how do we prevent errors in the filesystem from compromising the machine
-- `lun` (Number) lun is Optional: FC target lun number
-- `read_only` (Boolean) readOnly is Optional: Defaults to false (read/write). ReadOnly here will forcethe ReadOnly setting in VolumeMounts.
-- `target_ww_ns` (List of String) targetWWNs is Optional: FC target worldwide names (WWNs)
-- `wwids` (List of String) wwids Optional: FC volume world wide identifiers (wwids)Either wwids or combination of targetWWNs and lun must be set, but not both simultaneously.
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.volumes.flex_volume`
-
-Required:
-
-- `driver` (String) driver is the name of the driver to use for this volume.
-
-Optional:
-
-- `fs_type` (String) fsType is the filesystem type to mount.Must be a filesystem type supported by the host operating system.Ex. 'ext4', 'xfs', 'ntfs'. The default filesystem depends on FlexVolume script.
-- `options` (Map of String) options is Optional: this field holds extra command options if any.
-- `read_only` (Boolean) readOnly is Optional: defaults to false (read/write). ReadOnly here will forcethe ReadOnly setting in VolumeMounts.
-- `secret_ref` (Attributes) secretRef is Optional: secretRef is reference to the secret object containingsensitive information to pass to the plugin scripts. This may beempty if no secret object is specified. If the secret objectcontains more than one secret, all secrets are passed to the pluginscripts. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--volumes--flex_volume--secret_ref))
-
-
-### Nested Schema for `spec.component_defs.pod_spec.volumes.flex_volume.secret_ref`
-
-Optional:
-
-- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
-
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.volumes.flocker`
-
-Optional:
-
-- `dataset_name` (String) datasetName is Name of the dataset stored as metadata -> name on the dataset for Flockershould be considered as deprecated
-- `dataset_uuid` (String) datasetUUID is the UUID of the dataset. This is unique identifier of a Flocker dataset
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.volumes.gce_persistent_disk`
-
-Required:
-
-- `pd_name` (String) pdName is unique name of the PD resource in GCE. Used to identify the disk in GCE.More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk
-
-Optional:
-
-- `fs_type` (String) fsType is filesystem type of the volume that you want to mount.Tip: Ensure that the filesystem type is supported by the host operating system.Examples: 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified.More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdiskTODO: how do we prevent errors in the filesystem from compromising the machine
-- `partition` (Number) partition is the partition in the volume that you want to mount.If omitted, the default is to mount by volume name.Examples: For volume /dev/sda1, you specify the partition as '1'.Similarly, the volume partition for /dev/sda is '0' (or you can leave the property empty).More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk
-- `read_only` (Boolean) readOnly here will force the ReadOnly setting in VolumeMounts.Defaults to false.More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.volumes.git_repo`
-
-Required:
-
-- `repository` (String) repository is the URL
-
-Optional:
-
-- `directory` (String) directory is the target directory name.Must not contain or start with '..'. If '.' is supplied, the volume directory will be thegit repository. Otherwise, if specified, the volume will contain the git repository inthe subdirectory with the given name.
-- `revision` (String) revision is the commit hash for the specified revision.
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.volumes.glusterfs`
-
-Required:
-
-- `endpoints` (String) endpoints is the endpoint name that details Glusterfs topology.More info: https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod
-- `path` (String) path is the Glusterfs volume path.More info: https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod
-
-Optional:
-
-- `read_only` (Boolean) readOnly here will force the Glusterfs volume to be mounted with read-only permissions.Defaults to false.More info: https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.volumes.host_path`
-
-Required:
-
-- `path` (String) path of the directory on the host.If the path is a symlink, it will follow the link to the real path.More info: https://kubernetes.io/docs/concepts/storage/volumes#hostpath
-
-Optional:
-
-- `type` (String) type for HostPath VolumeDefaults to ''More info: https://kubernetes.io/docs/concepts/storage/volumes#hostpath
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.volumes.iscsi`
-
-Required:
-
-- `iqn` (String) iqn is the target iSCSI Qualified Name.
-- `lun` (Number) lun represents iSCSI Target Lun number.
-- `target_portal` (String) targetPortal is iSCSI Target Portal. The Portal is either an IP or ip_addr:port if the portis other than default (typically TCP ports 860 and 3260).
-
-Optional:
-
-- `chap_auth_discovery` (Boolean) chapAuthDiscovery defines whether support iSCSI Discovery CHAP authentication
-- `chap_auth_session` (Boolean) chapAuthSession defines whether support iSCSI Session CHAP authentication
-- `fs_type` (String) fsType is the filesystem type of the volume that you want to mount.Tip: Ensure that the filesystem type is supported by the host operating system.Examples: 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified.More info: https://kubernetes.io/docs/concepts/storage/volumes#iscsiTODO: how do we prevent errors in the filesystem from compromising the machine
-- `initiator_name` (String) initiatorName is the custom iSCSI Initiator Name.If initiatorName is specified with iscsiInterface simultaneously, new iSCSI interface: will be created for the connection.
-- `iscsi_interface` (String) iscsiInterface is the interface Name that uses an iSCSI transport.Defaults to 'default' (tcp).
-- `portals` (List of String) portals is the iSCSI Target Portal List. The portal is either an IP or ip_addr:port if the portis other than default (typically TCP ports 860 and 3260).
-- `read_only` (Boolean) readOnly here will force the ReadOnly setting in VolumeMounts.Defaults to false.
-- `secret_ref` (Attributes) secretRef is the CHAP Secret for iSCSI target and initiator authentication (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--volumes--iscsi--secret_ref))
-
-
-### Nested Schema for `spec.component_defs.pod_spec.volumes.iscsi.secret_ref`
-
-Optional:
-
-- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
-
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.volumes.nfs`
-
-Required:
-
-- `path` (String) path that is exported by the NFS server.More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs
-- `server` (String) server is the hostname or IP address of the NFS server.More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs
-
-Optional:
-
-- `read_only` (Boolean) readOnly here will force the NFS export to be mounted with read-only permissions.Defaults to false.More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.volumes.persistent_volume_claim`
-
-Required:
-
-- `claim_name` (String) claimName is the name of a PersistentVolumeClaim in the same namespace as the pod using this volume.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims
-
-Optional:
-
-- `read_only` (Boolean) readOnly Will force the ReadOnly setting in VolumeMounts.Default false.
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.volumes.photon_persistent_disk`
-
-Required:
-
-- `pd_id` (String) pdID is the ID that identifies Photon Controller persistent disk
-
-Optional:
-
-- `fs_type` (String) fsType is the filesystem type to mount.Must be a filesystem type supported by the host operating system.Ex. 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified.
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.volumes.portworx_volume`
-
-Required:
-
-- `volume_id` (String) volumeID uniquely identifies a Portworx volume
-
-Optional:
-
-- `fs_type` (String) fSType represents the filesystem type to mountMust be a filesystem type supported by the host operating system.Ex. 'ext4', 'xfs'. Implicitly inferred to be 'ext4' if unspecified.
-- `read_only` (Boolean) readOnly defaults to false (read/write). ReadOnly here will forcethe ReadOnly setting in VolumeMounts.
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.volumes.projected`
-
-Optional:
-
-- `default_mode` (Number) defaultMode are the mode bits used to set permissions on created files by default.Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511.YAML accepts both octal and decimal values, JSON requires decimal values for mode bits.Directories within the path are not affected by this setting.This might be in conflict with other options that affect the filemode, like fsGroup, and the result can be other mode bits set.
-- `sources` (Attributes List) sources is the list of volume projections (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--volumes--projected--sources))
-
-
-### Nested Schema for `spec.component_defs.pod_spec.volumes.projected.sources`
-
-Optional:
-
-- `config_map` (Attributes) configMap information about the configMap data to project (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--volumes--projected--sources--config_map))
-- `downward_api` (Attributes) downwardAPI information about the downwardAPI data to project (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--volumes--projected--sources--downward_api))
-- `secret` (Attributes) secret information about the secret data to project (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--volumes--projected--sources--secret))
-- `service_account_token` (Attributes) serviceAccountToken is information about the serviceAccountToken data to project (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--volumes--projected--sources--service_account_token))
-
-
-### Nested Schema for `spec.component_defs.pod_spec.volumes.projected.sources.config_map`
-
-Optional:
-
-- `items` (Attributes List) items if unspecified, each key-value pair in the Data field of the referencedConfigMap will be projected into the volume as a file whose name is thekey and content is the value. If specified, the listed keys will beprojected into the specified paths, and unlisted keys will not bepresent. If a key is specified which is not present in the ConfigMap,the volume setup will error unless it is marked optional. Paths must berelative and may not contain the '..' path or start with '..'. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--volumes--projected--sources--config_map--items))
-- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
-- `optional` (Boolean) optional specify whether the ConfigMap or its keys must be defined
-
-
-### Nested Schema for `spec.component_defs.pod_spec.volumes.projected.sources.config_map.items`
-
-Required:
-
-- `key` (String) key is the key to project.
-- `path` (String) path is the relative path of the file to map the key to.May not be an absolute path.May not contain the path element '..'.May not start with the string '..'.
-
-Optional:
-
-- `mode` (Number) mode is Optional: mode bits used to set permissions on this file.Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511.YAML accepts both octal and decimal values, JSON requires decimal values for mode bits.If not specified, the volume defaultMode will be used.This might be in conflict with other options that affect the filemode, like fsGroup, and the result can be other mode bits set.
-
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.volumes.projected.sources.downward_api`
-
-Optional:
-
-- `items` (Attributes List) Items is a list of DownwardAPIVolume file (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--volumes--projected--sources--downward_api--items))
-
-
-### Nested Schema for `spec.component_defs.pod_spec.volumes.projected.sources.downward_api.items`
-
-Required:
-
-- `path` (String) Required: Path is the relative path name of the file to be created. Must not be absolute or contain the '..' path. Must be utf-8 encoded. The first item of the relative path must not start with '..'
-
-Optional:
-
-- `field_ref` (Attributes) Required: Selects a field of the pod: only annotations, labels, name and namespace are supported. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--volumes--projected--sources--downward_api--items--field_ref))
-- `mode` (Number) Optional: mode bits used to set permissions on this file, must be an octal valuebetween 0000 and 0777 or a decimal value between 0 and 511.YAML accepts both octal and decimal values, JSON requires decimal values for mode bits.If not specified, the volume defaultMode will be used.This might be in conflict with other options that affect the filemode, like fsGroup, and the result can be other mode bits set.
-- `resource_field_ref` (Attributes) Selects a resource of the container: only resources limits and requests(limits.cpu, limits.memory, requests.cpu and requests.memory) are currently supported. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--volumes--projected--sources--downward_api--items--resource_field_ref))
-
-
-### Nested Schema for `spec.component_defs.pod_spec.volumes.projected.sources.downward_api.items.field_ref`
-
-Required:
-
-- `field_path` (String) Path of the field to select in the specified API version.
-
-Optional:
-
-- `api_version` (String) Version of the schema the FieldPath is written in terms of, defaults to 'v1'.
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.volumes.projected.sources.downward_api.items.resource_field_ref`
-
-Required:
-
-- `resource` (String) Required: resource to select
-
-Optional:
-
-- `container_name` (String) Container name: required for volumes, optional for env vars
-- `divisor` (String) Specifies the output format of the exposed resources, defaults to '1'
-
-
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.volumes.projected.sources.secret`
-
-Optional:
-
-- `items` (Attributes List) items if unspecified, each key-value pair in the Data field of the referencedSecret will be projected into the volume as a file whose name is thekey and content is the value. If specified, the listed keys will beprojected into the specified paths, and unlisted keys will not bepresent. If a key is specified which is not present in the Secret,the volume setup will error unless it is marked optional. Paths must berelative and may not contain the '..' path or start with '..'. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--volumes--projected--sources--secret--items))
-- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
-- `optional` (Boolean) optional field specify whether the Secret or its key must be defined
-
-
-### Nested Schema for `spec.component_defs.pod_spec.volumes.projected.sources.secret.items`
-
-Required:
-
-- `key` (String) key is the key to project.
-- `path` (String) path is the relative path of the file to map the key to.May not be an absolute path.May not contain the path element '..'.May not start with the string '..'.
-
-Optional:
-
-- `mode` (Number) mode is Optional: mode bits used to set permissions on this file.Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511.YAML accepts both octal and decimal values, JSON requires decimal values for mode bits.If not specified, the volume defaultMode will be used.This might be in conflict with other options that affect the filemode, like fsGroup, and the result can be other mode bits set.
-
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.volumes.projected.sources.service_account_token`
-
-Required:
-
-- `path` (String) path is the path relative to the mount point of the file to project thetoken into.
-
-Optional:
-
-- `audience` (String) audience is the intended audience of the token. A recipient of a tokenmust identify itself with an identifier specified in the audience of thetoken, and otherwise should reject the token. The audience defaults to theidentifier of the apiserver.
-- `expiration_seconds` (Number) expirationSeconds is the requested duration of validity of the serviceaccount token. As the token approaches expiration, the kubelet volumeplugin will proactively rotate the service account token. The kubelet willstart trying to rotate the token if the token is older than 80 percent ofits time to live or if the token is older than 24 hours.Defaults to 1 hourand must be at least 10 minutes.
-
-
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.volumes.quobyte`
-
-Required:
-
-- `registry` (String) registry represents a single or multiple Quobyte Registry servicesspecified as a string as host:port pair (multiple entries are separated with commas)which acts as the central registry for volumes
-- `volume` (String) volume is a string that references an already created Quobyte volume by name.
-
-Optional:
-
-- `group` (String) group to map volume access toDefault is no group
-- `read_only` (Boolean) readOnly here will force the Quobyte volume to be mounted with read-only permissions.Defaults to false.
-- `tenant` (String) tenant owning the given Quobyte volume in the BackendUsed with dynamically provisioned Quobyte volumes, value is set by the plugin
-- `user` (String) user to map volume access toDefaults to serivceaccount user
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.volumes.rbd`
-
-Required:
-
-- `image` (String) image is the rados image name.More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
-- `monitors` (List of String) monitors is a collection of Ceph monitors.More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
-
-Optional:
-
-- `fs_type` (String) fsType is the filesystem type of the volume that you want to mount.Tip: Ensure that the filesystem type is supported by the host operating system.Examples: 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified.More info: https://kubernetes.io/docs/concepts/storage/volumes#rbdTODO: how do we prevent errors in the filesystem from compromising the machine
-- `keyring` (String) keyring is the path to key ring for RBDUser.Default is /etc/ceph/keyring.More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
-- `pool` (String) pool is the rados pool name.Default is rbd.More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
-- `read_only` (Boolean) readOnly here will force the ReadOnly setting in VolumeMounts.Defaults to false.More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
-- `secret_ref` (Attributes) secretRef is name of the authentication secret for RBDUser. If providedoverrides keyring.Default is nil.More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--volumes--rbd--secret_ref))
-- `user` (String) user is the rados user name.Default is admin.More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
-
-
-### Nested Schema for `spec.component_defs.pod_spec.volumes.rbd.secret_ref`
-
-Optional:
-
-- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
-
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.volumes.scale_io`
-
-Required:
-
-- `gateway` (String) gateway is the host address of the ScaleIO API Gateway.
-- `secret_ref` (Attributes) secretRef references to the secret for ScaleIO user and othersensitive information. If this is not provided, Login operation will fail. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--volumes--scale_io--secret_ref))
-- `system` (String) system is the name of the storage system as configured in ScaleIO.
-
-Optional:
-
-- `fs_type` (String) fsType is the filesystem type to mount.Must be a filesystem type supported by the host operating system.Ex. 'ext4', 'xfs', 'ntfs'.Default is 'xfs'.
-- `protection_domain` (String) protectionDomain is the name of the ScaleIO Protection Domain for the configured storage.
-- `read_only` (Boolean) readOnly Defaults to false (read/write). ReadOnly here will forcethe ReadOnly setting in VolumeMounts.
-- `ssl_enabled` (Boolean) sslEnabled Flag enable/disable SSL communication with Gateway, default false
-- `storage_mode` (String) storageMode indicates whether the storage for a volume should be ThickProvisioned or ThinProvisioned.Default is ThinProvisioned.
-- `storage_pool` (String) storagePool is the ScaleIO Storage Pool associated with the protection domain.
-- `volume_name` (String) volumeName is the name of a volume already created in the ScaleIO systemthat is associated with this volume source.
-
-
-### Nested Schema for `spec.component_defs.pod_spec.volumes.scale_io.secret_ref`
-
-Optional:
-
-- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
-
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.volumes.secret`
-
-Optional:
-
-- `default_mode` (Number) defaultMode is Optional: mode bits used to set permissions on created files by default.Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511.YAML accepts both octal and decimal values, JSON requires decimal valuesfor mode bits. Defaults to 0644.Directories within the path are not affected by this setting.This might be in conflict with other options that affect the filemode, like fsGroup, and the result can be other mode bits set.
-- `items` (Attributes List) items If unspecified, each key-value pair in the Data field of the referencedSecret will be projected into the volume as a file whose name is thekey and content is the value. If specified, the listed keys will beprojected into the specified paths, and unlisted keys will not bepresent. If a key is specified which is not present in the Secret,the volume setup will error unless it is marked optional. Paths must berelative and may not contain the '..' path or start with '..'. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--volumes--secret--items))
-- `optional` (Boolean) optional field specify whether the Secret or its keys must be defined
-- `secret_name` (String) secretName is the name of the secret in the pod's namespace to use.More info: https://kubernetes.io/docs/concepts/storage/volumes#secret
-
-
-### Nested Schema for `spec.component_defs.pod_spec.volumes.secret.items`
-
-Required:
-
-- `key` (String) key is the key to project.
-- `path` (String) path is the relative path of the file to map the key to.May not be an absolute path.May not contain the path element '..'.May not start with the string '..'.
-
-Optional:
-
-- `mode` (Number) mode is Optional: mode bits used to set permissions on this file.Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511.YAML accepts both octal and decimal values, JSON requires decimal values for mode bits.If not specified, the volume defaultMode will be used.This might be in conflict with other options that affect the filemode, like fsGroup, and the result can be other mode bits set.
-
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.volumes.storageos`
-
-Optional:
-
-- `fs_type` (String) fsType is the filesystem type to mount.Must be a filesystem type supported by the host operating system.Ex. 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified.
-- `read_only` (Boolean) readOnly defaults to false (read/write). ReadOnly here will forcethe ReadOnly setting in VolumeMounts.
-- `secret_ref` (Attributes) secretRef specifies the secret to use for obtaining the StorageOS APIcredentials. If not specified, default values will be attempted. (see [below for nested schema](#nestedatt--spec--component_defs--pod_spec--volumes--storageos--secret_ref))
-- `volume_name` (String) volumeName is the human-readable name of the StorageOS volume. Volumenames are only unique within a namespace.
-- `volume_namespace` (String) volumeNamespace specifies the scope of the volume within StorageOS. If nonamespace is specified then the Pod's namespace will be used. This allows theKubernetes name scoping to be mirrored within StorageOS for tighter integration.Set VolumeName to any name to override the default behaviour.Set to 'default' if you are not using namespaces within StorageOS.Namespaces that do not pre-exist within StorageOS will be created.
-
-
-### Nested Schema for `spec.component_defs.pod_spec.volumes.storageos.secret_ref`
-
-Optional:
-
-- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
-
-
-
-
-### Nested Schema for `spec.component_defs.pod_spec.volumes.vsphere_volume`
-
-Required:
-
-- `volume_path` (String) volumePath is the path that identifies vSphere volume vmdk
-
-Optional:
-
-- `fs_type` (String) fsType is filesystem type to mount.Must be a filesystem type supported by the host operating system.Ex. 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified.
-- `storage_policy_id` (String) storagePolicyID is the storage Policy Based Management (SPBM) profile ID associated with the StoragePolicyName.
-- `storage_policy_name` (String) storagePolicyName is the storage Policy Based Management (SPBM) profile name.
-
-
-
-
-
-### Nested Schema for `spec.component_defs.post_start_spec`
-
-Required:
-
-- `cmd_executor_config` (Attributes) Specifies the post-start command to be executed. (see [below for nested schema](#nestedatt--spec--component_defs--post_start_spec--cmd_executor_config))
-
-Optional:
-
-- `script_spec_selectors` (Attributes List) Used to select the script that need to be referenced.When defined, the scripts defined in scriptSpecs can be referenced within the CmdExecutorConfig. (see [below for nested schema](#nestedatt--spec--component_defs--post_start_spec--script_spec_selectors))
-
-
-### Nested Schema for `spec.component_defs.post_start_spec.cmd_executor_config`
-
-Required:
-
-- `command` (List of String) The command to be executed.
-- `image` (String) Specifies the image used to execute the command.
-
-Optional:
-
-- `args` (List of String) Additional parameters used in the execution of the command.
-- `env` (Map of String) A list of environment variables that will be injected into the command execution context.
-
-
-
-### Nested Schema for `spec.component_defs.post_start_spec.script_spec_selectors`
-
-Required:
-
-- `name` (String) Represents the name of the ScriptSpec referent.
-
-
-
-
-### Nested Schema for `spec.component_defs.probes`
-
-Optional:
-
-- `role_probe` (Attributes) Specifies the probe used for checking the role of the component. (see [below for nested schema](#nestedatt--spec--component_defs--probes--role_probe))
-- `role_probe_timeout_after_pods_ready` (Number) Defines the timeout (in seconds) for the role probe after all pods of the component are ready.The system will check if the application is available in the pod.If pods exceed the InitializationTimeoutSeconds time without a role label, this component will enter theFailed/Abnormal phase.Note that this configuration will only take effect if the component supports RoleProbeand will not affect the life cycle of the pod. default values are 60 seconds.
-- `running_probe` (Attributes) Specifies the probe used for checking the running status of the component. (see [below for nested schema](#nestedatt--spec--component_defs--probes--running_probe))
-- `status_probe` (Attributes) Specifies the probe used for checking the status of the component. (see [below for nested schema](#nestedatt--spec--component_defs--probes--status_probe))
-
-
-### Nested Schema for `spec.component_defs.probes.role_probe`
-
-Optional:
-
-- `commands` (Attributes) Commands used to execute for probe. (see [below for nested schema](#nestedatt--spec--component_defs--probes--role_probe--commands))
-- `failure_threshold` (Number) Minimum consecutive failures for the probe to be considered failed after having succeeded.
-- `period_seconds` (Number) How often (in seconds) to perform the probe.
-- `timeout_seconds` (Number) Number of seconds after which the probe times out. Defaults to 1 second.
-
-
-### Nested Schema for `spec.component_defs.probes.role_probe.commands`
-
-Optional:
-
-- `queries` (List of String) Defines read checks that are executed on the probe sidecar.
-- `writes` (List of String) Defines write checks that are executed on the probe sidecar.
-
-
-
-
-### Nested Schema for `spec.component_defs.probes.running_probe`
-
-Optional:
-
-- `commands` (Attributes) Commands used to execute for probe. (see [below for nested schema](#nestedatt--spec--component_defs--probes--running_probe--commands))
-- `failure_threshold` (Number) Minimum consecutive failures for the probe to be considered failed after having succeeded.
-- `period_seconds` (Number) How often (in seconds) to perform the probe.
-- `timeout_seconds` (Number) Number of seconds after which the probe times out. Defaults to 1 second.
-
-
-### Nested Schema for `spec.component_defs.probes.running_probe.commands`
-
-Optional:
-
-- `queries` (List of String) Defines read checks that are executed on the probe sidecar.
-- `writes` (List of String) Defines write checks that are executed on the probe sidecar.
-
-
-
-
-### Nested Schema for `spec.component_defs.probes.status_probe`
-
-Optional:
-
-- `commands` (Attributes) Commands used to execute for probe. (see [below for nested schema](#nestedatt--spec--component_defs--probes--status_probe--commands))
-- `failure_threshold` (Number) Minimum consecutive failures for the probe to be considered failed after having succeeded.
-- `period_seconds` (Number) How often (in seconds) to perform the probe.
-- `timeout_seconds` (Number) Number of seconds after which the probe times out. Defaults to 1 second.
-
-
-### Nested Schema for `spec.component_defs.probes.status_probe.commands`
-
-Optional:
-
-- `queries` (List of String) Defines read checks that are executed on the probe sidecar.
-- `writes` (List of String) Defines write checks that are executed on the probe sidecar.
-
-
-
-
-
-### Nested Schema for `spec.component_defs.replication_spec`
-
-Optional:
-
-- `ll_pod_management_policy` (String) Controls the creation of pods during initial scale up, replacement of pods on nodes, and scaling down.- 'OrderedReady': Creates pods in increasing order (pod-0, then pod-1, etc). The controller waits until each podis ready before continuing. Pods are removed in reverse order when scaling down.- 'Parallel': Creates pods in parallel to match the desired scale without waiting. All pods are deleted at oncewhen scaling down.
-- `ll_update_strategy` (Attributes) Specifies the low-level StatefulSetUpdateStrategy to be used when updating Pods in the StatefulSet upon arevision to the Template.'UpdateStrategy' will be ignored if this is provided. (see [below for nested schema](#nestedatt--spec--component_defs--replication_spec--ll_update_strategy))
-- `update_strategy` (String) Specifies the strategy for updating Pods.For workloadType='Consensus', the update strategy can be one of the following:- 'Serial': Updates Members sequentially to minimize component downtime.- 'BestEffortParallel': Updates Members in parallel to minimize component write downtime. Majority remains onlineat all times.- 'Parallel': Forces parallel updates.
-
-
-### Nested Schema for `spec.component_defs.replication_spec.ll_update_strategy`
-
-Optional:
-
-- `rolling_update` (Attributes) RollingUpdate is used to communicate parameters when Type is RollingUpdateStatefulSetStrategyType. (see [below for nested schema](#nestedatt--spec--component_defs--replication_spec--ll_update_strategy--rolling_update))
-- `type` (String) Type indicates the type of the StatefulSetUpdateStrategy.Default is RollingUpdate.
-
-
-### Nested Schema for `spec.component_defs.replication_spec.ll_update_strategy.rolling_update`
-
-Optional:
-
-- `max_unavailable` (String) The maximum number of pods that can be unavailable during the update.Value can be an absolute number (ex: 5) or a percentage of desired pods (ex: 10%).Absolute number is calculated from percentage by rounding up. This can not be 0.Defaults to 1. This field is alpha-level and is only honored by servers that enable theMaxUnavailableStatefulSet feature. The field applies to all pods in the range 0 toReplicas-1. That means if there is any unavailable pod in the range 0 to Replicas-1, itwill be counted towards MaxUnavailable.
-- `partition` (Number) Partition indicates the ordinal at which the StatefulSet should be partitionedfor updates. During a rolling update, all pods from ordinal Replicas-1 toPartition are updated. All pods from ordinal Partition-1 to 0 remain untouched.This is helpful in being able to do a canary based deployment. The default value is 0.
-
-
-
-
-
-### Nested Schema for `spec.component_defs.rsm_spec`
-
-Optional:
-
-- `member_update_strategy` (String) Describes the strategy for updating Members (Pods).- 'Serial': Updates Members sequentially to ensure minimum component downtime.- 'BestEffortParallel': Updates Members in parallel to ensure minimum component write downtime.- 'Parallel': Forces parallel updates.
-- `membership_reconfiguration` (Attributes) Indicates the actions required for dynamic membership reconfiguration. (see [below for nested schema](#nestedatt--spec--component_defs--rsm_spec--membership_reconfiguration))
-- `role_probe` (Attributes) Defines the method used to probe a role. (see [below for nested schema](#nestedatt--spec--component_defs--rsm_spec--role_probe))
-- `roles` (Attributes List) Specifies a list of roles defined within the system. (see [below for nested schema](#nestedatt--spec--component_defs--rsm_spec--roles))
-
-
-### Nested Schema for `spec.component_defs.rsm_spec.membership_reconfiguration`
-
-Optional:
-
-- `log_sync_action` (Attributes) Defines the action to trigger the new member to start log syncing.If the Image is not configured, the Image from the previous non-nil action will be used. (see [below for nested schema](#nestedatt--spec--component_defs--rsm_spec--membership_reconfiguration--log_sync_action))
-- `member_join_action` (Attributes) Defines the action to add a member.If the Image is not configured, the Image from the previous non-nil action will be used. (see [below for nested schema](#nestedatt--spec--component_defs--rsm_spec--membership_reconfiguration--member_join_action))
-- `member_leave_action` (Attributes) Defines the action to remove a member.If the Image is not configured, the Image from the previous non-nil action will be used. (see [below for nested schema](#nestedatt--spec--component_defs--rsm_spec--membership_reconfiguration--member_leave_action))
-- `promote_action` (Attributes) Defines the action to inform the cluster that the new member can join voting now.If the Image is not configured, the Image from the previous non-nil action will be used. (see [below for nested schema](#nestedatt--spec--component_defs--rsm_spec--membership_reconfiguration--promote_action))
-- `switchover_action` (Attributes) Specifies the environment variables that can be used in all following Actions:- KB_ITS_USERNAME: Represents the username part of the credential- KB_ITS_PASSWORD: Represents the password part of the credential- KB_ITS_LEADER_HOST: Represents the leader host- KB_ITS_TARGET_HOST: Represents the target host- KB_ITS_SERVICE_PORT: Represents the service portDefines the action to perform a switchover.If the Image is not configured, the latest [BusyBox](https://busybox.net/) image will be used. (see [below for nested schema](#nestedatt--spec--component_defs--rsm_spec--membership_reconfiguration--switchover_action))
-
-
-### Nested Schema for `spec.component_defs.rsm_spec.membership_reconfiguration.log_sync_action`
-
-Required:
-
-- `command` (List of String) A set of instructions that will be executed within the Container to retrieve or process role information. This field is required.
-
-Optional:
-
-- `args` (List of String) Additional parameters used to perform specific statements. This field is optional.
-- `image` (String) Refers to the utility image that contains the command which can be utilized to retrieve or process role information.
-
-
-
-### Nested Schema for `spec.component_defs.rsm_spec.membership_reconfiguration.member_join_action`
-
-Required:
-
-- `command` (List of String) A set of instructions that will be executed within the Container to retrieve or process role information. This field is required.
-
-Optional:
-
-- `args` (List of String) Additional parameters used to perform specific statements. This field is optional.
-- `image` (String) Refers to the utility image that contains the command which can be utilized to retrieve or process role information.
-
-
-
-### Nested Schema for `spec.component_defs.rsm_spec.membership_reconfiguration.member_leave_action`
-
-Required:
-
-- `command` (List of String) A set of instructions that will be executed within the Container to retrieve or process role information. This field is required.
-
-Optional:
-
-- `args` (List of String) Additional parameters used to perform specific statements. This field is optional.
-- `image` (String) Refers to the utility image that contains the command which can be utilized to retrieve or process role information.
-
-
-
-### Nested Schema for `spec.component_defs.rsm_spec.membership_reconfiguration.promote_action`
-
-Required:
-
-- `command` (List of String) A set of instructions that will be executed within the Container to retrieve or process role information. This field is required.
-
-Optional:
-
-- `args` (List of String) Additional parameters used to perform specific statements. This field is optional.
-- `image` (String) Refers to the utility image that contains the command which can be utilized to retrieve or process role information.
-
-
-
-### Nested Schema for `spec.component_defs.rsm_spec.membership_reconfiguration.switchover_action`
-
-Required:
-
-- `command` (List of String) A set of instructions that will be executed within the Container to retrieve or process role information. This field is required.
-
-Optional:
-
-- `args` (List of String) Additional parameters used to perform specific statements. This field is optional.
-- `image` (String) Refers to the utility image that contains the command which can be utilized to retrieve or process role information.
-
-
-
-
-### Nested Schema for `spec.component_defs.rsm_spec.role_probe`
-
-Optional:
-
-- `builtin_handler_name` (String) Specifies the builtin handler name to use to probe the role of the main container.Available handlers include: mysql, postgres, mongodb, redis, etcd, kafka.Use CustomHandler to define a custom role probe function if none of the built-in handlers meet the requirement.
-- `custom_handler` (Attributes List) Defines a custom method for role probing.If the BuiltinHandler meets the requirement, use it instead.Actions defined here are executed in series.Upon completion of all actions, the final output should be a single string representing the role name defined in spec.Roles.The latest [BusyBox](https://busybox.net/) image will be used if Image is not configured.Environment variables can be used in Command:- v_KB_ITS_LAST_STDOUT: stdout from the last action, watch for 'v_' prefix- KB_ITS_USERNAME: username part of the credential- KB_ITS_PASSWORD: password part of the credential (see [below for nested schema](#nestedatt--spec--component_defs--rsm_spec--role_probe--custom_handler))
-- `failure_threshold` (Number) Specifies the minimum number of consecutive failures for the probe to be considered failed after having succeeded.
-- `initial_delay_seconds` (Number) Specifies the number of seconds to wait after the container has started before initiating role probing.
-- `period_seconds` (Number) Specifies the frequency (in seconds) of probe execution.
-- `role_update_mechanism` (String) Specifies the method for updating the pod role label.
-- `success_threshold` (Number) Specifies the minimum number of consecutive successes for the probe to be considered successful after having failed.
-- `timeout_seconds` (Number) Specifies the number of seconds after which the probe times out.
-
-
-### Nested Schema for `spec.component_defs.rsm_spec.role_probe.custom_handler`
-
-Required:
-
-- `command` (List of String) A set of instructions that will be executed within the Container to retrieve or process role information. This field is required.
-
-Optional:
-
-- `args` (List of String) Additional parameters used to perform specific statements. This field is optional.
-- `image` (String) Refers to the utility image that contains the command which can be utilized to retrieve or process role information.
-
-
-
-
-### Nested Schema for `spec.component_defs.rsm_spec.roles`
-
-Required:
-
-- `access_mode` (String) Specifies the service capabilities of this member.
-- `name` (String) Defines the role name of the replica.
-
-Optional:
-
-- `can_vote` (Boolean) Indicates if this member has voting rights.
-- `is_leader` (Boolean) Determines if this member is the leader.
-
-
-
-
-### Nested Schema for `spec.component_defs.script_specs`
-
-Required:
-
-- `name` (String) Specifies the name of the configuration template.
-- `volume_name` (String) Refers to the volume name of PodTemplate. The configuration file produced through the configurationtemplate will be mounted to the corresponding volume. Must be a DNS_LABEL name.The volume name must be defined in podSpec.containers[*].volumeMounts.
-
-Optional:
-
-- `default_mode` (Number) The operator attempts to set default file permissions for scripts (0555) and configurations (0444).However, certain database engines may require different file permissions.You can specify the desired file permissions here.Must be specified as an octal value between 0000 and 0777 (inclusive),or as a decimal value between 0 and 511 (inclusive).YAML supports both octal and decimal values for file permissions.Please note that this setting only affects the permissions of the files themselves.Directories within the specified path are not impacted by this setting.It's important to be aware that this setting might conflict with other optionsthat influence the file mode, such as fsGroup.In such cases, the resulting file mode may have additional bits set.Refers to documents of k8s.ConfigMapVolumeSource.defaultMode for more information.
-- `namespace` (String) Specifies the namespace of the referenced configuration template ConfigMap object.An empty namespace is equivalent to the 'default' namespace.
-- `template_ref` (String) Specifies the name of the referenced configuration template ConfigMap object.
-
-
-
-### Nested Schema for `spec.component_defs.service`
-
-Optional:
-
-- `ports` (Attributes List) The list of ports that are exposed by this service.More info: https://kubernetes.io/docs/concepts/services-networking/service/#virtual-ips-and-service-proxies (see [below for nested schema](#nestedatt--spec--component_defs--service--ports))
-
-
-### Nested Schema for `spec.component_defs.service.ports`
-
-Required:
-
-- `port` (Number) The port that will be exposed by this service.
-
-Optional:
-
-- `app_protocol` (String) The application protocol for this port.This field follows standard Kubernetes label syntax.Un-prefixed names are reserved for IANA standard service names (as perRFC-6335 and https://www.iana.org/assignments/service-names).Non-standard protocols should use prefixed names such asmycompany.com/my-custom-protocol.
-- `name` (String) The name of this port within the service. This must be a DNS_LABEL.All ports within a ServiceSpec must have unique names. When consideringthe endpoints for a Service, this must match the 'name' field in theEndpointPort.
-- `protocol` (String) The IP protocol for this port. Supports 'TCP', 'UDP', and 'SCTP'.Default is TCP.
-- `target_port` (String) Number or name of the port to access on the pods targeted by the service.Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.- If this is a string, it will be looked up as a named port in the target Pod's container ports.- If this is not specified, the value of the 'port' field is used (an identity map).This field is ignored for services with clusterIP=None, and should beomitted or set equal to the 'port' field.More info: https://kubernetes.io/docs/concepts/services-networking/service/#defining-a-service
-
-
-
-
-### Nested Schema for `spec.component_defs.service_ref_declarations`
-
-Required:
-
-- `name` (String) Specifies the name of the ServiceRefDeclaration.
-- `service_ref_declaration_specs` (Attributes List) Defines a list of constraints and requirements for services that can be bound to this ServiceRefDeclarationupon Cluster creation.Each ServiceRefDeclarationSpec defines a ServiceKind and ServiceVersion,outlining the acceptable service types and versions that are compatible.This flexibility allows a ServiceRefDeclaration to be fulfilled by any one of the provided specs.For example, if it requires an OLTP database, specs for both MySQL and PostgreSQL are listed,either MySQL or PostgreSQL services can be used when binding. (see [below for nested schema](#nestedatt--spec--component_defs--service_ref_declarations--service_ref_declaration_specs))
-
-Optional:
-
-- `optional` (Boolean) Specifies whether the service reference can be optional.For an optional service-ref, the component can still be created even if the service-ref is not provided.
-
-
-### Nested Schema for `spec.component_defs.service_ref_declarations.service_ref_declaration_specs`
-
-Required:
-
-- `service_kind` (String) Specifies the type or nature of the service. This should be a well-known application cluster type, such as{mysql, redis, mongodb}.The field is case-insensitive and supports abbreviations for some well-known databases.For instance, both 'zk' and 'zookeeper' are considered as a ZooKeeper cluster, while 'pg', 'postgres', 'postgresql'are all recognized as a PostgreSQL cluster.
-- `service_version` (String) Defines the service version of the service reference. This is a regular expression that matches a version number pattern.For instance, '^8.0.8$', '8.0.d{1,2}$', '^[v-]*?(d{1,2}.){0,3}d{1,2}$' are all valid patterns.
-
-
-
-
-### Nested Schema for `spec.component_defs.stateful_spec`
-
-Optional:
-
-- `ll_pod_management_policy` (String) Controls the creation of pods during initial scale up, replacement of pods on nodes, and scaling down.- 'OrderedReady': Creates pods in increasing order (pod-0, then pod-1, etc). The controller waits until each podis ready before continuing. Pods are removed in reverse order when scaling down.- 'Parallel': Creates pods in parallel to match the desired scale without waiting. All pods are deleted at oncewhen scaling down.
-- `ll_update_strategy` (Attributes) Specifies the low-level StatefulSetUpdateStrategy to be used when updating Pods in the StatefulSet upon arevision to the Template.'UpdateStrategy' will be ignored if this is provided. (see [below for nested schema](#nestedatt--spec--component_defs--stateful_spec--ll_update_strategy))
-- `update_strategy` (String) Specifies the strategy for updating Pods.For workloadType='Consensus', the update strategy can be one of the following:- 'Serial': Updates Members sequentially to minimize component downtime.- 'BestEffortParallel': Updates Members in parallel to minimize component write downtime. Majority remains onlineat all times.- 'Parallel': Forces parallel updates.
-
-
-### Nested Schema for `spec.component_defs.stateful_spec.ll_update_strategy`
-
-Optional:
-
-- `rolling_update` (Attributes) RollingUpdate is used to communicate parameters when Type is RollingUpdateStatefulSetStrategyType. (see [below for nested schema](#nestedatt--spec--component_defs--stateful_spec--ll_update_strategy--rolling_update))
-- `type` (String) Type indicates the type of the StatefulSetUpdateStrategy.Default is RollingUpdate.
-
-
-### Nested Schema for `spec.component_defs.stateful_spec.ll_update_strategy.rolling_update`
-
-Optional:
-
-- `max_unavailable` (String) The maximum number of pods that can be unavailable during the update.Value can be an absolute number (ex: 5) or a percentage of desired pods (ex: 10%).Absolute number is calculated from percentage by rounding up. This can not be 0.Defaults to 1. This field is alpha-level and is only honored by servers that enable theMaxUnavailableStatefulSet feature. The field applies to all pods in the range 0 toReplicas-1. That means if there is any unavailable pod in the range 0 to Replicas-1, itwill be counted towards MaxUnavailable.
-- `partition` (Number) Partition indicates the ordinal at which the StatefulSet should be partitionedfor updates. During a rolling update, all pods from ordinal Replicas-1 toPartition are updated. All pods from ordinal Partition-1 to 0 remain untouched.This is helpful in being able to do a canary based deployment. The default value is 0.
-
-
-
-
-
-### Nested Schema for `spec.component_defs.stateless_spec`
-
-Optional:
-
-- `update_strategy` (Attributes) Specifies the deployment strategy that will be used to replace existing pods with new ones. (see [below for nested schema](#nestedatt--spec--component_defs--stateless_spec--update_strategy))
-
-
-### Nested Schema for `spec.component_defs.stateless_spec.update_strategy`
-
-Optional:
-
-- `rolling_update` (Attributes) Rolling update config params. Present only if DeploymentStrategyType =RollingUpdate.---TODO: Update this to follow our convention for oneOf, whatever we decide itto be. (see [below for nested schema](#nestedatt--spec--component_defs--stateless_spec--update_strategy--rolling_update))
-- `type` (String) Type of deployment. Can be 'Recreate' or 'RollingUpdate'. Default is RollingUpdate.
-
-
-### Nested Schema for `spec.component_defs.stateless_spec.update_strategy.rolling_update`
-
-Optional:
-
-- `max_surge` (String) The maximum number of pods that can be scheduled above the desired number ofpods.Value can be an absolute number (ex: 5) or a percentage of desired pods (ex: 10%).This can not be 0 if MaxUnavailable is 0.Absolute number is calculated from percentage by rounding up.Defaults to 25%.Example: when this is set to 30%, the new ReplicaSet can be scaled up immediately whenthe rolling update starts, such that the total number of old and new pods do not exceed130% of desired pods. Once old pods have been killed,new ReplicaSet can be scaled up further, ensuring that total number of pods runningat any time during the update is at most 130% of desired pods.
-- `max_unavailable` (String) The maximum number of pods that can be unavailable during the update.Value can be an absolute number (ex: 5) or a percentage of desired pods (ex: 10%).Absolute number is calculated from percentage by rounding down.This can not be 0 if MaxSurge is 0.Defaults to 25%.Example: when this is set to 30%, the old ReplicaSet can be scaled down to 70% of desired podsimmediately when the rolling update starts. Once new pods are ready, old ReplicaSetcan be scaled down further, followed by scaling up the new ReplicaSet, ensuringthat the total number of pods available at all times during the update is atleast 70% of desired pods.
-
-
-
-
-
-### Nested Schema for `spec.component_defs.switchover_spec`
-
-Optional:
-
-- `with_candidate` (Attributes) Represents the action of switching over to a specified candidate primary or leader instance. (see [below for nested schema](#nestedatt--spec--component_defs--switchover_spec--with_candidate))
-- `without_candidate` (Attributes) Represents the action of switching over without specifying a candidate primary or leader instance. (see [below for nested schema](#nestedatt--spec--component_defs--switchover_spec--without_candidate))
-
-
-### Nested Schema for `spec.component_defs.switchover_spec.with_candidate`
-
-Required:
-
-- `cmd_executor_config` (Attributes) Specifies the switchover command. (see [below for nested schema](#nestedatt--spec--component_defs--switchover_spec--with_candidate--cmd_executor_config))
-
-Optional:
-
-- `script_spec_selectors` (Attributes List) Used to select the script that need to be referenced.When defined, the scripts defined in scriptSpecs can be referenced within the SwitchoverAction.CmdExecutorConfig. (see [below for nested schema](#nestedatt--spec--component_defs--switchover_spec--with_candidate--script_spec_selectors))
-
-
-### Nested Schema for `spec.component_defs.switchover_spec.with_candidate.cmd_executor_config`
-
-Required:
-
-- `command` (List of String) The command to be executed.
-- `image` (String) Specifies the image used to execute the command.
-
-Optional:
-
-- `args` (List of String) Additional parameters used in the execution of the command.
-- `env` (Map of String) A list of environment variables that will be injected into the command execution context.
-
-
-
-### Nested Schema for `spec.component_defs.switchover_spec.with_candidate.script_spec_selectors`
-
-Required:
-
-- `name` (String) Represents the name of the ScriptSpec referent.
-
-
-
-
-### Nested Schema for `spec.component_defs.switchover_spec.without_candidate`
-
-Required:
-
-- `cmd_executor_config` (Attributes) Specifies the switchover command. (see [below for nested schema](#nestedatt--spec--component_defs--switchover_spec--without_candidate--cmd_executor_config))
-
-Optional:
-
-- `script_spec_selectors` (Attributes List) Used to select the script that need to be referenced.When defined, the scripts defined in scriptSpecs can be referenced within the SwitchoverAction.CmdExecutorConfig. (see [below for nested schema](#nestedatt--spec--component_defs--switchover_spec--without_candidate--script_spec_selectors))
-
-
-### Nested Schema for `spec.component_defs.switchover_spec.without_candidate.cmd_executor_config`
-
-Required:
-
-- `command` (List of String) The command to be executed.
-- `image` (String) Specifies the image used to execute the command.
-
-Optional:
-
-- `args` (List of String) Additional parameters used in the execution of the command.
-- `env` (Map of String) A list of environment variables that will be injected into the command execution context.
-
-
-
-### Nested Schema for `spec.component_defs.switchover_spec.without_candidate.script_spec_selectors`
-
-Required:
-
-- `name` (String) Represents the name of the ScriptSpec referent.
-
-
-
-
-
-### Nested Schema for `spec.component_defs.system_accounts`
-
-Required:
-
-- `accounts` (Attributes List) Defines the configuration settings for system accounts. (see [below for nested schema](#nestedatt--spec--component_defs--system_accounts--accounts))
-- `cmd_executor_config` (Attributes) Configures how to obtain the client SDK and execute statements. (see [below for nested schema](#nestedatt--spec--component_defs--system_accounts--cmd_executor_config))
-- `password_config` (Attributes) Defines the pattern used to generate passwords for system accounts. (see [below for nested schema](#nestedatt--spec--component_defs--system_accounts--password_config))
-
-
-### Nested Schema for `spec.component_defs.system_accounts.accounts`
-
-Required:
-
-- `name` (String) The unique identifier of a system account.
-- `provision_policy` (Attributes) Outlines the strategy for creating the account. (see [below for nested schema](#nestedatt--spec--component_defs--system_accounts--accounts--provision_policy))
-
-
-### Nested Schema for `spec.component_defs.system_accounts.accounts.provision_policy`
-
-Required:
-
-- `scope` (String) Defines the scope within which the account is provisioned.
-- `type` (String) Specifies the method to provision an account.
-
-Optional:
-
-- `secret_ref` (Attributes) The external secret to refer. (see [below for nested schema](#nestedatt--spec--component_defs--system_accounts--accounts--provision_policy--secret_ref))
-- `statements` (Attributes) The statement to provision an account. (see [below for nested schema](#nestedatt--spec--component_defs--system_accounts--accounts--provision_policy--statements))
-
-
-### Nested Schema for `spec.component_defs.system_accounts.accounts.provision_policy.secret_ref`
-
-Required:
-
-- `name` (String) The unique identifier of the secret.
-- `namespace` (String) The namespace where the secret is located.
-
-
-
-### Nested Schema for `spec.component_defs.system_accounts.accounts.provision_policy.statements`
-
-Required:
-
-- `creation` (String) Specifies the statement required to create a new account with the necessary privileges.
-
-Optional:
-
-- `deletion` (String) Defines the statement required to delete an existing account.Typically used in conjunction with the creation statement to delete an account before recreating it.For example, one might use a 'drop user if exists' statement followed by a 'create user' statement to ensure a fresh account.Deprecated: This field is deprecated and the update statement should be used instead.
-- `update` (String) Defines the statement required to update the password of an existing account.
-
-
-
-
-
-### Nested Schema for `spec.component_defs.system_accounts.cmd_executor_config`
-
-Required:
-
-- `command` (List of String) The command to be executed.
-- `image` (String) Specifies the image used to execute the command.
-
-Optional:
-
-- `args` (List of String) Additional parameters used in the execution of the command.
-- `env` (Map of String) A list of environment variables that will be injected into the command execution context.
-
-
-
-### Nested Schema for `spec.component_defs.system_accounts.password_config`
-
-Optional:
-
-- `length` (Number) The length of the password.
-- `letter_case` (String) The case of the letters in the password.
-- `num_digits` (Number) The number of digits in the password.
-- `num_symbols` (Number) The number of symbols in the password.
-- `seed` (String) Seed to generate the account's password.Cannot be updated.
-
-
-
-
-### Nested Schema for `spec.component_defs.volume_protection_spec`
-
-Optional:
-
-- `high_watermark` (Number) The high watermark threshold for volume space usage.If there is any specified volumes who's space usage is over the threshold, the pre-defined 'LOCK' actionwill be triggered to degrade the service to protect volume from space exhaustion, such as to set the instanceas read-only. And after that, if all volumes' space usage drops under the threshold later, the pre-defined'UNLOCK' action will be performed to recover the service normally.
-- `volumes` (Attributes List) The Volumes to be protected. (see [below for nested schema](#nestedatt--spec--component_defs--volume_protection_spec--volumes))
-
-
-### Nested Schema for `spec.component_defs.volume_protection_spec.volumes`
-
-Optional:
-
-- `high_watermark` (Number) Defines the high watermark threshold for the volume, it will override the component level threshold.If the value is invalid, it will be ignored and the component level threshold will be used.
-- `name` (String) The Name of the volume to protect.
-
-
-
-
-### Nested Schema for `spec.component_defs.volume_types`
-
-Required:
-
-- `name` (String) Corresponds to the name of the VolumeMounts field in PodSpec.Container.
-
-Optional:
-
-- `type` (String) Type of data the volume will persistent.
-
-
-
### Nested Schema for `spec.topologies`
diff --git a/docs/data-sources/apps_kubeblocks_io_cluster_v1alpha1_manifest.md b/docs/data-sources/apps_kubeblocks_io_cluster_v1alpha1_manifest.md
index 5b271b015..7a6cc2788 100644
--- a/docs/data-sources/apps_kubeblocks_io_cluster_v1alpha1_manifest.md
+++ b/docs/data-sources/apps_kubeblocks_io_cluster_v1alpha1_manifest.md
@@ -137,7 +137,7 @@ Optional:
- `service_version` (String) ServiceVersion specifies the version of the Service expected to be provisioned by this Component.The version should follow the syntax and semantics of the 'Semantic Versioning' specification (http://semver.org/).If no version is specified, the latest available version will be used.
- `services` (Attributes List) Overrides services defined in referenced ComponentDefinition and expose endpoints that can be accessed by clients. (see [below for nested schema](#nestedatt--spec--component_specs--services))
- `stop` (Boolean) Stop the Component.If set, all the computing resources will be released.
-- `switch_policy` (Attributes) Defines the strategy for switchover and failover when workloadType is Replication.Deprecated since v0.9.This field is maintained for backward compatibility and its use is discouraged.Existing usage should be updated to the current preferred approach to avoid compatibility issues in future releases. (see [below for nested schema](#nestedatt--spec--component_specs--switch_policy))
+- `switch_policy` (Attributes) Defines the strategy for switchover and failover.Deprecated since v0.9.This field is maintained for backward compatibility and its use is discouraged.Existing usage should be updated to the current preferred approach to avoid compatibility issues in future releases. (see [below for nested schema](#nestedatt--spec--component_specs--switch_policy))
- `system_accounts` (Attributes List) Overrides system accounts defined in referenced ComponentDefinition. (see [below for nested schema](#nestedatt--spec--component_specs--system_accounts))
- `tls` (Boolean) A boolean flag that indicates whether the Component should use Transport Layer Security (TLS)for secure communication.When set to true, the Component will be configured to use TLS encryption for its network connections.This ensures that the data transmitted between the Component and its clients or other Components is encryptedand protected from unauthorized access.If TLS is enabled, the Component may require additional configuration, such as specifying TLS certificates and keys,to properly set up the secure communication channel.
- `tolerations` (Map of String) Allows Pods to be scheduled onto nodes with matching taints.Each toleration in the array allows the Pod to tolerate node taints based onspecified 'key', 'value', 'effect', and 'operator'.- The 'key', 'value', and 'effect' identify the taint that the toleration matches.- The 'operator' determines how the toleration matches the taint.Pods with matching tolerations are allowed to be scheduled on tainted nodes, typically reserved for specific purposes.Deprecated since v0.10, replaced by the 'schedulingPolicy' field.
@@ -520,7 +520,9 @@ Required:
Optional:
-- `label_selector` (Attributes) A label query over a set of resources, in this case pods. (see [below for nested schema](#nestedatt--spec--component_specs--instances--scheduling_policy--affinity--pod_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--label_selector))
+- `label_selector` (Attributes) A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods. (see [below for nested schema](#nestedatt--spec--component_specs--instances--scheduling_policy--affinity--pod_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--label_selector))
+- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
+- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
- `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--component_specs--instances--scheduling_policy--affinity--pod_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--namespace_selector))
- `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.
@@ -579,7 +581,9 @@ Required:
Optional:
-- `label_selector` (Attributes) A label query over a set of resources, in this case pods. (see [below for nested schema](#nestedatt--spec--component_specs--instances--scheduling_policy--affinity--pod_affinity--required_during_scheduling_ignored_during_execution--label_selector))
+- `label_selector` (Attributes) A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods. (see [below for nested schema](#nestedatt--spec--component_specs--instances--scheduling_policy--affinity--pod_affinity--required_during_scheduling_ignored_during_execution--label_selector))
+- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
+- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
- `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--component_specs--instances--scheduling_policy--affinity--pod_affinity--required_during_scheduling_ignored_during_execution--namespace_selector))
- `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.
@@ -654,7 +658,9 @@ Required:
Optional:
-- `label_selector` (Attributes) A label query over a set of resources, in this case pods. (see [below for nested schema](#nestedatt--spec--component_specs--instances--scheduling_policy--affinity--pod_anti_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--label_selector))
+- `label_selector` (Attributes) A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods. (see [below for nested schema](#nestedatt--spec--component_specs--instances--scheduling_policy--affinity--pod_anti_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--label_selector))
+- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
+- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
- `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--component_specs--instances--scheduling_policy--affinity--pod_anti_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--namespace_selector))
- `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.
@@ -713,7 +719,9 @@ Required:
Optional:
-- `label_selector` (Attributes) A label query over a set of resources, in this case pods. (see [below for nested schema](#nestedatt--spec--component_specs--instances--scheduling_policy--affinity--pod_anti_affinity--required_during_scheduling_ignored_during_execution--label_selector))
+- `label_selector` (Attributes) A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods. (see [below for nested schema](#nestedatt--spec--component_specs--instances--scheduling_policy--affinity--pod_anti_affinity--required_during_scheduling_ignored_during_execution--label_selector))
+- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
+- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
- `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--component_specs--instances--scheduling_policy--affinity--pod_anti_affinity--required_during_scheduling_ignored_during_execution--namespace_selector))
- `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.
@@ -843,18 +851,9 @@ Optional:
Optional:
-- `claims` (Attributes List) Claims lists the names of resources, defined in spec.resourceClaims,that are used by this container.This is an alpha field and requires enabling theDynamicResourceAllocation feature gate.This field is immutable. It can only be set for containers. (see [below for nested schema](#nestedatt--spec--component_specs--instances--volume_claim_templates--spec--resources--claims))
- `limits` (Map of String) Limits describes the maximum amount of compute resources allowed.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
- `requests` (Map of String) Requests describes the minimum amount of compute resources required.If Requests is omitted for a container, it defaults to Limits if that is explicitly specified,otherwise to an implementation-defined value. Requests cannot exceed Limits.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-
-### Nested Schema for `spec.component_specs.instances.volume_claim_templates.spec.resources.claims`
-
-Required:
-
-- `name` (String) Name must match the name of one entry in pod.spec.resourceClaims ofthe Pod where this field is used. It makes that resource availableinside a container.
-
-
@@ -1135,6 +1134,7 @@ Optional:
- `resources` (Attributes) resources represents the minimum resources the volume should have.If RecoverVolumeExpansionFailure feature is enabled users are allowed to specify resource requirementsthat are lower than previous value but must still be higher than capacity recorded in thestatus field of the claim.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources (see [below for nested schema](#nestedatt--spec--component_specs--instances--volumes--ephemeral--volume_claim_template--spec--resources))
- `selector` (Attributes) selector is a label query over volumes to consider for binding. (see [below for nested schema](#nestedatt--spec--component_specs--instances--volumes--ephemeral--volume_claim_template--spec--selector))
- `storage_class_name` (String) storageClassName is the name of the StorageClass required by the claim.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#class-1
+- `volume_attributes_class_name` (String) volumeAttributesClassName may be used to set the VolumeAttributesClass used by this claim.If specified, the CSI driver will create or update the volume with the attributes definedin the corresponding VolumeAttributesClass. This has a different purpose than storageClassName,it can be changed after the claim is created. An empty string value means that no VolumeAttributesClasswill be applied to the claim but it's not allowed to reset this field to empty string once it is set.If unspecified and the PersistentVolumeClaim is unbound, the default VolumeAttributesClasswill be set by the persistentvolume controller if it exists.If the resource referred to by volumeAttributesClass does not exist, this PersistentVolumeClaim will beset to a Pending state, as reflected by the modifyVolumeStatus field, until such as a resourceexists.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#volumeattributesclass(Alpha) Using this field requires the VolumeAttributesClass feature gate to be enabled.
- `volume_mode` (String) volumeMode defines what type of volume is required by the claim.Value of Filesystem is implied when not included in claim spec.
- `volume_name` (String) volumeName is the binding reference to the PersistentVolume backing this claim.
@@ -1170,18 +1170,9 @@ Optional:
Optional:
-- `claims` (Attributes List) Claims lists the names of resources, defined in spec.resourceClaims,that are used by this container.This is an alpha field and requires enabling theDynamicResourceAllocation feature gate.This field is immutable. It can only be set for containers. (see [below for nested schema](#nestedatt--spec--component_specs--instances--volumes--ephemeral--volume_claim_template--spec--resources--claims))
- `limits` (Map of String) Limits describes the maximum amount of compute resources allowed.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
- `requests` (Map of String) Requests describes the minimum amount of compute resources required.If Requests is omitted for a container, it defaults to Limits if that is explicitly specified,otherwise to an implementation-defined value. Requests cannot exceed Limits.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-
-### Nested Schema for `spec.component_specs.instances.volumes.ephemeral.volume_claim_template.spec.resources.claims`
-
-Required:
-
-- `name` (String) Name must match the name of one entry in pod.spec.resourceClaims ofthe Pod where this field is used. It makes that resource availableinside a container.
-
-
### Nested Schema for `spec.component_specs.instances.volumes.ephemeral.volume_claim_template.spec.selector`
@@ -1408,11 +1399,49 @@ Optional:
Optional:
+- `cluster_trust_bundle` (Attributes) ClusterTrustBundle allows a pod to access the '.spec.trustBundle' fieldof ClusterTrustBundle objects in an auto-updating file.Alpha, gated by the ClusterTrustBundleProjection feature gate.ClusterTrustBundle objects can either be selected by name, or by thecombination of signer name and a label selector.Kubelet performs aggressive normalization of the PEM contents writteninto the pod filesystem. Esoteric PEM features such as inter-blockcomments and block headers are stripped. Certificates are deduplicated.The ordering of certificates within the file is arbitrary, and Kubeletmay change the order over time. (see [below for nested schema](#nestedatt--spec--component_specs--instances--volumes--projected--sources--cluster_trust_bundle))
- `config_map` (Attributes) configMap information about the configMap data to project (see [below for nested schema](#nestedatt--spec--component_specs--instances--volumes--projected--sources--config_map))
- `downward_api` (Attributes) downwardAPI information about the downwardAPI data to project (see [below for nested schema](#nestedatt--spec--component_specs--instances--volumes--projected--sources--downward_api))
- `secret` (Attributes) secret information about the secret data to project (see [below for nested schema](#nestedatt--spec--component_specs--instances--volumes--projected--sources--secret))
- `service_account_token` (Attributes) serviceAccountToken is information about the serviceAccountToken data to project (see [below for nested schema](#nestedatt--spec--component_specs--instances--volumes--projected--sources--service_account_token))
+
+### Nested Schema for `spec.component_specs.instances.volumes.projected.sources.cluster_trust_bundle`
+
+Required:
+
+- `path` (String) Relative path from the volume root to write the bundle.
+
+Optional:
+
+- `label_selector` (Attributes) Select all ClusterTrustBundles that match this label selector. Only haseffect if signerName is set. Mutually-exclusive with name. If unset,interpreted as 'match nothing'. If set but empty, interpreted as 'matcheverything'. (see [below for nested schema](#nestedatt--spec--component_specs--instances--volumes--projected--sources--cluster_trust_bundle--label_selector))
+- `name` (String) Select a single ClusterTrustBundle by object name. Mutually-exclusivewith signerName and labelSelector.
+- `optional` (Boolean) If true, don't block pod startup if the referenced ClusterTrustBundle(s)aren't available. If using name, then the named ClusterTrustBundle isallowed not to exist. If using signerName, then the combination ofsignerName and labelSelector is allowed to match zeroClusterTrustBundles.
+- `signer_name` (String) Select all ClusterTrustBundles that match this signer name.Mutually-exclusive with name. The contents of all selectedClusterTrustBundles will be unified and deduplicated.
+
+
+### Nested Schema for `spec.component_specs.instances.volumes.projected.sources.cluster_trust_bundle.label_selector`
+
+Optional:
+
+- `match_expressions` (Attributes List) matchExpressions is a list of label selector requirements. The requirements are ANDed. (see [below for nested schema](#nestedatt--spec--component_specs--instances--volumes--projected--sources--cluster_trust_bundle--label_selector--match_expressions))
+- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.
+
+
+### Nested Schema for `spec.component_specs.instances.volumes.projected.sources.cluster_trust_bundle.label_selector.match_expressions`
+
+Required:
+
+- `key` (String) key is the label key that the selector applies to.
+- `operator` (String) operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.
+
+Optional:
+
+- `values` (List of String) values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.
+
+
+
+
### Nested Schema for `spec.component_specs.instances.volumes.projected.sources.config_map`
@@ -1834,7 +1863,9 @@ Required:
Optional:
-- `label_selector` (Attributes) A label query over a set of resources, in this case pods. (see [below for nested schema](#nestedatt--spec--component_specs--scheduling_policy--affinity--pod_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--label_selector))
+- `label_selector` (Attributes) A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods. (see [below for nested schema](#nestedatt--spec--component_specs--scheduling_policy--affinity--pod_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--label_selector))
+- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
+- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
- `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--component_specs--scheduling_policy--affinity--pod_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--namespace_selector))
- `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.
@@ -1893,7 +1924,9 @@ Required:
Optional:
-- `label_selector` (Attributes) A label query over a set of resources, in this case pods. (see [below for nested schema](#nestedatt--spec--component_specs--scheduling_policy--affinity--pod_affinity--required_during_scheduling_ignored_during_execution--label_selector))
+- `label_selector` (Attributes) A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods. (see [below for nested schema](#nestedatt--spec--component_specs--scheduling_policy--affinity--pod_affinity--required_during_scheduling_ignored_during_execution--label_selector))
+- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
+- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
- `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--component_specs--scheduling_policy--affinity--pod_affinity--required_during_scheduling_ignored_during_execution--namespace_selector))
- `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.
@@ -1968,7 +2001,9 @@ Required:
Optional:
-- `label_selector` (Attributes) A label query over a set of resources, in this case pods. (see [below for nested schema](#nestedatt--spec--component_specs--scheduling_policy--affinity--pod_anti_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--label_selector))
+- `label_selector` (Attributes) A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods. (see [below for nested schema](#nestedatt--spec--component_specs--scheduling_policy--affinity--pod_anti_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--label_selector))
+- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
+- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
- `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--component_specs--scheduling_policy--affinity--pod_anti_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--namespace_selector))
- `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.
@@ -2027,7 +2062,9 @@ Required:
Optional:
-- `label_selector` (Attributes) A label query over a set of resources, in this case pods. (see [below for nested schema](#nestedatt--spec--component_specs--scheduling_policy--affinity--pod_anti_affinity--required_during_scheduling_ignored_during_execution--label_selector))
+- `label_selector` (Attributes) A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods. (see [below for nested schema](#nestedatt--spec--component_specs--scheduling_policy--affinity--pod_anti_affinity--required_during_scheduling_ignored_during_execution--label_selector))
+- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
+- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
- `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--component_specs--scheduling_policy--affinity--pod_anti_affinity--required_during_scheduling_ignored_during_execution--namespace_selector))
- `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.
@@ -2350,18 +2387,9 @@ Optional:
Optional:
-- `claims` (Attributes List) Claims lists the names of resources, defined in spec.resourceClaims,that are used by this container.This is an alpha field and requires enabling theDynamicResourceAllocation feature gate.This field is immutable. It can only be set for containers. (see [below for nested schema](#nestedatt--spec--component_specs--volume_claim_templates--spec--resources--claims))
- `limits` (Map of String) Limits describes the maximum amount of compute resources allowed.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
- `requests` (Map of String) Requests describes the minimum amount of compute resources required.If Requests is omitted for a container, it defaults to Limits if that is explicitly specified,otherwise to an implementation-defined value. Requests cannot exceed Limits.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-
-### Nested Schema for `spec.component_specs.volume_claim_templates.spec.resources.claims`
-
-Required:
-
-- `name` (String) Name must match the name of one entry in pod.spec.resourceClaims ofthe Pod where this field is used. It makes that resource availableinside a container.
-
-
@@ -2626,6 +2654,7 @@ Optional:
- `resources` (Attributes) resources represents the minimum resources the volume should have.If RecoverVolumeExpansionFailure feature is enabled users are allowed to specify resource requirementsthat are lower than previous value but must still be higher than capacity recorded in thestatus field of the claim.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources (see [below for nested schema](#nestedatt--spec--component_specs--volumes--ephemeral--volume_claim_template--spec--resources))
- `selector` (Attributes) selector is a label query over volumes to consider for binding. (see [below for nested schema](#nestedatt--spec--component_specs--volumes--ephemeral--volume_claim_template--spec--selector))
- `storage_class_name` (String) storageClassName is the name of the StorageClass required by the claim.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#class-1
+- `volume_attributes_class_name` (String) volumeAttributesClassName may be used to set the VolumeAttributesClass used by this claim.If specified, the CSI driver will create or update the volume with the attributes definedin the corresponding VolumeAttributesClass. This has a different purpose than storageClassName,it can be changed after the claim is created. An empty string value means that no VolumeAttributesClasswill be applied to the claim but it's not allowed to reset this field to empty string once it is set.If unspecified and the PersistentVolumeClaim is unbound, the default VolumeAttributesClasswill be set by the persistentvolume controller if it exists.If the resource referred to by volumeAttributesClass does not exist, this PersistentVolumeClaim will beset to a Pending state, as reflected by the modifyVolumeStatus field, until such as a resourceexists.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#volumeattributesclass(Alpha) Using this field requires the VolumeAttributesClass feature gate to be enabled.
- `volume_mode` (String) volumeMode defines what type of volume is required by the claim.Value of Filesystem is implied when not included in claim spec.
- `volume_name` (String) volumeName is the binding reference to the PersistentVolume backing this claim.
@@ -2661,18 +2690,9 @@ Optional:
Optional:
-- `claims` (Attributes List) Claims lists the names of resources, defined in spec.resourceClaims,that are used by this container.This is an alpha field and requires enabling theDynamicResourceAllocation feature gate.This field is immutable. It can only be set for containers. (see [below for nested schema](#nestedatt--spec--component_specs--volumes--ephemeral--volume_claim_template--spec--resources--claims))
- `limits` (Map of String) Limits describes the maximum amount of compute resources allowed.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
- `requests` (Map of String) Requests describes the minimum amount of compute resources required.If Requests is omitted for a container, it defaults to Limits if that is explicitly specified,otherwise to an implementation-defined value. Requests cannot exceed Limits.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-
-### Nested Schema for `spec.component_specs.volumes.ephemeral.volume_claim_template.spec.resources.claims`
-
-Required:
-
-- `name` (String) Name must match the name of one entry in pod.spec.resourceClaims ofthe Pod where this field is used. It makes that resource availableinside a container.
-
-
### Nested Schema for `spec.component_specs.volumes.ephemeral.volume_claim_template.spec.selector`
@@ -2899,11 +2919,49 @@ Optional:
Optional:
+- `cluster_trust_bundle` (Attributes) ClusterTrustBundle allows a pod to access the '.spec.trustBundle' fieldof ClusterTrustBundle objects in an auto-updating file.Alpha, gated by the ClusterTrustBundleProjection feature gate.ClusterTrustBundle objects can either be selected by name, or by thecombination of signer name and a label selector.Kubelet performs aggressive normalization of the PEM contents writteninto the pod filesystem. Esoteric PEM features such as inter-blockcomments and block headers are stripped. Certificates are deduplicated.The ordering of certificates within the file is arbitrary, and Kubeletmay change the order over time. (see [below for nested schema](#nestedatt--spec--component_specs--volumes--projected--sources--cluster_trust_bundle))
- `config_map` (Attributes) configMap information about the configMap data to project (see [below for nested schema](#nestedatt--spec--component_specs--volumes--projected--sources--config_map))
- `downward_api` (Attributes) downwardAPI information about the downwardAPI data to project (see [below for nested schema](#nestedatt--spec--component_specs--volumes--projected--sources--downward_api))
- `secret` (Attributes) secret information about the secret data to project (see [below for nested schema](#nestedatt--spec--component_specs--volumes--projected--sources--secret))
- `service_account_token` (Attributes) serviceAccountToken is information about the serviceAccountToken data to project (see [below for nested schema](#nestedatt--spec--component_specs--volumes--projected--sources--service_account_token))
+
+### Nested Schema for `spec.component_specs.volumes.projected.sources.cluster_trust_bundle`
+
+Required:
+
+- `path` (String) Relative path from the volume root to write the bundle.
+
+Optional:
+
+- `label_selector` (Attributes) Select all ClusterTrustBundles that match this label selector. Only haseffect if signerName is set. Mutually-exclusive with name. If unset,interpreted as 'match nothing'. If set but empty, interpreted as 'matcheverything'. (see [below for nested schema](#nestedatt--spec--component_specs--volumes--projected--sources--cluster_trust_bundle--label_selector))
+- `name` (String) Select a single ClusterTrustBundle by object name. Mutually-exclusivewith signerName and labelSelector.
+- `optional` (Boolean) If true, don't block pod startup if the referenced ClusterTrustBundle(s)aren't available. If using name, then the named ClusterTrustBundle isallowed not to exist. If using signerName, then the combination ofsignerName and labelSelector is allowed to match zeroClusterTrustBundles.
+- `signer_name` (String) Select all ClusterTrustBundles that match this signer name.Mutually-exclusive with name. The contents of all selectedClusterTrustBundles will be unified and deduplicated.
+
+
+### Nested Schema for `spec.component_specs.volumes.projected.sources.cluster_trust_bundle.label_selector`
+
+Optional:
+
+- `match_expressions` (Attributes List) matchExpressions is a list of label selector requirements. The requirements are ANDed. (see [below for nested schema](#nestedatt--spec--component_specs--volumes--projected--sources--cluster_trust_bundle--label_selector--match_expressions))
+- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.
+
+
+### Nested Schema for `spec.component_specs.volumes.projected.sources.cluster_trust_bundle.label_selector.match_expressions`
+
+Required:
+
+- `key` (String) key is the label key that the selector applies to.
+- `operator` (String) operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.
+
+Optional:
+
+- `values` (List of String) values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.
+
+
+
+
### Nested Schema for `spec.component_specs.volumes.projected.sources.config_map`
@@ -3302,7 +3360,9 @@ Required:
Optional:
-- `label_selector` (Attributes) A label query over a set of resources, in this case pods. (see [below for nested schema](#nestedatt--spec--scheduling_policy--affinity--pod_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--label_selector))
+- `label_selector` (Attributes) A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods. (see [below for nested schema](#nestedatt--spec--scheduling_policy--affinity--pod_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--label_selector))
+- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
+- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
- `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--scheduling_policy--affinity--pod_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--namespace_selector))
- `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.
@@ -3361,7 +3421,9 @@ Required:
Optional:
-- `label_selector` (Attributes) A label query over a set of resources, in this case pods. (see [below for nested schema](#nestedatt--spec--scheduling_policy--affinity--pod_affinity--required_during_scheduling_ignored_during_execution--label_selector))
+- `label_selector` (Attributes) A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods. (see [below for nested schema](#nestedatt--spec--scheduling_policy--affinity--pod_affinity--required_during_scheduling_ignored_during_execution--label_selector))
+- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
+- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
- `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--scheduling_policy--affinity--pod_affinity--required_during_scheduling_ignored_during_execution--namespace_selector))
- `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.
@@ -3436,7 +3498,9 @@ Required:
Optional:
-- `label_selector` (Attributes) A label query over a set of resources, in this case pods. (see [below for nested schema](#nestedatt--spec--scheduling_policy--affinity--pod_anti_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--label_selector))
+- `label_selector` (Attributes) A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods. (see [below for nested schema](#nestedatt--spec--scheduling_policy--affinity--pod_anti_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--label_selector))
+- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
+- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
- `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--scheduling_policy--affinity--pod_anti_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--namespace_selector))
- `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.
@@ -3495,7 +3559,9 @@ Required:
Optional:
-- `label_selector` (Attributes) A label query over a set of resources, in this case pods. (see [below for nested schema](#nestedatt--spec--scheduling_policy--affinity--pod_anti_affinity--required_during_scheduling_ignored_during_execution--label_selector))
+- `label_selector` (Attributes) A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods. (see [below for nested schema](#nestedatt--spec--scheduling_policy--affinity--pod_anti_affinity--required_during_scheduling_ignored_during_execution--label_selector))
+- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
+- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
- `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--scheduling_policy--affinity--pod_anti_affinity--required_during_scheduling_ignored_during_execution--namespace_selector))
- `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.
@@ -3643,7 +3709,7 @@ Optional:
- `service_version` (String) ServiceVersion specifies the version of the Service expected to be provisioned by this Component.The version should follow the syntax and semantics of the 'Semantic Versioning' specification (http://semver.org/).If no version is specified, the latest available version will be used.
- `services` (Attributes List) Overrides services defined in referenced ComponentDefinition and expose endpoints that can be accessed by clients. (see [below for nested schema](#nestedatt--spec--sharding_specs--template--services))
- `stop` (Boolean) Stop the Component.If set, all the computing resources will be released.
-- `switch_policy` (Attributes) Defines the strategy for switchover and failover when workloadType is Replication.Deprecated since v0.9.This field is maintained for backward compatibility and its use is discouraged.Existing usage should be updated to the current preferred approach to avoid compatibility issues in future releases. (see [below for nested schema](#nestedatt--spec--sharding_specs--template--switch_policy))
+- `switch_policy` (Attributes) Defines the strategy for switchover and failover.Deprecated since v0.9.This field is maintained for backward compatibility and its use is discouraged.Existing usage should be updated to the current preferred approach to avoid compatibility issues in future releases. (see [below for nested schema](#nestedatt--spec--sharding_specs--template--switch_policy))
- `system_accounts` (Attributes List) Overrides system accounts defined in referenced ComponentDefinition. (see [below for nested schema](#nestedatt--spec--sharding_specs--template--system_accounts))
- `tls` (Boolean) A boolean flag that indicates whether the Component should use Transport Layer Security (TLS)for secure communication.When set to true, the Component will be configured to use TLS encryption for its network connections.This ensures that the data transmitted between the Component and its clients or other Components is encryptedand protected from unauthorized access.If TLS is enabled, the Component may require additional configuration, such as specifying TLS certificates and keys,to properly set up the secure communication channel.
- `tolerations` (Map of String) Allows Pods to be scheduled onto nodes with matching taints.Each toleration in the array allows the Pod to tolerate node taints based onspecified 'key', 'value', 'effect', and 'operator'.- The 'key', 'value', and 'effect' identify the taint that the toleration matches.- The 'operator' determines how the toleration matches the taint.Pods with matching tolerations are allowed to be scheduled on tainted nodes, typically reserved for specific purposes.Deprecated since v0.10, replaced by the 'schedulingPolicy' field.
@@ -4026,7 +4092,9 @@ Required:
Optional:
-- `label_selector` (Attributes) A label query over a set of resources, in this case pods. (see [below for nested schema](#nestedatt--spec--sharding_specs--template--instances--scheduling_policy--affinity--pod_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--label_selector))
+- `label_selector` (Attributes) A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods. (see [below for nested schema](#nestedatt--spec--sharding_specs--template--instances--scheduling_policy--affinity--pod_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--label_selector))
+- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
+- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
- `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--sharding_specs--template--instances--scheduling_policy--affinity--pod_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--namespace_selector))
- `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.
@@ -4085,7 +4153,9 @@ Required:
Optional:
-- `label_selector` (Attributes) A label query over a set of resources, in this case pods. (see [below for nested schema](#nestedatt--spec--sharding_specs--template--instances--scheduling_policy--affinity--pod_affinity--required_during_scheduling_ignored_during_execution--label_selector))
+- `label_selector` (Attributes) A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods. (see [below for nested schema](#nestedatt--spec--sharding_specs--template--instances--scheduling_policy--affinity--pod_affinity--required_during_scheduling_ignored_during_execution--label_selector))
+- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
+- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
- `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--sharding_specs--template--instances--scheduling_policy--affinity--pod_affinity--required_during_scheduling_ignored_during_execution--namespace_selector))
- `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.
@@ -4160,7 +4230,9 @@ Required:
Optional:
-- `label_selector` (Attributes) A label query over a set of resources, in this case pods. (see [below for nested schema](#nestedatt--spec--sharding_specs--template--instances--scheduling_policy--affinity--pod_anti_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--label_selector))
+- `label_selector` (Attributes) A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods. (see [below for nested schema](#nestedatt--spec--sharding_specs--template--instances--scheduling_policy--affinity--pod_anti_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--label_selector))
+- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
+- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
- `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--sharding_specs--template--instances--scheduling_policy--affinity--pod_anti_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--namespace_selector))
- `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.
@@ -4219,7 +4291,9 @@ Required:
Optional:
-- `label_selector` (Attributes) A label query over a set of resources, in this case pods. (see [below for nested schema](#nestedatt--spec--sharding_specs--template--instances--scheduling_policy--affinity--pod_anti_affinity--required_during_scheduling_ignored_during_execution--label_selector))
+- `label_selector` (Attributes) A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods. (see [below for nested schema](#nestedatt--spec--sharding_specs--template--instances--scheduling_policy--affinity--pod_anti_affinity--required_during_scheduling_ignored_during_execution--label_selector))
+- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
+- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
- `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--sharding_specs--template--instances--scheduling_policy--affinity--pod_anti_affinity--required_during_scheduling_ignored_during_execution--namespace_selector))
- `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.
@@ -4349,18 +4423,9 @@ Optional:
Optional:
-- `claims` (Attributes List) Claims lists the names of resources, defined in spec.resourceClaims,that are used by this container.This is an alpha field and requires enabling theDynamicResourceAllocation feature gate.This field is immutable. It can only be set for containers. (see [below for nested schema](#nestedatt--spec--sharding_specs--template--instances--volume_claim_templates--spec--resources--claims))
- `limits` (Map of String) Limits describes the maximum amount of compute resources allowed.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
- `requests` (Map of String) Requests describes the minimum amount of compute resources required.If Requests is omitted for a container, it defaults to Limits if that is explicitly specified,otherwise to an implementation-defined value. Requests cannot exceed Limits.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-
-### Nested Schema for `spec.sharding_specs.template.instances.volume_claim_templates.spec.resources.claims`
-
-Required:
-
-- `name` (String) Name must match the name of one entry in pod.spec.resourceClaims ofthe Pod where this field is used. It makes that resource availableinside a container.
-
-
@@ -4641,6 +4706,7 @@ Optional:
- `resources` (Attributes) resources represents the minimum resources the volume should have.If RecoverVolumeExpansionFailure feature is enabled users are allowed to specify resource requirementsthat are lower than previous value but must still be higher than capacity recorded in thestatus field of the claim.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources (see [below for nested schema](#nestedatt--spec--sharding_specs--template--instances--volumes--ephemeral--volume_claim_template--spec--resources))
- `selector` (Attributes) selector is a label query over volumes to consider for binding. (see [below for nested schema](#nestedatt--spec--sharding_specs--template--instances--volumes--ephemeral--volume_claim_template--spec--selector))
- `storage_class_name` (String) storageClassName is the name of the StorageClass required by the claim.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#class-1
+- `volume_attributes_class_name` (String) volumeAttributesClassName may be used to set the VolumeAttributesClass used by this claim.If specified, the CSI driver will create or update the volume with the attributes definedin the corresponding VolumeAttributesClass. This has a different purpose than storageClassName,it can be changed after the claim is created. An empty string value means that no VolumeAttributesClasswill be applied to the claim but it's not allowed to reset this field to empty string once it is set.If unspecified and the PersistentVolumeClaim is unbound, the default VolumeAttributesClasswill be set by the persistentvolume controller if it exists.If the resource referred to by volumeAttributesClass does not exist, this PersistentVolumeClaim will beset to a Pending state, as reflected by the modifyVolumeStatus field, until such as a resourceexists.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#volumeattributesclass(Alpha) Using this field requires the VolumeAttributesClass feature gate to be enabled.
- `volume_mode` (String) volumeMode defines what type of volume is required by the claim.Value of Filesystem is implied when not included in claim spec.
- `volume_name` (String) volumeName is the binding reference to the PersistentVolume backing this claim.
@@ -4676,18 +4742,9 @@ Optional:
Optional:
-- `claims` (Attributes List) Claims lists the names of resources, defined in spec.resourceClaims,that are used by this container.This is an alpha field and requires enabling theDynamicResourceAllocation feature gate.This field is immutable. It can only be set for containers. (see [below for nested schema](#nestedatt--spec--sharding_specs--template--instances--volumes--ephemeral--volume_claim_template--spec--resources--claims))
- `limits` (Map of String) Limits describes the maximum amount of compute resources allowed.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
- `requests` (Map of String) Requests describes the minimum amount of compute resources required.If Requests is omitted for a container, it defaults to Limits if that is explicitly specified,otherwise to an implementation-defined value. Requests cannot exceed Limits.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-
-### Nested Schema for `spec.sharding_specs.template.instances.volumes.ephemeral.volume_claim_template.spec.resources.claims`
-
-Required:
-
-- `name` (String) Name must match the name of one entry in pod.spec.resourceClaims ofthe Pod where this field is used. It makes that resource availableinside a container.
-
-
### Nested Schema for `spec.sharding_specs.template.instances.volumes.ephemeral.volume_claim_template.spec.selector`
@@ -4914,11 +4971,49 @@ Optional:
Optional:
+- `cluster_trust_bundle` (Attributes) ClusterTrustBundle allows a pod to access the '.spec.trustBundle' fieldof ClusterTrustBundle objects in an auto-updating file.Alpha, gated by the ClusterTrustBundleProjection feature gate.ClusterTrustBundle objects can either be selected by name, or by thecombination of signer name and a label selector.Kubelet performs aggressive normalization of the PEM contents writteninto the pod filesystem. Esoteric PEM features such as inter-blockcomments and block headers are stripped. Certificates are deduplicated.The ordering of certificates within the file is arbitrary, and Kubeletmay change the order over time. (see [below for nested schema](#nestedatt--spec--sharding_specs--template--instances--volumes--projected--sources--cluster_trust_bundle))
- `config_map` (Attributes) configMap information about the configMap data to project (see [below for nested schema](#nestedatt--spec--sharding_specs--template--instances--volumes--projected--sources--config_map))
- `downward_api` (Attributes) downwardAPI information about the downwardAPI data to project (see [below for nested schema](#nestedatt--spec--sharding_specs--template--instances--volumes--projected--sources--downward_api))
- `secret` (Attributes) secret information about the secret data to project (see [below for nested schema](#nestedatt--spec--sharding_specs--template--instances--volumes--projected--sources--secret))
- `service_account_token` (Attributes) serviceAccountToken is information about the serviceAccountToken data to project (see [below for nested schema](#nestedatt--spec--sharding_specs--template--instances--volumes--projected--sources--service_account_token))
+
+### Nested Schema for `spec.sharding_specs.template.instances.volumes.projected.sources.cluster_trust_bundle`
+
+Required:
+
+- `path` (String) Relative path from the volume root to write the bundle.
+
+Optional:
+
+- `label_selector` (Attributes) Select all ClusterTrustBundles that match this label selector. Only haseffect if signerName is set. Mutually-exclusive with name. If unset,interpreted as 'match nothing'. If set but empty, interpreted as 'matcheverything'. (see [below for nested schema](#nestedatt--spec--sharding_specs--template--instances--volumes--projected--sources--cluster_trust_bundle--label_selector))
+- `name` (String) Select a single ClusterTrustBundle by object name. Mutually-exclusivewith signerName and labelSelector.
+- `optional` (Boolean) If true, don't block pod startup if the referenced ClusterTrustBundle(s)aren't available. If using name, then the named ClusterTrustBundle isallowed not to exist. If using signerName, then the combination ofsignerName and labelSelector is allowed to match zeroClusterTrustBundles.
+- `signer_name` (String) Select all ClusterTrustBundles that match this signer name.Mutually-exclusive with name. The contents of all selectedClusterTrustBundles will be unified and deduplicated.
+
+
+### Nested Schema for `spec.sharding_specs.template.instances.volumes.projected.sources.cluster_trust_bundle.label_selector`
+
+Optional:
+
+- `match_expressions` (Attributes List) matchExpressions is a list of label selector requirements. The requirements are ANDed. (see [below for nested schema](#nestedatt--spec--sharding_specs--template--instances--volumes--projected--sources--cluster_trust_bundle--label_selector--match_expressions))
+- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.
+
+
+### Nested Schema for `spec.sharding_specs.template.instances.volumes.projected.sources.cluster_trust_bundle.label_selector.match_expressions`
+
+Required:
+
+- `key` (String) key is the label key that the selector applies to.
+- `operator` (String) operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.
+
+Optional:
+
+- `values` (List of String) values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.
+
+
+
+
### Nested Schema for `spec.sharding_specs.template.instances.volumes.projected.sources.config_map`
@@ -5340,7 +5435,9 @@ Required:
Optional:
-- `label_selector` (Attributes) A label query over a set of resources, in this case pods. (see [below for nested schema](#nestedatt--spec--sharding_specs--template--scheduling_policy--affinity--pod_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--label_selector))
+- `label_selector` (Attributes) A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods. (see [below for nested schema](#nestedatt--spec--sharding_specs--template--scheduling_policy--affinity--pod_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--label_selector))
+- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
+- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
- `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--sharding_specs--template--scheduling_policy--affinity--pod_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--namespace_selector))
- `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.
@@ -5399,7 +5496,9 @@ Required:
Optional:
-- `label_selector` (Attributes) A label query over a set of resources, in this case pods. (see [below for nested schema](#nestedatt--spec--sharding_specs--template--scheduling_policy--affinity--pod_affinity--required_during_scheduling_ignored_during_execution--label_selector))
+- `label_selector` (Attributes) A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods. (see [below for nested schema](#nestedatt--spec--sharding_specs--template--scheduling_policy--affinity--pod_affinity--required_during_scheduling_ignored_during_execution--label_selector))
+- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
+- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
- `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--sharding_specs--template--scheduling_policy--affinity--pod_affinity--required_during_scheduling_ignored_during_execution--namespace_selector))
- `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.
@@ -5474,7 +5573,9 @@ Required:
Optional:
-- `label_selector` (Attributes) A label query over a set of resources, in this case pods. (see [below for nested schema](#nestedatt--spec--sharding_specs--template--scheduling_policy--affinity--pod_anti_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--label_selector))
+- `label_selector` (Attributes) A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods. (see [below for nested schema](#nestedatt--spec--sharding_specs--template--scheduling_policy--affinity--pod_anti_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--label_selector))
+- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
+- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
- `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--sharding_specs--template--scheduling_policy--affinity--pod_anti_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--namespace_selector))
- `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.
@@ -5533,7 +5634,9 @@ Required:
Optional:
-- `label_selector` (Attributes) A label query over a set of resources, in this case pods. (see [below for nested schema](#nestedatt--spec--sharding_specs--template--scheduling_policy--affinity--pod_anti_affinity--required_during_scheduling_ignored_during_execution--label_selector))
+- `label_selector` (Attributes) A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods. (see [below for nested schema](#nestedatt--spec--sharding_specs--template--scheduling_policy--affinity--pod_anti_affinity--required_during_scheduling_ignored_during_execution--label_selector))
+- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
+- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
- `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--sharding_specs--template--scheduling_policy--affinity--pod_anti_affinity--required_during_scheduling_ignored_during_execution--namespace_selector))
- `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.
@@ -5856,18 +5959,9 @@ Optional:
Optional:
-- `claims` (Attributes List) Claims lists the names of resources, defined in spec.resourceClaims,that are used by this container.This is an alpha field and requires enabling theDynamicResourceAllocation feature gate.This field is immutable. It can only be set for containers. (see [below for nested schema](#nestedatt--spec--sharding_specs--template--volume_claim_templates--spec--resources--claims))
- `limits` (Map of String) Limits describes the maximum amount of compute resources allowed.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
- `requests` (Map of String) Requests describes the minimum amount of compute resources required.If Requests is omitted for a container, it defaults to Limits if that is explicitly specified,otherwise to an implementation-defined value. Requests cannot exceed Limits.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-
-### Nested Schema for `spec.sharding_specs.template.volume_claim_templates.spec.resources.claims`
-
-Required:
-
-- `name` (String) Name must match the name of one entry in pod.spec.resourceClaims ofthe Pod where this field is used. It makes that resource availableinside a container.
-
-
@@ -6132,6 +6226,7 @@ Optional:
- `resources` (Attributes) resources represents the minimum resources the volume should have.If RecoverVolumeExpansionFailure feature is enabled users are allowed to specify resource requirementsthat are lower than previous value but must still be higher than capacity recorded in thestatus field of the claim.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources (see [below for nested schema](#nestedatt--spec--sharding_specs--template--volumes--ephemeral--volume_claim_template--spec--resources))
- `selector` (Attributes) selector is a label query over volumes to consider for binding. (see [below for nested schema](#nestedatt--spec--sharding_specs--template--volumes--ephemeral--volume_claim_template--spec--selector))
- `storage_class_name` (String) storageClassName is the name of the StorageClass required by the claim.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#class-1
+- `volume_attributes_class_name` (String) volumeAttributesClassName may be used to set the VolumeAttributesClass used by this claim.If specified, the CSI driver will create or update the volume with the attributes definedin the corresponding VolumeAttributesClass. This has a different purpose than storageClassName,it can be changed after the claim is created. An empty string value means that no VolumeAttributesClasswill be applied to the claim but it's not allowed to reset this field to empty string once it is set.If unspecified and the PersistentVolumeClaim is unbound, the default VolumeAttributesClasswill be set by the persistentvolume controller if it exists.If the resource referred to by volumeAttributesClass does not exist, this PersistentVolumeClaim will beset to a Pending state, as reflected by the modifyVolumeStatus field, until such as a resourceexists.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#volumeattributesclass(Alpha) Using this field requires the VolumeAttributesClass feature gate to be enabled.
- `volume_mode` (String) volumeMode defines what type of volume is required by the claim.Value of Filesystem is implied when not included in claim spec.
- `volume_name` (String) volumeName is the binding reference to the PersistentVolume backing this claim.
@@ -6167,18 +6262,9 @@ Optional:
Optional:
-- `claims` (Attributes List) Claims lists the names of resources, defined in spec.resourceClaims,that are used by this container.This is an alpha field and requires enabling theDynamicResourceAllocation feature gate.This field is immutable. It can only be set for containers. (see [below for nested schema](#nestedatt--spec--sharding_specs--template--volumes--ephemeral--volume_claim_template--spec--resources--claims))
- `limits` (Map of String) Limits describes the maximum amount of compute resources allowed.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
- `requests` (Map of String) Requests describes the minimum amount of compute resources required.If Requests is omitted for a container, it defaults to Limits if that is explicitly specified,otherwise to an implementation-defined value. Requests cannot exceed Limits.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-
-### Nested Schema for `spec.sharding_specs.template.volumes.ephemeral.volume_claim_template.spec.resources.claims`
-
-Required:
-
-- `name` (String) Name must match the name of one entry in pod.spec.resourceClaims ofthe Pod where this field is used. It makes that resource availableinside a container.
-
-
### Nested Schema for `spec.sharding_specs.template.volumes.ephemeral.volume_claim_template.spec.selector`
@@ -6405,11 +6491,49 @@ Optional:
Optional:
+- `cluster_trust_bundle` (Attributes) ClusterTrustBundle allows a pod to access the '.spec.trustBundle' fieldof ClusterTrustBundle objects in an auto-updating file.Alpha, gated by the ClusterTrustBundleProjection feature gate.ClusterTrustBundle objects can either be selected by name, or by thecombination of signer name and a label selector.Kubelet performs aggressive normalization of the PEM contents writteninto the pod filesystem. Esoteric PEM features such as inter-blockcomments and block headers are stripped. Certificates are deduplicated.The ordering of certificates within the file is arbitrary, and Kubeletmay change the order over time. (see [below for nested schema](#nestedatt--spec--sharding_specs--template--volumes--projected--sources--cluster_trust_bundle))
- `config_map` (Attributes) configMap information about the configMap data to project (see [below for nested schema](#nestedatt--spec--sharding_specs--template--volumes--projected--sources--config_map))
- `downward_api` (Attributes) downwardAPI information about the downwardAPI data to project (see [below for nested schema](#nestedatt--spec--sharding_specs--template--volumes--projected--sources--downward_api))
- `secret` (Attributes) secret information about the secret data to project (see [below for nested schema](#nestedatt--spec--sharding_specs--template--volumes--projected--sources--secret))
- `service_account_token` (Attributes) serviceAccountToken is information about the serviceAccountToken data to project (see [below for nested schema](#nestedatt--spec--sharding_specs--template--volumes--projected--sources--service_account_token))
+
+### Nested Schema for `spec.sharding_specs.template.volumes.projected.sources.cluster_trust_bundle`
+
+Required:
+
+- `path` (String) Relative path from the volume root to write the bundle.
+
+Optional:
+
+- `label_selector` (Attributes) Select all ClusterTrustBundles that match this label selector. Only haseffect if signerName is set. Mutually-exclusive with name. If unset,interpreted as 'match nothing'. If set but empty, interpreted as 'matcheverything'. (see [below for nested schema](#nestedatt--spec--sharding_specs--template--volumes--projected--sources--cluster_trust_bundle--label_selector))
+- `name` (String) Select a single ClusterTrustBundle by object name. Mutually-exclusivewith signerName and labelSelector.
+- `optional` (Boolean) If true, don't block pod startup if the referenced ClusterTrustBundle(s)aren't available. If using name, then the named ClusterTrustBundle isallowed not to exist. If using signerName, then the combination ofsignerName and labelSelector is allowed to match zeroClusterTrustBundles.
+- `signer_name` (String) Select all ClusterTrustBundles that match this signer name.Mutually-exclusive with name. The contents of all selectedClusterTrustBundles will be unified and deduplicated.
+
+
+### Nested Schema for `spec.sharding_specs.template.volumes.projected.sources.cluster_trust_bundle.label_selector`
+
+Optional:
+
+- `match_expressions` (Attributes List) matchExpressions is a list of label selector requirements. The requirements are ANDed. (see [below for nested schema](#nestedatt--spec--sharding_specs--template--volumes--projected--sources--cluster_trust_bundle--label_selector--match_expressions))
+- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.
+
+
+### Nested Schema for `spec.sharding_specs.template.volumes.projected.sources.cluster_trust_bundle.label_selector.match_expressions`
+
+Required:
+
+- `key` (String) key is the label key that the selector applies to.
+- `operator` (String) operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.
+
+Optional:
+
+- `values` (List of String) values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.
+
+
+
+
### Nested Schema for `spec.sharding_specs.template.volumes.projected.sources.config_map`
diff --git a/docs/data-sources/apps_kubeblocks_io_component_definition_v1alpha1_manifest.md b/docs/data-sources/apps_kubeblocks_io_component_definition_v1alpha1_manifest.md
index f70006040..44e0e34e0 100644
--- a/docs/data-sources/apps_kubeblocks_io_component_definition_v1alpha1_manifest.md
+++ b/docs/data-sources/apps_kubeblocks_io_component_definition_v1alpha1_manifest.md
@@ -281,6 +281,7 @@ Optional:
- `exec` (Attributes) Exec specifies the action to take. (see [below for nested schema](#nestedatt--spec--runtime--containers--lifecycle--post_start--exec))
- `http_get` (Attributes) HTTPGet specifies the http request to perform. (see [below for nested schema](#nestedatt--spec--runtime--containers--lifecycle--post_start--http_get))
+- `sleep` (Attributes) Sleep represents the duration that the container should sleep before being terminated. (see [below for nested schema](#nestedatt--spec--runtime--containers--lifecycle--post_start--sleep))
- `tcp_socket` (Attributes) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and keptfor the backward compatibility. There are no validation of this field andlifecycle hooks will fail in runtime when tcp handler is specified. (see [below for nested schema](#nestedatt--spec--runtime--containers--lifecycle--post_start--tcp_socket))
@@ -315,6 +316,14 @@ Required:
+
+### Nested Schema for `spec.runtime.containers.lifecycle.post_start.sleep`
+
+Required:
+
+- `seconds` (Number) Seconds is the number of seconds to sleep.
+
+
### Nested Schema for `spec.runtime.containers.lifecycle.post_start.tcp_socket`
@@ -335,6 +344,7 @@ Optional:
- `exec` (Attributes) Exec specifies the action to take. (see [below for nested schema](#nestedatt--spec--runtime--containers--lifecycle--pre_stop--exec))
- `http_get` (Attributes) HTTPGet specifies the http request to perform. (see [below for nested schema](#nestedatt--spec--runtime--containers--lifecycle--pre_stop--http_get))
+- `sleep` (Attributes) Sleep represents the duration that the container should sleep before being terminated. (see [below for nested schema](#nestedatt--spec--runtime--containers--lifecycle--pre_stop--sleep))
- `tcp_socket` (Attributes) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and keptfor the backward compatibility. There are no validation of this field andlifecycle hooks will fail in runtime when tcp handler is specified. (see [below for nested schema](#nestedatt--spec--runtime--containers--lifecycle--pre_stop--tcp_socket))
@@ -369,6 +379,14 @@ Required:
+
+### Nested Schema for `spec.runtime.containers.lifecycle.pre_stop.sleep`
+
+Required:
+
+- `seconds` (Number) Seconds is the number of seconds to sleep.
+
+
### Nested Schema for `spec.runtime.containers.lifecycle.pre_stop.tcp_socket`
@@ -861,7 +879,9 @@ Required:
Optional:
-- `label_selector` (Attributes) A label query over a set of resources, in this case pods. (see [below for nested schema](#nestedatt--spec--runtime--affinity--pod_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--label_selector))
+- `label_selector` (Attributes) A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods. (see [below for nested schema](#nestedatt--spec--runtime--affinity--pod_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--label_selector))
+- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
+- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
- `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--runtime--affinity--pod_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--namespace_selector))
- `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.
@@ -920,7 +940,9 @@ Required:
Optional:
-- `label_selector` (Attributes) A label query over a set of resources, in this case pods. (see [below for nested schema](#nestedatt--spec--runtime--affinity--pod_affinity--required_during_scheduling_ignored_during_execution--label_selector))
+- `label_selector` (Attributes) A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods. (see [below for nested schema](#nestedatt--spec--runtime--affinity--pod_affinity--required_during_scheduling_ignored_during_execution--label_selector))
+- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
+- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
- `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--runtime--affinity--pod_affinity--required_during_scheduling_ignored_during_execution--namespace_selector))
- `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.
@@ -995,7 +1017,9 @@ Required:
Optional:
-- `label_selector` (Attributes) A label query over a set of resources, in this case pods. (see [below for nested schema](#nestedatt--spec--runtime--affinity--pod_anti_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--label_selector))
+- `label_selector` (Attributes) A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods. (see [below for nested schema](#nestedatt--spec--runtime--affinity--pod_anti_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--label_selector))
+- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
+- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
- `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--runtime--affinity--pod_anti_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--namespace_selector))
- `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.
@@ -1054,7 +1078,9 @@ Required:
Optional:
-- `label_selector` (Attributes) A label query over a set of resources, in this case pods. (see [below for nested schema](#nestedatt--spec--runtime--affinity--pod_anti_affinity--required_during_scheduling_ignored_during_execution--label_selector))
+- `label_selector` (Attributes) A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods. (see [below for nested schema](#nestedatt--spec--runtime--affinity--pod_anti_affinity--required_during_scheduling_ignored_during_execution--label_selector))
+- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
+- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
- `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--runtime--affinity--pod_anti_affinity--required_during_scheduling_ignored_during_execution--namespace_selector))
- `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.
@@ -1276,6 +1302,7 @@ Optional:
- `exec` (Attributes) Exec specifies the action to take. (see [below for nested schema](#nestedatt--spec--runtime--ephemeral_containers--lifecycle--post_start--exec))
- `http_get` (Attributes) HTTPGet specifies the http request to perform. (see [below for nested schema](#nestedatt--spec--runtime--ephemeral_containers--lifecycle--post_start--http_get))
+- `sleep` (Attributes) Sleep represents the duration that the container should sleep before being terminated. (see [below for nested schema](#nestedatt--spec--runtime--ephemeral_containers--lifecycle--post_start--sleep))
- `tcp_socket` (Attributes) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and keptfor the backward compatibility. There are no validation of this field andlifecycle hooks will fail in runtime when tcp handler is specified. (see [below for nested schema](#nestedatt--spec--runtime--ephemeral_containers--lifecycle--post_start--tcp_socket))
@@ -1310,6 +1337,14 @@ Required:
+
+### Nested Schema for `spec.runtime.ephemeral_containers.lifecycle.post_start.sleep`
+
+Required:
+
+- `seconds` (Number) Seconds is the number of seconds to sleep.
+
+
### Nested Schema for `spec.runtime.ephemeral_containers.lifecycle.post_start.tcp_socket`
@@ -1330,6 +1365,7 @@ Optional:
- `exec` (Attributes) Exec specifies the action to take. (see [below for nested schema](#nestedatt--spec--runtime--ephemeral_containers--lifecycle--pre_stop--exec))
- `http_get` (Attributes) HTTPGet specifies the http request to perform. (see [below for nested schema](#nestedatt--spec--runtime--ephemeral_containers--lifecycle--pre_stop--http_get))
+- `sleep` (Attributes) Sleep represents the duration that the container should sleep before being terminated. (see [below for nested schema](#nestedatt--spec--runtime--ephemeral_containers--lifecycle--pre_stop--sleep))
- `tcp_socket` (Attributes) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and keptfor the backward compatibility. There are no validation of this field andlifecycle hooks will fail in runtime when tcp handler is specified. (see [below for nested schema](#nestedatt--spec--runtime--ephemeral_containers--lifecycle--pre_stop--tcp_socket))
@@ -1364,6 +1400,14 @@ Required:
+
+### Nested Schema for `spec.runtime.ephemeral_containers.lifecycle.pre_stop.sleep`
+
+Required:
+
+- `seconds` (Number) Seconds is the number of seconds to sleep.
+
+
### Nested Schema for `spec.runtime.ephemeral_containers.lifecycle.pre_stop.tcp_socket`
@@ -1894,6 +1938,7 @@ Optional:
- `exec` (Attributes) Exec specifies the action to take. (see [below for nested schema](#nestedatt--spec--runtime--init_containers--lifecycle--post_start--exec))
- `http_get` (Attributes) HTTPGet specifies the http request to perform. (see [below for nested schema](#nestedatt--spec--runtime--init_containers--lifecycle--post_start--http_get))
+- `sleep` (Attributes) Sleep represents the duration that the container should sleep before being terminated. (see [below for nested schema](#nestedatt--spec--runtime--init_containers--lifecycle--post_start--sleep))
- `tcp_socket` (Attributes) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and keptfor the backward compatibility. There are no validation of this field andlifecycle hooks will fail in runtime when tcp handler is specified. (see [below for nested schema](#nestedatt--spec--runtime--init_containers--lifecycle--post_start--tcp_socket))
@@ -1928,6 +1973,14 @@ Required:
+
+### Nested Schema for `spec.runtime.init_containers.lifecycle.post_start.sleep`
+
+Required:
+
+- `seconds` (Number) Seconds is the number of seconds to sleep.
+
+
### Nested Schema for `spec.runtime.init_containers.lifecycle.post_start.tcp_socket`
@@ -1948,6 +2001,7 @@ Optional:
- `exec` (Attributes) Exec specifies the action to take. (see [below for nested schema](#nestedatt--spec--runtime--init_containers--lifecycle--pre_stop--exec))
- `http_get` (Attributes) HTTPGet specifies the http request to perform. (see [below for nested schema](#nestedatt--spec--runtime--init_containers--lifecycle--pre_stop--http_get))
+- `sleep` (Attributes) Sleep represents the duration that the container should sleep before being terminated. (see [below for nested schema](#nestedatt--spec--runtime--init_containers--lifecycle--pre_stop--sleep))
- `tcp_socket` (Attributes) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and keptfor the backward compatibility. There are no validation of this field andlifecycle hooks will fail in runtime when tcp handler is specified. (see [below for nested schema](#nestedatt--spec--runtime--init_containers--lifecycle--pre_stop--tcp_socket))
@@ -1982,6 +2036,14 @@ Required:
+
+### Nested Schema for `spec.runtime.init_containers.lifecycle.pre_stop.sleep`
+
+Required:
+
+- `seconds` (Number) Seconds is the number of seconds to sleep.
+
+
### Nested Schema for `spec.runtime.init_containers.lifecycle.pre_stop.tcp_socket`
@@ -2762,6 +2824,7 @@ Optional:
- `resources` (Attributes) resources represents the minimum resources the volume should have.If RecoverVolumeExpansionFailure feature is enabled users are allowed to specify resource requirementsthat are lower than previous value but must still be higher than capacity recorded in thestatus field of the claim.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources (see [below for nested schema](#nestedatt--spec--runtime--volumes--ephemeral--volume_claim_template--spec--resources))
- `selector` (Attributes) selector is a label query over volumes to consider for binding. (see [below for nested schema](#nestedatt--spec--runtime--volumes--ephemeral--volume_claim_template--spec--selector))
- `storage_class_name` (String) storageClassName is the name of the StorageClass required by the claim.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#class-1
+- `volume_attributes_class_name` (String) volumeAttributesClassName may be used to set the VolumeAttributesClass used by this claim.If specified, the CSI driver will create or update the volume with the attributes definedin the corresponding VolumeAttributesClass. This has a different purpose than storageClassName,it can be changed after the claim is created. An empty string value means that no VolumeAttributesClasswill be applied to the claim but it's not allowed to reset this field to empty string once it is set.If unspecified and the PersistentVolumeClaim is unbound, the default VolumeAttributesClasswill be set by the persistentvolume controller if it exists.If the resource referred to by volumeAttributesClass does not exist, this PersistentVolumeClaim will beset to a Pending state, as reflected by the modifyVolumeStatus field, until such as a resourceexists.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#volumeattributesclass(Alpha) Using this field requires the VolumeAttributesClass feature gate to be enabled.
- `volume_mode` (String) volumeMode defines what type of volume is required by the claim.Value of Filesystem is implied when not included in claim spec.
- `volume_name` (String) volumeName is the binding reference to the PersistentVolume backing this claim.
@@ -2797,18 +2860,9 @@ Optional:
Optional:
-- `claims` (Attributes List) Claims lists the names of resources, defined in spec.resourceClaims,that are used by this container.This is an alpha field and requires enabling theDynamicResourceAllocation feature gate.This field is immutable. It can only be set for containers. (see [below for nested schema](#nestedatt--spec--runtime--volumes--ephemeral--volume_claim_template--spec--resources--claims))
- `limits` (Map of String) Limits describes the maximum amount of compute resources allowed.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
- `requests` (Map of String) Requests describes the minimum amount of compute resources required.If Requests is omitted for a container, it defaults to Limits if that is explicitly specified,otherwise to an implementation-defined value. Requests cannot exceed Limits.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-
-### Nested Schema for `spec.runtime.volumes.ephemeral.volume_claim_template.spec.resources.claims`
-
-Required:
-
-- `name` (String) Name must match the name of one entry in pod.spec.resourceClaims ofthe Pod where this field is used. It makes that resource availableinside a container.
-
-
### Nested Schema for `spec.runtime.volumes.ephemeral.volume_claim_template.spec.selector`
@@ -3035,11 +3089,49 @@ Optional:
Optional:
+- `cluster_trust_bundle` (Attributes) ClusterTrustBundle allows a pod to access the '.spec.trustBundle' fieldof ClusterTrustBundle objects in an auto-updating file.Alpha, gated by the ClusterTrustBundleProjection feature gate.ClusterTrustBundle objects can either be selected by name, or by thecombination of signer name and a label selector.Kubelet performs aggressive normalization of the PEM contents writteninto the pod filesystem. Esoteric PEM features such as inter-blockcomments and block headers are stripped. Certificates are deduplicated.The ordering of certificates within the file is arbitrary, and Kubeletmay change the order over time. (see [below for nested schema](#nestedatt--spec--runtime--volumes--projected--sources--cluster_trust_bundle))
- `config_map` (Attributes) configMap information about the configMap data to project (see [below for nested schema](#nestedatt--spec--runtime--volumes--projected--sources--config_map))
- `downward_api` (Attributes) downwardAPI information about the downwardAPI data to project (see [below for nested schema](#nestedatt--spec--runtime--volumes--projected--sources--downward_api))
- `secret` (Attributes) secret information about the secret data to project (see [below for nested schema](#nestedatt--spec--runtime--volumes--projected--sources--secret))
- `service_account_token` (Attributes) serviceAccountToken is information about the serviceAccountToken data to project (see [below for nested schema](#nestedatt--spec--runtime--volumes--projected--sources--service_account_token))
+
+### Nested Schema for `spec.runtime.volumes.projected.sources.cluster_trust_bundle`
+
+Required:
+
+- `path` (String) Relative path from the volume root to write the bundle.
+
+Optional:
+
+- `label_selector` (Attributes) Select all ClusterTrustBundles that match this label selector. Only haseffect if signerName is set. Mutually-exclusive with name. If unset,interpreted as 'match nothing'. If set but empty, interpreted as 'matcheverything'. (see [below for nested schema](#nestedatt--spec--runtime--volumes--projected--sources--cluster_trust_bundle--label_selector))
+- `name` (String) Select a single ClusterTrustBundle by object name. Mutually-exclusivewith signerName and labelSelector.
+- `optional` (Boolean) If true, don't block pod startup if the referenced ClusterTrustBundle(s)aren't available. If using name, then the named ClusterTrustBundle isallowed not to exist. If using signerName, then the combination ofsignerName and labelSelector is allowed to match zeroClusterTrustBundles.
+- `signer_name` (String) Select all ClusterTrustBundles that match this signer name.Mutually-exclusive with name. The contents of all selectedClusterTrustBundles will be unified and deduplicated.
+
+
+### Nested Schema for `spec.runtime.volumes.projected.sources.cluster_trust_bundle.label_selector`
+
+Optional:
+
+- `match_expressions` (Attributes List) matchExpressions is a list of label selector requirements. The requirements are ANDed. (see [below for nested schema](#nestedatt--spec--runtime--volumes--projected--sources--cluster_trust_bundle--label_selector--match_expressions))
+- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.
+
+
+### Nested Schema for `spec.runtime.volumes.projected.sources.cluster_trust_bundle.label_selector.match_expressions`
+
+Required:
+
+- `key` (String) key is the label key that the selector applies to.
+- `operator` (String) operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.
+
+Optional:
+
+- `values` (List of String) values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.
+
+
+
+
### Nested Schema for `spec.runtime.volumes.projected.sources.config_map`
@@ -5023,7 +5115,7 @@ Required:
Optional:
-- `app_protocol` (String) The application protocol for this port.This is used as a hint for implementations to offer richer behavior for protocols that they understand.This field follows standard Kubernetes label syntax.Valid values are either:* Un-prefixed protocol names - reserved for IANA standard service names (as perRFC-6335 and https://www.iana.org/assignments/service-names).* Kubernetes-defined prefixed names: * 'kubernetes.io/h2c' - HTTP/2 over cleartext as described in https://www.rfc-editor.org/rfc/rfc7540 * 'kubernetes.io/ws' - WebSocket over cleartext as described in https://www.rfc-editor.org/rfc/rfc6455 * 'kubernetes.io/wss' - WebSocket over TLS as described in https://www.rfc-editor.org/rfc/rfc6455* Other protocols should use implementation-defined prefixed names such asmycompany.com/my-custom-protocol.
+- `app_protocol` (String) The application protocol for this port.This is used as a hint for implementations to offer richer behavior for protocols that they understand.This field follows standard Kubernetes label syntax.Valid values are either:* Un-prefixed protocol names - reserved for IANA standard service names (as perRFC-6335 and https://www.iana.org/assignments/service-names).* Kubernetes-defined prefixed names: * 'kubernetes.io/h2c' - HTTP/2 prior knowledge over cleartext as described in https://www.rfc-editor.org/rfc/rfc9113.html#name-starting-http-2-with-prior- * 'kubernetes.io/ws' - WebSocket over cleartext as described in https://www.rfc-editor.org/rfc/rfc6455 * 'kubernetes.io/wss' - WebSocket over TLS as described in https://www.rfc-editor.org/rfc/rfc6455* Other protocols should use implementation-defined prefixed names such asmycompany.com/my-custom-protocol.
- `name` (String) The name of this port within the service. This must be a DNS_LABEL.All ports within a ServiceSpec must have unique names. When consideringthe endpoints for a Service, this must match the 'name' field in theEndpointPort.Optional if only one ServicePort is defined on this service.
- `node_port` (Number) The port on each node on which this service is exposed when type isNodePort or LoadBalancer. Usually assigned by the system. If a value isspecified, in-range, and not in use it will be used, otherwise theoperation will fail. If not specified, a port will be allocated if thisService requires one. If this field is specified when creating aService which does not need it, creation will fail. This field will bewiped when updating a Service to no longer need it (e.g. changing typefrom NodePort to ClusterIP).More info: https://kubernetes.io/docs/concepts/services-networking/service/#type-nodeport
- `protocol` (String) The IP protocol for this port. Supports 'TCP', 'UDP', and 'SCTP'.Default is TCP.
diff --git a/docs/data-sources/apps_kubeblocks_io_component_v1alpha1_manifest.md b/docs/data-sources/apps_kubeblocks_io_component_v1alpha1_manifest.md
index f3e142359..cf1aa4cbe 100644
--- a/docs/data-sources/apps_kubeblocks_io_component_v1alpha1_manifest.md
+++ b/docs/data-sources/apps_kubeblocks_io_component_v1alpha1_manifest.md
@@ -459,7 +459,9 @@ Required:
Optional:
-- `label_selector` (Attributes) A label query over a set of resources, in this case pods. (see [below for nested schema](#nestedatt--spec--instances--scheduling_policy--affinity--pod_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--label_selector))
+- `label_selector` (Attributes) A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods. (see [below for nested schema](#nestedatt--spec--instances--scheduling_policy--affinity--pod_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--label_selector))
+- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
+- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
- `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--instances--scheduling_policy--affinity--pod_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--namespace_selector))
- `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.
@@ -518,7 +520,9 @@ Required:
Optional:
-- `label_selector` (Attributes) A label query over a set of resources, in this case pods. (see [below for nested schema](#nestedatt--spec--instances--scheduling_policy--affinity--pod_affinity--required_during_scheduling_ignored_during_execution--label_selector))
+- `label_selector` (Attributes) A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods. (see [below for nested schema](#nestedatt--spec--instances--scheduling_policy--affinity--pod_affinity--required_during_scheduling_ignored_during_execution--label_selector))
+- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
+- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
- `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--instances--scheduling_policy--affinity--pod_affinity--required_during_scheduling_ignored_during_execution--namespace_selector))
- `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.
@@ -593,7 +597,9 @@ Required:
Optional:
-- `label_selector` (Attributes) A label query over a set of resources, in this case pods. (see [below for nested schema](#nestedatt--spec--instances--scheduling_policy--affinity--pod_anti_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--label_selector))
+- `label_selector` (Attributes) A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods. (see [below for nested schema](#nestedatt--spec--instances--scheduling_policy--affinity--pod_anti_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--label_selector))
+- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
+- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
- `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--instances--scheduling_policy--affinity--pod_anti_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--namespace_selector))
- `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.
@@ -652,7 +658,9 @@ Required:
Optional:
-- `label_selector` (Attributes) A label query over a set of resources, in this case pods. (see [below for nested schema](#nestedatt--spec--instances--scheduling_policy--affinity--pod_anti_affinity--required_during_scheduling_ignored_during_execution--label_selector))
+- `label_selector` (Attributes) A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods. (see [below for nested schema](#nestedatt--spec--instances--scheduling_policy--affinity--pod_anti_affinity--required_during_scheduling_ignored_during_execution--label_selector))
+- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
+- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
- `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--instances--scheduling_policy--affinity--pod_anti_affinity--required_during_scheduling_ignored_during_execution--namespace_selector))
- `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.
@@ -782,18 +790,9 @@ Optional:
Optional:
-- `claims` (Attributes List) Claims lists the names of resources, defined in spec.resourceClaims,that are used by this container.This is an alpha field and requires enabling theDynamicResourceAllocation feature gate.This field is immutable. It can only be set for containers. (see [below for nested schema](#nestedatt--spec--instances--volume_claim_templates--spec--resources--claims))
- `limits` (Map of String) Limits describes the maximum amount of compute resources allowed.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
- `requests` (Map of String) Requests describes the minimum amount of compute resources required.If Requests is omitted for a container, it defaults to Limits if that is explicitly specified,otherwise to an implementation-defined value. Requests cannot exceed Limits.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-
-### Nested Schema for `spec.instances.volume_claim_templates.spec.resources.claims`
-
-Required:
-
-- `name` (String) Name must match the name of one entry in pod.spec.resourceClaims ofthe Pod where this field is used. It makes that resource availableinside a container.
-
-
@@ -1074,6 +1073,7 @@ Optional:
- `resources` (Attributes) resources represents the minimum resources the volume should have.If RecoverVolumeExpansionFailure feature is enabled users are allowed to specify resource requirementsthat are lower than previous value but must still be higher than capacity recorded in thestatus field of the claim.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources (see [below for nested schema](#nestedatt--spec--instances--volumes--ephemeral--volume_claim_template--spec--resources))
- `selector` (Attributes) selector is a label query over volumes to consider for binding. (see [below for nested schema](#nestedatt--spec--instances--volumes--ephemeral--volume_claim_template--spec--selector))
- `storage_class_name` (String) storageClassName is the name of the StorageClass required by the claim.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#class-1
+- `volume_attributes_class_name` (String) volumeAttributesClassName may be used to set the VolumeAttributesClass used by this claim.If specified, the CSI driver will create or update the volume with the attributes definedin the corresponding VolumeAttributesClass. This has a different purpose than storageClassName,it can be changed after the claim is created. An empty string value means that no VolumeAttributesClasswill be applied to the claim but it's not allowed to reset this field to empty string once it is set.If unspecified and the PersistentVolumeClaim is unbound, the default VolumeAttributesClasswill be set by the persistentvolume controller if it exists.If the resource referred to by volumeAttributesClass does not exist, this PersistentVolumeClaim will beset to a Pending state, as reflected by the modifyVolumeStatus field, until such as a resourceexists.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#volumeattributesclass(Alpha) Using this field requires the VolumeAttributesClass feature gate to be enabled.
- `volume_mode` (String) volumeMode defines what type of volume is required by the claim.Value of Filesystem is implied when not included in claim spec.
- `volume_name` (String) volumeName is the binding reference to the PersistentVolume backing this claim.
@@ -1109,18 +1109,9 @@ Optional:
Optional:
-- `claims` (Attributes List) Claims lists the names of resources, defined in spec.resourceClaims,that are used by this container.This is an alpha field and requires enabling theDynamicResourceAllocation feature gate.This field is immutable. It can only be set for containers. (see [below for nested schema](#nestedatt--spec--instances--volumes--ephemeral--volume_claim_template--spec--resources--claims))
- `limits` (Map of String) Limits describes the maximum amount of compute resources allowed.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
- `requests` (Map of String) Requests describes the minimum amount of compute resources required.If Requests is omitted for a container, it defaults to Limits if that is explicitly specified,otherwise to an implementation-defined value. Requests cannot exceed Limits.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-
-### Nested Schema for `spec.instances.volumes.ephemeral.volume_claim_template.spec.resources.claims`
-
-Required:
-
-- `name` (String) Name must match the name of one entry in pod.spec.resourceClaims ofthe Pod where this field is used. It makes that resource availableinside a container.
-
-
### Nested Schema for `spec.instances.volumes.ephemeral.volume_claim_template.spec.selector`
@@ -1347,11 +1338,49 @@ Optional:
Optional:
+- `cluster_trust_bundle` (Attributes) ClusterTrustBundle allows a pod to access the '.spec.trustBundle' fieldof ClusterTrustBundle objects in an auto-updating file.Alpha, gated by the ClusterTrustBundleProjection feature gate.ClusterTrustBundle objects can either be selected by name, or by thecombination of signer name and a label selector.Kubelet performs aggressive normalization of the PEM contents writteninto the pod filesystem. Esoteric PEM features such as inter-blockcomments and block headers are stripped. Certificates are deduplicated.The ordering of certificates within the file is arbitrary, and Kubeletmay change the order over time. (see [below for nested schema](#nestedatt--spec--instances--volumes--projected--sources--cluster_trust_bundle))
- `config_map` (Attributes) configMap information about the configMap data to project (see [below for nested schema](#nestedatt--spec--instances--volumes--projected--sources--config_map))
- `downward_api` (Attributes) downwardAPI information about the downwardAPI data to project (see [below for nested schema](#nestedatt--spec--instances--volumes--projected--sources--downward_api))
- `secret` (Attributes) secret information about the secret data to project (see [below for nested schema](#nestedatt--spec--instances--volumes--projected--sources--secret))
- `service_account_token` (Attributes) serviceAccountToken is information about the serviceAccountToken data to project (see [below for nested schema](#nestedatt--spec--instances--volumes--projected--sources--service_account_token))
+
+### Nested Schema for `spec.instances.volumes.projected.sources.cluster_trust_bundle`
+
+Required:
+
+- `path` (String) Relative path from the volume root to write the bundle.
+
+Optional:
+
+- `label_selector` (Attributes) Select all ClusterTrustBundles that match this label selector. Only haseffect if signerName is set. Mutually-exclusive with name. If unset,interpreted as 'match nothing'. If set but empty, interpreted as 'matcheverything'. (see [below for nested schema](#nestedatt--spec--instances--volumes--projected--sources--cluster_trust_bundle--label_selector))
+- `name` (String) Select a single ClusterTrustBundle by object name. Mutually-exclusivewith signerName and labelSelector.
+- `optional` (Boolean) If true, don't block pod startup if the referenced ClusterTrustBundle(s)aren't available. If using name, then the named ClusterTrustBundle isallowed not to exist. If using signerName, then the combination ofsignerName and labelSelector is allowed to match zeroClusterTrustBundles.
+- `signer_name` (String) Select all ClusterTrustBundles that match this signer name.Mutually-exclusive with name. The contents of all selectedClusterTrustBundles will be unified and deduplicated.
+
+
+### Nested Schema for `spec.instances.volumes.projected.sources.cluster_trust_bundle.label_selector`
+
+Optional:
+
+- `match_expressions` (Attributes List) matchExpressions is a list of label selector requirements. The requirements are ANDed. (see [below for nested schema](#nestedatt--spec--instances--volumes--projected--sources--cluster_trust_bundle--label_selector--match_expressions))
+- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.
+
+
+### Nested Schema for `spec.instances.volumes.projected.sources.cluster_trust_bundle.label_selector.match_expressions`
+
+Required:
+
+- `key` (String) key is the label key that the selector applies to.
+- `operator` (String) operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.
+
+Optional:
+
+- `values` (List of String) values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.
+
+
+
+
### Nested Schema for `spec.instances.volumes.projected.sources.config_map`
@@ -1750,7 +1779,9 @@ Required:
Optional:
-- `label_selector` (Attributes) A label query over a set of resources, in this case pods. (see [below for nested schema](#nestedatt--spec--scheduling_policy--affinity--pod_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--label_selector))
+- `label_selector` (Attributes) A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods. (see [below for nested schema](#nestedatt--spec--scheduling_policy--affinity--pod_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--label_selector))
+- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
+- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
- `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--scheduling_policy--affinity--pod_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--namespace_selector))
- `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.
@@ -1809,7 +1840,9 @@ Required:
Optional:
-- `label_selector` (Attributes) A label query over a set of resources, in this case pods. (see [below for nested schema](#nestedatt--spec--scheduling_policy--affinity--pod_affinity--required_during_scheduling_ignored_during_execution--label_selector))
+- `label_selector` (Attributes) A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods. (see [below for nested schema](#nestedatt--spec--scheduling_policy--affinity--pod_affinity--required_during_scheduling_ignored_during_execution--label_selector))
+- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
+- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
- `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--scheduling_policy--affinity--pod_affinity--required_during_scheduling_ignored_during_execution--namespace_selector))
- `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.
@@ -1884,7 +1917,9 @@ Required:
Optional:
-- `label_selector` (Attributes) A label query over a set of resources, in this case pods. (see [below for nested schema](#nestedatt--spec--scheduling_policy--affinity--pod_anti_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--label_selector))
+- `label_selector` (Attributes) A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods. (see [below for nested schema](#nestedatt--spec--scheduling_policy--affinity--pod_anti_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--label_selector))
+- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
+- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
- `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--scheduling_policy--affinity--pod_anti_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--namespace_selector))
- `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.
@@ -1943,7 +1978,9 @@ Required:
Optional:
-- `label_selector` (Attributes) A label query over a set of resources, in this case pods. (see [below for nested schema](#nestedatt--spec--scheduling_policy--affinity--pod_anti_affinity--required_during_scheduling_ignored_during_execution--label_selector))
+- `label_selector` (Attributes) A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods. (see [below for nested schema](#nestedatt--spec--scheduling_policy--affinity--pod_anti_affinity--required_during_scheduling_ignored_during_execution--label_selector))
+- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
+- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
- `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--scheduling_policy--affinity--pod_anti_affinity--required_during_scheduling_ignored_during_execution--namespace_selector))
- `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.
@@ -2147,7 +2184,7 @@ Required:
Optional:
-- `app_protocol` (String) The application protocol for this port.This is used as a hint for implementations to offer richer behavior for protocols that they understand.This field follows standard Kubernetes label syntax.Valid values are either:* Un-prefixed protocol names - reserved for IANA standard service names (as perRFC-6335 and https://www.iana.org/assignments/service-names).* Kubernetes-defined prefixed names: * 'kubernetes.io/h2c' - HTTP/2 over cleartext as described in https://www.rfc-editor.org/rfc/rfc7540 * 'kubernetes.io/ws' - WebSocket over cleartext as described in https://www.rfc-editor.org/rfc/rfc6455 * 'kubernetes.io/wss' - WebSocket over TLS as described in https://www.rfc-editor.org/rfc/rfc6455* Other protocols should use implementation-defined prefixed names such asmycompany.com/my-custom-protocol.
+- `app_protocol` (String) The application protocol for this port.This is used as a hint for implementations to offer richer behavior for protocols that they understand.This field follows standard Kubernetes label syntax.Valid values are either:* Un-prefixed protocol names - reserved for IANA standard service names (as perRFC-6335 and https://www.iana.org/assignments/service-names).* Kubernetes-defined prefixed names: * 'kubernetes.io/h2c' - HTTP/2 prior knowledge over cleartext as described in https://www.rfc-editor.org/rfc/rfc9113.html#name-starting-http-2-with-prior- * 'kubernetes.io/ws' - WebSocket over cleartext as described in https://www.rfc-editor.org/rfc/rfc6455 * 'kubernetes.io/wss' - WebSocket over TLS as described in https://www.rfc-editor.org/rfc/rfc6455* Other protocols should use implementation-defined prefixed names such asmycompany.com/my-custom-protocol.
- `name` (String) The name of this port within the service. This must be a DNS_LABEL.All ports within a ServiceSpec must have unique names. When consideringthe endpoints for a Service, this must match the 'name' field in theEndpointPort.Optional if only one ServicePort is defined on this service.
- `node_port` (Number) The port on each node on which this service is exposed when type isNodePort or LoadBalancer. Usually assigned by the system. If a value isspecified, in-range, and not in use it will be used, otherwise theoperation will fail. If not specified, a port will be allocated if thisService requires one. If this field is specified when creating aService which does not need it, creation will fail. This field will bewiped when updating a Service to no longer need it (e.g. changing typefrom NodePort to ClusterIP).More info: https://kubernetes.io/docs/concepts/services-networking/service/#type-nodeport
- `protocol` (String) The IP protocol for this port. Supports 'TCP', 'UDP', and 'SCTP'.Default is TCP.
@@ -2276,18 +2313,9 @@ Optional:
Optional:
-- `claims` (Attributes List) Claims lists the names of resources, defined in spec.resourceClaims,that are used by this container.This is an alpha field and requires enabling theDynamicResourceAllocation feature gate.This field is immutable. It can only be set for containers. (see [below for nested schema](#nestedatt--spec--volume_claim_templates--spec--resources--claims))
- `limits` (Map of String) Limits describes the maximum amount of compute resources allowed.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
- `requests` (Map of String) Requests describes the minimum amount of compute resources required.If Requests is omitted for a container, it defaults to Limits if that is explicitly specified,otherwise to an implementation-defined value. Requests cannot exceed Limits.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-
-### Nested Schema for `spec.volume_claim_templates.spec.resources.claims`
-
-Required:
-
-- `name` (String) Name must match the name of one entry in pod.spec.resourceClaims ofthe Pod where this field is used. It makes that resource availableinside a container.
-
-
@@ -2552,6 +2580,7 @@ Optional:
- `resources` (Attributes) resources represents the minimum resources the volume should have.If RecoverVolumeExpansionFailure feature is enabled users are allowed to specify resource requirementsthat are lower than previous value but must still be higher than capacity recorded in thestatus field of the claim.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources (see [below for nested schema](#nestedatt--spec--volumes--ephemeral--volume_claim_template--spec--resources))
- `selector` (Attributes) selector is a label query over volumes to consider for binding. (see [below for nested schema](#nestedatt--spec--volumes--ephemeral--volume_claim_template--spec--selector))
- `storage_class_name` (String) storageClassName is the name of the StorageClass required by the claim.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#class-1
+- `volume_attributes_class_name` (String) volumeAttributesClassName may be used to set the VolumeAttributesClass used by this claim.If specified, the CSI driver will create or update the volume with the attributes definedin the corresponding VolumeAttributesClass. This has a different purpose than storageClassName,it can be changed after the claim is created. An empty string value means that no VolumeAttributesClasswill be applied to the claim but it's not allowed to reset this field to empty string once it is set.If unspecified and the PersistentVolumeClaim is unbound, the default VolumeAttributesClasswill be set by the persistentvolume controller if it exists.If the resource referred to by volumeAttributesClass does not exist, this PersistentVolumeClaim will beset to a Pending state, as reflected by the modifyVolumeStatus field, until such as a resourceexists.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#volumeattributesclass(Alpha) Using this field requires the VolumeAttributesClass feature gate to be enabled.
- `volume_mode` (String) volumeMode defines what type of volume is required by the claim.Value of Filesystem is implied when not included in claim spec.
- `volume_name` (String) volumeName is the binding reference to the PersistentVolume backing this claim.
@@ -2587,18 +2616,9 @@ Optional:
Optional:
-- `claims` (Attributes List) Claims lists the names of resources, defined in spec.resourceClaims,that are used by this container.This is an alpha field and requires enabling theDynamicResourceAllocation feature gate.This field is immutable. It can only be set for containers. (see [below for nested schema](#nestedatt--spec--volumes--ephemeral--volume_claim_template--spec--resources--claims))
- `limits` (Map of String) Limits describes the maximum amount of compute resources allowed.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
- `requests` (Map of String) Requests describes the minimum amount of compute resources required.If Requests is omitted for a container, it defaults to Limits if that is explicitly specified,otherwise to an implementation-defined value. Requests cannot exceed Limits.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-
-### Nested Schema for `spec.volumes.ephemeral.volume_claim_template.spec.resources.claims`
-
-Required:
-
-- `name` (String) Name must match the name of one entry in pod.spec.resourceClaims ofthe Pod where this field is used. It makes that resource availableinside a container.
-
-
### Nested Schema for `spec.volumes.ephemeral.volume_claim_template.spec.selector`
@@ -2825,11 +2845,49 @@ Optional:
Optional:
+- `cluster_trust_bundle` (Attributes) ClusterTrustBundle allows a pod to access the '.spec.trustBundle' fieldof ClusterTrustBundle objects in an auto-updating file.Alpha, gated by the ClusterTrustBundleProjection feature gate.ClusterTrustBundle objects can either be selected by name, or by thecombination of signer name and a label selector.Kubelet performs aggressive normalization of the PEM contents writteninto the pod filesystem. Esoteric PEM features such as inter-blockcomments and block headers are stripped. Certificates are deduplicated.The ordering of certificates within the file is arbitrary, and Kubeletmay change the order over time. (see [below for nested schema](#nestedatt--spec--volumes--projected--sources--cluster_trust_bundle))
- `config_map` (Attributes) configMap information about the configMap data to project (see [below for nested schema](#nestedatt--spec--volumes--projected--sources--config_map))
- `downward_api` (Attributes) downwardAPI information about the downwardAPI data to project (see [below for nested schema](#nestedatt--spec--volumes--projected--sources--downward_api))
- `secret` (Attributes) secret information about the secret data to project (see [below for nested schema](#nestedatt--spec--volumes--projected--sources--secret))
- `service_account_token` (Attributes) serviceAccountToken is information about the serviceAccountToken data to project (see [below for nested schema](#nestedatt--spec--volumes--projected--sources--service_account_token))
+
+### Nested Schema for `spec.volumes.projected.sources.cluster_trust_bundle`
+
+Required:
+
+- `path` (String) Relative path from the volume root to write the bundle.
+
+Optional:
+
+- `label_selector` (Attributes) Select all ClusterTrustBundles that match this label selector. Only haseffect if signerName is set. Mutually-exclusive with name. If unset,interpreted as 'match nothing'. If set but empty, interpreted as 'matcheverything'. (see [below for nested schema](#nestedatt--spec--volumes--projected--sources--cluster_trust_bundle--label_selector))
+- `name` (String) Select a single ClusterTrustBundle by object name. Mutually-exclusivewith signerName and labelSelector.
+- `optional` (Boolean) If true, don't block pod startup if the referenced ClusterTrustBundle(s)aren't available. If using name, then the named ClusterTrustBundle isallowed not to exist. If using signerName, then the combination ofsignerName and labelSelector is allowed to match zeroClusterTrustBundles.
+- `signer_name` (String) Select all ClusterTrustBundles that match this signer name.Mutually-exclusive with name. The contents of all selectedClusterTrustBundles will be unified and deduplicated.
+
+
+### Nested Schema for `spec.volumes.projected.sources.cluster_trust_bundle.label_selector`
+
+Optional:
+
+- `match_expressions` (Attributes List) matchExpressions is a list of label selector requirements. The requirements are ANDed. (see [below for nested schema](#nestedatt--spec--volumes--projected--sources--cluster_trust_bundle--label_selector--match_expressions))
+- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.
+
+
+### Nested Schema for `spec.volumes.projected.sources.cluster_trust_bundle.label_selector.match_expressions`
+
+Required:
+
+- `key` (String) key is the label key that the selector applies to.
+- `operator` (String) operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.
+
+Optional:
+
+- `values` (List of String) values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.
+
+
+
+
### Nested Schema for `spec.volumes.projected.sources.config_map`
diff --git a/docs/data-sources/apps_kubeblocks_io_ops_definition_v1alpha1_manifest.md b/docs/data-sources/apps_kubeblocks_io_ops_definition_v1alpha1_manifest.md
index 8f842bdce..86487c856 100644
--- a/docs/data-sources/apps_kubeblocks_io_ops_definition_v1alpha1_manifest.md
+++ b/docs/data-sources/apps_kubeblocks_io_ops_definition_v1alpha1_manifest.md
@@ -360,6 +360,7 @@ Optional:
- `exec` (Attributes) Exec specifies the action to take. (see [below for nested schema](#nestedatt--spec--actions--workload--pod_spec--containers--lifecycle--post_start--exec))
- `http_get` (Attributes) HTTPGet specifies the http request to perform. (see [below for nested schema](#nestedatt--spec--actions--workload--pod_spec--containers--lifecycle--post_start--http_get))
+- `sleep` (Attributes) Sleep represents the duration that the container should sleep before being terminated. (see [below for nested schema](#nestedatt--spec--actions--workload--pod_spec--containers--lifecycle--post_start--sleep))
- `tcp_socket` (Attributes) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and keptfor the backward compatibility. There are no validation of this field andlifecycle hooks will fail in runtime when tcp handler is specified. (see [below for nested schema](#nestedatt--spec--actions--workload--pod_spec--containers--lifecycle--post_start--tcp_socket))
@@ -394,6 +395,14 @@ Required:
+
+### Nested Schema for `spec.actions.workload.pod_spec.containers.lifecycle.post_start.sleep`
+
+Required:
+
+- `seconds` (Number) Seconds is the number of seconds to sleep.
+
+
### Nested Schema for `spec.actions.workload.pod_spec.containers.lifecycle.post_start.tcp_socket`
@@ -414,6 +423,7 @@ Optional:
- `exec` (Attributes) Exec specifies the action to take. (see [below for nested schema](#nestedatt--spec--actions--workload--pod_spec--containers--lifecycle--pre_stop--exec))
- `http_get` (Attributes) HTTPGet specifies the http request to perform. (see [below for nested schema](#nestedatt--spec--actions--workload--pod_spec--containers--lifecycle--pre_stop--http_get))
+- `sleep` (Attributes) Sleep represents the duration that the container should sleep before being terminated. (see [below for nested schema](#nestedatt--spec--actions--workload--pod_spec--containers--lifecycle--pre_stop--sleep))
- `tcp_socket` (Attributes) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and keptfor the backward compatibility. There are no validation of this field andlifecycle hooks will fail in runtime when tcp handler is specified. (see [below for nested schema](#nestedatt--spec--actions--workload--pod_spec--containers--lifecycle--pre_stop--tcp_socket))
@@ -448,6 +458,14 @@ Required:
+
+### Nested Schema for `spec.actions.workload.pod_spec.containers.lifecycle.pre_stop.sleep`
+
+Required:
+
+- `seconds` (Number) Seconds is the number of seconds to sleep.
+
+
### Nested Schema for `spec.actions.workload.pod_spec.containers.lifecycle.pre_stop.tcp_socket`
@@ -940,7 +958,9 @@ Required:
Optional:
-- `label_selector` (Attributes) A label query over a set of resources, in this case pods. (see [below for nested schema](#nestedatt--spec--actions--workload--pod_spec--affinity--pod_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--label_selector))
+- `label_selector` (Attributes) A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods. (see [below for nested schema](#nestedatt--spec--actions--workload--pod_spec--affinity--pod_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--label_selector))
+- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
+- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
- `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--actions--workload--pod_spec--affinity--pod_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--namespace_selector))
- `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.
@@ -999,7 +1019,9 @@ Required:
Optional:
-- `label_selector` (Attributes) A label query over a set of resources, in this case pods. (see [below for nested schema](#nestedatt--spec--actions--workload--pod_spec--affinity--pod_affinity--required_during_scheduling_ignored_during_execution--label_selector))
+- `label_selector` (Attributes) A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods. (see [below for nested schema](#nestedatt--spec--actions--workload--pod_spec--affinity--pod_affinity--required_during_scheduling_ignored_during_execution--label_selector))
+- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
+- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
- `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--actions--workload--pod_spec--affinity--pod_affinity--required_during_scheduling_ignored_during_execution--namespace_selector))
- `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.
@@ -1074,7 +1096,9 @@ Required:
Optional:
-- `label_selector` (Attributes) A label query over a set of resources, in this case pods. (see [below for nested schema](#nestedatt--spec--actions--workload--pod_spec--affinity--pod_anti_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--label_selector))
+- `label_selector` (Attributes) A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods. (see [below for nested schema](#nestedatt--spec--actions--workload--pod_spec--affinity--pod_anti_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--label_selector))
+- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
+- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
- `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--actions--workload--pod_spec--affinity--pod_anti_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--namespace_selector))
- `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.
@@ -1133,7 +1157,9 @@ Required:
Optional:
-- `label_selector` (Attributes) A label query over a set of resources, in this case pods. (see [below for nested schema](#nestedatt--spec--actions--workload--pod_spec--affinity--pod_anti_affinity--required_during_scheduling_ignored_during_execution--label_selector))
+- `label_selector` (Attributes) A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods. (see [below for nested schema](#nestedatt--spec--actions--workload--pod_spec--affinity--pod_anti_affinity--required_during_scheduling_ignored_during_execution--label_selector))
+- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
+- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
- `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--actions--workload--pod_spec--affinity--pod_anti_affinity--required_during_scheduling_ignored_during_execution--namespace_selector))
- `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.
@@ -1355,6 +1381,7 @@ Optional:
- `exec` (Attributes) Exec specifies the action to take. (see [below for nested schema](#nestedatt--spec--actions--workload--pod_spec--ephemeral_containers--lifecycle--post_start--exec))
- `http_get` (Attributes) HTTPGet specifies the http request to perform. (see [below for nested schema](#nestedatt--spec--actions--workload--pod_spec--ephemeral_containers--lifecycle--post_start--http_get))
+- `sleep` (Attributes) Sleep represents the duration that the container should sleep before being terminated. (see [below for nested schema](#nestedatt--spec--actions--workload--pod_spec--ephemeral_containers--lifecycle--post_start--sleep))
- `tcp_socket` (Attributes) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and keptfor the backward compatibility. There are no validation of this field andlifecycle hooks will fail in runtime when tcp handler is specified. (see [below for nested schema](#nestedatt--spec--actions--workload--pod_spec--ephemeral_containers--lifecycle--post_start--tcp_socket))
@@ -1389,6 +1416,14 @@ Required:
+
+### Nested Schema for `spec.actions.workload.pod_spec.ephemeral_containers.lifecycle.post_start.sleep`
+
+Required:
+
+- `seconds` (Number) Seconds is the number of seconds to sleep.
+
+
### Nested Schema for `spec.actions.workload.pod_spec.ephemeral_containers.lifecycle.post_start.tcp_socket`
@@ -1409,6 +1444,7 @@ Optional:
- `exec` (Attributes) Exec specifies the action to take. (see [below for nested schema](#nestedatt--spec--actions--workload--pod_spec--ephemeral_containers--lifecycle--pre_stop--exec))
- `http_get` (Attributes) HTTPGet specifies the http request to perform. (see [below for nested schema](#nestedatt--spec--actions--workload--pod_spec--ephemeral_containers--lifecycle--pre_stop--http_get))
+- `sleep` (Attributes) Sleep represents the duration that the container should sleep before being terminated. (see [below for nested schema](#nestedatt--spec--actions--workload--pod_spec--ephemeral_containers--lifecycle--pre_stop--sleep))
- `tcp_socket` (Attributes) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and keptfor the backward compatibility. There are no validation of this field andlifecycle hooks will fail in runtime when tcp handler is specified. (see [below for nested schema](#nestedatt--spec--actions--workload--pod_spec--ephemeral_containers--lifecycle--pre_stop--tcp_socket))
@@ -1443,6 +1479,14 @@ Required:
+
+### Nested Schema for `spec.actions.workload.pod_spec.ephemeral_containers.lifecycle.pre_stop.sleep`
+
+Required:
+
+- `seconds` (Number) Seconds is the number of seconds to sleep.
+
+
### Nested Schema for `spec.actions.workload.pod_spec.ephemeral_containers.lifecycle.pre_stop.tcp_socket`
@@ -1973,6 +2017,7 @@ Optional:
- `exec` (Attributes) Exec specifies the action to take. (see [below for nested schema](#nestedatt--spec--actions--workload--pod_spec--init_containers--lifecycle--post_start--exec))
- `http_get` (Attributes) HTTPGet specifies the http request to perform. (see [below for nested schema](#nestedatt--spec--actions--workload--pod_spec--init_containers--lifecycle--post_start--http_get))
+- `sleep` (Attributes) Sleep represents the duration that the container should sleep before being terminated. (see [below for nested schema](#nestedatt--spec--actions--workload--pod_spec--init_containers--lifecycle--post_start--sleep))
- `tcp_socket` (Attributes) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and keptfor the backward compatibility. There are no validation of this field andlifecycle hooks will fail in runtime when tcp handler is specified. (see [below for nested schema](#nestedatt--spec--actions--workload--pod_spec--init_containers--lifecycle--post_start--tcp_socket))
@@ -2007,6 +2052,14 @@ Required:
+
+### Nested Schema for `spec.actions.workload.pod_spec.init_containers.lifecycle.post_start.sleep`
+
+Required:
+
+- `seconds` (Number) Seconds is the number of seconds to sleep.
+
+
### Nested Schema for `spec.actions.workload.pod_spec.init_containers.lifecycle.post_start.tcp_socket`
@@ -2027,6 +2080,7 @@ Optional:
- `exec` (Attributes) Exec specifies the action to take. (see [below for nested schema](#nestedatt--spec--actions--workload--pod_spec--init_containers--lifecycle--pre_stop--exec))
- `http_get` (Attributes) HTTPGet specifies the http request to perform. (see [below for nested schema](#nestedatt--spec--actions--workload--pod_spec--init_containers--lifecycle--pre_stop--http_get))
+- `sleep` (Attributes) Sleep represents the duration that the container should sleep before being terminated. (see [below for nested schema](#nestedatt--spec--actions--workload--pod_spec--init_containers--lifecycle--pre_stop--sleep))
- `tcp_socket` (Attributes) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and keptfor the backward compatibility. There are no validation of this field andlifecycle hooks will fail in runtime when tcp handler is specified. (see [below for nested schema](#nestedatt--spec--actions--workload--pod_spec--init_containers--lifecycle--pre_stop--tcp_socket))
@@ -2061,6 +2115,14 @@ Required:
+
+### Nested Schema for `spec.actions.workload.pod_spec.init_containers.lifecycle.pre_stop.sleep`
+
+Required:
+
+- `seconds` (Number) Seconds is the number of seconds to sleep.
+
+
### Nested Schema for `spec.actions.workload.pod_spec.init_containers.lifecycle.pre_stop.tcp_socket`
@@ -2841,6 +2903,7 @@ Optional:
- `resources` (Attributes) resources represents the minimum resources the volume should have.If RecoverVolumeExpansionFailure feature is enabled users are allowed to specify resource requirementsthat are lower than previous value but must still be higher than capacity recorded in thestatus field of the claim.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources (see [below for nested schema](#nestedatt--spec--actions--workload--pod_spec--volumes--ephemeral--volume_claim_template--spec--resources))
- `selector` (Attributes) selector is a label query over volumes to consider for binding. (see [below for nested schema](#nestedatt--spec--actions--workload--pod_spec--volumes--ephemeral--volume_claim_template--spec--selector))
- `storage_class_name` (String) storageClassName is the name of the StorageClass required by the claim.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#class-1
+- `volume_attributes_class_name` (String) volumeAttributesClassName may be used to set the VolumeAttributesClass used by this claim.If specified, the CSI driver will create or update the volume with the attributes definedin the corresponding VolumeAttributesClass. This has a different purpose than storageClassName,it can be changed after the claim is created. An empty string value means that no VolumeAttributesClasswill be applied to the claim but it's not allowed to reset this field to empty string once it is set.If unspecified and the PersistentVolumeClaim is unbound, the default VolumeAttributesClasswill be set by the persistentvolume controller if it exists.If the resource referred to by volumeAttributesClass does not exist, this PersistentVolumeClaim will beset to a Pending state, as reflected by the modifyVolumeStatus field, until such as a resourceexists.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#volumeattributesclass(Alpha) Using this field requires the VolumeAttributesClass feature gate to be enabled.
- `volume_mode` (String) volumeMode defines what type of volume is required by the claim.Value of Filesystem is implied when not included in claim spec.
- `volume_name` (String) volumeName is the binding reference to the PersistentVolume backing this claim.
@@ -2876,18 +2939,9 @@ Optional:
Optional:
-- `claims` (Attributes List) Claims lists the names of resources, defined in spec.resourceClaims,that are used by this container.This is an alpha field and requires enabling theDynamicResourceAllocation feature gate.This field is immutable. It can only be set for containers. (see [below for nested schema](#nestedatt--spec--actions--workload--pod_spec--volumes--ephemeral--volume_claim_template--spec--resources--claims))
- `limits` (Map of String) Limits describes the maximum amount of compute resources allowed.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
- `requests` (Map of String) Requests describes the minimum amount of compute resources required.If Requests is omitted for a container, it defaults to Limits if that is explicitly specified,otherwise to an implementation-defined value. Requests cannot exceed Limits.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-
-### Nested Schema for `spec.actions.workload.pod_spec.volumes.ephemeral.volume_claim_template.spec.resources.claims`
-
-Required:
-
-- `name` (String) Name must match the name of one entry in pod.spec.resourceClaims ofthe Pod where this field is used. It makes that resource availableinside a container.
-
-
### Nested Schema for `spec.actions.workload.pod_spec.volumes.ephemeral.volume_claim_template.spec.selector`
@@ -3114,11 +3168,49 @@ Optional:
Optional:
+- `cluster_trust_bundle` (Attributes) ClusterTrustBundle allows a pod to access the '.spec.trustBundle' fieldof ClusterTrustBundle objects in an auto-updating file.Alpha, gated by the ClusterTrustBundleProjection feature gate.ClusterTrustBundle objects can either be selected by name, or by thecombination of signer name and a label selector.Kubelet performs aggressive normalization of the PEM contents writteninto the pod filesystem. Esoteric PEM features such as inter-blockcomments and block headers are stripped. Certificates are deduplicated.The ordering of certificates within the file is arbitrary, and Kubeletmay change the order over time. (see [below for nested schema](#nestedatt--spec--actions--workload--pod_spec--volumes--projected--sources--cluster_trust_bundle))
- `config_map` (Attributes) configMap information about the configMap data to project (see [below for nested schema](#nestedatt--spec--actions--workload--pod_spec--volumes--projected--sources--config_map))
- `downward_api` (Attributes) downwardAPI information about the downwardAPI data to project (see [below for nested schema](#nestedatt--spec--actions--workload--pod_spec--volumes--projected--sources--downward_api))
- `secret` (Attributes) secret information about the secret data to project (see [below for nested schema](#nestedatt--spec--actions--workload--pod_spec--volumes--projected--sources--secret))
- `service_account_token` (Attributes) serviceAccountToken is information about the serviceAccountToken data to project (see [below for nested schema](#nestedatt--spec--actions--workload--pod_spec--volumes--projected--sources--service_account_token))
+
+### Nested Schema for `spec.actions.workload.pod_spec.volumes.projected.sources.cluster_trust_bundle`
+
+Required:
+
+- `path` (String) Relative path from the volume root to write the bundle.
+
+Optional:
+
+- `label_selector` (Attributes) Select all ClusterTrustBundles that match this label selector. Only haseffect if signerName is set. Mutually-exclusive with name. If unset,interpreted as 'match nothing'. If set but empty, interpreted as 'matcheverything'. (see [below for nested schema](#nestedatt--spec--actions--workload--pod_spec--volumes--projected--sources--cluster_trust_bundle--label_selector))
+- `name` (String) Select a single ClusterTrustBundle by object name. Mutually-exclusivewith signerName and labelSelector.
+- `optional` (Boolean) If true, don't block pod startup if the referenced ClusterTrustBundle(s)aren't available. If using name, then the named ClusterTrustBundle isallowed not to exist. If using signerName, then the combination ofsignerName and labelSelector is allowed to match zeroClusterTrustBundles.
+- `signer_name` (String) Select all ClusterTrustBundles that match this signer name.Mutually-exclusive with name. The contents of all selectedClusterTrustBundles will be unified and deduplicated.
+
+
+### Nested Schema for `spec.actions.workload.pod_spec.volumes.projected.sources.cluster_trust_bundle.label_selector`
+
+Optional:
+
+- `match_expressions` (Attributes List) matchExpressions is a list of label selector requirements. The requirements are ANDed. (see [below for nested schema](#nestedatt--spec--actions--workload--pod_spec--volumes--projected--sources--cluster_trust_bundle--label_selector--match_expressions))
+- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.
+
+
+### Nested Schema for `spec.actions.workload.pod_spec.volumes.projected.sources.cluster_trust_bundle.label_selector.match_expressions`
+
+Required:
+
+- `key` (String) key is the label key that the selector applies to.
+- `operator` (String) operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.
+
+Optional:
+
+- `values` (List of String) values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.
+
+
+
+
### Nested Schema for `spec.actions.workload.pod_spec.volumes.projected.sources.config_map`
diff --git a/docs/data-sources/apps_kubeblocks_io_ops_request_v1alpha1_manifest.md b/docs/data-sources/apps_kubeblocks_io_ops_request_v1alpha1_manifest.md
index 6399fd944..f79e9d845 100644
--- a/docs/data-sources/apps_kubeblocks_io_ops_request_v1alpha1_manifest.md
+++ b/docs/data-sources/apps_kubeblocks_io_ops_request_v1alpha1_manifest.md
@@ -65,6 +65,7 @@ Optional:
- `cluster_name` (String) Specifies the name of the Cluster resource that this operation is targeting.
- `cluster_ref` (String) Deprecated: since v0.9, use clusterName instead.Specifies the name of the Cluster resource that this operation is targeting.
- `custom` (Attributes) Specifies a custom operation defined by OpsDefinition. (see [below for nested schema](#nestedatt--spec--custom))
+- `enqueue_on_force` (Boolean) Indicates whether opsRequest should continue to queue when 'force' is set to true.
- `expose` (Attributes List) Lists Expose objects, each specifying a Component and its services to be exposed. (see [below for nested schema](#nestedatt--spec--expose))
- `force` (Boolean) Instructs the system to bypass pre-checks (including cluster state checks and customized pre-conditions hooks)and immediately execute the opsRequest, except for the opsRequest of 'Start' type, which will still undergopre-checks even if 'force' is true.This is useful for concurrent execution of 'VerticalScaling' and 'HorizontalScaling' opsRequests.By setting 'force' to true, you can bypass the default checks and demand these opsRequests to runsimultaneously.Note: Once set, the 'force' field is immutable and cannot be updated.
- `horizontal_scaling` (Attributes List) Lists HorizontalScaling objects, each specifying scaling requirements for a Component,including desired replica changes, configurations for new instances, modifications for existing instances,and take offline/online the specified instances. (see [below for nested schema](#nestedatt--spec--horizontal_scaling))
@@ -183,7 +184,7 @@ Required:
Optional:
-- `app_protocol` (String) The application protocol for this port.This is used as a hint for implementations to offer richer behavior for protocols that they understand.This field follows standard Kubernetes label syntax.Valid values are either:* Un-prefixed protocol names - reserved for IANA standard service names (as perRFC-6335 and https://www.iana.org/assignments/service-names).* Kubernetes-defined prefixed names: * 'kubernetes.io/h2c' - HTTP/2 over cleartext as described in https://www.rfc-editor.org/rfc/rfc7540 * 'kubernetes.io/ws' - WebSocket over cleartext as described in https://www.rfc-editor.org/rfc/rfc6455 * 'kubernetes.io/wss' - WebSocket over TLS as described in https://www.rfc-editor.org/rfc/rfc6455* Other protocols should use implementation-defined prefixed names such asmycompany.com/my-custom-protocol.
+- `app_protocol` (String) The application protocol for this port.This is used as a hint for implementations to offer richer behavior for protocols that they understand.This field follows standard Kubernetes label syntax.Valid values are either:* Un-prefixed protocol names - reserved for IANA standard service names (as perRFC-6335 and https://www.iana.org/assignments/service-names).* Kubernetes-defined prefixed names: * 'kubernetes.io/h2c' - HTTP/2 prior knowledge over cleartext as described in https://www.rfc-editor.org/rfc/rfc9113.html#name-starting-http-2-with-prior- * 'kubernetes.io/ws' - WebSocket over cleartext as described in https://www.rfc-editor.org/rfc/rfc6455 * 'kubernetes.io/wss' - WebSocket over TLS as described in https://www.rfc-editor.org/rfc/rfc6455* Other protocols should use implementation-defined prefixed names such asmycompany.com/my-custom-protocol.
- `name` (String) The name of this port within the service. This must be a DNS_LABEL.All ports within a ServiceSpec must have unique names. When consideringthe endpoints for a Service, this must match the 'name' field in theEndpointPort.Optional if only one ServicePort is defined on this service.
- `node_port` (Number) The port on each node on which this service is exposed when type isNodePort or LoadBalancer. Usually assigned by the system. If a value isspecified, in-range, and not in use it will be used, otherwise theoperation will fail. If not specified, a port will be allocated if thisService requires one. If this field is specified when creating aService which does not need it, creation will fail. This field will bewiped when updating a Service to no longer need it (e.g. changing typefrom NodePort to ClusterIP).More info: https://kubernetes.io/docs/concepts/services-networking/service/#type-nodeport
- `protocol` (String) The IP protocol for this port. Supports 'TCP', 'UDP', and 'SCTP'.Default is TCP.
@@ -498,7 +499,9 @@ Required:
Optional:
-- `label_selector` (Attributes) A label query over a set of resources, in this case pods. (see [below for nested schema](#nestedatt--spec--horizontal_scaling--scale_out--new_instances--scheduling_policy--affinity--pod_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--label_selector))
+- `label_selector` (Attributes) A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods. (see [below for nested schema](#nestedatt--spec--horizontal_scaling--scale_out--new_instances--scheduling_policy--affinity--pod_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--label_selector))
+- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
+- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
- `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--horizontal_scaling--scale_out--new_instances--scheduling_policy--affinity--pod_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--namespace_selector))
- `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.
@@ -557,7 +560,9 @@ Required:
Optional:
-- `label_selector` (Attributes) A label query over a set of resources, in this case pods. (see [below for nested schema](#nestedatt--spec--horizontal_scaling--scale_out--new_instances--scheduling_policy--affinity--pod_affinity--required_during_scheduling_ignored_during_execution--label_selector))
+- `label_selector` (Attributes) A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods. (see [below for nested schema](#nestedatt--spec--horizontal_scaling--scale_out--new_instances--scheduling_policy--affinity--pod_affinity--required_during_scheduling_ignored_during_execution--label_selector))
+- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
+- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
- `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--horizontal_scaling--scale_out--new_instances--scheduling_policy--affinity--pod_affinity--required_during_scheduling_ignored_during_execution--namespace_selector))
- `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.
@@ -632,7 +637,9 @@ Required:
Optional:
-- `label_selector` (Attributes) A label query over a set of resources, in this case pods. (see [below for nested schema](#nestedatt--spec--horizontal_scaling--scale_out--new_instances--scheduling_policy--affinity--pod_anti_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--label_selector))
+- `label_selector` (Attributes) A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods. (see [below for nested schema](#nestedatt--spec--horizontal_scaling--scale_out--new_instances--scheduling_policy--affinity--pod_anti_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--label_selector))
+- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
+- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
- `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--horizontal_scaling--scale_out--new_instances--scheduling_policy--affinity--pod_anti_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--namespace_selector))
- `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.
@@ -691,7 +698,9 @@ Required:
Optional:
-- `label_selector` (Attributes) A label query over a set of resources, in this case pods. (see [below for nested schema](#nestedatt--spec--horizontal_scaling--scale_out--new_instances--scheduling_policy--affinity--pod_anti_affinity--required_during_scheduling_ignored_during_execution--label_selector))
+- `label_selector` (Attributes) A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods. (see [below for nested schema](#nestedatt--spec--horizontal_scaling--scale_out--new_instances--scheduling_policy--affinity--pod_anti_affinity--required_during_scheduling_ignored_during_execution--label_selector))
+- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
+- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
- `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--horizontal_scaling--scale_out--new_instances--scheduling_policy--affinity--pod_anti_affinity--required_during_scheduling_ignored_during_execution--namespace_selector))
- `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.
@@ -821,18 +830,9 @@ Optional:
Optional:
-- `claims` (Attributes List) Claims lists the names of resources, defined in spec.resourceClaims,that are used by this container.This is an alpha field and requires enabling theDynamicResourceAllocation feature gate.This field is immutable. It can only be set for containers. (see [below for nested schema](#nestedatt--spec--horizontal_scaling--scale_out--new_instances--volume_claim_templates--spec--resources--claims))
- `limits` (Map of String) Limits describes the maximum amount of compute resources allowed.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
- `requests` (Map of String) Requests describes the minimum amount of compute resources required.If Requests is omitted for a container, it defaults to Limits if that is explicitly specified,otherwise to an implementation-defined value. Requests cannot exceed Limits.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-
-### Nested Schema for `spec.horizontal_scaling.scale_out.new_instances.volume_claim_templates.spec.resources.claims`
-
-Required:
-
-- `name` (String) Name must match the name of one entry in pod.spec.resourceClaims ofthe Pod where this field is used. It makes that resource availableinside a container.
-
-
@@ -1113,6 +1113,7 @@ Optional:
- `resources` (Attributes) resources represents the minimum resources the volume should have.If RecoverVolumeExpansionFailure feature is enabled users are allowed to specify resource requirementsthat are lower than previous value but must still be higher than capacity recorded in thestatus field of the claim.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources (see [below for nested schema](#nestedatt--spec--horizontal_scaling--scale_out--new_instances--volumes--ephemeral--volume_claim_template--spec--resources))
- `selector` (Attributes) selector is a label query over volumes to consider for binding. (see [below for nested schema](#nestedatt--spec--horizontal_scaling--scale_out--new_instances--volumes--ephemeral--volume_claim_template--spec--selector))
- `storage_class_name` (String) storageClassName is the name of the StorageClass required by the claim.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#class-1
+- `volume_attributes_class_name` (String) volumeAttributesClassName may be used to set the VolumeAttributesClass used by this claim.If specified, the CSI driver will create or update the volume with the attributes definedin the corresponding VolumeAttributesClass. This has a different purpose than storageClassName,it can be changed after the claim is created. An empty string value means that no VolumeAttributesClasswill be applied to the claim but it's not allowed to reset this field to empty string once it is set.If unspecified and the PersistentVolumeClaim is unbound, the default VolumeAttributesClasswill be set by the persistentvolume controller if it exists.If the resource referred to by volumeAttributesClass does not exist, this PersistentVolumeClaim will beset to a Pending state, as reflected by the modifyVolumeStatus field, until such as a resourceexists.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#volumeattributesclass(Alpha) Using this field requires the VolumeAttributesClass feature gate to be enabled.
- `volume_mode` (String) volumeMode defines what type of volume is required by the claim.Value of Filesystem is implied when not included in claim spec.
- `volume_name` (String) volumeName is the binding reference to the PersistentVolume backing this claim.
@@ -1148,18 +1149,9 @@ Optional:
Optional:
-- `claims` (Attributes List) Claims lists the names of resources, defined in spec.resourceClaims,that are used by this container.This is an alpha field and requires enabling theDynamicResourceAllocation feature gate.This field is immutable. It can only be set for containers. (see [below for nested schema](#nestedatt--spec--horizontal_scaling--scale_out--new_instances--volumes--ephemeral--volume_claim_template--spec--resources--claims))
- `limits` (Map of String) Limits describes the maximum amount of compute resources allowed.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
- `requests` (Map of String) Requests describes the minimum amount of compute resources required.If Requests is omitted for a container, it defaults to Limits if that is explicitly specified,otherwise to an implementation-defined value. Requests cannot exceed Limits.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-
-### Nested Schema for `spec.horizontal_scaling.scale_out.new_instances.volumes.ephemeral.volume_claim_template.spec.resources.claims`
-
-Required:
-
-- `name` (String) Name must match the name of one entry in pod.spec.resourceClaims ofthe Pod where this field is used. It makes that resource availableinside a container.
-
-
### Nested Schema for `spec.horizontal_scaling.scale_out.new_instances.volumes.ephemeral.volume_claim_template.spec.selector`
@@ -1386,11 +1378,49 @@ Optional:
Optional:
+- `cluster_trust_bundle` (Attributes) ClusterTrustBundle allows a pod to access the '.spec.trustBundle' fieldof ClusterTrustBundle objects in an auto-updating file.Alpha, gated by the ClusterTrustBundleProjection feature gate.ClusterTrustBundle objects can either be selected by name, or by thecombination of signer name and a label selector.Kubelet performs aggressive normalization of the PEM contents writteninto the pod filesystem. Esoteric PEM features such as inter-blockcomments and block headers are stripped. Certificates are deduplicated.The ordering of certificates within the file is arbitrary, and Kubeletmay change the order over time. (see [below for nested schema](#nestedatt--spec--horizontal_scaling--scale_out--new_instances--volumes--projected--sources--cluster_trust_bundle))
- `config_map` (Attributes) configMap information about the configMap data to project (see [below for nested schema](#nestedatt--spec--horizontal_scaling--scale_out--new_instances--volumes--projected--sources--config_map))
- `downward_api` (Attributes) downwardAPI information about the downwardAPI data to project (see [below for nested schema](#nestedatt--spec--horizontal_scaling--scale_out--new_instances--volumes--projected--sources--downward_api))
- `secret` (Attributes) secret information about the secret data to project (see [below for nested schema](#nestedatt--spec--horizontal_scaling--scale_out--new_instances--volumes--projected--sources--secret))
- `service_account_token` (Attributes) serviceAccountToken is information about the serviceAccountToken data to project (see [below for nested schema](#nestedatt--spec--horizontal_scaling--scale_out--new_instances--volumes--projected--sources--service_account_token))
+
+### Nested Schema for `spec.horizontal_scaling.scale_out.new_instances.volumes.projected.sources.cluster_trust_bundle`
+
+Required:
+
+- `path` (String) Relative path from the volume root to write the bundle.
+
+Optional:
+
+- `label_selector` (Attributes) Select all ClusterTrustBundles that match this label selector. Only haseffect if signerName is set. Mutually-exclusive with name. If unset,interpreted as 'match nothing'. If set but empty, interpreted as 'matcheverything'. (see [below for nested schema](#nestedatt--spec--horizontal_scaling--scale_out--new_instances--volumes--projected--sources--cluster_trust_bundle--label_selector))
+- `name` (String) Select a single ClusterTrustBundle by object name. Mutually-exclusivewith signerName and labelSelector.
+- `optional` (Boolean) If true, don't block pod startup if the referenced ClusterTrustBundle(s)aren't available. If using name, then the named ClusterTrustBundle isallowed not to exist. If using signerName, then the combination ofsignerName and labelSelector is allowed to match zeroClusterTrustBundles.
+- `signer_name` (String) Select all ClusterTrustBundles that match this signer name.Mutually-exclusive with name. The contents of all selectedClusterTrustBundles will be unified and deduplicated.
+
+
+### Nested Schema for `spec.horizontal_scaling.scale_out.new_instances.volumes.projected.sources.cluster_trust_bundle.label_selector`
+
+Optional:
+
+- `match_expressions` (Attributes List) matchExpressions is a list of label selector requirements. The requirements are ANDed. (see [below for nested schema](#nestedatt--spec--horizontal_scaling--scale_out--new_instances--volumes--projected--sources--cluster_trust_bundle--label_selector--match_expressions))
+- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.
+
+
+### Nested Schema for `spec.horizontal_scaling.scale_out.new_instances.volumes.projected.sources.cluster_trust_bundle.label_selector.match_expressions`
+
+Required:
+
+- `key` (String) key is the label key that the selector applies to.
+- `operator` (String) operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.
+
+Optional:
+
+- `values` (List of String) values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.
+
+
+
+
### Nested Schema for `spec.horizontal_scaling.scale_out.new_instances.volumes.projected.sources.config_map`
diff --git a/docs/data-sources/apps_stateful_set_v1_manifest.md b/docs/data-sources/apps_stateful_set_v1_manifest.md
index 960bd3e9d..2d1cb5642 100644
--- a/docs/data-sources/apps_stateful_set_v1_manifest.md
+++ b/docs/data-sources/apps_stateful_set_v1_manifest.md
@@ -3594,63 +3594,7 @@ Optional:
Optional:
-- `api_version` (String) APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
-- `kind` (String) Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
-- `metadata` (Attributes) ObjectMeta is metadata that all persisted resources must have, which includes all objects users must create. (see [below for nested schema](#nestedatt--spec--volume_claim_templates--metadata))
- `spec` (Attributes) PersistentVolumeClaimSpec describes the common attributes of storage devices and allows a Source for provider-specific attributes (see [below for nested schema](#nestedatt--spec--volume_claim_templates--spec))
-- `status` (Attributes) PersistentVolumeClaimStatus is the current status of a persistent volume claim. (see [below for nested schema](#nestedatt--spec--volume_claim_templates--status))
-
-
-### Nested Schema for `spec.volume_claim_templates.metadata`
-
-Optional:
-
-- `annotations` (Map of String) Annotations is an unstructured key value map stored with a resource that may be set by external tools to store and retrieve arbitrary metadata. They are not queryable and should be preserved when modifying objects. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/annotations
-- `creation_timestamp` (String) Time is a wrapper around time.Time which supports correct marshaling to YAML and JSON. Wrappers are provided for many of the factory methods that the time package offers.
-- `deletion_grace_period_seconds` (Number) Number of seconds allowed for this object to gracefully terminate before it will be removed from the system. Only set when deletionTimestamp is also set. May only be shortened. Read-only.
-- `deletion_timestamp` (String) Time is a wrapper around time.Time which supports correct marshaling to YAML and JSON. Wrappers are provided for many of the factory methods that the time package offers.
-- `finalizers` (List of String) Must be empty before the object is deleted from the registry. Each entry is an identifier for the responsible component that will remove the entry from the list. If the deletionTimestamp of the object is non-nil, entries in this list can only be removed. Finalizers may be processed and removed in any order. Order is NOT enforced because it introduces significant risk of stuck finalizers. finalizers is a shared field, any actor with permission can reorder it. If the finalizer list is processed in order, then this can lead to a situation in which the component responsible for the first finalizer in the list is waiting for a signal (field value, external system, or other) produced by a component responsible for a finalizer later in the list, resulting in a deadlock. Without enforced ordering finalizers are free to order amongst themselves and are not vulnerable to ordering changes in the list.
-- `generate_name` (String) GenerateName is an optional prefix, used by the server, to generate a unique name ONLY IF the Name field has not been provided. If this field is used, the name returned to the client will be different than the name passed. This value will also be combined with a unique suffix. The provided value has the same validation rules as the Name field, and may be truncated by the length of the suffix required to make the value unique on the server.If this field is specified and the generated name exists, the server will return a 409.Applied only if Name is not specified. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#idempotency
-- `generation` (Number) A sequence number representing a specific generation of the desired state. Populated by the system. Read-only.
-- `labels` (Map of String) Map of string keys and values that can be used to organize and categorize (scope and select) objects. May match selectors of replication controllers and services. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels
-- `managed_fields` (Attributes List) ManagedFields maps workflow-id and version to the set of fields that are managed by that workflow. This is mostly for internal housekeeping, and users typically shouldn't need to set or understand this field. A workflow can be the user's name, a controller's name, or the name of a specific apply path like 'ci-cd'. The set of fields is always in the version that the workflow used when modifying the object. (see [below for nested schema](#nestedatt--spec--volume_claim_templates--metadata--managed_fields))
-- `name` (String) Name must be unique within a namespace. Is required when creating resources, although some resources may allow a client to request the generation of an appropriate name automatically. Name is primarily intended for creation idempotence and configuration definition. Cannot be updated. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#names
-- `namespace` (String) Namespace defines the space within which each name must be unique. An empty namespace is equivalent to the 'default' namespace, but 'default' is the canonical representation. Not all objects are required to be scoped to a namespace - the value of this field for those objects will be empty.Must be a DNS_LABEL. Cannot be updated. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces
-- `owner_references` (Attributes List) List of objects depended by this object. If ALL objects in the list have been deleted, this object will be garbage collected. If this object is managed by a controller, then an entry in this list will point to this controller, with the controller field set to true. There cannot be more than one managing controller. (see [below for nested schema](#nestedatt--spec--volume_claim_templates--metadata--owner_references))
-- `resource_version` (String) An opaque value that represents the internal version of this object that can be used by clients to determine when objects have changed. May be used for optimistic concurrency, change detection, and the watch operation on a resource or set of resources. Clients must treat these values as opaque and passed unmodified back to the server. They may only be valid for a particular resource or set of resources.Populated by the system. Read-only. Value must be treated as opaque by clients and . More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
-- `self_link` (String) Deprecated: selfLink is a legacy read-only field that is no longer populated by the system.
-- `uid` (String) UID is the unique in time and space value for this object. It is typically generated by the server on successful creation of a resource and is not allowed to change on PUT operations.Populated by the system. Read-only. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#uids
-
-
-### Nested Schema for `spec.volume_claim_templates.metadata.managed_fields`
-
-Optional:
-
-- `api_version` (String) APIVersion defines the version of this resource that this field set applies to. The format is 'group/version' just like the top-level APIVersion field. It is necessary to track the version of a field set because it cannot be automatically converted.
-- `fields_type` (String) FieldsType is the discriminator for the different fields format and version. There is currently only one possible value: 'FieldsV1'
-- `fields_v1` (Map of String) FieldsV1 stores a set of fields in a data structure like a Trie, in JSON format.Each key is either a '.' representing the field itself, and will always map to an empty set, or a string representing a sub-field or item. The string will follow one of these four formats: 'f:', where is the name of a field in a struct, or key in a map 'v:', where is the exact json formatted value of a list item 'i:', where is position of a item in a list 'k:', where is a map of a list item's key fields to their unique values If a key maps to an empty Fields value, the field that key represents is part of the set.The exact format is defined in sigs.k8s.io/structured-merge-diff
-- `manager` (String) Manager is an identifier of the workflow managing these fields.
-- `operation` (String) Operation is the type of operation which lead to this ManagedFieldsEntry being created. The only valid values for this field are 'Apply' and 'Update'.
-- `subresource` (String) Subresource is the name of the subresource used to update that object, or empty string if the object was updated through the main resource. The value of this field is used to distinguish between managers, even if they share the same name. For example, a status update will be distinct from a regular update using the same manager name. Note that the APIVersion field is not related to the Subresource field and it always corresponds to the version of the main resource.
-- `time` (String) Time is a wrapper around time.Time which supports correct marshaling to YAML and JSON. Wrappers are provided for many of the factory methods that the time package offers.
-
-
-
-### Nested Schema for `spec.volume_claim_templates.metadata.owner_references`
-
-Required:
-
-- `api_version` (String) API version of the referent.
-- `kind` (String) Kind of the referent. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#names
-- `uid` (String) UID of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#uids
-
-Optional:
-
-- `block_owner_deletion` (Boolean) If true, AND if the owner has the 'foregroundDeletion' finalizer, then the owner cannot be deleted from the key-value store until this reference is removed. See https://kubernetes.io/docs/concepts/architecture/garbage-collection/#foreground-deletion for how the garbage collector interacts with this field and enforces the foreground deletion. Defaults to false. To set this field, a user needs 'delete' permission of the owner, otherwise 422 (Unprocessable Entity) will be returned.
-- `controller` (Boolean) If true, this reference points to the managing controller.
-
-
### Nested Schema for `spec.volume_claim_templates.spec`
@@ -3722,47 +3666,3 @@ Required:
Optional:
- `values` (List of String) values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch.
-
-
-
-
-
-### Nested Schema for `spec.volume_claim_templates.status`
-
-Optional:
-
-- `access_modes` (List of String) accessModes contains the actual access modes the volume backing the PVC has. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#access-modes-1
-- `allocated_resource_statuses` (Map of String) allocatedResourceStatuses stores status of resource being resized for the given PVC. Key names follow standard Kubernetes label syntax. Valid values are either: * Un-prefixed keys: - storage - the capacity of the volume. * Custom resources must use implementation-defined prefixed names such as 'example.com/my-custom-resource'Apart from above values - keys that are unprefixed or have kubernetes.io prefix are considered reserved and hence may not be used.ClaimResourceStatus can be in any of following states: - ControllerResizeInProgress: State set when resize controller starts resizing the volume in control-plane. - ControllerResizeFailed: State set when resize has failed in resize controller with a terminal error. - NodeResizePending: State set when resize controller has finished resizing the volume but further resizing of volume is needed on the node. - NodeResizeInProgress: State set when kubelet starts resizing the volume. - NodeResizeFailed: State set when resizing has failed in kubelet with a terminal error. Transient errors don't set NodeResizeFailed.For example: if expanding a PVC for more capacity - this field can be one of the following states: - pvc.status.allocatedResourceStatus['storage'] = 'ControllerResizeInProgress' - pvc.status.allocatedResourceStatus['storage'] = 'ControllerResizeFailed' - pvc.status.allocatedResourceStatus['storage'] = 'NodeResizePending' - pvc.status.allocatedResourceStatus['storage'] = 'NodeResizeInProgress' - pvc.status.allocatedResourceStatus['storage'] = 'NodeResizeFailed'When this field is not set, it means that no resize operation is in progress for the given PVC.A controller that receives PVC update with previously unknown resourceName or ClaimResourceStatus should ignore the update for the purpose it was designed. For example - a controller that only is responsible for resizing capacity of the volume, should ignore PVC updates that change other valid resources associated with PVC.This is an alpha field and requires enabling RecoverVolumeExpansionFailure feature.
-- `allocated_resources` (Map of String) allocatedResources tracks the resources allocated to a PVC including its capacity. Key names follow standard Kubernetes label syntax. Valid values are either: * Un-prefixed keys: - storage - the capacity of the volume. * Custom resources must use implementation-defined prefixed names such as 'example.com/my-custom-resource'Apart from above values - keys that are unprefixed or have kubernetes.io prefix are considered reserved and hence may not be used.Capacity reported here may be larger than the actual capacity when a volume expansion operation is requested. For storage quota, the larger value from allocatedResources and PVC.spec.resources is used. If allocatedResources is not set, PVC.spec.resources alone is used for quota calculation. If a volume expansion capacity request is lowered, allocatedResources is only lowered if there are no expansion operations in progress and if the actual volume capacity is equal or lower than the requested capacity.A controller that receives PVC update with previously unknown resourceName should ignore the update for the purpose it was designed. For example - a controller that only is responsible for resizing capacity of the volume, should ignore PVC updates that change other valid resources associated with PVC.This is an alpha field and requires enabling RecoverVolumeExpansionFailure feature.
-- `capacity` (Map of String) capacity represents the actual resources of the underlying volume.
-- `conditions` (Attributes List) conditions is the current Condition of persistent volume claim. If underlying persistent volume is being resized then the Condition will be set to 'Resizing'. (see [below for nested schema](#nestedatt--spec--volume_claim_templates--status--conditions))
-- `current_volume_attributes_class_name` (String) currentVolumeAttributesClassName is the current name of the VolumeAttributesClass the PVC is using. When unset, there is no VolumeAttributeClass applied to this PersistentVolumeClaim This is a beta field and requires enabling VolumeAttributesClass feature (off by default).
-- `modify_volume_status` (Attributes) ModifyVolumeStatus represents the status object of ControllerModifyVolume operation (see [below for nested schema](#nestedatt--spec--volume_claim_templates--status--modify_volume_status))
-- `phase` (String) phase represents the current phase of PersistentVolumeClaim.
-
-
-### Nested Schema for `spec.volume_claim_templates.status.conditions`
-
-Required:
-
-- `status` (String)
-- `type` (String)
-
-Optional:
-
-- `last_probe_time` (String) Time is a wrapper around time.Time which supports correct marshaling to YAML and JSON. Wrappers are provided for many of the factory methods that the time package offers.
-- `last_transition_time` (String) Time is a wrapper around time.Time which supports correct marshaling to YAML and JSON. Wrappers are provided for many of the factory methods that the time package offers.
-- `message` (String) message is the human-readable message indicating details about last transition.
-- `reason` (String) reason is a unique, this should be a short, machine understandable string that gives the reason for condition's last transition. If it reports 'Resizing' that means the underlying persistent volume is being resized.
-
-
-
-### Nested Schema for `spec.volume_claim_templates.status.modify_volume_status`
-
-Required:
-
-- `status` (String) status is the status of the ControllerModifyVolume operation. It can be in any of following states: - Pending Pending indicates that the PersistentVolumeClaim cannot be modified due to unmet requirements, such as the specified VolumeAttributesClass not existing. - InProgress InProgress indicates that the volume is being modified. - Infeasible Infeasible indicates that the request has been rejected as invalid by the CSI driver. To resolve the error, a valid VolumeAttributesClass needs to be specified.Note: New statuses can be added in the future. Consumers should check for unknown statuses and fail appropriately.
-
-Optional:
-
-- `target_volume_attributes_class_name` (String) targetVolumeAttributesClassName is the name of the VolumeAttributesClass the PVC currently being reconciled
diff --git a/docs/data-sources/camel_apache_org_build_v1_manifest.md b/docs/data-sources/camel_apache_org_build_v1_manifest.md
index da3eb9d9c..953ebc5dc 100644
--- a/docs/data-sources/camel_apache_org_build_v1_manifest.md
+++ b/docs/data-sources/camel_apache_org_build_v1_manifest.md
@@ -30,7 +30,7 @@ data "k8s_camel_apache_org_build_v1_manifest" "example" {
### Optional
-- `spec` (Attributes) BuildSpec defines the list of tasks to be execute for a Build. From Camel K version 2, it would be more appropriate to think it as pipeline. (see [below for nested schema](#nestedatt--spec))
+- `spec` (Attributes) BuildSpec defines the list of tasks to be execute for a Build. From Camel K version 2, it would be more appropriateto think it as pipeline. (see [below for nested schema](#nestedatt--spec))
### Read-Only
@@ -55,12 +55,12 @@ Optional:
Optional:
-- `configuration` (Attributes) The configuration that should be used to perform the Build. Deprecated: no longer in use in Camel K 2 - maintained for backward compatibility (see [below for nested schema](#nestedatt--spec--configuration))
-- `max_running_builds` (Number) the maximum amount of parallel running builds started by this operator instance Deprecated: no longer in use in Camel K 2 - maintained for backward compatibility
-- `operator_namespace` (String) The namespace where to run the builder Pod (must be the same of the operator in charge of this Build reconciliation). Deprecated: no longer in use in Camel K 2 - maintained for backward compatibility
+- `configuration` (Attributes) The configuration that should be used to perform the Build.Deprecated: no longer in use in Camel K 2 - maintained for backward compatibility (see [below for nested schema](#nestedatt--spec--configuration))
+- `max_running_builds` (Number) the maximum amount of parallel running builds started by this operator instanceDeprecated: no longer in use in Camel K 2 - maintained for backward compatibility
+- `operator_namespace` (String) The namespace where to run the builder Pod (must be the same of the operator in charge of this Build reconciliation).Deprecated: no longer in use in Camel K 2 - maintained for backward compatibility
- `tasks` (Attributes List) The sequence of tasks (pipeline) to be performed. (see [below for nested schema](#nestedatt--spec--tasks))
-- `timeout` (String) Timeout defines the Build maximum execution duration. The Build deadline is set to the Build start time plus the Timeout duration. If the Build deadline is exceeded, the Build context is canceled, and its phase set to BuildPhaseFailed.
-- `tool_image` (String) The container image to be used to run the build. Deprecated: no longer in use in Camel K 2 - maintained for backward compatibility
+- `timeout` (String) Timeout defines the Build maximum execution duration.The Build deadline is set to the Build start time plus the Timeout duration.If the Build deadline is exceeded, the Build context is canceled,and its phase set to BuildPhaseFailed.
+- `tool_image` (String) The container image to be used to run the build.Deprecated: no longer in use in Camel K 2 - maintained for backward compatibility
### Nested Schema for `spec.configuration`
@@ -85,14 +85,14 @@ Optional:
Optional:
-- `buildah` (Attributes) a BuildahTask, for Buildah strategy Deprecated: use jib, s2i or a custom publishing strategy instead (see [below for nested schema](#nestedatt--spec--tasks--buildah))
+- `buildah` (Attributes) a BuildahTask, for Buildah strategyDeprecated: use jib, s2i or a custom publishing strategy instead (see [below for nested schema](#nestedatt--spec--tasks--buildah))
- `builder` (Attributes) a BuilderTask, used to generate and build the project (see [below for nested schema](#nestedatt--spec--tasks--builder))
- `custom` (Attributes) User customizable task execution. These are executed after the build and before the package task. (see [below for nested schema](#nestedatt--spec--tasks--custom))
- `jib` (Attributes) a JibTask, for Jib strategy (see [below for nested schema](#nestedatt--spec--tasks--jib))
-- `kaniko` (Attributes) a KanikoTask, for Kaniko strategy Deprecated: use jib, s2i or a custom publishing strategy instead (see [below for nested schema](#nestedatt--spec--tasks--kaniko))
-- `package` (Attributes) Application pre publishing a PackageTask, used to package the project (see [below for nested schema](#nestedatt--spec--tasks--package))
+- `kaniko` (Attributes) a KanikoTask, for Kaniko strategyDeprecated: use jib, s2i or a custom publishing strategy instead (see [below for nested schema](#nestedatt--spec--tasks--kaniko))
+- `package` (Attributes) Application pre publishinga PackageTask, used to package the project (see [below for nested schema](#nestedatt--spec--tasks--package))
- `s2i` (Attributes) a S2iTask, for S2I strategy (see [below for nested schema](#nestedatt--spec--tasks--s2i))
-- `spectrum` (Attributes) a SpectrumTask, for Spectrum strategy Deprecated: use jib, s2i or a custom publishing strategy instead (see [below for nested schema](#nestedatt--spec--tasks--spectrum))
+- `spectrum` (Attributes) a SpectrumTask, for Spectrum strategyDeprecated: use jib, s2i or a custom publishing strategy instead (see [below for nested schema](#nestedatt--spec--tasks--spectrum))
### Nested Schema for `spec.tasks.buildah`
@@ -178,16 +178,16 @@ Optional:
Optional:
-- `ca_secrets` (Attributes List) The Secrets name and key, containing the CA certificate(s) used to connect to remote Maven repositories. It can contain X.509 certificates, and PKCS#7 formatted certificate chains. A JKS formatted keystore is automatically created to store the CA certificate(s), and configured to be used as a trusted certificate(s) by the Maven commands. Note that the root CA certificates are also imported into the created keystore. (see [below for nested schema](#nestedatt--spec--tasks--builder--maven--ca_secrets))
-- `cli_options` (List of String) The CLI options that are appended to the list of arguments for Maven commands, e.g., '-V,--no-transfer-progress,-Dstyle.color=never'. See https://maven.apache.org/ref/3.8.4/maven-embedder/cli.html.
-- `extension` (Attributes List) The Maven build extensions. See https://maven.apache.org/guides/mini/guide-using-extensions.html. (see [below for nested schema](#nestedatt--spec--tasks--builder--maven--extension))
+- `ca_secrets` (Attributes List) The Secrets name and key, containing the CA certificate(s) used to connectto remote Maven repositories.It can contain X.509 certificates, and PKCS#7 formatted certificate chains.A JKS formatted keystore is automatically created to store the CA certificate(s),and configured to be used as a trusted certificate(s) by the Maven commands.Note that the root CA certificates are also imported into the created keystore. (see [below for nested schema](#nestedatt--spec--tasks--builder--maven--ca_secrets))
+- `cli_options` (List of String) The CLI options that are appended to the list of arguments for Maven commands,e.g., '-V,--no-transfer-progress,-Dstyle.color=never'.See https://maven.apache.org/ref/3.8.4/maven-embedder/cli.html.
+- `extension` (Attributes List) The Maven build extensions.See https://maven.apache.org/guides/mini/guide-using-extensions.html. (see [below for nested schema](#nestedatt--spec--tasks--builder--maven--extension))
- `local_repository` (String) The path of the local Maven repository.
-- `profiles` (Attributes List) A reference to the ConfigMap or Secret key that contains the Maven profile. (see [below for nested schema](#nestedatt--spec--tasks--builder--maven--profiles))
+- `profiles` (Attributes List) A reference to the ConfigMap or Secret key that containsthe Maven profile. (see [below for nested schema](#nestedatt--spec--tasks--builder--maven--profiles))
- `properties` (Map of String) The Maven properties.
- `repositories` (Attributes List) additional repositories (see [below for nested schema](#nestedatt--spec--tasks--builder--maven--repositories))
- `servers` (Attributes List) Servers (auth) (see [below for nested schema](#nestedatt--spec--tasks--builder--maven--servers))
-- `settings` (Attributes) A reference to the ConfigMap or Secret key that contains the Maven settings. (see [below for nested schema](#nestedatt--spec--tasks--builder--maven--settings))
-- `settings_security` (Attributes) A reference to the ConfigMap or Secret key that contains the security of the Maven settings. (see [below for nested schema](#nestedatt--spec--tasks--builder--maven--settings_security))
+- `settings` (Attributes) A reference to the ConfigMap or Secret key that containsthe Maven settings. (see [below for nested schema](#nestedatt--spec--tasks--builder--maven--settings))
+- `settings_security` (Attributes) A reference to the ConfigMap or Secret key that containsthe security of the Maven settings. (see [below for nested schema](#nestedatt--spec--tasks--builder--maven--settings_security))
### Nested Schema for `spec.tasks.builder.maven.ca_secrets`
@@ -198,7 +198,7 @@ Required:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
- `optional` (Boolean) Specify whether the Secret or its key must be defined
@@ -234,7 +234,7 @@ Required:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
@@ -247,7 +247,7 @@ Required:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
- `optional` (Boolean) Specify whether the Secret or its key must be defined
@@ -275,8 +275,8 @@ Required:
Optional:
-- `checksum_policy` (String) When Maven deploys files to the repository, it also deploys corresponding checksum files. Your options are to 'ignore', 'fail', or 'warn' on missing or incorrect checksums.
-- `update_policy` (String) This element specifies how often updates should attempt to occur. Maven will compare the local POM's timestamp (stored in a repository's maven-metadata file) to the remote. The choices are: 'always', 'daily' (default), 'interval:X' (where X is an integer in minutes) or 'never'
+- `checksum_policy` (String) When Maven deploys files to the repository, it also deploys corresponding checksum files.Your options are to 'ignore', 'fail', or 'warn' on missing or incorrect checksums.
+- `update_policy` (String) This element specifies how often updates should attempt to occur.Maven will compare the local POM's timestamp (stored in a repository's maven-metadata file) to the remote.The choices are: 'always', 'daily' (default), 'interval:X' (where X is an integer in minutes) or 'never'
@@ -288,8 +288,8 @@ Required:
Optional:
-- `checksum_policy` (String) When Maven deploys files to the repository, it also deploys corresponding checksum files. Your options are to 'ignore', 'fail', or 'warn' on missing or incorrect checksums.
-- `update_policy` (String) This element specifies how often updates should attempt to occur. Maven will compare the local POM's timestamp (stored in a repository's maven-metadata file) to the remote. The choices are: 'always', 'daily' (default), 'interval:X' (where X is an integer in minutes) or 'never'
+- `checksum_policy` (String) When Maven deploys files to the repository, it also deploys corresponding checksum files.Your options are to 'ignore', 'fail', or 'warn' on missing or incorrect checksums.
+- `update_policy` (String) This element specifies how often updates should attempt to occur.Maven will compare the local POM's timestamp (stored in a repository's maven-metadata file) to the remote.The choices are: 'always', 'daily' (default), 'interval:X' (where X is an integer in minutes) or 'never'
@@ -321,7 +321,7 @@ Required:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
@@ -334,7 +334,7 @@ Required:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
- `optional` (Boolean) Specify whether the Secret or its key must be defined
@@ -356,7 +356,7 @@ Required:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
@@ -369,7 +369,7 @@ Required:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
- `optional` (Boolean) Specify whether the Secret or its key must be defined
@@ -467,9 +467,9 @@ Optional:
- `content_ref` (String) the confimap reference holding the source content
- `content_type` (String) the content type (tipically text or binary)
- `from_kamelet` (Boolean) True if the spec is generated from a Kamelet
-- `interceptors` (List of String) Interceptors are optional identifiers the org.apache.camel.k.RoutesLoader uses to pre/post process sources
+- `interceptors` (List of String) Interceptors are optional identifiers the org.apache.camel.k.RoutesLoaderuses to pre/post process sources
- `language` (String) specify which is the language (Camel DSL) used to interpret this source code
-- `loader` (String) Loader is an optional id of the org.apache.camel.k.RoutesLoader that will interpret this source at runtime
+- `loader` (String) Loader is an optional id of the org.apache.camel.k.RoutesLoader that willinterpret this source at runtime
- `name` (String) the name of the specification
- `path` (String) the path where the file is stored
- `property_names` (List of String) List of property names defined in the source (e.g. if type is 'template')
@@ -483,7 +483,7 @@ Optional:
Optional:
-- `command` (String) the command to execute Deprecated: use ContainerCommands
+- `command` (String) the command to executeDeprecated: use ContainerCommands
- `commands` (List of String) the command to execute
- `configuration` (Attributes) The configuration that should be used to perform the Build. (see [below for nested schema](#nestedatt--spec--tasks--custom--configuration))
- `image` (String) the container image to use
@@ -646,16 +646,16 @@ Optional:
Optional:
-- `ca_secrets` (Attributes List) The Secrets name and key, containing the CA certificate(s) used to connect to remote Maven repositories. It can contain X.509 certificates, and PKCS#7 formatted certificate chains. A JKS formatted keystore is automatically created to store the CA certificate(s), and configured to be used as a trusted certificate(s) by the Maven commands. Note that the root CA certificates are also imported into the created keystore. (see [below for nested schema](#nestedatt--spec--tasks--package--maven--ca_secrets))
-- `cli_options` (List of String) The CLI options that are appended to the list of arguments for Maven commands, e.g., '-V,--no-transfer-progress,-Dstyle.color=never'. See https://maven.apache.org/ref/3.8.4/maven-embedder/cli.html.
-- `extension` (Attributes List) The Maven build extensions. See https://maven.apache.org/guides/mini/guide-using-extensions.html. (see [below for nested schema](#nestedatt--spec--tasks--package--maven--extension))
+- `ca_secrets` (Attributes List) The Secrets name and key, containing the CA certificate(s) used to connectto remote Maven repositories.It can contain X.509 certificates, and PKCS#7 formatted certificate chains.A JKS formatted keystore is automatically created to store the CA certificate(s),and configured to be used as a trusted certificate(s) by the Maven commands.Note that the root CA certificates are also imported into the created keystore. (see [below for nested schema](#nestedatt--spec--tasks--package--maven--ca_secrets))
+- `cli_options` (List of String) The CLI options that are appended to the list of arguments for Maven commands,e.g., '-V,--no-transfer-progress,-Dstyle.color=never'.See https://maven.apache.org/ref/3.8.4/maven-embedder/cli.html.
+- `extension` (Attributes List) The Maven build extensions.See https://maven.apache.org/guides/mini/guide-using-extensions.html. (see [below for nested schema](#nestedatt--spec--tasks--package--maven--extension))
- `local_repository` (String) The path of the local Maven repository.
-- `profiles` (Attributes List) A reference to the ConfigMap or Secret key that contains the Maven profile. (see [below for nested schema](#nestedatt--spec--tasks--package--maven--profiles))
+- `profiles` (Attributes List) A reference to the ConfigMap or Secret key that containsthe Maven profile. (see [below for nested schema](#nestedatt--spec--tasks--package--maven--profiles))
- `properties` (Map of String) The Maven properties.
- `repositories` (Attributes List) additional repositories (see [below for nested schema](#nestedatt--spec--tasks--package--maven--repositories))
- `servers` (Attributes List) Servers (auth) (see [below for nested schema](#nestedatt--spec--tasks--package--maven--servers))
-- `settings` (Attributes) A reference to the ConfigMap or Secret key that contains the Maven settings. (see [below for nested schema](#nestedatt--spec--tasks--package--maven--settings))
-- `settings_security` (Attributes) A reference to the ConfigMap or Secret key that contains the security of the Maven settings. (see [below for nested schema](#nestedatt--spec--tasks--package--maven--settings_security))
+- `settings` (Attributes) A reference to the ConfigMap or Secret key that containsthe Maven settings. (see [below for nested schema](#nestedatt--spec--tasks--package--maven--settings))
+- `settings_security` (Attributes) A reference to the ConfigMap or Secret key that containsthe security of the Maven settings. (see [below for nested schema](#nestedatt--spec--tasks--package--maven--settings_security))
### Nested Schema for `spec.tasks.package.maven.ca_secrets`
@@ -666,7 +666,7 @@ Required:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
- `optional` (Boolean) Specify whether the Secret or its key must be defined
@@ -702,7 +702,7 @@ Required:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
@@ -715,7 +715,7 @@ Required:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
- `optional` (Boolean) Specify whether the Secret or its key must be defined
@@ -743,8 +743,8 @@ Required:
Optional:
-- `checksum_policy` (String) When Maven deploys files to the repository, it also deploys corresponding checksum files. Your options are to 'ignore', 'fail', or 'warn' on missing or incorrect checksums.
-- `update_policy` (String) This element specifies how often updates should attempt to occur. Maven will compare the local POM's timestamp (stored in a repository's maven-metadata file) to the remote. The choices are: 'always', 'daily' (default), 'interval:X' (where X is an integer in minutes) or 'never'
+- `checksum_policy` (String) When Maven deploys files to the repository, it also deploys corresponding checksum files.Your options are to 'ignore', 'fail', or 'warn' on missing or incorrect checksums.
+- `update_policy` (String) This element specifies how often updates should attempt to occur.Maven will compare the local POM's timestamp (stored in a repository's maven-metadata file) to the remote.The choices are: 'always', 'daily' (default), 'interval:X' (where X is an integer in minutes) or 'never'
@@ -756,8 +756,8 @@ Required:
Optional:
-- `checksum_policy` (String) When Maven deploys files to the repository, it also deploys corresponding checksum files. Your options are to 'ignore', 'fail', or 'warn' on missing or incorrect checksums.
-- `update_policy` (String) This element specifies how often updates should attempt to occur. Maven will compare the local POM's timestamp (stored in a repository's maven-metadata file) to the remote. The choices are: 'always', 'daily' (default), 'interval:X' (where X is an integer in minutes) or 'never'
+- `checksum_policy` (String) When Maven deploys files to the repository, it also deploys corresponding checksum files.Your options are to 'ignore', 'fail', or 'warn' on missing or incorrect checksums.
+- `update_policy` (String) This element specifies how often updates should attempt to occur.Maven will compare the local POM's timestamp (stored in a repository's maven-metadata file) to the remote.The choices are: 'always', 'daily' (default), 'interval:X' (where X is an integer in minutes) or 'never'
@@ -789,7 +789,7 @@ Required:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
@@ -802,7 +802,7 @@ Required:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
- `optional` (Boolean) Specify whether the Secret or its key must be defined
@@ -824,7 +824,7 @@ Required:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
@@ -837,7 +837,7 @@ Required:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
- `optional` (Boolean) Specify whether the Secret or its key must be defined
@@ -935,9 +935,9 @@ Optional:
- `content_ref` (String) the confimap reference holding the source content
- `content_type` (String) the content type (tipically text or binary)
- `from_kamelet` (Boolean) True if the spec is generated from a Kamelet
-- `interceptors` (List of String) Interceptors are optional identifiers the org.apache.camel.k.RoutesLoader uses to pre/post process sources
+- `interceptors` (List of String) Interceptors are optional identifiers the org.apache.camel.k.RoutesLoaderuses to pre/post process sources
- `language` (String) specify which is the language (Camel DSL) used to interpret this source code
-- `loader` (String) Loader is an optional id of the org.apache.camel.k.RoutesLoader that will interpret this source at runtime
+- `loader` (String) Loader is an optional id of the org.apache.camel.k.RoutesLoader that willinterpret this source at runtime
- `name` (String) the name of the specification
- `path` (String) the path where the file is stored
- `property_names` (List of String) List of property names defined in the source (e.g. if type is 'template')
diff --git a/docs/data-sources/camel_apache_org_integration_kit_v1_manifest.md b/docs/data-sources/camel_apache_org_integration_kit_v1_manifest.md
index 4969118e6..4b808086a 100644
--- a/docs/data-sources/camel_apache_org_integration_kit_v1_manifest.md
+++ b/docs/data-sources/camel_apache_org_integration_kit_v1_manifest.md
@@ -3,12 +3,12 @@
page_title: "k8s_camel_apache_org_integration_kit_v1_manifest Data Source - terraform-provider-k8s"
subcategory: "camel.apache.org"
description: |-
- IntegrationKit defines a container image and additional configuration needed to run an 'Integration'. An 'IntegrationKit' is a generic image generally built from the requirements of an 'Integration', but agnostic to it, in order to be reused by any other 'Integration' which has the same required set of capabilities. An 'IntegrationKit' may be used for other kits as a base container layer, when the 'incremental' build option is enabled.
+ IntegrationKit defines a container image and additional configuration needed to run an 'Integration'.An 'IntegrationKit' is a generic image generally built from the requirements of an 'Integration', but agnostic to it,in order to be reused by any other 'Integration' which has the same required set of capabilities. An 'IntegrationKit'may be used for other kits as a base container layer, when the 'incremental' build option is enabled.
---
# k8s_camel_apache_org_integration_kit_v1_manifest (Data Source)
-IntegrationKit defines a container image and additional configuration needed to run an 'Integration'. An 'IntegrationKit' is a generic image generally built from the requirements of an 'Integration', but agnostic to it, in order to be reused by any other 'Integration' which has the same required set of capabilities. An 'IntegrationKit' may be used for other kits as a base container layer, when the 'incremental' build option is enabled.
+IntegrationKit defines a container image and additional configuration needed to run an 'Integration'.An 'IntegrationKit' is a generic image generally built from the requirements of an 'Integration', but agnostic to it,in order to be reused by any other 'Integration' which has the same required set of capabilities. An 'IntegrationKit'may be used for other kits as a base container layer, when the 'incremental' build option is enabled.
## Example Usage
@@ -56,7 +56,7 @@ Optional:
Optional:
- `capabilities` (List of String) features offered by the IntegrationKit
-- `configuration` (Attributes List) Deprecated: Use camel trait (camel.properties) to manage properties Use mount trait (mount.configs) to manage configs Use mount trait (mount.resources) to manage resources Use mount trait (mount.volumes) to manage volumes configuration used by the kit (see [below for nested schema](#nestedatt--spec--configuration))
+- `configuration` (Attributes List) Deprecated:Use camel trait (camel.properties) to manage propertiesUse mount trait (mount.configs) to manage configsUse mount trait (mount.resources) to manage resourcesUse mount trait (mount.volumes) to manage volumesconfiguration used by the kit (see [below for nested schema](#nestedatt--spec--configuration))
- `dependencies` (List of String) a list of Camel dependecies used by this kit
- `image` (String) the container image as identified in the container registry
- `profile` (String) the profile which is expected by this kit
@@ -84,9 +84,9 @@ Optional:
- `content_ref` (String) the confimap reference holding the source content
- `content_type` (String) the content type (tipically text or binary)
- `from_kamelet` (Boolean) True if the spec is generated from a Kamelet
-- `interceptors` (List of String) Interceptors are optional identifiers the org.apache.camel.k.RoutesLoader uses to pre/post process sources
+- `interceptors` (List of String) Interceptors are optional identifiers the org.apache.camel.k.RoutesLoaderuses to pre/post process sources
- `language` (String) specify which is the language (Camel DSL) used to interpret this source code
-- `loader` (String) Loader is an optional id of the org.apache.camel.k.RoutesLoader that will interpret this source at runtime
+- `loader` (String) Loader is an optional id of the org.apache.camel.k.RoutesLoader that willinterpret this source at runtime
- `name` (String) the name of the specification
- `path` (String) the path where the file is stored
- `property_names` (List of String) List of property names defined in the source (e.g. if type is 'template')
@@ -102,8 +102,8 @@ Optional:
- `addons` (Map of String) The collection of addon trait configurations
- `builder` (Attributes) The builder trait is internally used to determine the best strategy to build and configure IntegrationKits. (see [below for nested schema](#nestedatt--spec--traits--builder))
- `camel` (Attributes) The Camel trait sets up Camel configuration. (see [below for nested schema](#nestedatt--spec--traits--camel))
-- `quarkus` (Attributes) The Quarkus trait configures the Quarkus runtime. It's enabled by default. NOTE: Compiling to a native executable, requires at least 4GiB of memory, so the Pod running the native build must have enough memory available. (see [below for nested schema](#nestedatt--spec--traits--quarkus))
-- `registry` (Attributes) The Registry trait sets up Maven to use the Image registry as a Maven repository. Deprecated: use jvm trait or read documentation. (see [below for nested schema](#nestedatt--spec--traits--registry))
+- `quarkus` (Attributes) The Quarkus trait configures the Quarkus runtime.It's enabled by default.NOTE: Compiling to a native executable, requires at least 4GiB of memory, so the Pod running the native build must have enough memory available. (see [below for nested schema](#nestedatt--spec--traits--quarkus))
+- `registry` (Attributes) The Registry trait sets up Maven to use the Image registry as a Maven repository (support removed since version 2.5.0).Deprecated: use jvm trait or read documentation. (see [below for nested schema](#nestedatt--spec--traits--registry))
### Nested Schema for `spec.traits.builder`
@@ -111,27 +111,27 @@ Optional:
Optional:
- `annotations` (Map of String) When using 'pod' strategy, annotation to use for the builder pod.
-- `base_image` (String) Specify a base image. In order to have the application working properly it must be a container image which has a Java JDK installed and ready to use on path (ie '/usr/bin/java').
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `base_image` (String) Specify a base image. In order to have the application working properly it must be a container image which has a Java JDKinstalled and ready to use on path (ie '/usr/bin/java').
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Deprecated: no longer in use.
- `incremental_image_build` (Boolean) Use the incremental image build option, to reuse existing containers (default 'true')
-- `limit_cpu` (String) When using 'pod' strategy, the maximum amount of CPU required by the pod builder. Deprecated: use TasksRequestCPU instead with task name 'builder'.
-- `limit_memory` (String) When using 'pod' strategy, the maximum amount of memory required by the pod builder. Deprecated: use TasksRequestCPU instead with task name 'builder'.
-- `maven_profiles` (List of String) A list of references pointing to configmaps/secrets that contains a maven profile. This configmap/secret is a resource of the IntegrationKit created, therefore it needs to be present in the namespace where the operator is going to create the IntegrationKit. The content of the maven profile is expected to be a text containing a valid maven profile starting with '' and ending with '' that will be integrated as an inline profile in the POM. Syntax: [configmap|secret]:name[/key], where name represents the resource name, key optionally represents the resource key to be filtered (default key value = profile.xml).
+- `limit_cpu` (String) When using 'pod' strategy, the maximum amount of CPU required by the pod builder.Deprecated: use TasksRequestCPU instead with task name 'builder'.
+- `limit_memory` (String) When using 'pod' strategy, the maximum amount of memory required by the pod builder.Deprecated: use TasksRequestCPU instead with task name 'builder'.
+- `maven_profiles` (List of String) A list of references pointing to configmaps/secrets that contains a maven profile.This configmap/secret is a resource of the IntegrationKit created, therefore it needs to be present in the namespace where the operator is going to create the IntegrationKit.The content of the maven profile is expected to be a text containing a valid maven profile starting with '' and ending with '' that will be integrated as an inline profile in the POM.Syntax: [configmap|secret]:name[/key], where name represents the resource name, key optionally represents the resource key to be filtered (default key value = profile.xml).
- `node_selector` (Map of String) Defines a set of nodes the builder pod is eligible to be scheduled on, based on labels on the node.
- `order_strategy` (String) The build order strategy to use, either 'dependencies', 'fifo' or 'sequential' (default is the platform default)
- `platforms` (List of String) The list of manifest platforms to use to build a container image (default 'linux/amd64').
- `properties` (List of String) A list of properties to be provided to the build task
-- `request_cpu` (String) When using 'pod' strategy, the minimum amount of CPU required by the pod builder. Deprecated: use TasksRequestCPU instead with task name 'builder'.
-- `request_memory` (String) When using 'pod' strategy, the minimum amount of memory required by the pod builder. Deprecated: use TasksRequestCPU instead with task name 'builder'.
+- `request_cpu` (String) When using 'pod' strategy, the minimum amount of CPU required by the pod builder.Deprecated: use TasksRequestCPU instead with task name 'builder'.
+- `request_memory` (String) When using 'pod' strategy, the minimum amount of memory required by the pod builder.Deprecated: use TasksRequestCPU instead with task name 'builder'.
- `strategy` (String) The strategy to use, either 'pod' or 'routine' (default 'routine')
- `tasks` (List of String) A list of tasks to be executed (available only when using 'pod' strategy) with format ';;'.
-- `tasks_filter` (String) A list of tasks sorted by the order of execution in a csv format, ie, ',,...'. Mind that you must include also the operator tasks ('builder', 'quarkus-native', 'package', 'jib', 's2i') if you need to execute them. Useful only with 'pod' strategy.
+- `tasks_filter` (String) A list of tasks sorted by the order of execution in a csv format, ie, ',,...'.Mind that you must include also the operator tasks ('builder', 'quarkus-native', 'package', 'jib', 's2i')if you need to execute them. Useful only with 'pod' strategy.
- `tasks_limit_cpu` (List of String) A list of limit cpu configuration for the specific task with format ':'.
- `tasks_limit_memory` (List of String) A list of limit memory configuration for the specific task with format ':'.
- `tasks_request_cpu` (List of String) A list of request cpu configuration for the specific task with format ':'.
- `tasks_request_memory` (List of String) A list of request memory configuration for the specific task with format ':'.
-- `verbose` (Boolean) Enable verbose logging on build components that support it (e.g. Kaniko build pod). Deprecated no longer in use
+- `verbose` (Boolean) Enable verbose logging on build components that support it (e.g. Kaniko build pod).Deprecated no longer in use
@@ -139,10 +139,10 @@ Optional:
Optional:
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Deprecated: no longer in use.
- `properties` (List of String) A list of properties to be provided to the Integration runtime
-- `runtime_version` (String) The camel-k-runtime version to use for the integration. It overrides the default version set in the Integration Platform. You can use a fixed version (for example '3.2.3') or a semantic version (for example '3.x') which will try to resolve to the best matching Catalog existing on the cluster.
+- `runtime_version` (String) The camel-k-runtime version to use for the integration. It overrides the default version set in the Integration Platform.You can use a fixed version (for example '3.2.3') or a semantic version (for example '3.x') which will try to resolveto the best matching Catalog existing on the cluster.
@@ -150,12 +150,12 @@ Optional:
Optional:
-- `build_mode` (List of String) The Quarkus mode to run: either 'jvm' or 'native' (default 'jvm'). In case both 'jvm' and 'native' are specified, two 'IntegrationKit' resources are created, with the 'native' kit having precedence over the 'jvm' one once ready.
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `build_mode` (List of String) The Quarkus mode to run: either 'jvm' or 'native' (default 'jvm').In case both 'jvm' and 'native' are specified, two 'IntegrationKit' resources are created,with the 'native' kit having precedence over the 'jvm' one once ready.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Deprecated: no longer in use.
- `native_base_image` (String) The base image to use when running a native build (default 'quay.io/quarkus/quarkus-micro-image:2.0')
- `native_builder_image` (String) The image containing the tooling required for a native build (by default it will use the one provided in the runtime catalog)
-- `package_types` (List of String) The Quarkus package types, 'fast-jar' or 'native' (default 'fast-jar'). In case both 'fast-jar' and 'native' are specified, two 'IntegrationKit' resources are created, with the native kit having precedence over the 'fast-jar' one once ready. The order influences the resolution of the current kit for the integration. The kit corresponding to the first package type will be assigned to the integration in case no existing kit that matches the integration exists. Deprecated: use 'build-mode' instead.
+- `package_types` (List of String) The Quarkus package types, 'fast-jar' or 'native' (default 'fast-jar').In case both 'fast-jar' and 'native' are specified, two 'IntegrationKit' resources are created,with the native kit having precedence over the 'fast-jar' one once ready.The order influences the resolution of the current kit for the integration.The kit corresponding to the first package type will be assigned to theintegration in case no existing kit that matches the integration exists.Deprecated: use 'build-mode' instead.
@@ -163,5 +163,5 @@ Optional:
Optional:
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
diff --git a/docs/data-sources/camel_apache_org_integration_platform_v1_manifest.md b/docs/data-sources/camel_apache_org_integration_platform_v1_manifest.md
index 50d8c870f..f95c499c7 100644
--- a/docs/data-sources/camel_apache_org_integration_platform_v1_manifest.md
+++ b/docs/data-sources/camel_apache_org_integration_platform_v1_manifest.md
@@ -3,12 +3,12 @@
page_title: "k8s_camel_apache_org_integration_platform_v1_manifest Data Source - terraform-provider-k8s"
subcategory: "camel.apache.org"
description: |-
- IntegrationPlatform is the resource used to drive the Camel K operator behavior. It defines the behavior of all Custom Resources ('IntegrationKit', 'Integration', 'Kamelet') in the given namespace. When the Camel K operator is installed in 'global' mode, you will need to specify an 'IntegrationPlatform' in each namespace where you want the Camel K operator to be executed.
+ IntegrationPlatform is the resource used to drive the Camel K operator behavior.It defines the behavior of all Custom Resources ('IntegrationKit', 'Integration', 'Kamelet') in the given namespace.When the Camel K operator is installed in 'global' mode,you will need to specify an 'IntegrationPlatform' in each namespace where you want the Camel K operator to be executed.
---
# k8s_camel_apache_org_integration_platform_v1_manifest (Data Source)
-IntegrationPlatform is the resource used to drive the Camel K operator behavior. It defines the behavior of all Custom Resources ('IntegrationKit', 'Integration', 'Kamelet') in the given namespace. When the Camel K operator is installed in 'global' mode, you will need to specify an 'IntegrationPlatform' in each namespace where you want the Camel K operator to be executed.
+IntegrationPlatform is the resource used to drive the Camel K operator behavior.It defines the behavior of all Custom Resources ('IntegrationKit', 'Integration', 'Kamelet') in the given namespace.When the Camel K operator is installed in 'global' mode,you will need to specify an 'IntegrationPlatform' in each namespace where you want the Camel K operator to be executed.
## Example Usage
@@ -57,9 +57,9 @@ Optional:
- `build` (Attributes) specify how to build the Integration/IntegrationKits (see [below for nested schema](#nestedatt--spec--build))
- `cluster` (String) what kind of cluster you're running (ie, plain Kubernetes or OpenShift)
-- `configuration` (Attributes List) Deprecated: Use camel trait (camel.properties) to manage properties Use mount trait (mount.configs) to manage configs Use mount trait (mount.resources) to manage resources Use mount trait (mount.volumes) to manage volumes list of configuration properties to be attached to all the Integration/IntegrationKits built from this IntegrationPlatform (see [below for nested schema](#nestedatt--spec--configuration))
+- `configuration` (Attributes List) Deprecated:Use camel trait (camel.properties) to manage propertiesUse mount trait (mount.configs) to manage configsUse mount trait (mount.resources) to manage resourcesUse mount trait (mount.volumes) to manage volumeslist of configuration properties to be attached to all the Integration/IntegrationKits built from this IntegrationPlatform (see [below for nested schema](#nestedatt--spec--configuration))
- `kamelet` (Attributes) configuration to be executed to all Kamelets controlled by this IntegrationPlatform (see [below for nested schema](#nestedatt--spec--kamelet))
-- `profile` (String) the profile you wish to use. It will apply certain traits which are required by the specific profile chosen. It usually relates the Cluster with the optional definition of special profiles (ie, Knative)
+- `profile` (String) the profile you wish to use. It will apply certain traits which are required by the specific profile chosen.It usually relates the Cluster with the optional definition of special profiles (ie, Knative)
- `traits` (Attributes) list of traits to be executed for all the Integration/IntegrationKits built from this IntegrationPlatform (see [below for nested schema](#nestedatt--spec--traits))
@@ -67,8 +67,8 @@ Optional:
Optional:
-- `base_image` (String) a base image that can be used as base layer for all images. It can be useful if you want to provide some custom base image with further utility software
-- `build_catalog_tool_timeout` (String) the timeout (in seconds) to use when creating the build tools container image Deprecated: no longer in use
+- `base_image` (String) a base image that can be used as base layer for all images.It can be useful if you want to provide some custom base image with further utility software
+- `build_catalog_tool_timeout` (String) the timeout (in seconds) to use when creating the build tools container imageDeprecated: no longer in use
- `build_configuration` (Attributes) the configuration required to build an Integration container image (see [below for nested schema](#nestedatt--spec--build--build_configuration))
- `maven` (Attributes) Maven configuration used to build the Camel/Camel-Quarkus applications (see [below for nested schema](#nestedatt--spec--build--maven))
- `max_running_builds` (Number) the maximum amount of parallel running pipelines started by this operator instance
@@ -102,14 +102,14 @@ Optional:
Optional:
-- `ca_secrets` (Attributes List) The Secrets name and key, containing the CA certificate(s) used to connect to remote Maven repositories. It can contain X.509 certificates, and PKCS#7 formatted certificate chains. A JKS formatted keystore is automatically created to store the CA certificate(s), and configured to be used as a trusted certificate(s) by the Maven commands. Note that the root CA certificates are also imported into the created keystore. (see [below for nested schema](#nestedatt--spec--build--maven--ca_secrets))
-- `cli_options` (List of String) The CLI options that are appended to the list of arguments for Maven commands, e.g., '-V,--no-transfer-progress,-Dstyle.color=never'. See https://maven.apache.org/ref/3.8.4/maven-embedder/cli.html.
-- `extension` (Attributes List) The Maven build extensions. See https://maven.apache.org/guides/mini/guide-using-extensions.html. (see [below for nested schema](#nestedatt--spec--build--maven--extension))
+- `ca_secrets` (Attributes List) The Secrets name and key, containing the CA certificate(s) used to connectto remote Maven repositories.It can contain X.509 certificates, and PKCS#7 formatted certificate chains.A JKS formatted keystore is automatically created to store the CA certificate(s),and configured to be used as a trusted certificate(s) by the Maven commands.Note that the root CA certificates are also imported into the created keystore. (see [below for nested schema](#nestedatt--spec--build--maven--ca_secrets))
+- `cli_options` (List of String) The CLI options that are appended to the list of arguments for Maven commands,e.g., '-V,--no-transfer-progress,-Dstyle.color=never'.See https://maven.apache.org/ref/3.8.4/maven-embedder/cli.html.
+- `extension` (Attributes List) The Maven build extensions.See https://maven.apache.org/guides/mini/guide-using-extensions.html. (see [below for nested schema](#nestedatt--spec--build--maven--extension))
- `local_repository` (String) The path of the local Maven repository.
-- `profiles` (Attributes List) A reference to the ConfigMap or Secret key that contains the Maven profile. (see [below for nested schema](#nestedatt--spec--build--maven--profiles))
+- `profiles` (Attributes List) A reference to the ConfigMap or Secret key that containsthe Maven profile. (see [below for nested schema](#nestedatt--spec--build--maven--profiles))
- `properties` (Map of String) The Maven properties.
-- `settings` (Attributes) A reference to the ConfigMap or Secret key that contains the Maven settings. (see [below for nested schema](#nestedatt--spec--build--maven--settings))
-- `settings_security` (Attributes) A reference to the ConfigMap or Secret key that contains the security of the Maven settings. (see [below for nested schema](#nestedatt--spec--build--maven--settings_security))
+- `settings` (Attributes) A reference to the ConfigMap or Secret key that containsthe Maven settings. (see [below for nested schema](#nestedatt--spec--build--maven--settings))
+- `settings_security` (Attributes) A reference to the ConfigMap or Secret key that containsthe security of the Maven settings. (see [below for nested schema](#nestedatt--spec--build--maven--settings_security))
### Nested Schema for `spec.build.maven.ca_secrets`
@@ -120,7 +120,7 @@ Required:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
- `optional` (Boolean) Specify whether the Secret or its key must be defined
@@ -156,7 +156,7 @@ Required:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
@@ -169,7 +169,7 @@ Required:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
- `optional` (Boolean) Specify whether the Secret or its key must be defined
@@ -191,7 +191,7 @@ Required:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
@@ -204,7 +204,7 @@ Required:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
- `optional` (Boolean) Specify whether the Secret or its key must be defined
@@ -226,7 +226,7 @@ Required:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
@@ -239,7 +239,7 @@ Required:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
- `optional` (Boolean) Specify whether the Secret or its key must be defined
@@ -320,7 +320,7 @@ Optional:
- `prometheus` (Attributes) The configuration of Prometheus trait (see [below for nested schema](#nestedatt--spec--traits--prometheus))
- `pull_secret` (Attributes) The configuration of Pull Secret trait (see [below for nested schema](#nestedatt--spec--traits--pull_secret))
- `quarkus` (Attributes) The configuration of Quarkus trait (see [below for nested schema](#nestedatt--spec--traits--quarkus))
-- `registry` (Attributes) The configuration of Registry trait Deprecated: use jvm trait or read documentation. (see [below for nested schema](#nestedatt--spec--traits--registry))
+- `registry` (Attributes) The configuration of Registry trait (support removed since version 2.5.0).Deprecated: use jvm trait or read documentation. (see [below for nested schema](#nestedatt--spec--traits--registry))
- `route` (Attributes) The configuration of Route trait (see [below for nested schema](#nestedatt--spec--traits--route))
- `security_context` (Attributes) The configuration of Security Context trait (see [below for nested schema](#nestedatt--spec--traits--security_context))
- `service` (Attributes) The configuration of Service trait (see [below for nested schema](#nestedatt--spec--traits--service))
@@ -335,13 +335,13 @@ Optional:
Optional:
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
- `node_affinity_labels` (List of String) Defines a set of nodes the integration pod(s) are eligible to be scheduled on, based on labels on the node.
- `pod_affinity` (Boolean) Always co-locates multiple replicas of the integration in the same node (default 'false').
-- `pod_affinity_labels` (List of String) Defines a set of pods (namely those matching the label selector, relative to the given namespace) that the integration pod(s) should be co-located with.
+- `pod_affinity_labels` (List of String) Defines a set of pods (namely those matching the label selector, relative to the given namespace) that theintegration pod(s) should be co-located with.
- `pod_anti_affinity` (Boolean) Never co-locates multiple replicas of the integration in the same node (default 'false').
-- `pod_anti_affinity_labels` (List of String) Defines a set of pods (namely those matching the label selector, relative to the given namespace) that the integration pod(s) should not be co-located with.
+- `pod_anti_affinity_labels` (List of String) Defines a set of pods (namely those matching the label selector, relative to the given namespace) that theintegration pod(s) should not be co-located with.
@@ -350,27 +350,27 @@ Optional:
Optional:
- `annotations` (Map of String) When using 'pod' strategy, annotation to use for the builder pod.
-- `base_image` (String) Specify a base image. In order to have the application working properly it must be a container image which has a Java JDK installed and ready to use on path (ie '/usr/bin/java').
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `base_image` (String) Specify a base image. In order to have the application working properly it must be a container image which has a Java JDKinstalled and ready to use on path (ie '/usr/bin/java').
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Deprecated: no longer in use.
- `incremental_image_build` (Boolean) Use the incremental image build option, to reuse existing containers (default 'true')
-- `limit_cpu` (String) When using 'pod' strategy, the maximum amount of CPU required by the pod builder. Deprecated: use TasksRequestCPU instead with task name 'builder'.
-- `limit_memory` (String) When using 'pod' strategy, the maximum amount of memory required by the pod builder. Deprecated: use TasksRequestCPU instead with task name 'builder'.
-- `maven_profiles` (List of String) A list of references pointing to configmaps/secrets that contains a maven profile. This configmap/secret is a resource of the IntegrationKit created, therefore it needs to be present in the namespace where the operator is going to create the IntegrationKit. The content of the maven profile is expected to be a text containing a valid maven profile starting with '' and ending with '' that will be integrated as an inline profile in the POM. Syntax: [configmap|secret]:name[/key], where name represents the resource name, key optionally represents the resource key to be filtered (default key value = profile.xml).
+- `limit_cpu` (String) When using 'pod' strategy, the maximum amount of CPU required by the pod builder.Deprecated: use TasksRequestCPU instead with task name 'builder'.
+- `limit_memory` (String) When using 'pod' strategy, the maximum amount of memory required by the pod builder.Deprecated: use TasksRequestCPU instead with task name 'builder'.
+- `maven_profiles` (List of String) A list of references pointing to configmaps/secrets that contains a maven profile.This configmap/secret is a resource of the IntegrationKit created, therefore it needs to be present in the namespace where the operator is going to create the IntegrationKit.The content of the maven profile is expected to be a text containing a valid maven profile starting with '' and ending with '' that will be integrated as an inline profile in the POM.Syntax: [configmap|secret]:name[/key], where name represents the resource name, key optionally represents the resource key to be filtered (default key value = profile.xml).
- `node_selector` (Map of String) Defines a set of nodes the builder pod is eligible to be scheduled on, based on labels on the node.
- `order_strategy` (String) The build order strategy to use, either 'dependencies', 'fifo' or 'sequential' (default is the platform default)
- `platforms` (List of String) The list of manifest platforms to use to build a container image (default 'linux/amd64').
- `properties` (List of String) A list of properties to be provided to the build task
-- `request_cpu` (String) When using 'pod' strategy, the minimum amount of CPU required by the pod builder. Deprecated: use TasksRequestCPU instead with task name 'builder'.
-- `request_memory` (String) When using 'pod' strategy, the minimum amount of memory required by the pod builder. Deprecated: use TasksRequestCPU instead with task name 'builder'.
+- `request_cpu` (String) When using 'pod' strategy, the minimum amount of CPU required by the pod builder.Deprecated: use TasksRequestCPU instead with task name 'builder'.
+- `request_memory` (String) When using 'pod' strategy, the minimum amount of memory required by the pod builder.Deprecated: use TasksRequestCPU instead with task name 'builder'.
- `strategy` (String) The strategy to use, either 'pod' or 'routine' (default 'routine')
- `tasks` (List of String) A list of tasks to be executed (available only when using 'pod' strategy) with format ';;'.
-- `tasks_filter` (String) A list of tasks sorted by the order of execution in a csv format, ie, ',,...'. Mind that you must include also the operator tasks ('builder', 'quarkus-native', 'package', 'jib', 's2i') if you need to execute them. Useful only with 'pod' strategy.
+- `tasks_filter` (String) A list of tasks sorted by the order of execution in a csv format, ie, ',,...'.Mind that you must include also the operator tasks ('builder', 'quarkus-native', 'package', 'jib', 's2i')if you need to execute them. Useful only with 'pod' strategy.
- `tasks_limit_cpu` (List of String) A list of limit cpu configuration for the specific task with format ':'.
- `tasks_limit_memory` (List of String) A list of limit memory configuration for the specific task with format ':'.
- `tasks_request_cpu` (List of String) A list of request cpu configuration for the specific task with format ':'.
- `tasks_request_memory` (List of String) A list of request memory configuration for the specific task with format ':'.
-- `verbose` (Boolean) Enable verbose logging on build components that support it (e.g. Kaniko build pod). Deprecated no longer in use
+- `verbose` (Boolean) Enable verbose logging on build components that support it (e.g. Kaniko build pod).Deprecated no longer in use
@@ -378,10 +378,10 @@ Optional:
Optional:
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Deprecated: no longer in use.
- `properties` (List of String) A list of properties to be provided to the Integration runtime
-- `runtime_version` (String) The camel-k-runtime version to use for the integration. It overrides the default version set in the Integration Platform. You can use a fixed version (for example '3.2.3') or a semantic version (for example '3.x') which will try to resolve to the best matching Catalog existing on the cluster.
+- `runtime_version` (String) The camel-k-runtime version to use for the integration. It overrides the default version set in the Integration Platform.You can use a fixed version (for example '3.2.3') or a semantic version (for example '3.x') which will try to resolveto the best matching Catalog existing on the cluster.
@@ -393,10 +393,10 @@ Optional:
- `auto` (Boolean) To automatically enable the trait
- `capabilities_add` (List of String) Security Context Capabilities Add configuration (default none).
- `capabilities_drop` (List of String) Security Context Capabilities Drop configuration (default ALL).
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Deprecated: no longer in use.
- `expose` (Boolean) Can be used to enable/disable exposure via kubernetes Service.
-- `image` (String) The main container image to use for the Integration. When using this parameter the operator will create a synthetic IntegrationKit which won't be able to execute traits requiring CamelCatalog. If the container image you're using is coming from an IntegrationKit, use instead Integration '.spec.integrationKit' parameter. If you're moving the Integration across environments, you will also need to create an 'external' IntegrationKit.
+- `image` (String) The main container image to use for the Integration. When using this parameter the operator will create a synthetic IntegrationKit whichwon't be able to execute traits requiring CamelCatalog. If the container image you're using is coming from an IntegrationKit, use insteadIntegration '.spec.integrationKit' parameter. If you're moving the Integration across environments, you will also need to create an 'external' IntegrationKit.
- `image_pull_policy` (String) The pull policy: Always|Never|IfNotPresent
- `limit_cpu` (String) The maximum amount of CPU to be provided (default 500 millicores).
- `limit_memory` (String) The maximum amount of memory to be provided (default 512 Mi).
@@ -417,16 +417,16 @@ Optional:
Optional:
-- `active_deadline_seconds` (Number) Specifies the duration in seconds, relative to the start time, that the job may be continuously active before it is considered to be failed. It defaults to 60s.
-- `auto` (Boolean) Automatically deploy the integration as CronJob when all routes are either starting from a periodic consumer (only 'cron', 'timer' and 'quartz' are supported) or a passive consumer (e.g. 'direct' is a passive consumer). It's required that all periodic consumers have the same period, and it can be expressed as cron schedule (e.g. '1m' can be expressed as '0/1 * * * *', while '35m' or '50s' cannot).
-- `backoff_limit` (Number) Specifies the number of retries before marking the job failed. It defaults to 2.
-- `components` (String) A comma separated list of the Camel components that need to be customized in order for them to work when the schedule is triggered externally by Kubernetes. A specific customizer is activated for each specified component. E.g. for the 'timer' component, the 'cron-timer' customizer is activated (it's present in the 'org.apache.camel.k:camel-k-cron' library). Supported components are currently: 'cron', 'timer' and 'quartz'.
-- `concurrency_policy` (String) Specifies how to treat concurrent executions of a Job. Valid values are: - 'Allow': allows CronJobs to run concurrently; - 'Forbid' (default): forbids concurrent runs, skipping next run if previous run hasn't finished yet; - 'Replace': cancels currently running job and replaces it with a new one
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `active_deadline_seconds` (Number) Specifies the duration in seconds, relative to the start time, that the jobmay be continuously active before it is considered to be failed.It defaults to 60s.
+- `auto` (Boolean) Automatically deploy the integration as CronJob when all routes areeither starting from a periodic consumer (only 'cron', 'timer' and 'quartz' are supported) or a passive consumer (e.g. 'direct' is a passive consumer).It's required that all periodic consumers have the same period, and it can be expressed as cron schedule (e.g. '1m' can be expressed as '0/1 * * * *',while '35m' or '50s' cannot).
+- `backoff_limit` (Number) Specifies the number of retries before marking the job failed.It defaults to 2.
+- `components` (String) A comma separated list of the Camel components that need to be customized in order for them to work when the schedule is triggered externally by Kubernetes.A specific customizer is activated for each specified component. E.g. for the 'timer' component, the 'cron-timer' customizer isactivated (it's present in the 'org.apache.camel.k:camel-k-cron' library).Supported components are currently: 'cron', 'timer' and 'quartz'.
+- `concurrency_policy` (String) Specifies how to treat concurrent executions of a Job.Valid values are:- 'Allow': allows CronJobs to run concurrently;- 'Forbid' (default): forbids concurrent runs, skipping next run if previous run hasn't finished yet;- 'Replace': cancels currently running job and replaces it with a new one
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
-- `fallback` (Boolean) Use the default Camel implementation of the 'cron' endpoint ('quartz') instead of trying to materialize the integration as Kubernetes CronJob.
-- `schedule` (String) The CronJob schedule for the whole integration. If multiple routes are declared, they must have the same schedule for this mechanism to work correctly.
-- `starting_deadline_seconds` (Number) Optional deadline in seconds for starting the job if it misses scheduled time for any reason. Missed jobs executions will be counted as failed ones.
+- `fallback` (Boolean) Use the default Camel implementation of the 'cron' endpoint ('quartz') instead of trying to materialize the integrationas Kubernetes CronJob.
+- `schedule` (String) The CronJob schedule for the whole integration. If multiple routes are declared, they must have the same schedule for thismechanism to work correctly.
+- `starting_deadline_seconds` (Number) Optional deadline in seconds for starting the job if it misses scheduledtime for any reason. Missed jobs executions will be counted as failed ones.
- `time_zone` (String) The timezone that the CronJob will run on
@@ -435,7 +435,7 @@ Optional:
Optional:
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Deprecated: no longer in use.
@@ -444,10 +444,10 @@ Optional:
Optional:
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Deprecated: no longer in use.
- `kind` (String) Allows to explicitly select the desired deployment kind between 'deployment', 'cron-job' or 'knative-service' when creating the resources for running the integration.
-- `use_ssa` (Boolean) Use server-side apply to update the owned resources (default 'true'). Note that it automatically falls back to client-side patching, if SSA is not available, e.g., on old Kubernetes clusters.
+- `use_ssa` (Boolean) Use server-side apply to update the owned resources (default 'true').Note that it automatically falls back to client-side patching, if SSA is not available, e.g., on old Kubernetes clusters.
@@ -455,11 +455,11 @@ Optional:
Optional:
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Deprecated: no longer in use.
-- `progress_deadline_seconds` (Number) The maximum time in seconds for the deployment to make progress before it is considered to be failed. It defaults to '60s'.
-- `rolling_update_max_surge` (String) The maximum number of pods that can be scheduled above the desired number of pods. Value can be an absolute number (ex: 5) or a percentage of desired pods (ex: 10%). This can not be 0 if MaxUnavailable is 0. Absolute number is calculated from percentage by rounding up. Defaults to '25%'.
-- `rolling_update_max_unavailable` (String) The maximum number of pods that can be unavailable during the update. Value can be an absolute number (ex: 5) or a percentage of desired pods (ex: 10%). Absolute number is calculated from percentage by rounding down. This can not be 0 if MaxSurge is 0. Defaults to '25%'.
+- `progress_deadline_seconds` (Number) The maximum time in seconds for the deployment to make progress before itis considered to be failed. It defaults to '60s'.
+- `rolling_update_max_surge` (String) The maximum number of pods that can be scheduled above the desired number ofpods.Value can be an absolute number (ex: 5) or a percentage of desired pods (ex: 10%).This can not be 0 if MaxUnavailable is 0.Absolute number is calculated from percentage by rounding up.Defaults to '25%'.
+- `rolling_update_max_unavailable` (String) The maximum number of pods that can be unavailable during the update.Value can be an absolute number (ex: 5) or a percentage of desired pods (ex: 10%).Absolute number is calculated from percentage by rounding down.This can not be 0 if MaxSurge is 0.Defaults to '25%'.
- `strategy` (String) The deployment strategy to use to replace existing pods with new ones.
@@ -468,11 +468,11 @@ Optional:
Optional:
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `container_meta` (Boolean) Enables injection of 'NAMESPACE' and 'POD_NAME' environment variables (default 'true')
- `enabled` (Boolean) Deprecated: no longer in use.
- `http_proxy` (Boolean) Propagates the 'HTTP_PROXY', 'HTTPS_PROXY' and 'NO_PROXY' environment variables (default 'true')
-- `vars` (List of String) A list of environment variables to be added to the integration container. The syntax is KEY=VALUE, e.g., 'MY_VAR='my value''. These take precedence over the previously defined environment variables.
+- `vars` (List of String) A list of environment variables to be added to the integration container.The syntax is KEY=VALUE, e.g., 'MY_VAR='my value''.These take precedence over the previously defined environment variables.
@@ -480,7 +480,7 @@ Optional:
Optional:
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Deprecated: no longer in use.
- `ref` (String) The error handler ref name provided or found in application properties
@@ -490,8 +490,8 @@ Optional:
Optional:
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
-- `discovery_cache` (String) Discovery client cache to be used, either 'disabled', 'disk' or 'memory' (default 'memory'). Deprecated: to be removed from trait configuration.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
+- `discovery_cache` (String) Discovery client cache to be used, either 'disabled', 'disk' or 'memory' (default 'memory').Deprecated: to be removed from trait configuration.
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
@@ -500,7 +500,7 @@ Optional:
Optional:
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
- `liveness_failure_threshold` (Number) Minimum consecutive failures for the liveness probe to be considered failed after having succeeded.
- `liveness_initial_delay` (Number) Number of seconds after the container has started before the liveness probe is initiated.
@@ -533,13 +533,13 @@ Optional:
Optional:
-- `annotations` (Map of String) The annotations added to the ingress. This can be used to set controller specific annotations, e.g., when using the NGINX Ingress controller: See https://github.com/kubernetes/ingress-nginx/blob/main/docs/user-guide/nginx-configuration/annotations.md
+- `annotations` (Map of String) The annotations added to the ingress.This can be used to set controller specific annotations, e.g., when using the NGINX Ingress controller:See https://github.com/kubernetes/ingress-nginx/blob/main/docs/user-guide/nginx-configuration/annotations.md
- `auto` (Boolean) To automatically add an ingress whenever the integration uses an HTTP endpoint consumer.
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
- `host` (String) To configure the host exposed by the ingress.
- `path` (String) To configure the path exposed by the ingress (default '/').
-- `path_type` (String) To configure the path type exposed by the ingress. One of 'Exact', 'Prefix', 'ImplementationSpecific' (default to 'Prefix').
+- `path_type` (String) To configure the path type exposed by the ingress.One of 'Exact', 'Prefix', 'ImplementationSpecific' (default to 'Prefix').
- `tls_hosts` (List of String) To configure tls hosts
- `tls_secret_name` (String) To configure tls secret name
@@ -550,7 +550,7 @@ Optional:
Optional:
- `allow` (String) Configures a (comma-separated) list of CIDR subnets that should not be intercepted by the Istio proxy ('10.0.0.0/8,172.16.0.0/12,192.168.0.0/16' by default).
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
- `inject` (Boolean) Forces the value for labels 'sidecar.istio.io/inject'. By default the label is set to 'true' on deployment and not set on Knative Service.
@@ -560,14 +560,14 @@ Optional:
Optional:
-- `ca_cert` (String) The PEM encoded CA certification file path, used to verify client certificates, applicable when 'protocol' is 'https' and 'use-ssl-client-authentication' is 'true' (default '/var/run/secrets/kubernetes.io/serviceaccount/service-ca.crt' for OpenShift).
-- `client_principal` (List of String) The principal(s) which must be given in a client certificate to allow access to the Jolokia endpoint, applicable when 'protocol' is 'https' and 'use-ssl-client-authentication' is 'true' (default 'clientPrincipal=cn=system:master-proxy', 'cn=hawtio-online.hawtio.svc' and 'cn=fuse-console.fuse.svc' for OpenShift).
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `ca_cert` (String) The PEM encoded CA certification file path, used to verify client certificates,applicable when 'protocol' is 'https' and 'use-ssl-client-authentication' is 'true'(default '/var/run/secrets/kubernetes.io/serviceaccount/service-ca.crt' for OpenShift).
+- `client_principal` (List of String) The principal(s) which must be given in a client certificate to allow access to the Jolokia endpoint,applicable when 'protocol' is 'https' and 'use-ssl-client-authentication' is 'true'(default 'clientPrincipal=cn=system:master-proxy', 'cn=hawtio-online.hawtio.svc' and 'cn=fuse-console.fuse.svc' for OpenShift).
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `discovery_enabled` (Boolean) Listen for multicast requests (default 'false')
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
-- `extended_client_check` (Boolean) Mandate the client certificate contains a client flag in the extended key usage section, applicable when 'protocol' is 'https' and 'use-ssl-client-authentication' is 'true' (default 'true' for OpenShift).
-- `host` (String) The Host address to which the Jolokia agent should bind to. If ''*'' or ''0.0.0.0'' is given, the servers binds to every network interface (default ''*'').
-- `options` (List of String) A list of additional Jolokia options as defined in https://jolokia.org/reference/html/agents.html#agent-jvm-config[JVM agent configuration options]
+- `extended_client_check` (Boolean) Mandate the client certificate contains a client flag in the extended key usage section,applicable when 'protocol' is 'https' and 'use-ssl-client-authentication' is 'true'(default 'true' for OpenShift).
+- `host` (String) The Host address to which the Jolokia agent should bind to. If ''*'' or ''0.0.0.0'' is given,the servers binds to every network interface (default ''*'').
+- `options` (List of String) A list of additional Jolokia options as definedin https://jolokia.org/reference/html/agents.html#agent-jvm-config[JVM agent configuration options]
- `password` (String) The password used for authentication, applicable when the 'user' option is set.
- `port` (Number) The Jolokia endpoint port (default '8778').
- `protocol` (String) The protocol to use, either 'http' or 'https' (default 'https' for OpenShift)
@@ -581,14 +581,14 @@ Optional:
Optional:
- `classpath` (String) Additional JVM classpath (use 'Linux' classpath separator)
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `debug` (Boolean) Activates remote debugging, so that a debugger can be attached to the JVM, e.g., using port-forwarding
- `debug_address` (String) Transport address at which to listen for the newly launched JVM (default '*:5005')
- `debug_suspend` (Boolean) Suspends the target JVM immediately before the main class is loaded
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
- `jar` (String) The Jar dependency which will run the application. Leave it empty for managed Integrations.
- `options` (List of String) A list of JVM options
-- `print_command` (Boolean) Prints the command used the start the JVM in the container logs (default 'true') Deprecated: no longer in use.
+- `print_command` (Boolean) Prints the command used the start the JVM in the container logs (default 'true')Deprecated: no longer in use.
@@ -597,7 +597,7 @@ Optional:
Optional:
- `auto` (Boolean) Automatically inject all referenced Kamelets and their default configuration (enabled by default)
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
- `list` (String) Comma separated list of Kamelet names to load into the current integration
- `mount_point` (String) The directory where the application mounts and reads Kamelet spec (default '/etc/camel/kamelets')
@@ -617,20 +617,20 @@ Required:
Optional:
- `auto` (Boolean) Enable automatic discovery of all trait properties.
-- `channel_sinks` (List of String) List of channels used as destination of integration routes. Can contain simple channel names or full Camel URIs.
-- `channel_sources` (List of String) List of channels used as source of integration routes. Can contain simple channel names or full Camel URIs.
+- `channel_sinks` (List of String) List of channels used as destination of integration routes.Can contain simple channel names or full Camel URIs.
+- `channel_sources` (List of String) List of channels used as source of integration routes.Can contain simple channel names or full Camel URIs.
- `config` (String) Can be used to inject a Knative complete configuration in JSON format.
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
-- `endpoint_sinks` (List of String) List of endpoints used as destination of integration routes. Can contain simple endpoint names or full Camel URIs.
+- `endpoint_sinks` (List of String) List of endpoints used as destination of integration routes.Can contain simple endpoint names or full Camel URIs.
- `endpoint_sources` (List of String) List of channels used as source of integration routes.
-- `event_sinks` (List of String) List of event types that the integration will produce. Can contain simple event types or full Camel URIs (to use a specific broker).
-- `event_sources` (List of String) List of event types that the integration will be subscribed to. Can contain simple event types or full Camel URIs (to use a specific broker different from 'default').
-- `filter_event_type` (Boolean) Enables the default filtering for the Knative trigger using the event type If this is true, the created Knative trigger uses the event type as a filter on the event stream when no other filter criteria is given. (default: true)
-- `filter_source_channels` (Boolean) Enables filtering on events based on the header 'ce-knativehistory'. Since this header has been removed in newer versions of Knative, filtering is disabled by default.
-- `filters` (List of String) Sets filter attributes on the event stream (such as event type, source, subject and so on). A list of key-value pairs that represent filter attributes and its values. The syntax is KEY=VALUE, e.g., 'source='my.source''. Filter attributes get set on the Knative trigger that is being created as part of this integration.
-- `namespace_label` (Boolean) Enables the camel-k-operator to set the 'bindings.knative.dev/include=true' label to the namespace As Knative requires this label to perform injection of K_SINK URL into the service. If this is false, the integration pod may start and fail, read the SinkBinding Knative documentation. (default: true)
-- `sink_binding` (Boolean) Allows binding the integration to a sink via a Knative SinkBinding resource. This can be used when the integration targets a single sink. It's enabled by default when the integration targets a single sink (except when the integration is owned by a Knative source).
+- `event_sinks` (List of String) List of event types that the integration will produce.Can contain simple event types or full Camel URIs (to use a specific broker).
+- `event_sources` (List of String) List of event types that the integration will be subscribed to.Can contain simple event types or full Camel URIs (to use a specific broker different from 'default').
+- `filter_event_type` (Boolean) Enables the default filtering for the Knative trigger using the event typeIf this is true, the created Knative trigger uses the event type as a filter on the event stream when no other filter criteria is given. (default: true)
+- `filter_source_channels` (Boolean) Enables filtering on events based on the header 'ce-knativehistory'. Since this header has been removed in newer versions ofKnative, filtering is disabled by default.
+- `filters` (List of String) Sets filter attributes on the event stream (such as event type, source, subject and so on).A list of key-value pairs that represent filter attributes and its values.The syntax is KEY=VALUE, e.g., 'source='my.source''.Filter attributes get set on the Knative trigger that is being created as part of this integration.
+- `namespace_label` (Boolean) Enables the camel-k-operator to set the 'bindings.knative.dev/include=true' label to the namespaceAs Knative requires this label to perform injection of K_SINK URL into the service.If this is false, the integration pod may start and fail, read the SinkBinding Knative documentation. (default: true)
+- `sink_binding` (Boolean) Allows binding the integration to a sink via a Knative SinkBinding resource.This can be used when the integration targets a single sink.It's enabled by default when the integration targets a single sink(except when the integration is owned by a Knative source).
@@ -638,18 +638,18 @@ Optional:
Optional:
-- `annotations` (Map of String) The annotations added to route. This can be used to set knative service specific annotations CLI usage example: -t 'knative-service.annotations.'haproxy.router.openshift.io/balance'=true'
-- `auto` (Boolean) Automatically deploy the integration as Knative service when all conditions hold: * Integration is using the Knative profile * All routes are either starting from an HTTP based consumer or a passive consumer (e.g. 'direct' is a passive consumer)
-- `autoscaling_metric` (String) Configures the Knative autoscaling metric property (e.g. to set 'concurrency' based or 'cpu' based autoscaling). Refer to the Knative documentation for more information.
-- `autoscaling_target` (Number) Sets the allowed concurrency level or CPU percentage (depending on the autoscaling metric) for each Pod. Refer to the Knative documentation for more information.
-- `class` (String) Configures the Knative autoscaling class property (e.g. to set 'hpa.autoscaling.knative.dev' or 'kpa.autoscaling.knative.dev' autoscaling). Refer to the Knative documentation for more information.
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `annotations` (Map of String) The annotations added to route.This can be used to set knative service specific annotationsCLI usage example: -t 'knative-service.annotations.'haproxy.router.openshift.io/balance'=true'
+- `auto` (Boolean) Automatically deploy the integration as Knative service when all conditions hold:* Integration is using the Knative profile* All routes are either starting from an HTTP based consumer or a passive consumer (e.g. 'direct' is a passive consumer)
+- `autoscaling_metric` (String) Configures the Knative autoscaling metric property (e.g. to set 'concurrency' based or 'cpu' based autoscaling).Refer to the Knative documentation for more information.
+- `autoscaling_target` (Number) Sets the allowed concurrency level or CPU percentage (depending on the autoscaling metric) for each Pod.Refer to the Knative documentation for more information.
+- `class` (String) Configures the Knative autoscaling class property (e.g. to set 'hpa.autoscaling.knative.dev' or 'kpa.autoscaling.knative.dev' autoscaling).Refer to the Knative documentation for more information.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
-- `max_scale` (Number) An upper bound for the number of Pods that can be running in parallel for the integration. Knative has its own cap value that depends on the installation. Refer to the Knative documentation for more information.
-- `min_scale` (Number) The minimum number of Pods that should be running at any time for the integration. It's **zero** by default, meaning that the integration is scaled down to zero when not used for a configured amount of time. Refer to the Knative documentation for more information.
-- `rollout_duration` (String) Enables to gradually shift traffic to the latest Revision and sets the rollout duration. It's disabled by default and must be expressed as a Golang 'time.Duration' string representation, rounded to a second precision.
-- `timeout_seconds` (Number) The maximum duration in seconds that the request instance is allowed to respond to a request. This field propagates to the integration pod's terminationGracePeriodSeconds Refer to the Knative documentation for more information.
-- `visibility` (String) Setting 'cluster-local', Knative service becomes a private service. Specifically, this option applies the 'networking.knative.dev/visibility' label to Knative service. Refer to the Knative documentation for more information.
+- `max_scale` (Number) An upper bound for the number of Pods that can be running in parallel for the integration.Knative has its own cap value that depends on the installation.Refer to the Knative documentation for more information.
+- `min_scale` (Number) The minimum number of Pods that should be running at any time for the integration. It's **zero** by default, meaning thatthe integration is scaled down to zero when not used for a configured amount of time.Refer to the Knative documentation for more information.
+- `rollout_duration` (String) Enables to gradually shift traffic to the latest Revision and sets the rollout duration.It's disabled by default and must be expressed as a Golang 'time.Duration' string representation,rounded to a second precision.
+- `timeout_seconds` (Number) The maximum duration in seconds that the request instance is allowed to respond to a request.This field propagates to the integration pod's terminationGracePeriodSecondsRefer to the Knative documentation for more information.
+- `visibility` (String) Setting 'cluster-local', Knative service becomes a private service.Specifically, this option applies the 'networking.knative.dev/visibility' label to Knative service.Refer to the Knative documentation for more information.
@@ -658,7 +658,7 @@ Optional:
Optional:
- `color` (Boolean) Colorize the log output
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
- `format` (String) Logs message format
- `json` (Boolean) Output the logs in JSON
@@ -679,13 +679,13 @@ Required:
Optional:
-- `configs` (List of String) A list of configuration pointing to configmap/secret. The configuration are expected to be UTF-8 resources as they are processed by runtime Camel Context and tried to be parsed as property files. They are also made available on the classpath in order to ease their usage directly from the Route. Syntax: [configmap|secret]:name[/key], where name represents the resource name and key optionally represents the resource key to be filtered
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configs` (List of String) A list of configuration pointing to configmap/secret.The configuration are expected to be UTF-8 resources as they are processed by runtime Camel Context and tried to be parsed as property files.They are also made available on the classpath in order to ease their usage directly from the Route.Syntax: [configmap|secret]:name[/key], where name represents the resource name and key optionally represents the resource key to be filtered
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `empty_dirs` (List of String) A list of EmptyDir volumes to be mounted. Syntax: [name:/container/path]
- `enabled` (Boolean) Deprecated: no longer in use.
-- `hot_reload` (Boolean) Enable 'hot reload' when a secret/configmap mounted is edited (default 'false'). The configmap/secret must be marked with 'camel.apache.org/integration' label to be taken in account. The resource will be watched for any kind change, also for changes in metadata.
-- `resources` (List of String) A list of resources (text or binary content) pointing to configmap/secret. The resources are expected to be any resource type (text or binary content). The destination path can be either a default location or any path specified by the user. Syntax: [configmap|secret]:name[/key][@path], where name represents the resource name, key optionally represents the resource key to be filtered and path represents the destination path
-- `scan_kamelets_implicit_label_secrets` (Boolean) Deprecated: include your properties in an explicit property file backed by a secret. Let the operator to scan for secret labeled with 'camel.apache.org/kamelet' and 'camel.apache.org/kamelet.configuration'. These secrets are mounted to the application and treated as plain properties file with their key/value list (ie .spec.data['camel.my-property'] = my-value) (default 'true').
+- `hot_reload` (Boolean) Enable 'hot reload' when a secret/configmap mounted is edited (default 'false'). The configmap/secret must bemarked with 'camel.apache.org/integration' label to be taken in account. The resource will be watched for any kind change, also forchanges in metadata.
+- `resources` (List of String) A list of resources (text or binary content) pointing to configmap/secret.The resources are expected to be any resource type (text or binary content).The destination path can be either a default location or any path specified by the user.Syntax: [configmap|secret]:name[/key][@path], where name represents the resource name, key optionally represents the resource key to be filtered and path represents the destination path
+- `scan_kamelets_implicit_label_secrets` (Boolean) Deprecated: include your properties in an explicit property file backed by a secret.Let the operator to scan for secret labeled with 'camel.apache.org/kamelet' and 'camel.apache.org/kamelet.configuration'.These secrets are mounted to the application and treated as plain properties file with their key/value list(ie .spec.data['camel.my-property'] = my-value) (default 'true').
- `volumes` (List of String) A list of Persistent Volume Claims to be mounted. Syntax: [pvcname:/container/path]
@@ -694,8 +694,8 @@ Optional:
Optional:
-- `configmaps` (List of String) The configmaps holding the spec of the OpenAPI
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configmaps` (List of String) The configmaps holding the spec of the OpenAPI (compatible with > 3.0 spec only).
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Deprecated: no longer in use.
@@ -704,7 +704,7 @@ Optional:
Optional:
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
- `target_annotations` (List of String) The set of annotations to be transferred
- `target_labels` (List of String) The set of labels to be transferred
@@ -715,10 +715,10 @@ Optional:
Optional:
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
-- `max_unavailable` (String) The number of pods for the Integration that can be unavailable after an eviction. It can be either an absolute number or a percentage (default '1' if 'min-available' is also not set). Only one of 'max-unavailable' and 'min-available' can be specified.
-- `min_available` (String) The number of pods for the Integration that must still be available after an eviction. It can be either an absolute number or a percentage. Only one of 'min-available' and 'max-unavailable' can be specified.
+- `max_unavailable` (String) The number of pods for the Integration that can be unavailable after an eviction.It can be either an absolute number or a percentage (default '1' if 'min-available' is also not set).Only one of 'max-unavailable' and 'min-available' can be specified.
+- `min_available` (String) The number of pods for the Integration that must still be available after an eviction.It can be either an absolute number or a percentage.Only one of 'min-available' and 'max-unavailable' can be specified.
@@ -726,11 +726,11 @@ Optional:
Optional:
-- `auto` (Boolean) To automatically detect from the environment if a default platform can be created (it will be created on OpenShift or when a registry address is set). Deprecated: Platform is auto generated by the operator install procedure - maintained for backward compatibility
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
-- `create_default` (Boolean) To create a default (empty) platform when the platform is missing. Deprecated: Platform is auto generated by the operator install procedure - maintained for backward compatibility
+- `auto` (Boolean) To automatically detect from the environment if a default platform can be created (it will be created on OpenShift or when a registry address is set).Deprecated: Platform is auto generated by the operator install procedure - maintained for backward compatibility
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
+- `create_default` (Boolean) To create a default (empty) platform when the platform is missing.Deprecated: Platform is auto generated by the operator install procedure - maintained for backward compatibility
- `enabled` (Boolean) Deprecated: no longer in use.
-- `global` (Boolean) Indicates if the platform should be created globally in the case of global operator (default true). Deprecated: Platform is auto generated by the operator install procedure - maintained for backward compatibility
+- `global` (Boolean) Indicates if the platform should be created globally in the case of global operator (default true).Deprecated: Platform is auto generated by the operator install procedure - maintained for backward compatibility
@@ -738,7 +738,7 @@ Optional:
Optional:
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
@@ -747,7 +747,7 @@ Optional:
Optional:
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
- `pod_monitor` (Boolean) Whether a 'PodMonitor' resource is created (default 'true').
- `pod_monitor_labels` (List of String) The 'PodMonitor' resource labels, applicable when 'pod-monitor' is 'true'.
@@ -759,7 +759,7 @@ Optional:
Optional:
- `auto` (Boolean) Automatically configures the platform registry secret on the pod if it is of type 'kubernetes.io/dockerconfigjson'.
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
- `image_puller_delegation` (Boolean) When using a global operator with a shared platform, this enables delegation of the 'system:image-puller' cluster role on the operator namespace to the integration service account.
- `secret_name` (String) The pull secret name to set on the Pod. If left empty this is automatically taken from the 'IntegrationPlatform' registry configuration.
@@ -770,12 +770,12 @@ Optional:
Optional:
-- `build_mode` (List of String) The Quarkus mode to run: either 'jvm' or 'native' (default 'jvm'). In case both 'jvm' and 'native' are specified, two 'IntegrationKit' resources are created, with the 'native' kit having precedence over the 'jvm' one once ready.
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `build_mode` (List of String) The Quarkus mode to run: either 'jvm' or 'native' (default 'jvm').In case both 'jvm' and 'native' are specified, two 'IntegrationKit' resources are created,with the 'native' kit having precedence over the 'jvm' one once ready.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Deprecated: no longer in use.
- `native_base_image` (String) The base image to use when running a native build (default 'quay.io/quarkus/quarkus-micro-image:2.0')
- `native_builder_image` (String) The image containing the tooling required for a native build (by default it will use the one provided in the runtime catalog)
-- `package_types` (List of String) The Quarkus package types, 'fast-jar' or 'native' (default 'fast-jar'). In case both 'fast-jar' and 'native' are specified, two 'IntegrationKit' resources are created, with the native kit having precedence over the 'fast-jar' one once ready. The order influences the resolution of the current kit for the integration. The kit corresponding to the first package type will be assigned to the integration in case no existing kit that matches the integration exists. Deprecated: use 'build-mode' instead.
+- `package_types` (List of String) The Quarkus package types, 'fast-jar' or 'native' (default 'fast-jar').In case both 'fast-jar' and 'native' are specified, two 'IntegrationKit' resources are created,with the native kit having precedence over the 'fast-jar' one once ready.The order influences the resolution of the current kit for the integration.The kit corresponding to the first package type will be assigned to theintegration in case no existing kit that matches the integration exists.Deprecated: use 'build-mode' instead.
@@ -783,7 +783,7 @@ Optional:
Optional:
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
@@ -792,20 +792,20 @@ Optional:
Optional:
-- `annotations` (Map of String) The annotations added to route. This can be used to set route specific annotations For annotations options see https://docs.openshift.com/container-platform/3.11/architecture/networking/routes.html#route-specific-annotations CLI usage example: -t 'route.annotations.'haproxy.router.openshift.io/balance'=true'
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `annotations` (Map of String) The annotations added to route.This can be used to set route specific annotationsFor annotations options see https://docs.openshift.com/container-platform/3.11/architecture/networking/routes.html#route-specific-annotationsCLI usage example: -t 'route.annotations.'haproxy.router.openshift.io/balance'=true'
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
- `host` (String) To configure the host exposed by the route.
-- `tls_ca_certificate` (String) The TLS CA certificate contents. Refer to the OpenShift route documentation for additional information.
-- `tls_ca_certificate_secret` (String) The secret name and key reference to the TLS CA certificate. The format is 'secret-name[/key-name]', the value represents the secret name, if there is only one key in the secret it will be read, otherwise you can set a key name separated with a '/'. Refer to the OpenShift route documentation for additional information.
-- `tls_certificate` (String) The TLS certificate contents. Refer to the OpenShift route documentation for additional information.
-- `tls_certificate_secret` (String) The secret name and key reference to the TLS certificate. The format is 'secret-name[/key-name]', the value represents the secret name, if there is only one key in the secret it will be read, otherwise you can set a key name separated with a '/'. Refer to the OpenShift route documentation for additional information.
-- `tls_destination_ca_certificate` (String) The destination CA certificate provides the contents of the ca certificate of the final destination. When using reencrypt termination this file should be provided in order to have routers use it for health checks on the secure connection. If this field is not specified, the router may provide its own destination CA and perform hostname validation using the short service name (service.namespace.svc), which allows infrastructure generated certificates to automatically verify. Refer to the OpenShift route documentation for additional information.
-- `tls_destination_ca_certificate_secret` (String) The secret name and key reference to the destination CA certificate. The format is 'secret-name[/key-name]', the value represents the secret name, if there is only one key in the secret it will be read, otherwise you can set a key name separated with a '/'. Refer to the OpenShift route documentation for additional information.
-- `tls_insecure_edge_termination_policy` (String) To configure how to deal with insecure traffic, e.g. 'Allow', 'Disable' or 'Redirect' traffic. Refer to the OpenShift route documentation for additional information.
-- `tls_key` (String) The TLS certificate key contents. Refer to the OpenShift route documentation for additional information.
-- `tls_key_secret` (String) The secret name and key reference to the TLS certificate key. The format is 'secret-name[/key-name]', the value represents the secret name, if there is only one key in the secret it will be read, otherwise you can set a key name separated with a '/'. Refer to the OpenShift route documentation for additional information.
-- `tls_termination` (String) The TLS termination type, like 'edge', 'passthrough' or 'reencrypt'. Refer to the OpenShift route documentation for additional information.
+- `tls_ca_certificate` (String) The TLS CA certificate contents.Refer to the OpenShift route documentation for additional information.
+- `tls_ca_certificate_secret` (String) The secret name and key reference to the TLS CA certificate. The format is 'secret-name[/key-name]', the value represents the secret name, if there is only one key in the secret it will be read, otherwise you can set a key name separated with a '/'.Refer to the OpenShift route documentation for additional information.
+- `tls_certificate` (String) The TLS certificate contents.Refer to the OpenShift route documentation for additional information.
+- `tls_certificate_secret` (String) The secret name and key reference to the TLS certificate. The format is 'secret-name[/key-name]', the value represents the secret name, if there is only one key in the secret it will be read, otherwise you can set a key name separated with a '/'.Refer to the OpenShift route documentation for additional information.
+- `tls_destination_ca_certificate` (String) The destination CA certificate provides the contents of the ca certificate of the final destination. When using reencrypttermination this file should be provided in order to have routers use it for health checks on the secure connection.If this field is not specified, the router may provide its own destination CA and perform hostname validation usingthe short service name (service.namespace.svc), which allows infrastructure generated certificates to automaticallyverify.Refer to the OpenShift route documentation for additional information.
+- `tls_destination_ca_certificate_secret` (String) The secret name and key reference to the destination CA certificate. The format is 'secret-name[/key-name]', the value represents the secret name, if there is only one key in the secret it will be read, otherwise you can set a key name separated with a '/'.Refer to the OpenShift route documentation for additional information.
+- `tls_insecure_edge_termination_policy` (String) To configure how to deal with insecure traffic, e.g. 'Allow', 'Disable' or 'Redirect' traffic.Refer to the OpenShift route documentation for additional information.
+- `tls_key` (String) The TLS certificate key contents.Refer to the OpenShift route documentation for additional information.
+- `tls_key_secret` (String) The secret name and key reference to the TLS certificate key. The format is 'secret-name[/key-name]', the value represents the secret name, if there is only one key in the secret it will be read, otherwise you can set a key name separated with a '/'.Refer to the OpenShift route documentation for additional information.
+- `tls_termination` (String) The TLS termination type, like 'edge', 'passthrough' or 'reencrypt'.Refer to the OpenShift route documentation for additional information.
@@ -813,7 +813,7 @@ Optional:
Optional:
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Deprecated: no longer in use.
- `run_as_non_root` (Boolean) Security Context RunAsNonRoot configuration (default false).
- `run_as_user` (Number) Security Context RunAsUser configuration (default none): this value is automatically retrieved in Openshift clusters when not explicitly set.
@@ -826,9 +826,9 @@ Optional:
Optional:
- `auto` (Boolean) To automatically detect from the code if a Service needs to be created.
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
-- `node_port` (Boolean) Enable Service to be exposed as NodePort (default 'false'). Deprecated: Use service type instead.
+- `node_port` (Boolean) Enable Service to be exposed as NodePort (default 'false').Deprecated: Use service type instead.
- `type` (String) The type of service to be used, either 'ClusterIP', 'NodePort' or 'LoadBalancer'.
@@ -837,7 +837,7 @@ Optional:
Optional:
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
- `services` (List of String) List of Services in the form [[apigroup/]version:]kind:[namespace/]name
@@ -863,7 +863,7 @@ Required:
Optional:
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
- `taints` (List of String) The list of taints to tolerate, in the form 'Key[=Value]:Effect[:Seconds]'
diff --git a/docs/data-sources/camel_apache_org_integration_profile_v1_manifest.md b/docs/data-sources/camel_apache_org_integration_profile_v1_manifest.md
index 8cfa8c95b..df64feab5 100644
--- a/docs/data-sources/camel_apache_org_integration_profile_v1_manifest.md
+++ b/docs/data-sources/camel_apache_org_integration_profile_v1_manifest.md
@@ -3,12 +3,12 @@
page_title: "k8s_camel_apache_org_integration_profile_v1_manifest Data Source - terraform-provider-k8s"
subcategory: "camel.apache.org"
description: |-
- IntegrationProfile is the resource used to apply user defined settings to the Camel K operator behavior. It defines the behavior of all Custom Resources ('IntegrationKit', 'Integration', 'Kamelet') in the given namespace.
+ IntegrationProfile is the resource used to apply user defined settings to the Camel K operator behavior.It defines the behavior of all Custom Resources ('IntegrationKit', 'Integration', 'Kamelet') in the given namespace.
---
# k8s_camel_apache_org_integration_profile_v1_manifest (Data Source)
-IntegrationProfile is the resource used to apply user defined settings to the Camel K operator behavior. It defines the behavior of all Custom Resources ('IntegrationKit', 'Integration', 'Kamelet') in the given namespace.
+IntegrationProfile is the resource used to apply user defined settings to the Camel K operator behavior.It defines the behavior of all Custom Resources ('IntegrationKit', 'Integration', 'Kamelet') in the given namespace.
## Example Usage
@@ -64,7 +64,7 @@ Optional:
Optional:
-- `base_image` (String) a base image that can be used as base layer for all images. It can be useful if you want to provide some custom base image with further utility software
+- `base_image` (String) a base image that can be used as base layer for all images.It can be useful if you want to provide some custom base image with further utility software
- `maven` (Attributes) Maven configuration used to build the Camel/Camel-Quarkus applications (see [below for nested schema](#nestedatt--spec--build--maven))
- `registry` (Attributes) the image registry used to push/pull Integration images (see [below for nested schema](#nestedatt--spec--build--registry))
- `runtime_provider` (String) the runtime used. Likely Camel Quarkus (we used to have main runtime which has been discontinued since version 1.5)
@@ -76,14 +76,14 @@ Optional:
Optional:
-- `ca_secrets` (Attributes List) The Secrets name and key, containing the CA certificate(s) used to connect to remote Maven repositories. It can contain X.509 certificates, and PKCS#7 formatted certificate chains. A JKS formatted keystore is automatically created to store the CA certificate(s), and configured to be used as a trusted certificate(s) by the Maven commands. Note that the root CA certificates are also imported into the created keystore. (see [below for nested schema](#nestedatt--spec--build--maven--ca_secrets))
-- `cli_options` (List of String) The CLI options that are appended to the list of arguments for Maven commands, e.g., '-V,--no-transfer-progress,-Dstyle.color=never'. See https://maven.apache.org/ref/3.8.4/maven-embedder/cli.html.
-- `extension` (Attributes List) The Maven build extensions. See https://maven.apache.org/guides/mini/guide-using-extensions.html. (see [below for nested schema](#nestedatt--spec--build--maven--extension))
+- `ca_secrets` (Attributes List) The Secrets name and key, containing the CA certificate(s) used to connectto remote Maven repositories.It can contain X.509 certificates, and PKCS#7 formatted certificate chains.A JKS formatted keystore is automatically created to store the CA certificate(s),and configured to be used as a trusted certificate(s) by the Maven commands.Note that the root CA certificates are also imported into the created keystore. (see [below for nested schema](#nestedatt--spec--build--maven--ca_secrets))
+- `cli_options` (List of String) The CLI options that are appended to the list of arguments for Maven commands,e.g., '-V,--no-transfer-progress,-Dstyle.color=never'.See https://maven.apache.org/ref/3.8.4/maven-embedder/cli.html.
+- `extension` (Attributes List) The Maven build extensions.See https://maven.apache.org/guides/mini/guide-using-extensions.html. (see [below for nested schema](#nestedatt--spec--build--maven--extension))
- `local_repository` (String) The path of the local Maven repository.
-- `profiles` (Attributes List) A reference to the ConfigMap or Secret key that contains the Maven profile. (see [below for nested schema](#nestedatt--spec--build--maven--profiles))
+- `profiles` (Attributes List) A reference to the ConfigMap or Secret key that containsthe Maven profile. (see [below for nested schema](#nestedatt--spec--build--maven--profiles))
- `properties` (Map of String) The Maven properties.
-- `settings` (Attributes) A reference to the ConfigMap or Secret key that contains the Maven settings. (see [below for nested schema](#nestedatt--spec--build--maven--settings))
-- `settings_security` (Attributes) A reference to the ConfigMap or Secret key that contains the security of the Maven settings. (see [below for nested schema](#nestedatt--spec--build--maven--settings_security))
+- `settings` (Attributes) A reference to the ConfigMap or Secret key that containsthe Maven settings. (see [below for nested schema](#nestedatt--spec--build--maven--settings))
+- `settings_security` (Attributes) A reference to the ConfigMap or Secret key that containsthe security of the Maven settings. (see [below for nested schema](#nestedatt--spec--build--maven--settings_security))
### Nested Schema for `spec.build.maven.ca_secrets`
@@ -94,7 +94,7 @@ Required:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
- `optional` (Boolean) Specify whether the Secret or its key must be defined
@@ -130,7 +130,7 @@ Required:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
@@ -143,7 +143,7 @@ Required:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
- `optional` (Boolean) Specify whether the Secret or its key must be defined
@@ -165,7 +165,7 @@ Required:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
@@ -178,7 +178,7 @@ Required:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
- `optional` (Boolean) Specify whether the Secret or its key must be defined
@@ -200,7 +200,7 @@ Required:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
@@ -213,7 +213,7 @@ Required:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
- `optional` (Boolean) Specify whether the Secret or its key must be defined
@@ -285,7 +285,7 @@ Optional:
- `prometheus` (Attributes) The configuration of Prometheus trait (see [below for nested schema](#nestedatt--spec--traits--prometheus))
- `pull_secret` (Attributes) The configuration of Pull Secret trait (see [below for nested schema](#nestedatt--spec--traits--pull_secret))
- `quarkus` (Attributes) The configuration of Quarkus trait (see [below for nested schema](#nestedatt--spec--traits--quarkus))
-- `registry` (Attributes) The configuration of Registry trait Deprecated: use jvm trait or read documentation. (see [below for nested schema](#nestedatt--spec--traits--registry))
+- `registry` (Attributes) The configuration of Registry trait (support removed since version 2.5.0).Deprecated: use jvm trait or read documentation. (see [below for nested schema](#nestedatt--spec--traits--registry))
- `route` (Attributes) The configuration of Route trait (see [below for nested schema](#nestedatt--spec--traits--route))
- `security_context` (Attributes) The configuration of Security Context trait (see [below for nested schema](#nestedatt--spec--traits--security_context))
- `service` (Attributes) The configuration of Service trait (see [below for nested schema](#nestedatt--spec--traits--service))
@@ -300,13 +300,13 @@ Optional:
Optional:
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
- `node_affinity_labels` (List of String) Defines a set of nodes the integration pod(s) are eligible to be scheduled on, based on labels on the node.
- `pod_affinity` (Boolean) Always co-locates multiple replicas of the integration in the same node (default 'false').
-- `pod_affinity_labels` (List of String) Defines a set of pods (namely those matching the label selector, relative to the given namespace) that the integration pod(s) should be co-located with.
+- `pod_affinity_labels` (List of String) Defines a set of pods (namely those matching the label selector, relative to the given namespace) that theintegration pod(s) should be co-located with.
- `pod_anti_affinity` (Boolean) Never co-locates multiple replicas of the integration in the same node (default 'false').
-- `pod_anti_affinity_labels` (List of String) Defines a set of pods (namely those matching the label selector, relative to the given namespace) that the integration pod(s) should not be co-located with.
+- `pod_anti_affinity_labels` (List of String) Defines a set of pods (namely those matching the label selector, relative to the given namespace) that theintegration pod(s) should not be co-located with.
@@ -315,27 +315,27 @@ Optional:
Optional:
- `annotations` (Map of String) When using 'pod' strategy, annotation to use for the builder pod.
-- `base_image` (String) Specify a base image. In order to have the application working properly it must be a container image which has a Java JDK installed and ready to use on path (ie '/usr/bin/java').
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `base_image` (String) Specify a base image. In order to have the application working properly it must be a container image which has a Java JDKinstalled and ready to use on path (ie '/usr/bin/java').
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Deprecated: no longer in use.
- `incremental_image_build` (Boolean) Use the incremental image build option, to reuse existing containers (default 'true')
-- `limit_cpu` (String) When using 'pod' strategy, the maximum amount of CPU required by the pod builder. Deprecated: use TasksRequestCPU instead with task name 'builder'.
-- `limit_memory` (String) When using 'pod' strategy, the maximum amount of memory required by the pod builder. Deprecated: use TasksRequestCPU instead with task name 'builder'.
-- `maven_profiles` (List of String) A list of references pointing to configmaps/secrets that contains a maven profile. This configmap/secret is a resource of the IntegrationKit created, therefore it needs to be present in the namespace where the operator is going to create the IntegrationKit. The content of the maven profile is expected to be a text containing a valid maven profile starting with '' and ending with '' that will be integrated as an inline profile in the POM. Syntax: [configmap|secret]:name[/key], where name represents the resource name, key optionally represents the resource key to be filtered (default key value = profile.xml).
+- `limit_cpu` (String) When using 'pod' strategy, the maximum amount of CPU required by the pod builder.Deprecated: use TasksRequestCPU instead with task name 'builder'.
+- `limit_memory` (String) When using 'pod' strategy, the maximum amount of memory required by the pod builder.Deprecated: use TasksRequestCPU instead with task name 'builder'.
+- `maven_profiles` (List of String) A list of references pointing to configmaps/secrets that contains a maven profile.This configmap/secret is a resource of the IntegrationKit created, therefore it needs to be present in the namespace where the operator is going to create the IntegrationKit.The content of the maven profile is expected to be a text containing a valid maven profile starting with '' and ending with '' that will be integrated as an inline profile in the POM.Syntax: [configmap|secret]:name[/key], where name represents the resource name, key optionally represents the resource key to be filtered (default key value = profile.xml).
- `node_selector` (Map of String) Defines a set of nodes the builder pod is eligible to be scheduled on, based on labels on the node.
- `order_strategy` (String) The build order strategy to use, either 'dependencies', 'fifo' or 'sequential' (default is the platform default)
- `platforms` (List of String) The list of manifest platforms to use to build a container image (default 'linux/amd64').
- `properties` (List of String) A list of properties to be provided to the build task
-- `request_cpu` (String) When using 'pod' strategy, the minimum amount of CPU required by the pod builder. Deprecated: use TasksRequestCPU instead with task name 'builder'.
-- `request_memory` (String) When using 'pod' strategy, the minimum amount of memory required by the pod builder. Deprecated: use TasksRequestCPU instead with task name 'builder'.
+- `request_cpu` (String) When using 'pod' strategy, the minimum amount of CPU required by the pod builder.Deprecated: use TasksRequestCPU instead with task name 'builder'.
+- `request_memory` (String) When using 'pod' strategy, the minimum amount of memory required by the pod builder.Deprecated: use TasksRequestCPU instead with task name 'builder'.
- `strategy` (String) The strategy to use, either 'pod' or 'routine' (default 'routine')
- `tasks` (List of String) A list of tasks to be executed (available only when using 'pod' strategy) with format ';;'.
-- `tasks_filter` (String) A list of tasks sorted by the order of execution in a csv format, ie, ',,...'. Mind that you must include also the operator tasks ('builder', 'quarkus-native', 'package', 'jib', 's2i') if you need to execute them. Useful only with 'pod' strategy.
+- `tasks_filter` (String) A list of tasks sorted by the order of execution in a csv format, ie, ',,...'.Mind that you must include also the operator tasks ('builder', 'quarkus-native', 'package', 'jib', 's2i')if you need to execute them. Useful only with 'pod' strategy.
- `tasks_limit_cpu` (List of String) A list of limit cpu configuration for the specific task with format ':'.
- `tasks_limit_memory` (List of String) A list of limit memory configuration for the specific task with format ':'.
- `tasks_request_cpu` (List of String) A list of request cpu configuration for the specific task with format ':'.
- `tasks_request_memory` (List of String) A list of request memory configuration for the specific task with format ':'.
-- `verbose` (Boolean) Enable verbose logging on build components that support it (e.g. Kaniko build pod). Deprecated no longer in use
+- `verbose` (Boolean) Enable verbose logging on build components that support it (e.g. Kaniko build pod).Deprecated no longer in use
@@ -343,10 +343,10 @@ Optional:
Optional:
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Deprecated: no longer in use.
- `properties` (List of String) A list of properties to be provided to the Integration runtime
-- `runtime_version` (String) The camel-k-runtime version to use for the integration. It overrides the default version set in the Integration Platform. You can use a fixed version (for example '3.2.3') or a semantic version (for example '3.x') which will try to resolve to the best matching Catalog existing on the cluster.
+- `runtime_version` (String) The camel-k-runtime version to use for the integration. It overrides the default version set in the Integration Platform.You can use a fixed version (for example '3.2.3') or a semantic version (for example '3.x') which will try to resolveto the best matching Catalog existing on the cluster.
@@ -358,10 +358,10 @@ Optional:
- `auto` (Boolean) To automatically enable the trait
- `capabilities_add` (List of String) Security Context Capabilities Add configuration (default none).
- `capabilities_drop` (List of String) Security Context Capabilities Drop configuration (default ALL).
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Deprecated: no longer in use.
- `expose` (Boolean) Can be used to enable/disable exposure via kubernetes Service.
-- `image` (String) The main container image to use for the Integration. When using this parameter the operator will create a synthetic IntegrationKit which won't be able to execute traits requiring CamelCatalog. If the container image you're using is coming from an IntegrationKit, use instead Integration '.spec.integrationKit' parameter. If you're moving the Integration across environments, you will also need to create an 'external' IntegrationKit.
+- `image` (String) The main container image to use for the Integration. When using this parameter the operator will create a synthetic IntegrationKit whichwon't be able to execute traits requiring CamelCatalog. If the container image you're using is coming from an IntegrationKit, use insteadIntegration '.spec.integrationKit' parameter. If you're moving the Integration across environments, you will also need to create an 'external' IntegrationKit.
- `image_pull_policy` (String) The pull policy: Always|Never|IfNotPresent
- `limit_cpu` (String) The maximum amount of CPU to be provided (default 500 millicores).
- `limit_memory` (String) The maximum amount of memory to be provided (default 512 Mi).
@@ -382,16 +382,16 @@ Optional:
Optional:
-- `active_deadline_seconds` (Number) Specifies the duration in seconds, relative to the start time, that the job may be continuously active before it is considered to be failed. It defaults to 60s.
-- `auto` (Boolean) Automatically deploy the integration as CronJob when all routes are either starting from a periodic consumer (only 'cron', 'timer' and 'quartz' are supported) or a passive consumer (e.g. 'direct' is a passive consumer). It's required that all periodic consumers have the same period, and it can be expressed as cron schedule (e.g. '1m' can be expressed as '0/1 * * * *', while '35m' or '50s' cannot).
-- `backoff_limit` (Number) Specifies the number of retries before marking the job failed. It defaults to 2.
-- `components` (String) A comma separated list of the Camel components that need to be customized in order for them to work when the schedule is triggered externally by Kubernetes. A specific customizer is activated for each specified component. E.g. for the 'timer' component, the 'cron-timer' customizer is activated (it's present in the 'org.apache.camel.k:camel-k-cron' library). Supported components are currently: 'cron', 'timer' and 'quartz'.
-- `concurrency_policy` (String) Specifies how to treat concurrent executions of a Job. Valid values are: - 'Allow': allows CronJobs to run concurrently; - 'Forbid' (default): forbids concurrent runs, skipping next run if previous run hasn't finished yet; - 'Replace': cancels currently running job and replaces it with a new one
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `active_deadline_seconds` (Number) Specifies the duration in seconds, relative to the start time, that the jobmay be continuously active before it is considered to be failed.It defaults to 60s.
+- `auto` (Boolean) Automatically deploy the integration as CronJob when all routes areeither starting from a periodic consumer (only 'cron', 'timer' and 'quartz' are supported) or a passive consumer (e.g. 'direct' is a passive consumer).It's required that all periodic consumers have the same period, and it can be expressed as cron schedule (e.g. '1m' can be expressed as '0/1 * * * *',while '35m' or '50s' cannot).
+- `backoff_limit` (Number) Specifies the number of retries before marking the job failed.It defaults to 2.
+- `components` (String) A comma separated list of the Camel components that need to be customized in order for them to work when the schedule is triggered externally by Kubernetes.A specific customizer is activated for each specified component. E.g. for the 'timer' component, the 'cron-timer' customizer isactivated (it's present in the 'org.apache.camel.k:camel-k-cron' library).Supported components are currently: 'cron', 'timer' and 'quartz'.
+- `concurrency_policy` (String) Specifies how to treat concurrent executions of a Job.Valid values are:- 'Allow': allows CronJobs to run concurrently;- 'Forbid' (default): forbids concurrent runs, skipping next run if previous run hasn't finished yet;- 'Replace': cancels currently running job and replaces it with a new one
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
-- `fallback` (Boolean) Use the default Camel implementation of the 'cron' endpoint ('quartz') instead of trying to materialize the integration as Kubernetes CronJob.
-- `schedule` (String) The CronJob schedule for the whole integration. If multiple routes are declared, they must have the same schedule for this mechanism to work correctly.
-- `starting_deadline_seconds` (Number) Optional deadline in seconds for starting the job if it misses scheduled time for any reason. Missed jobs executions will be counted as failed ones.
+- `fallback` (Boolean) Use the default Camel implementation of the 'cron' endpoint ('quartz') instead of trying to materialize the integrationas Kubernetes CronJob.
+- `schedule` (String) The CronJob schedule for the whole integration. If multiple routes are declared, they must have the same schedule for thismechanism to work correctly.
+- `starting_deadline_seconds` (Number) Optional deadline in seconds for starting the job if it misses scheduledtime for any reason. Missed jobs executions will be counted as failed ones.
- `time_zone` (String) The timezone that the CronJob will run on
@@ -400,7 +400,7 @@ Optional:
Optional:
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Deprecated: no longer in use.
@@ -409,10 +409,10 @@ Optional:
Optional:
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Deprecated: no longer in use.
- `kind` (String) Allows to explicitly select the desired deployment kind between 'deployment', 'cron-job' or 'knative-service' when creating the resources for running the integration.
-- `use_ssa` (Boolean) Use server-side apply to update the owned resources (default 'true'). Note that it automatically falls back to client-side patching, if SSA is not available, e.g., on old Kubernetes clusters.
+- `use_ssa` (Boolean) Use server-side apply to update the owned resources (default 'true').Note that it automatically falls back to client-side patching, if SSA is not available, e.g., on old Kubernetes clusters.
@@ -420,11 +420,11 @@ Optional:
Optional:
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Deprecated: no longer in use.
-- `progress_deadline_seconds` (Number) The maximum time in seconds for the deployment to make progress before it is considered to be failed. It defaults to '60s'.
-- `rolling_update_max_surge` (String) The maximum number of pods that can be scheduled above the desired number of pods. Value can be an absolute number (ex: 5) or a percentage of desired pods (ex: 10%). This can not be 0 if MaxUnavailable is 0. Absolute number is calculated from percentage by rounding up. Defaults to '25%'.
-- `rolling_update_max_unavailable` (String) The maximum number of pods that can be unavailable during the update. Value can be an absolute number (ex: 5) or a percentage of desired pods (ex: 10%). Absolute number is calculated from percentage by rounding down. This can not be 0 if MaxSurge is 0. Defaults to '25%'.
+- `progress_deadline_seconds` (Number) The maximum time in seconds for the deployment to make progress before itis considered to be failed. It defaults to '60s'.
+- `rolling_update_max_surge` (String) The maximum number of pods that can be scheduled above the desired number ofpods.Value can be an absolute number (ex: 5) or a percentage of desired pods (ex: 10%).This can not be 0 if MaxUnavailable is 0.Absolute number is calculated from percentage by rounding up.Defaults to '25%'.
+- `rolling_update_max_unavailable` (String) The maximum number of pods that can be unavailable during the update.Value can be an absolute number (ex: 5) or a percentage of desired pods (ex: 10%).Absolute number is calculated from percentage by rounding down.This can not be 0 if MaxSurge is 0.Defaults to '25%'.
- `strategy` (String) The deployment strategy to use to replace existing pods with new ones.
@@ -433,11 +433,11 @@ Optional:
Optional:
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `container_meta` (Boolean) Enables injection of 'NAMESPACE' and 'POD_NAME' environment variables (default 'true')
- `enabled` (Boolean) Deprecated: no longer in use.
- `http_proxy` (Boolean) Propagates the 'HTTP_PROXY', 'HTTPS_PROXY' and 'NO_PROXY' environment variables (default 'true')
-- `vars` (List of String) A list of environment variables to be added to the integration container. The syntax is KEY=VALUE, e.g., 'MY_VAR='my value''. These take precedence over the previously defined environment variables.
+- `vars` (List of String) A list of environment variables to be added to the integration container.The syntax is KEY=VALUE, e.g., 'MY_VAR='my value''.These take precedence over the previously defined environment variables.
@@ -445,7 +445,7 @@ Optional:
Optional:
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Deprecated: no longer in use.
- `ref` (String) The error handler ref name provided or found in application properties
@@ -455,8 +455,8 @@ Optional:
Optional:
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
-- `discovery_cache` (String) Discovery client cache to be used, either 'disabled', 'disk' or 'memory' (default 'memory'). Deprecated: to be removed from trait configuration.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
+- `discovery_cache` (String) Discovery client cache to be used, either 'disabled', 'disk' or 'memory' (default 'memory').Deprecated: to be removed from trait configuration.
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
@@ -465,7 +465,7 @@ Optional:
Optional:
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
- `liveness_failure_threshold` (Number) Minimum consecutive failures for the liveness probe to be considered failed after having succeeded.
- `liveness_initial_delay` (Number) Number of seconds after the container has started before the liveness probe is initiated.
@@ -498,13 +498,13 @@ Optional:
Optional:
-- `annotations` (Map of String) The annotations added to the ingress. This can be used to set controller specific annotations, e.g., when using the NGINX Ingress controller: See https://github.com/kubernetes/ingress-nginx/blob/main/docs/user-guide/nginx-configuration/annotations.md
+- `annotations` (Map of String) The annotations added to the ingress.This can be used to set controller specific annotations, e.g., when using the NGINX Ingress controller:See https://github.com/kubernetes/ingress-nginx/blob/main/docs/user-guide/nginx-configuration/annotations.md
- `auto` (Boolean) To automatically add an ingress whenever the integration uses an HTTP endpoint consumer.
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
- `host` (String) To configure the host exposed by the ingress.
- `path` (String) To configure the path exposed by the ingress (default '/').
-- `path_type` (String) To configure the path type exposed by the ingress. One of 'Exact', 'Prefix', 'ImplementationSpecific' (default to 'Prefix').
+- `path_type` (String) To configure the path type exposed by the ingress.One of 'Exact', 'Prefix', 'ImplementationSpecific' (default to 'Prefix').
- `tls_hosts` (List of String) To configure tls hosts
- `tls_secret_name` (String) To configure tls secret name
@@ -515,7 +515,7 @@ Optional:
Optional:
- `allow` (String) Configures a (comma-separated) list of CIDR subnets that should not be intercepted by the Istio proxy ('10.0.0.0/8,172.16.0.0/12,192.168.0.0/16' by default).
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
- `inject` (Boolean) Forces the value for labels 'sidecar.istio.io/inject'. By default the label is set to 'true' on deployment and not set on Knative Service.
@@ -525,14 +525,14 @@ Optional:
Optional:
-- `ca_cert` (String) The PEM encoded CA certification file path, used to verify client certificates, applicable when 'protocol' is 'https' and 'use-ssl-client-authentication' is 'true' (default '/var/run/secrets/kubernetes.io/serviceaccount/service-ca.crt' for OpenShift).
-- `client_principal` (List of String) The principal(s) which must be given in a client certificate to allow access to the Jolokia endpoint, applicable when 'protocol' is 'https' and 'use-ssl-client-authentication' is 'true' (default 'clientPrincipal=cn=system:master-proxy', 'cn=hawtio-online.hawtio.svc' and 'cn=fuse-console.fuse.svc' for OpenShift).
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `ca_cert` (String) The PEM encoded CA certification file path, used to verify client certificates,applicable when 'protocol' is 'https' and 'use-ssl-client-authentication' is 'true'(default '/var/run/secrets/kubernetes.io/serviceaccount/service-ca.crt' for OpenShift).
+- `client_principal` (List of String) The principal(s) which must be given in a client certificate to allow access to the Jolokia endpoint,applicable when 'protocol' is 'https' and 'use-ssl-client-authentication' is 'true'(default 'clientPrincipal=cn=system:master-proxy', 'cn=hawtio-online.hawtio.svc' and 'cn=fuse-console.fuse.svc' for OpenShift).
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `discovery_enabled` (Boolean) Listen for multicast requests (default 'false')
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
-- `extended_client_check` (Boolean) Mandate the client certificate contains a client flag in the extended key usage section, applicable when 'protocol' is 'https' and 'use-ssl-client-authentication' is 'true' (default 'true' for OpenShift).
-- `host` (String) The Host address to which the Jolokia agent should bind to. If ''*'' or ''0.0.0.0'' is given, the servers binds to every network interface (default ''*'').
-- `options` (List of String) A list of additional Jolokia options as defined in https://jolokia.org/reference/html/agents.html#agent-jvm-config[JVM agent configuration options]
+- `extended_client_check` (Boolean) Mandate the client certificate contains a client flag in the extended key usage section,applicable when 'protocol' is 'https' and 'use-ssl-client-authentication' is 'true'(default 'true' for OpenShift).
+- `host` (String) The Host address to which the Jolokia agent should bind to. If ''*'' or ''0.0.0.0'' is given,the servers binds to every network interface (default ''*'').
+- `options` (List of String) A list of additional Jolokia options as definedin https://jolokia.org/reference/html/agents.html#agent-jvm-config[JVM agent configuration options]
- `password` (String) The password used for authentication, applicable when the 'user' option is set.
- `port` (Number) The Jolokia endpoint port (default '8778').
- `protocol` (String) The protocol to use, either 'http' or 'https' (default 'https' for OpenShift)
@@ -546,14 +546,14 @@ Optional:
Optional:
- `classpath` (String) Additional JVM classpath (use 'Linux' classpath separator)
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `debug` (Boolean) Activates remote debugging, so that a debugger can be attached to the JVM, e.g., using port-forwarding
- `debug_address` (String) Transport address at which to listen for the newly launched JVM (default '*:5005')
- `debug_suspend` (Boolean) Suspends the target JVM immediately before the main class is loaded
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
- `jar` (String) The Jar dependency which will run the application. Leave it empty for managed Integrations.
- `options` (List of String) A list of JVM options
-- `print_command` (Boolean) Prints the command used the start the JVM in the container logs (default 'true') Deprecated: no longer in use.
+- `print_command` (Boolean) Prints the command used the start the JVM in the container logs (default 'true')Deprecated: no longer in use.
@@ -562,7 +562,7 @@ Optional:
Optional:
- `auto` (Boolean) Automatically inject all referenced Kamelets and their default configuration (enabled by default)
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
- `list` (String) Comma separated list of Kamelet names to load into the current integration
- `mount_point` (String) The directory where the application mounts and reads Kamelet spec (default '/etc/camel/kamelets')
@@ -582,20 +582,20 @@ Required:
Optional:
- `auto` (Boolean) Enable automatic discovery of all trait properties.
-- `channel_sinks` (List of String) List of channels used as destination of integration routes. Can contain simple channel names or full Camel URIs.
-- `channel_sources` (List of String) List of channels used as source of integration routes. Can contain simple channel names or full Camel URIs.
+- `channel_sinks` (List of String) List of channels used as destination of integration routes.Can contain simple channel names or full Camel URIs.
+- `channel_sources` (List of String) List of channels used as source of integration routes.Can contain simple channel names or full Camel URIs.
- `config` (String) Can be used to inject a Knative complete configuration in JSON format.
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
-- `endpoint_sinks` (List of String) List of endpoints used as destination of integration routes. Can contain simple endpoint names or full Camel URIs.
+- `endpoint_sinks` (List of String) List of endpoints used as destination of integration routes.Can contain simple endpoint names or full Camel URIs.
- `endpoint_sources` (List of String) List of channels used as source of integration routes.
-- `event_sinks` (List of String) List of event types that the integration will produce. Can contain simple event types or full Camel URIs (to use a specific broker).
-- `event_sources` (List of String) List of event types that the integration will be subscribed to. Can contain simple event types or full Camel URIs (to use a specific broker different from 'default').
-- `filter_event_type` (Boolean) Enables the default filtering for the Knative trigger using the event type If this is true, the created Knative trigger uses the event type as a filter on the event stream when no other filter criteria is given. (default: true)
-- `filter_source_channels` (Boolean) Enables filtering on events based on the header 'ce-knativehistory'. Since this header has been removed in newer versions of Knative, filtering is disabled by default.
-- `filters` (List of String) Sets filter attributes on the event stream (such as event type, source, subject and so on). A list of key-value pairs that represent filter attributes and its values. The syntax is KEY=VALUE, e.g., 'source='my.source''. Filter attributes get set on the Knative trigger that is being created as part of this integration.
-- `namespace_label` (Boolean) Enables the camel-k-operator to set the 'bindings.knative.dev/include=true' label to the namespace As Knative requires this label to perform injection of K_SINK URL into the service. If this is false, the integration pod may start and fail, read the SinkBinding Knative documentation. (default: true)
-- `sink_binding` (Boolean) Allows binding the integration to a sink via a Knative SinkBinding resource. This can be used when the integration targets a single sink. It's enabled by default when the integration targets a single sink (except when the integration is owned by a Knative source).
+- `event_sinks` (List of String) List of event types that the integration will produce.Can contain simple event types or full Camel URIs (to use a specific broker).
+- `event_sources` (List of String) List of event types that the integration will be subscribed to.Can contain simple event types or full Camel URIs (to use a specific broker different from 'default').
+- `filter_event_type` (Boolean) Enables the default filtering for the Knative trigger using the event typeIf this is true, the created Knative trigger uses the event type as a filter on the event stream when no other filter criteria is given. (default: true)
+- `filter_source_channels` (Boolean) Enables filtering on events based on the header 'ce-knativehistory'. Since this header has been removed in newer versions ofKnative, filtering is disabled by default.
+- `filters` (List of String) Sets filter attributes on the event stream (such as event type, source, subject and so on).A list of key-value pairs that represent filter attributes and its values.The syntax is KEY=VALUE, e.g., 'source='my.source''.Filter attributes get set on the Knative trigger that is being created as part of this integration.
+- `namespace_label` (Boolean) Enables the camel-k-operator to set the 'bindings.knative.dev/include=true' label to the namespaceAs Knative requires this label to perform injection of K_SINK URL into the service.If this is false, the integration pod may start and fail, read the SinkBinding Knative documentation. (default: true)
+- `sink_binding` (Boolean) Allows binding the integration to a sink via a Knative SinkBinding resource.This can be used when the integration targets a single sink.It's enabled by default when the integration targets a single sink(except when the integration is owned by a Knative source).
@@ -603,18 +603,18 @@ Optional:
Optional:
-- `annotations` (Map of String) The annotations added to route. This can be used to set knative service specific annotations CLI usage example: -t 'knative-service.annotations.'haproxy.router.openshift.io/balance'=true'
-- `auto` (Boolean) Automatically deploy the integration as Knative service when all conditions hold: * Integration is using the Knative profile * All routes are either starting from an HTTP based consumer or a passive consumer (e.g. 'direct' is a passive consumer)
-- `autoscaling_metric` (String) Configures the Knative autoscaling metric property (e.g. to set 'concurrency' based or 'cpu' based autoscaling). Refer to the Knative documentation for more information.
-- `autoscaling_target` (Number) Sets the allowed concurrency level or CPU percentage (depending on the autoscaling metric) for each Pod. Refer to the Knative documentation for more information.
-- `class` (String) Configures the Knative autoscaling class property (e.g. to set 'hpa.autoscaling.knative.dev' or 'kpa.autoscaling.knative.dev' autoscaling). Refer to the Knative documentation for more information.
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `annotations` (Map of String) The annotations added to route.This can be used to set knative service specific annotationsCLI usage example: -t 'knative-service.annotations.'haproxy.router.openshift.io/balance'=true'
+- `auto` (Boolean) Automatically deploy the integration as Knative service when all conditions hold:* Integration is using the Knative profile* All routes are either starting from an HTTP based consumer or a passive consumer (e.g. 'direct' is a passive consumer)
+- `autoscaling_metric` (String) Configures the Knative autoscaling metric property (e.g. to set 'concurrency' based or 'cpu' based autoscaling).Refer to the Knative documentation for more information.
+- `autoscaling_target` (Number) Sets the allowed concurrency level or CPU percentage (depending on the autoscaling metric) for each Pod.Refer to the Knative documentation for more information.
+- `class` (String) Configures the Knative autoscaling class property (e.g. to set 'hpa.autoscaling.knative.dev' or 'kpa.autoscaling.knative.dev' autoscaling).Refer to the Knative documentation for more information.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
-- `max_scale` (Number) An upper bound for the number of Pods that can be running in parallel for the integration. Knative has its own cap value that depends on the installation. Refer to the Knative documentation for more information.
-- `min_scale` (Number) The minimum number of Pods that should be running at any time for the integration. It's **zero** by default, meaning that the integration is scaled down to zero when not used for a configured amount of time. Refer to the Knative documentation for more information.
-- `rollout_duration` (String) Enables to gradually shift traffic to the latest Revision and sets the rollout duration. It's disabled by default and must be expressed as a Golang 'time.Duration' string representation, rounded to a second precision.
-- `timeout_seconds` (Number) The maximum duration in seconds that the request instance is allowed to respond to a request. This field propagates to the integration pod's terminationGracePeriodSeconds Refer to the Knative documentation for more information.
-- `visibility` (String) Setting 'cluster-local', Knative service becomes a private service. Specifically, this option applies the 'networking.knative.dev/visibility' label to Knative service. Refer to the Knative documentation for more information.
+- `max_scale` (Number) An upper bound for the number of Pods that can be running in parallel for the integration.Knative has its own cap value that depends on the installation.Refer to the Knative documentation for more information.
+- `min_scale` (Number) The minimum number of Pods that should be running at any time for the integration. It's **zero** by default, meaning thatthe integration is scaled down to zero when not used for a configured amount of time.Refer to the Knative documentation for more information.
+- `rollout_duration` (String) Enables to gradually shift traffic to the latest Revision and sets the rollout duration.It's disabled by default and must be expressed as a Golang 'time.Duration' string representation,rounded to a second precision.
+- `timeout_seconds` (Number) The maximum duration in seconds that the request instance is allowed to respond to a request.This field propagates to the integration pod's terminationGracePeriodSecondsRefer to the Knative documentation for more information.
+- `visibility` (String) Setting 'cluster-local', Knative service becomes a private service.Specifically, this option applies the 'networking.knative.dev/visibility' label to Knative service.Refer to the Knative documentation for more information.
@@ -623,7 +623,7 @@ Optional:
Optional:
- `color` (Boolean) Colorize the log output
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
- `format` (String) Logs message format
- `json` (Boolean) Output the logs in JSON
@@ -644,13 +644,13 @@ Required:
Optional:
-- `configs` (List of String) A list of configuration pointing to configmap/secret. The configuration are expected to be UTF-8 resources as they are processed by runtime Camel Context and tried to be parsed as property files. They are also made available on the classpath in order to ease their usage directly from the Route. Syntax: [configmap|secret]:name[/key], where name represents the resource name and key optionally represents the resource key to be filtered
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configs` (List of String) A list of configuration pointing to configmap/secret.The configuration are expected to be UTF-8 resources as they are processed by runtime Camel Context and tried to be parsed as property files.They are also made available on the classpath in order to ease their usage directly from the Route.Syntax: [configmap|secret]:name[/key], where name represents the resource name and key optionally represents the resource key to be filtered
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `empty_dirs` (List of String) A list of EmptyDir volumes to be mounted. Syntax: [name:/container/path]
- `enabled` (Boolean) Deprecated: no longer in use.
-- `hot_reload` (Boolean) Enable 'hot reload' when a secret/configmap mounted is edited (default 'false'). The configmap/secret must be marked with 'camel.apache.org/integration' label to be taken in account. The resource will be watched for any kind change, also for changes in metadata.
-- `resources` (List of String) A list of resources (text or binary content) pointing to configmap/secret. The resources are expected to be any resource type (text or binary content). The destination path can be either a default location or any path specified by the user. Syntax: [configmap|secret]:name[/key][@path], where name represents the resource name, key optionally represents the resource key to be filtered and path represents the destination path
-- `scan_kamelets_implicit_label_secrets` (Boolean) Deprecated: include your properties in an explicit property file backed by a secret. Let the operator to scan for secret labeled with 'camel.apache.org/kamelet' and 'camel.apache.org/kamelet.configuration'. These secrets are mounted to the application and treated as plain properties file with their key/value list (ie .spec.data['camel.my-property'] = my-value) (default 'true').
+- `hot_reload` (Boolean) Enable 'hot reload' when a secret/configmap mounted is edited (default 'false'). The configmap/secret must bemarked with 'camel.apache.org/integration' label to be taken in account. The resource will be watched for any kind change, also forchanges in metadata.
+- `resources` (List of String) A list of resources (text or binary content) pointing to configmap/secret.The resources are expected to be any resource type (text or binary content).The destination path can be either a default location or any path specified by the user.Syntax: [configmap|secret]:name[/key][@path], where name represents the resource name, key optionally represents the resource key to be filtered and path represents the destination path
+- `scan_kamelets_implicit_label_secrets` (Boolean) Deprecated: include your properties in an explicit property file backed by a secret.Let the operator to scan for secret labeled with 'camel.apache.org/kamelet' and 'camel.apache.org/kamelet.configuration'.These secrets are mounted to the application and treated as plain properties file with their key/value list(ie .spec.data['camel.my-property'] = my-value) (default 'true').
- `volumes` (List of String) A list of Persistent Volume Claims to be mounted. Syntax: [pvcname:/container/path]
@@ -659,8 +659,8 @@ Optional:
Optional:
-- `configmaps` (List of String) The configmaps holding the spec of the OpenAPI
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configmaps` (List of String) The configmaps holding the spec of the OpenAPI (compatible with > 3.0 spec only).
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Deprecated: no longer in use.
@@ -669,7 +669,7 @@ Optional:
Optional:
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
- `target_annotations` (List of String) The set of annotations to be transferred
- `target_labels` (List of String) The set of labels to be transferred
@@ -680,10 +680,10 @@ Optional:
Optional:
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
-- `max_unavailable` (String) The number of pods for the Integration that can be unavailable after an eviction. It can be either an absolute number or a percentage (default '1' if 'min-available' is also not set). Only one of 'max-unavailable' and 'min-available' can be specified.
-- `min_available` (String) The number of pods for the Integration that must still be available after an eviction. It can be either an absolute number or a percentage. Only one of 'min-available' and 'max-unavailable' can be specified.
+- `max_unavailable` (String) The number of pods for the Integration that can be unavailable after an eviction.It can be either an absolute number or a percentage (default '1' if 'min-available' is also not set).Only one of 'max-unavailable' and 'min-available' can be specified.
+- `min_available` (String) The number of pods for the Integration that must still be available after an eviction.It can be either an absolute number or a percentage.Only one of 'min-available' and 'max-unavailable' can be specified.
@@ -691,11 +691,11 @@ Optional:
Optional:
-- `auto` (Boolean) To automatically detect from the environment if a default platform can be created (it will be created on OpenShift or when a registry address is set). Deprecated: Platform is auto generated by the operator install procedure - maintained for backward compatibility
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
-- `create_default` (Boolean) To create a default (empty) platform when the platform is missing. Deprecated: Platform is auto generated by the operator install procedure - maintained for backward compatibility
+- `auto` (Boolean) To automatically detect from the environment if a default platform can be created (it will be created on OpenShift or when a registry address is set).Deprecated: Platform is auto generated by the operator install procedure - maintained for backward compatibility
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
+- `create_default` (Boolean) To create a default (empty) platform when the platform is missing.Deprecated: Platform is auto generated by the operator install procedure - maintained for backward compatibility
- `enabled` (Boolean) Deprecated: no longer in use.
-- `global` (Boolean) Indicates if the platform should be created globally in the case of global operator (default true). Deprecated: Platform is auto generated by the operator install procedure - maintained for backward compatibility
+- `global` (Boolean) Indicates if the platform should be created globally in the case of global operator (default true).Deprecated: Platform is auto generated by the operator install procedure - maintained for backward compatibility
@@ -703,7 +703,7 @@ Optional:
Optional:
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
@@ -712,7 +712,7 @@ Optional:
Optional:
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
- `pod_monitor` (Boolean) Whether a 'PodMonitor' resource is created (default 'true').
- `pod_monitor_labels` (List of String) The 'PodMonitor' resource labels, applicable when 'pod-monitor' is 'true'.
@@ -724,7 +724,7 @@ Optional:
Optional:
- `auto` (Boolean) Automatically configures the platform registry secret on the pod if it is of type 'kubernetes.io/dockerconfigjson'.
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
- `image_puller_delegation` (Boolean) When using a global operator with a shared platform, this enables delegation of the 'system:image-puller' cluster role on the operator namespace to the integration service account.
- `secret_name` (String) The pull secret name to set on the Pod. If left empty this is automatically taken from the 'IntegrationPlatform' registry configuration.
@@ -735,12 +735,12 @@ Optional:
Optional:
-- `build_mode` (List of String) The Quarkus mode to run: either 'jvm' or 'native' (default 'jvm'). In case both 'jvm' and 'native' are specified, two 'IntegrationKit' resources are created, with the 'native' kit having precedence over the 'jvm' one once ready.
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `build_mode` (List of String) The Quarkus mode to run: either 'jvm' or 'native' (default 'jvm').In case both 'jvm' and 'native' are specified, two 'IntegrationKit' resources are created,with the 'native' kit having precedence over the 'jvm' one once ready.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Deprecated: no longer in use.
- `native_base_image` (String) The base image to use when running a native build (default 'quay.io/quarkus/quarkus-micro-image:2.0')
- `native_builder_image` (String) The image containing the tooling required for a native build (by default it will use the one provided in the runtime catalog)
-- `package_types` (List of String) The Quarkus package types, 'fast-jar' or 'native' (default 'fast-jar'). In case both 'fast-jar' and 'native' are specified, two 'IntegrationKit' resources are created, with the native kit having precedence over the 'fast-jar' one once ready. The order influences the resolution of the current kit for the integration. The kit corresponding to the first package type will be assigned to the integration in case no existing kit that matches the integration exists. Deprecated: use 'build-mode' instead.
+- `package_types` (List of String) The Quarkus package types, 'fast-jar' or 'native' (default 'fast-jar').In case both 'fast-jar' and 'native' are specified, two 'IntegrationKit' resources are created,with the native kit having precedence over the 'fast-jar' one once ready.The order influences the resolution of the current kit for the integration.The kit corresponding to the first package type will be assigned to theintegration in case no existing kit that matches the integration exists.Deprecated: use 'build-mode' instead.
@@ -748,7 +748,7 @@ Optional:
Optional:
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
@@ -757,20 +757,20 @@ Optional:
Optional:
-- `annotations` (Map of String) The annotations added to route. This can be used to set route specific annotations For annotations options see https://docs.openshift.com/container-platform/3.11/architecture/networking/routes.html#route-specific-annotations CLI usage example: -t 'route.annotations.'haproxy.router.openshift.io/balance'=true'
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `annotations` (Map of String) The annotations added to route.This can be used to set route specific annotationsFor annotations options see https://docs.openshift.com/container-platform/3.11/architecture/networking/routes.html#route-specific-annotationsCLI usage example: -t 'route.annotations.'haproxy.router.openshift.io/balance'=true'
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
- `host` (String) To configure the host exposed by the route.
-- `tls_ca_certificate` (String) The TLS CA certificate contents. Refer to the OpenShift route documentation for additional information.
-- `tls_ca_certificate_secret` (String) The secret name and key reference to the TLS CA certificate. The format is 'secret-name[/key-name]', the value represents the secret name, if there is only one key in the secret it will be read, otherwise you can set a key name separated with a '/'. Refer to the OpenShift route documentation for additional information.
-- `tls_certificate` (String) The TLS certificate contents. Refer to the OpenShift route documentation for additional information.
-- `tls_certificate_secret` (String) The secret name and key reference to the TLS certificate. The format is 'secret-name[/key-name]', the value represents the secret name, if there is only one key in the secret it will be read, otherwise you can set a key name separated with a '/'. Refer to the OpenShift route documentation for additional information.
-- `tls_destination_ca_certificate` (String) The destination CA certificate provides the contents of the ca certificate of the final destination. When using reencrypt termination this file should be provided in order to have routers use it for health checks on the secure connection. If this field is not specified, the router may provide its own destination CA and perform hostname validation using the short service name (service.namespace.svc), which allows infrastructure generated certificates to automatically verify. Refer to the OpenShift route documentation for additional information.
-- `tls_destination_ca_certificate_secret` (String) The secret name and key reference to the destination CA certificate. The format is 'secret-name[/key-name]', the value represents the secret name, if there is only one key in the secret it will be read, otherwise you can set a key name separated with a '/'. Refer to the OpenShift route documentation for additional information.
-- `tls_insecure_edge_termination_policy` (String) To configure how to deal with insecure traffic, e.g. 'Allow', 'Disable' or 'Redirect' traffic. Refer to the OpenShift route documentation for additional information.
-- `tls_key` (String) The TLS certificate key contents. Refer to the OpenShift route documentation for additional information.
-- `tls_key_secret` (String) The secret name and key reference to the TLS certificate key. The format is 'secret-name[/key-name]', the value represents the secret name, if there is only one key in the secret it will be read, otherwise you can set a key name separated with a '/'. Refer to the OpenShift route documentation for additional information.
-- `tls_termination` (String) The TLS termination type, like 'edge', 'passthrough' or 'reencrypt'. Refer to the OpenShift route documentation for additional information.
+- `tls_ca_certificate` (String) The TLS CA certificate contents.Refer to the OpenShift route documentation for additional information.
+- `tls_ca_certificate_secret` (String) The secret name and key reference to the TLS CA certificate. The format is 'secret-name[/key-name]', the value represents the secret name, if there is only one key in the secret it will be read, otherwise you can set a key name separated with a '/'.Refer to the OpenShift route documentation for additional information.
+- `tls_certificate` (String) The TLS certificate contents.Refer to the OpenShift route documentation for additional information.
+- `tls_certificate_secret` (String) The secret name and key reference to the TLS certificate. The format is 'secret-name[/key-name]', the value represents the secret name, if there is only one key in the secret it will be read, otherwise you can set a key name separated with a '/'.Refer to the OpenShift route documentation for additional information.
+- `tls_destination_ca_certificate` (String) The destination CA certificate provides the contents of the ca certificate of the final destination. When using reencrypttermination this file should be provided in order to have routers use it for health checks on the secure connection.If this field is not specified, the router may provide its own destination CA and perform hostname validation usingthe short service name (service.namespace.svc), which allows infrastructure generated certificates to automaticallyverify.Refer to the OpenShift route documentation for additional information.
+- `tls_destination_ca_certificate_secret` (String) The secret name and key reference to the destination CA certificate. The format is 'secret-name[/key-name]', the value represents the secret name, if there is only one key in the secret it will be read, otherwise you can set a key name separated with a '/'.Refer to the OpenShift route documentation for additional information.
+- `tls_insecure_edge_termination_policy` (String) To configure how to deal with insecure traffic, e.g. 'Allow', 'Disable' or 'Redirect' traffic.Refer to the OpenShift route documentation for additional information.
+- `tls_key` (String) The TLS certificate key contents.Refer to the OpenShift route documentation for additional information.
+- `tls_key_secret` (String) The secret name and key reference to the TLS certificate key. The format is 'secret-name[/key-name]', the value represents the secret name, if there is only one key in the secret it will be read, otherwise you can set a key name separated with a '/'.Refer to the OpenShift route documentation for additional information.
+- `tls_termination` (String) The TLS termination type, like 'edge', 'passthrough' or 'reencrypt'.Refer to the OpenShift route documentation for additional information.
@@ -778,7 +778,7 @@ Optional:
Optional:
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Deprecated: no longer in use.
- `run_as_non_root` (Boolean) Security Context RunAsNonRoot configuration (default false).
- `run_as_user` (Number) Security Context RunAsUser configuration (default none): this value is automatically retrieved in Openshift clusters when not explicitly set.
@@ -791,9 +791,9 @@ Optional:
Optional:
- `auto` (Boolean) To automatically detect from the code if a Service needs to be created.
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
-- `node_port` (Boolean) Enable Service to be exposed as NodePort (default 'false'). Deprecated: Use service type instead.
+- `node_port` (Boolean) Enable Service to be exposed as NodePort (default 'false').Deprecated: Use service type instead.
- `type` (String) The type of service to be used, either 'ClusterIP', 'NodePort' or 'LoadBalancer'.
@@ -802,7 +802,7 @@ Optional:
Optional:
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
- `services` (List of String) List of Services in the form [[apigroup/]version:]kind:[namespace/]name
@@ -828,7 +828,7 @@ Required:
Optional:
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
- `taints` (List of String) The list of taints to tolerate, in the form 'Key[=Value]:Effect[:Seconds]'
diff --git a/docs/data-sources/camel_apache_org_integration_v1_manifest.md b/docs/data-sources/camel_apache_org_integration_v1_manifest.md
index 6b0ae0c86..2a8d59acd 100644
--- a/docs/data-sources/camel_apache_org_integration_v1_manifest.md
+++ b/docs/data-sources/camel_apache_org_integration_v1_manifest.md
@@ -55,7 +55,7 @@ Optional:
Optional:
-- `configuration` (Attributes List) Deprecated: Use camel trait (camel.properties) to manage properties Use mount trait (mount.configs) to manage configs Use mount trait (mount.resources) to manage resources Use mount trait (mount.volumes) to manage volumes (see [below for nested schema](#nestedatt--spec--configuration))
+- `configuration` (Attributes List) Deprecated:Use camel trait (camel.properties) to manage propertiesUse mount trait (mount.configs) to manage configsUse mount trait (mount.resources) to manage resourcesUse mount trait (mount.volumes) to manage volumes (see [below for nested schema](#nestedatt--spec--configuration))
- `dependencies` (List of String) the list of Camel or Maven dependencies required by the Integration
- `flows` (List of Map of String) a source in YAML DSL language which contain the routes to run
- `integration_kit` (Attributes) the reference of the 'IntegrationKit' which is used for this Integration (see [below for nested schema](#nestedatt--spec--integration_kit))
@@ -82,12 +82,12 @@ Required:
Optional:
- `api_version` (String) API version of the referent.
-- `field_path` (String) If referring to a piece of an object instead of an entire object, this string should contain a valid JSON/Go field access statement, such as desiredState.manifest.containers[2]. For example, if the object reference is to a container within a pod, this would take on a value like: 'spec.containers{name}' (where 'name' refers to the name of the container that triggered the event) or if no container name is specified 'spec.containers[2]' (container with index 2 in this pod). This syntax is chosen only to have some well-defined way of referencing a part of an object. TODO: this design is not final and this field is subject to change in the future.
-- `kind` (String) Kind of the referent. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-- `namespace` (String) Namespace of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/
-- `resource_version` (String) Specific resourceVersion to which this reference is made, if any. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
-- `uid` (String) UID of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids
+- `field_path` (String) If referring to a piece of an object instead of an entire object, this stringshould contain a valid JSON/Go field access statement, such as desiredState.manifest.containers[2].For example, if the object reference is to a container within a pod, this would take on a value like:'spec.containers{name}' (where 'name' refers to the name of the container that triggeredthe event) or if no container name is specified 'spec.containers[2]' (container withindex 2 in this pod). This syntax is chosen only to have some well-defined way ofreferencing a part of an object.TODO: this design is not final and this field is subject to change in the future.
+- `kind` (String) Kind of the referent.More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+- `namespace` (String) Namespace of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/
+- `resource_version` (String) Specific resourceVersion to which this reference is made, if any.More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
+- `uid` (String) UID of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids
@@ -101,9 +101,9 @@ Optional:
- `content_ref` (String) the confimap reference holding the source content
- `content_type` (String) the content type (tipically text or binary)
- `from_kamelet` (Boolean) True if the spec is generated from a Kamelet
-- `interceptors` (List of String) Interceptors are optional identifiers the org.apache.camel.k.RoutesLoader uses to pre/post process sources
+- `interceptors` (List of String) Interceptors are optional identifiers the org.apache.camel.k.RoutesLoaderuses to pre/post process sources
- `language` (String) specify which is the language (Camel DSL) used to interpret this source code
-- `loader` (String) Loader is an optional id of the org.apache.camel.k.RoutesLoader that will interpret this source at runtime
+- `loader` (String) Loader is an optional id of the org.apache.camel.k.RoutesLoader that willinterpret this source at runtime
- `name` (String) the name of the specification
- `path` (String) the path where the file is stored
- `property_names` (List of String) List of property names defined in the source (e.g. if type is 'template')
@@ -144,33 +144,33 @@ Optional:
Required:
-- `name` (String) Name of the container specified as a DNS_LABEL. Each container in a pod must have a unique name (DNS_LABEL). Cannot be updated.
+- `name` (String) Name of the container specified as a DNS_LABEL.Each container in a pod must have a unique name (DNS_LABEL).Cannot be updated.
Optional:
-- `args` (List of String) Arguments to the entrypoint. The container image's CMD is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container's environment. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. '$$(VAR_NAME)' will produce the string literal '$(VAR_NAME)'. Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
-- `command` (List of String) Entrypoint array. Not executed within a shell. The container image's ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container's environment. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. '$$(VAR_NAME)' will produce the string literal '$(VAR_NAME)'. Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
-- `env` (Attributes List) List of environment variables to set in the container. Cannot be updated. (see [below for nested schema](#nestedatt--spec--template--spec--containers--env))
-- `env_from` (Attributes List) List of sources to populate environment variables in the container. The keys defined within a source must be a C_IDENTIFIER. All invalid keys will be reported as an event when the container is starting. When a key exists in multiple sources, the value associated with the last source will take precedence. Values defined by an Env with a duplicate key will take precedence. Cannot be updated. (see [below for nested schema](#nestedatt--spec--template--spec--containers--env_from))
-- `image` (String) Container image name. More info: https://kubernetes.io/docs/concepts/containers/images This field is optional to allow higher level config management to default or override container images in workload controllers like Deployments and StatefulSets.
-- `image_pull_policy` (String) Image pull policy. One of Always, Never, IfNotPresent. Defaults to Always if :latest tag is specified, or IfNotPresent otherwise. Cannot be updated. More info: https://kubernetes.io/docs/concepts/containers/images#updating-images
-- `lifecycle` (Attributes) Actions that the management system should take in response to container lifecycle events. Cannot be updated. (see [below for nested schema](#nestedatt--spec--template--spec--containers--lifecycle))
-- `liveness_probe` (Attributes) Periodic probe of container liveness. Container will be restarted if the probe fails. Cannot be updated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes (see [below for nested schema](#nestedatt--spec--template--spec--containers--liveness_probe))
-- `ports` (Attributes List) List of ports to expose from the container. Not specifying a port here DOES NOT prevent that port from being exposed. Any port which is listening on the default '0.0.0.0' address inside a container will be accessible from the network. Modifying this array with strategic merge patch may corrupt the data. For more information See https://github.com/kubernetes/kubernetes/issues/108255. Cannot be updated. (see [below for nested schema](#nestedatt--spec--template--spec--containers--ports))
-- `readiness_probe` (Attributes) Periodic probe of container service readiness. Container will be removed from service endpoints if the probe fails. Cannot be updated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes (see [below for nested schema](#nestedatt--spec--template--spec--containers--readiness_probe))
+- `args` (List of String) Arguments to the entrypoint.The container image's CMD is used if this is not provided.Variable references $(VAR_NAME) are expanded using the container's environment. If a variablecannot be resolved, the reference in the input string will be unchanged. Double $$ are reducedto a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. '$$(VAR_NAME)' willproduce the string literal '$(VAR_NAME)'. Escaped references will never be expanded, regardlessof whether the variable exists or not. Cannot be updated.More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
+- `command` (List of String) Entrypoint array. Not executed within a shell.The container image's ENTRYPOINT is used if this is not provided.Variable references $(VAR_NAME) are expanded using the container's environment. If a variablecannot be resolved, the reference in the input string will be unchanged. Double $$ are reducedto a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. '$$(VAR_NAME)' willproduce the string literal '$(VAR_NAME)'. Escaped references will never be expanded, regardlessof whether the variable exists or not. Cannot be updated.More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
+- `env` (Attributes List) List of environment variables to set in the container.Cannot be updated. (see [below for nested schema](#nestedatt--spec--template--spec--containers--env))
+- `env_from` (Attributes List) List of sources to populate environment variables in the container.The keys defined within a source must be a C_IDENTIFIER. All invalid keyswill be reported as an event when the container is starting. When a key exists in multiplesources, the value associated with the last source will take precedence.Values defined by an Env with a duplicate key will take precedence.Cannot be updated. (see [below for nested schema](#nestedatt--spec--template--spec--containers--env_from))
+- `image` (String) Container image name.More info: https://kubernetes.io/docs/concepts/containers/imagesThis field is optional to allow higher level config management to default or overridecontainer images in workload controllers like Deployments and StatefulSets.
+- `image_pull_policy` (String) Image pull policy.One of Always, Never, IfNotPresent.Defaults to Always if :latest tag is specified, or IfNotPresent otherwise.Cannot be updated.More info: https://kubernetes.io/docs/concepts/containers/images#updating-images
+- `lifecycle` (Attributes) Actions that the management system should take in response to container lifecycle events.Cannot be updated. (see [below for nested schema](#nestedatt--spec--template--spec--containers--lifecycle))
+- `liveness_probe` (Attributes) Periodic probe of container liveness.Container will be restarted if the probe fails.Cannot be updated.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes (see [below for nested schema](#nestedatt--spec--template--spec--containers--liveness_probe))
+- `ports` (Attributes List) List of ports to expose from the container. Not specifying a port hereDOES NOT prevent that port from being exposed. Any port which islistening on the default '0.0.0.0' address inside a container will beaccessible from the network.Modifying this array with strategic merge patch may corrupt the data.For more information See https://github.com/kubernetes/kubernetes/issues/108255.Cannot be updated. (see [below for nested schema](#nestedatt--spec--template--spec--containers--ports))
+- `readiness_probe` (Attributes) Periodic probe of container service readiness.Container will be removed from service endpoints if the probe fails.Cannot be updated.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes (see [below for nested schema](#nestedatt--spec--template--spec--containers--readiness_probe))
- `resize_policy` (Attributes List) Resources resize policy for the container. (see [below for nested schema](#nestedatt--spec--template--spec--containers--resize_policy))
-- `resources` (Attributes) Compute Resources required by this container. Cannot be updated. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/ (see [below for nested schema](#nestedatt--spec--template--spec--containers--resources))
-- `restart_policy` (String) RestartPolicy defines the restart behavior of individual containers in a pod. This field may only be set for init containers, and the only allowed value is 'Always'. For non-init containers or when this field is not specified, the restart behavior is defined by the Pod's restart policy and the container type. Setting the RestartPolicy as 'Always' for the init container will have the following effect: this init container will be continually restarted on exit until all regular containers have terminated. Once all regular containers have completed, all init containers with restartPolicy 'Always' will be shut down. This lifecycle differs from normal init containers and is often referred to as a 'sidecar' container. Although this init container still starts in the init container sequence, it does not wait for the container to complete before proceeding to the next init container. Instead, the next init container starts immediately after this init container is started, or after any startupProbe has successfully completed.
-- `security_context` (Attributes) SecurityContext defines the security options the container should be run with. If set, the fields of SecurityContext override the equivalent fields of PodSecurityContext. More info: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ (see [below for nested schema](#nestedatt--spec--template--spec--containers--security_context))
-- `startup_probe` (Attributes) StartupProbe indicates that the Pod has successfully initialized. If specified, no other probes are executed until this completes successfully. If this probe fails, the Pod will be restarted, just as if the livenessProbe failed. This can be used to provide different probe parameters at the beginning of a Pod's lifecycle, when it might take a long time to load data or warm a cache, than during steady-state operation. This cannot be updated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes (see [below for nested schema](#nestedatt--spec--template--spec--containers--startup_probe))
-- `stdin` (Boolean) Whether this container should allocate a buffer for stdin in the container runtime. If this is not set, reads from stdin in the container will always result in EOF. Default is false.
-- `stdin_once` (Boolean) Whether the container runtime should close the stdin channel after it has been opened by a single attach. When stdin is true the stdin stream will remain open across multiple attach sessions. If stdinOnce is set to true, stdin is opened on container start, is empty until the first client attaches to stdin, and then remains open and accepts data until the client disconnects, at which time stdin is closed and remains closed until the container is restarted. If this flag is false, a container processes that reads from stdin will never receive an EOF. Default is false
-- `termination_message_path` (String) Optional: Path at which the file to which the container's termination message will be written is mounted into the container's filesystem. Message written is intended to be brief final status, such as an assertion failure message. Will be truncated by the node if greater than 4096 bytes. The total message length across all containers will be limited to 12kb. Defaults to /dev/termination-log. Cannot be updated.
-- `termination_message_policy` (String) Indicate how the termination message should be populated. File will use the contents of terminationMessagePath to populate the container status message on both success and failure. FallbackToLogsOnError will use the last chunk of container log output if the termination message file is empty and the container exited with an error. The log output is limited to 2048 bytes or 80 lines, whichever is smaller. Defaults to File. Cannot be updated.
-- `tty` (Boolean) Whether this container should allocate a TTY for itself, also requires 'stdin' to be true. Default is false.
+- `resources` (Attributes) Compute Resources required by this container.Cannot be updated.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/ (see [below for nested schema](#nestedatt--spec--template--spec--containers--resources))
+- `restart_policy` (String) RestartPolicy defines the restart behavior of individual containers in a pod.This field may only be set for init containers, and the only allowed value is 'Always'.For non-init containers or when this field is not specified,the restart behavior is defined by the Pod's restart policy and the container type.Setting the RestartPolicy as 'Always' for the init container will have the following effect:this init container will be continually restarted onexit until all regular containers have terminated. Once all regularcontainers have completed, all init containers with restartPolicy 'Always'will be shut down. This lifecycle differs from normal init containers andis often referred to as a 'sidecar' container. Although this initcontainer still starts in the init container sequence, it does not waitfor the container to complete before proceeding to the next initcontainer. Instead, the next init container starts immediately after thisinit container is started, or after any startupProbe has successfullycompleted.
+- `security_context` (Attributes) SecurityContext defines the security options the container should be run with.If set, the fields of SecurityContext override the equivalent fields of PodSecurityContext.More info: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ (see [below for nested schema](#nestedatt--spec--template--spec--containers--security_context))
+- `startup_probe` (Attributes) StartupProbe indicates that the Pod has successfully initialized.If specified, no other probes are executed until this completes successfully.If this probe fails, the Pod will be restarted, just as if the livenessProbe failed.This can be used to provide different probe parameters at the beginning of a Pod's lifecycle,when it might take a long time to load data or warm a cache, than during steady-state operation.This cannot be updated.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes (see [below for nested schema](#nestedatt--spec--template--spec--containers--startup_probe))
+- `stdin` (Boolean) Whether this container should allocate a buffer for stdin in the container runtime. If thisis not set, reads from stdin in the container will always result in EOF.Default is false.
+- `stdin_once` (Boolean) Whether the container runtime should close the stdin channel after it has been opened bya single attach. When stdin is true the stdin stream will remain open across multiple attachsessions. If stdinOnce is set to true, stdin is opened on container start, is empty until thefirst client attaches to stdin, and then remains open and accepts data until the client disconnects,at which time stdin is closed and remains closed until the container is restarted. If thisflag is false, a container processes that reads from stdin will never receive an EOF.Default is false
+- `termination_message_path` (String) Optional: Path at which the file to which the container's termination messagewill be written is mounted into the container's filesystem.Message written is intended to be brief final status, such as an assertion failure message.Will be truncated by the node if greater than 4096 bytes. The total message length acrossall containers will be limited to 12kb.Defaults to /dev/termination-log.Cannot be updated.
+- `termination_message_policy` (String) Indicate how the termination message should be populated. File will use the contents ofterminationMessagePath to populate the container status message on both success and failure.FallbackToLogsOnError will use the last chunk of container log output if the terminationmessage file is empty and the container exited with an error.The log output is limited to 2048 bytes or 80 lines, whichever is smaller.Defaults to File.Cannot be updated.
+- `tty` (Boolean) Whether this container should allocate a TTY for itself, also requires 'stdin' to be true.Default is false.
- `volume_devices` (Attributes List) volumeDevices is the list of block devices to be used by the container. (see [below for nested schema](#nestedatt--spec--template--spec--containers--volume_devices))
-- `volume_mounts` (Attributes List) Pod volumes to mount into the container's filesystem. Cannot be updated. (see [below for nested schema](#nestedatt--spec--template--spec--containers--volume_mounts))
-- `working_dir` (String) Container's working directory. If not specified, the container runtime's default will be used, which might be configured in the container image. Cannot be updated.
+- `volume_mounts` (Attributes List) Pod volumes to mount into the container's filesystem.Cannot be updated. (see [below for nested schema](#nestedatt--spec--template--spec--containers--volume_mounts))
+- `working_dir` (String) Container's working directory.If not specified, the container runtime's default will be used, whichmight be configured in the container image.Cannot be updated.
### Nested Schema for `spec.template.spec.containers.env`
@@ -181,7 +181,7 @@ Required:
Optional:
-- `value` (String) Variable references $(VAR_NAME) are expanded using the previously defined environment variables in the container and any service environment variables. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. '$$(VAR_NAME)' will produce the string literal '$(VAR_NAME)'. Escaped references will never be expanded, regardless of whether the variable exists or not. Defaults to ''.
+- `value` (String) Variable references $(VAR_NAME) are expandedusing the previously defined environment variables in the container andany service environment variables. If a variable cannot be resolved,the reference in the input string will be unchanged. Double $$ are reducedto a single $, which allows for escaping the $(VAR_NAME) syntax: i.e.'$$(VAR_NAME)' will produce the string literal '$(VAR_NAME)'.Escaped references will never be expanded, regardless of whether the variableexists or not.Defaults to ''.
- `value_from` (Attributes) Source for the environment variable's value. Cannot be used if value is not empty. (see [below for nested schema](#nestedatt--spec--template--spec--containers--env--value_from))
@@ -190,8 +190,8 @@ Optional:
Optional:
- `config_map_key_ref` (Attributes) Selects a key of a ConfigMap. (see [below for nested schema](#nestedatt--spec--template--spec--containers--env--value_from--config_map_key_ref))
-- `field_ref` (Attributes) Selects a field of the pod: supports metadata.name, metadata.namespace, 'metadata.labels['']', 'metadata.annotations['']', spec.nodeName, spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs. (see [below for nested schema](#nestedatt--spec--template--spec--containers--env--value_from--field_ref))
-- `resource_field_ref` (Attributes) Selects a resource of the container: only resources limits and requests (limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu, requests.memory and requests.ephemeral-storage) are currently supported. (see [below for nested schema](#nestedatt--spec--template--spec--containers--env--value_from--resource_field_ref))
+- `field_ref` (Attributes) Selects a field of the pod: supports metadata.name, metadata.namespace, 'metadata.labels['']', 'metadata.annotations['']',spec.nodeName, spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs. (see [below for nested schema](#nestedatt--spec--template--spec--containers--env--value_from--field_ref))
+- `resource_field_ref` (Attributes) Selects a resource of the container: only resources limits and requests(limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu, requests.memory and requests.ephemeral-storage) are currently supported. (see [below for nested schema](#nestedatt--spec--template--spec--containers--env--value_from--resource_field_ref))
- `secret_key_ref` (Attributes) Selects a key of a secret in the pod's namespace (see [below for nested schema](#nestedatt--spec--template--spec--containers--env--value_from--secret_key_ref))
@@ -203,7 +203,7 @@ Required:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
@@ -241,7 +241,7 @@ Required:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
- `optional` (Boolean) Specify whether the Secret or its key must be defined
@@ -261,7 +261,7 @@ Optional:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
- `optional` (Boolean) Specify whether the ConfigMap must be defined
@@ -270,7 +270,7 @@ Optional:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
- `optional` (Boolean) Specify whether the Secret must be defined
@@ -280,8 +280,8 @@ Optional:
Optional:
-- `post_start` (Attributes) PostStart is called immediately after a container is created. If the handler fails, the container is terminated and restarted according to its restart policy. Other management of the container blocks until the hook completes. More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks (see [below for nested schema](#nestedatt--spec--template--spec--containers--lifecycle--post_start))
-- `pre_stop` (Attributes) PreStop is called immediately before a container is terminated due to an API request or management event such as liveness/startup probe failure, preemption, resource contention, etc. The handler is not called if the container crashes or exits. The Pod's termination grace period countdown begins before the PreStop hook is executed. Regardless of the outcome of the handler, the container will eventually terminate within the Pod's termination grace period (unless delayed by finalizers). Other management of the container blocks until the hook completes or until the termination grace period is reached. More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks (see [below for nested schema](#nestedatt--spec--template--spec--containers--lifecycle--pre_stop))
+- `post_start` (Attributes) PostStart is called immediately after a container is created. If the handler fails,the container is terminated and restarted according to its restart policy.Other management of the container blocks until the hook completes.More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks (see [below for nested schema](#nestedatt--spec--template--spec--containers--lifecycle--post_start))
+- `pre_stop` (Attributes) PreStop is called immediately before a container is terminated due to anAPI request or management event such as liveness/startup probe failure,preemption, resource contention, etc. The handler is not called if thecontainer crashes or exits. The Pod's termination grace period countdown begins before thePreStop hook is executed. Regardless of the outcome of the handler, thecontainer will eventually terminate within the Pod's termination graceperiod (unless delayed by finalizers). Other management of the container blocks until the hook completesor until the termination grace period is reached.More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks (see [below for nested schema](#nestedatt--spec--template--spec--containers--lifecycle--pre_stop))
### Nested Schema for `spec.template.spec.containers.lifecycle.post_start`
@@ -291,14 +291,14 @@ Optional:
- `exec` (Attributes) Exec specifies the action to take. (see [below for nested schema](#nestedatt--spec--template--spec--containers--lifecycle--post_start--exec))
- `http_get` (Attributes) HTTPGet specifies the http request to perform. (see [below for nested schema](#nestedatt--spec--template--spec--containers--lifecycle--post_start--http_get))
- `sleep` (Attributes) Sleep represents the duration that the container should sleep before being terminated. (see [below for nested schema](#nestedatt--spec--template--spec--containers--lifecycle--post_start--sleep))
-- `tcp_socket` (Attributes) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and kept for the backward compatibility. There are no validation of this field and lifecycle hooks will fail in runtime when tcp handler is specified. (see [below for nested schema](#nestedatt--spec--template--spec--containers--lifecycle--post_start--tcp_socket))
+- `tcp_socket` (Attributes) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and keptfor the backward compatibility. There are no validation of this field andlifecycle hooks will fail in runtime when tcp handler is specified. (see [below for nested schema](#nestedatt--spec--template--spec--containers--lifecycle--post_start--tcp_socket))
### Nested Schema for `spec.template.spec.containers.lifecycle.post_start.exec`
Optional:
-- `command` (List of String) Command is the command line to execute inside the container, the working directory for the command is root ('/') in the container's filesystem. The command is simply exec'd, it is not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
+- `command` (List of String) Command is the command line to execute inside the container, the working directory for thecommand is root ('/') in the container's filesystem. The command is simply exec'd, it isnot run inside a shell, so traditional shell instructions ('|', etc) won't work. To usea shell, you need to explicitly call out to that shell.Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
@@ -306,21 +306,21 @@ Optional:
Required:
-- `port` (String) Name or number of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
+- `port` (String) Name or number of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
Optional:
-- `host` (String) Host name to connect to, defaults to the pod IP. You probably want to set 'Host' in httpHeaders instead.
+- `host` (String) Host name to connect to, defaults to the pod IP. You probably want to set'Host' in httpHeaders instead.
- `http_headers` (Attributes List) Custom headers to set in the request. HTTP allows repeated headers. (see [below for nested schema](#nestedatt--spec--template--spec--containers--lifecycle--post_start--http_get--http_headers))
- `path` (String) Path to access on the HTTP server.
-- `scheme` (String) Scheme to use for connecting to the host. Defaults to HTTP.
+- `scheme` (String) Scheme to use for connecting to the host.Defaults to HTTP.
### Nested Schema for `spec.template.spec.containers.lifecycle.post_start.http_get.http_headers`
Required:
-- `name` (String) The header field name. This will be canonicalized upon output, so case-variant names will be understood as the same header.
+- `name` (String) The header field name.This will be canonicalized upon output, so case-variant names will be understood as the same header.
- `value` (String) The header field value
@@ -338,7 +338,7 @@ Required:
Required:
-- `port` (String) Number or name of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
+- `port` (String) Number or name of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
Optional:
@@ -354,14 +354,14 @@ Optional:
- `exec` (Attributes) Exec specifies the action to take. (see [below for nested schema](#nestedatt--spec--template--spec--containers--lifecycle--pre_stop--exec))
- `http_get` (Attributes) HTTPGet specifies the http request to perform. (see [below for nested schema](#nestedatt--spec--template--spec--containers--lifecycle--pre_stop--http_get))
- `sleep` (Attributes) Sleep represents the duration that the container should sleep before being terminated. (see [below for nested schema](#nestedatt--spec--template--spec--containers--lifecycle--pre_stop--sleep))
-- `tcp_socket` (Attributes) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and kept for the backward compatibility. There are no validation of this field and lifecycle hooks will fail in runtime when tcp handler is specified. (see [below for nested schema](#nestedatt--spec--template--spec--containers--lifecycle--pre_stop--tcp_socket))
+- `tcp_socket` (Attributes) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and keptfor the backward compatibility. There are no validation of this field andlifecycle hooks will fail in runtime when tcp handler is specified. (see [below for nested schema](#nestedatt--spec--template--spec--containers--lifecycle--pre_stop--tcp_socket))
### Nested Schema for `spec.template.spec.containers.lifecycle.pre_stop.exec`
Optional:
-- `command` (List of String) Command is the command line to execute inside the container, the working directory for the command is root ('/') in the container's filesystem. The command is simply exec'd, it is not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
+- `command` (List of String) Command is the command line to execute inside the container, the working directory for thecommand is root ('/') in the container's filesystem. The command is simply exec'd, it isnot run inside a shell, so traditional shell instructions ('|', etc) won't work. To usea shell, you need to explicitly call out to that shell.Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
@@ -369,21 +369,21 @@ Optional:
Required:
-- `port` (String) Name or number of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
+- `port` (String) Name or number of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
Optional:
-- `host` (String) Host name to connect to, defaults to the pod IP. You probably want to set 'Host' in httpHeaders instead.
+- `host` (String) Host name to connect to, defaults to the pod IP. You probably want to set'Host' in httpHeaders instead.
- `http_headers` (Attributes List) Custom headers to set in the request. HTTP allows repeated headers. (see [below for nested schema](#nestedatt--spec--template--spec--containers--lifecycle--pre_stop--http_get--http_headers))
- `path` (String) Path to access on the HTTP server.
-- `scheme` (String) Scheme to use for connecting to the host. Defaults to HTTP.
+- `scheme` (String) Scheme to use for connecting to the host.Defaults to HTTP.
### Nested Schema for `spec.template.spec.containers.lifecycle.pre_stop.http_get.http_headers`
Required:
-- `name` (String) The header field name. This will be canonicalized upon output, so case-variant names will be understood as the same header.
+- `name` (String) The header field name.This will be canonicalized upon output, so case-variant names will be understood as the same header.
- `value` (String) The header field value
@@ -401,7 +401,7 @@ Required:
Required:
-- `port` (String) Number or name of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
+- `port` (String) Number or name of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
Optional:
@@ -416,22 +416,22 @@ Optional:
Optional:
- `exec` (Attributes) Exec specifies the action to take. (see [below for nested schema](#nestedatt--spec--template--spec--containers--liveness_probe--exec))
-- `failure_threshold` (Number) Minimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1.
+- `failure_threshold` (Number) Minimum consecutive failures for the probe to be considered failed after having succeeded.Defaults to 3. Minimum value is 1.
- `grpc` (Attributes) GRPC specifies an action involving a GRPC port. (see [below for nested schema](#nestedatt--spec--template--spec--containers--liveness_probe--grpc))
- `http_get` (Attributes) HTTPGet specifies the http request to perform. (see [below for nested schema](#nestedatt--spec--template--spec--containers--liveness_probe--http_get))
-- `initial_delay_seconds` (Number) Number of seconds after the container has started before liveness probes are initiated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-- `period_seconds` (Number) How often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1.
-- `success_threshold` (Number) Minimum consecutive successes for the probe to be considered successful after having failed. Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
+- `initial_delay_seconds` (Number) Number of seconds after the container has started before liveness probes are initiated.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
+- `period_seconds` (Number) How often (in seconds) to perform the probe.Default to 10 seconds. Minimum value is 1.
+- `success_threshold` (Number) Minimum consecutive successes for the probe to be considered successful after having failed.Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
- `tcp_socket` (Attributes) TCPSocket specifies an action involving a TCP port. (see [below for nested schema](#nestedatt--spec--template--spec--containers--liveness_probe--tcp_socket))
-- `termination_grace_period_seconds` (Number) Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
-- `timeout_seconds` (Number) Number of seconds after which the probe times out. Defaults to 1 second. Minimum value is 1. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
+- `termination_grace_period_seconds` (Number) Optional duration in seconds the pod needs to terminate gracefully upon probe failure.The grace period is the duration in seconds after the processes running in the pod are senta termination signal and the time when the processes are forcibly halted with a kill signal.Set this value longer than the expected cleanup time for your process.If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, thisvalue overrides the value provided by the pod spec.Value must be non-negative integer. The value zero indicates stop immediately viathe kill signal (no opportunity to shut down).This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate.Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
+- `timeout_seconds` (Number) Number of seconds after which the probe times out.Defaults to 1 second. Minimum value is 1.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
### Nested Schema for `spec.template.spec.containers.liveness_probe.exec`
Optional:
-- `command` (List of String) Command is the command line to execute inside the container, the working directory for the command is root ('/') in the container's filesystem. The command is simply exec'd, it is not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
+- `command` (List of String) Command is the command line to execute inside the container, the working directory for thecommand is root ('/') in the container's filesystem. The command is simply exec'd, it isnot run inside a shell, so traditional shell instructions ('|', etc) won't work. To usea shell, you need to explicitly call out to that shell.Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
@@ -443,7 +443,7 @@ Required:
Optional:
-- `service` (String) Service is the name of the service to place in the gRPC HealthCheckRequest (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md). If this is not specified, the default behavior is defined by gRPC.
+- `service` (String) Service is the name of the service to place in the gRPC HealthCheckRequest(see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).If this is not specified, the default behavior is defined by gRPC.
@@ -451,21 +451,21 @@ Optional:
Required:
-- `port` (String) Name or number of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
+- `port` (String) Name or number of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
Optional:
-- `host` (String) Host name to connect to, defaults to the pod IP. You probably want to set 'Host' in httpHeaders instead.
+- `host` (String) Host name to connect to, defaults to the pod IP. You probably want to set'Host' in httpHeaders instead.
- `http_headers` (Attributes List) Custom headers to set in the request. HTTP allows repeated headers. (see [below for nested schema](#nestedatt--spec--template--spec--containers--liveness_probe--http_get--http_headers))
- `path` (String) Path to access on the HTTP server.
-- `scheme` (String) Scheme to use for connecting to the host. Defaults to HTTP.
+- `scheme` (String) Scheme to use for connecting to the host.Defaults to HTTP.
### Nested Schema for `spec.template.spec.containers.liveness_probe.http_get.http_headers`
Required:
-- `name` (String) The header field name. This will be canonicalized upon output, so case-variant names will be understood as the same header.
+- `name` (String) The header field name.This will be canonicalized upon output, so case-variant names will be understood as the same header.
- `value` (String) The header field value
@@ -475,7 +475,7 @@ Required:
Required:
-- `port` (String) Number or name of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
+- `port` (String) Number or name of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
Optional:
@@ -488,14 +488,14 @@ Optional:
Required:
-- `container_port` (Number) Number of port to expose on the pod's IP address. This must be a valid port number, 0 < x < 65536.
+- `container_port` (Number) Number of port to expose on the pod's IP address.This must be a valid port number, 0 < x < 65536.
Optional:
- `host_ip` (String) What host IP to bind the external port to.
-- `host_port` (Number) Number of port to expose on the host. If specified, this must be a valid port number, 0 < x < 65536. If HostNetwork is specified, this must match ContainerPort. Most containers do not need this.
-- `name` (String) If specified, this must be an IANA_SVC_NAME and unique within the pod. Each named port in a pod must have a unique name. Name for the port that can be referred to by services.
-- `protocol` (String) Protocol for port. Must be UDP, TCP, or SCTP. Defaults to 'TCP'.
+- `host_port` (Number) Number of port to expose on the host.If specified, this must be a valid port number, 0 < x < 65536.If HostNetwork is specified, this must match ContainerPort.Most containers do not need this.
+- `name` (String) If specified, this must be an IANA_SVC_NAME and unique within the pod. Eachnamed port in a pod must have a unique name. Name for the port that can bereferred to by services.
+- `protocol` (String) Protocol for port. Must be UDP, TCP, or SCTP.Defaults to 'TCP'.
@@ -504,22 +504,22 @@ Optional:
Optional:
- `exec` (Attributes) Exec specifies the action to take. (see [below for nested schema](#nestedatt--spec--template--spec--containers--readiness_probe--exec))
-- `failure_threshold` (Number) Minimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1.
+- `failure_threshold` (Number) Minimum consecutive failures for the probe to be considered failed after having succeeded.Defaults to 3. Minimum value is 1.
- `grpc` (Attributes) GRPC specifies an action involving a GRPC port. (see [below for nested schema](#nestedatt--spec--template--spec--containers--readiness_probe--grpc))
- `http_get` (Attributes) HTTPGet specifies the http request to perform. (see [below for nested schema](#nestedatt--spec--template--spec--containers--readiness_probe--http_get))
-- `initial_delay_seconds` (Number) Number of seconds after the container has started before liveness probes are initiated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-- `period_seconds` (Number) How often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1.
-- `success_threshold` (Number) Minimum consecutive successes for the probe to be considered successful after having failed. Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
+- `initial_delay_seconds` (Number) Number of seconds after the container has started before liveness probes are initiated.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
+- `period_seconds` (Number) How often (in seconds) to perform the probe.Default to 10 seconds. Minimum value is 1.
+- `success_threshold` (Number) Minimum consecutive successes for the probe to be considered successful after having failed.Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
- `tcp_socket` (Attributes) TCPSocket specifies an action involving a TCP port. (see [below for nested schema](#nestedatt--spec--template--spec--containers--readiness_probe--tcp_socket))
-- `termination_grace_period_seconds` (Number) Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
-- `timeout_seconds` (Number) Number of seconds after which the probe times out. Defaults to 1 second. Minimum value is 1. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
+- `termination_grace_period_seconds` (Number) Optional duration in seconds the pod needs to terminate gracefully upon probe failure.The grace period is the duration in seconds after the processes running in the pod are senta termination signal and the time when the processes are forcibly halted with a kill signal.Set this value longer than the expected cleanup time for your process.If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, thisvalue overrides the value provided by the pod spec.Value must be non-negative integer. The value zero indicates stop immediately viathe kill signal (no opportunity to shut down).This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate.Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
+- `timeout_seconds` (Number) Number of seconds after which the probe times out.Defaults to 1 second. Minimum value is 1.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
### Nested Schema for `spec.template.spec.containers.readiness_probe.exec`
Optional:
-- `command` (List of String) Command is the command line to execute inside the container, the working directory for the command is root ('/') in the container's filesystem. The command is simply exec'd, it is not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
+- `command` (List of String) Command is the command line to execute inside the container, the working directory for thecommand is root ('/') in the container's filesystem. The command is simply exec'd, it isnot run inside a shell, so traditional shell instructions ('|', etc) won't work. To usea shell, you need to explicitly call out to that shell.Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
@@ -531,7 +531,7 @@ Required:
Optional:
-- `service` (String) Service is the name of the service to place in the gRPC HealthCheckRequest (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md). If this is not specified, the default behavior is defined by gRPC.
+- `service` (String) Service is the name of the service to place in the gRPC HealthCheckRequest(see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).If this is not specified, the default behavior is defined by gRPC.
@@ -539,21 +539,21 @@ Optional:
Required:
-- `port` (String) Name or number of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
+- `port` (String) Name or number of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
Optional:
-- `host` (String) Host name to connect to, defaults to the pod IP. You probably want to set 'Host' in httpHeaders instead.
+- `host` (String) Host name to connect to, defaults to the pod IP. You probably want to set'Host' in httpHeaders instead.
- `http_headers` (Attributes List) Custom headers to set in the request. HTTP allows repeated headers. (see [below for nested schema](#nestedatt--spec--template--spec--containers--readiness_probe--http_get--http_headers))
- `path` (String) Path to access on the HTTP server.
-- `scheme` (String) Scheme to use for connecting to the host. Defaults to HTTP.
+- `scheme` (String) Scheme to use for connecting to the host.Defaults to HTTP.
### Nested Schema for `spec.template.spec.containers.readiness_probe.http_get.http_headers`
Required:
-- `name` (String) The header field name. This will be canonicalized upon output, so case-variant names will be understood as the same header.
+- `name` (String) The header field name.This will be canonicalized upon output, so case-variant names will be understood as the same header.
- `value` (String) The header field value
@@ -563,7 +563,7 @@ Required:
Required:
-- `port` (String) Number or name of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
+- `port` (String) Number or name of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
Optional:
@@ -576,8 +576,8 @@ Optional:
Required:
-- `resource_name` (String) Name of the resource to which this resource resize policy applies. Supported values: cpu, memory.
-- `restart_policy` (String) Restart policy to apply when specified resource is resized. If not specified, it defaults to NotRequired.
+- `resource_name` (String) Name of the resource to which this resource resize policy applies.Supported values: cpu, memory.
+- `restart_policy` (String) Restart policy to apply when specified resource is resized.If not specified, it defaults to NotRequired.
@@ -585,16 +585,16 @@ Required:
Optional:
-- `claims` (Attributes List) Claims lists the names of resources, defined in spec.resourceClaims, that are used by this container. This is an alpha field and requires enabling the DynamicResourceAllocation feature gate. This field is immutable. It can only be set for containers. (see [below for nested schema](#nestedatt--spec--template--spec--containers--resources--claims))
-- `limits` (Map of String) Limits describes the maximum amount of compute resources allowed. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-- `requests` (Map of String) Requests describes the minimum amount of compute resources required. If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, otherwise to an implementation-defined value. Requests cannot exceed Limits. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
+- `claims` (Attributes List) Claims lists the names of resources, defined in spec.resourceClaims,that are used by this container.This is an alpha field and requires enabling theDynamicResourceAllocation feature gate.This field is immutable. It can only be set for containers. (see [below for nested schema](#nestedatt--spec--template--spec--containers--resources--claims))
+- `limits` (Map of String) Limits describes the maximum amount of compute resources allowed.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
+- `requests` (Map of String) Requests describes the minimum amount of compute resources required.If Requests is omitted for a container, it defaults to Limits if that is explicitly specified,otherwise to an implementation-defined value. Requests cannot exceed Limits.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
### Nested Schema for `spec.template.spec.containers.resources.claims`
Required:
-- `name` (String) Name must match the name of one entry in pod.spec.resourceClaims of the Pod where this field is used. It makes that resource available inside a container.
+- `name` (String) Name must match the name of one entry in pod.spec.resourceClaims ofthe Pod where this field is used. It makes that resource availableinside a container.
@@ -603,17 +603,17 @@ Required:
Optional:
-- `allow_privilege_escalation` (Boolean) AllowPrivilegeEscalation controls whether a process can gain more privileges than its parent process. This bool directly controls if the no_new_privs flag will be set on the container process. AllowPrivilegeEscalation is true always when the container is: 1) run as Privileged 2) has CAP_SYS_ADMIN Note that this field cannot be set when spec.os.name is windows.
-- `capabilities` (Attributes) The capabilities to add/drop when running containers. Defaults to the default set of capabilities granted by the container runtime. Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--template--spec--containers--security_context--capabilities))
-- `privileged` (Boolean) Run container in privileged mode. Processes in privileged containers are essentially equivalent to root on the host. Defaults to false. Note that this field cannot be set when spec.os.name is windows.
-- `proc_mount` (String) procMount denotes the type of proc mount to use for the containers. The default is DefaultProcMount which uses the container runtime defaults for readonly paths and masked paths. This requires the ProcMountType feature flag to be enabled. Note that this field cannot be set when spec.os.name is windows.
-- `read_only_root_filesystem` (Boolean) Whether this container has a read-only root filesystem. Default is false. Note that this field cannot be set when spec.os.name is windows.
-- `run_as_group` (Number) The GID to run the entrypoint of the container process. Uses runtime default if unset. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence. Note that this field cannot be set when spec.os.name is windows.
-- `run_as_non_root` (Boolean) Indicates that the container must run as a non-root user. If true, the Kubelet will validate the image at runtime to ensure that it does not run as UID 0 (root) and fail to start the container if it does. If unset or false, no such validation will be performed. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
-- `run_as_user` (Number) The UID to run the entrypoint of the container process. Defaults to user specified in image metadata if unspecified. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence. Note that this field cannot be set when spec.os.name is windows.
-- `se_linux_options` (Attributes) The SELinux context to be applied to the container. If unspecified, the container runtime will allocate a random SELinux context for each container. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence. Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--template--spec--containers--security_context--se_linux_options))
-- `seccomp_profile` (Attributes) The seccomp options to use by this container. If seccomp options are provided at both the pod & container level, the container options override the pod options. Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--template--spec--containers--security_context--seccomp_profile))
-- `windows_options` (Attributes) The Windows specific settings applied to all containers. If unspecified, the options from the PodSecurityContext will be used. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence. Note that this field cannot be set when spec.os.name is linux. (see [below for nested schema](#nestedatt--spec--template--spec--containers--security_context--windows_options))
+- `allow_privilege_escalation` (Boolean) AllowPrivilegeEscalation controls whether a process can gain moreprivileges than its parent process. This bool directly controls ifthe no_new_privs flag will be set on the container process.AllowPrivilegeEscalation is true always when the container is:1) run as Privileged2) has CAP_SYS_ADMINNote that this field cannot be set when spec.os.name is windows.
+- `capabilities` (Attributes) The capabilities to add/drop when running containers.Defaults to the default set of capabilities granted by the container runtime.Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--template--spec--containers--security_context--capabilities))
+- `privileged` (Boolean) Run container in privileged mode.Processes in privileged containers are essentially equivalent to root on the host.Defaults to false.Note that this field cannot be set when spec.os.name is windows.
+- `proc_mount` (String) procMount denotes the type of proc mount to use for the containers.The default is DefaultProcMount which uses the container runtime defaults forreadonly paths and masked paths.This requires the ProcMountType feature flag to be enabled.Note that this field cannot be set when spec.os.name is windows.
+- `read_only_root_filesystem` (Boolean) Whether this container has a read-only root filesystem.Default is false.Note that this field cannot be set when spec.os.name is windows.
+- `run_as_group` (Number) The GID to run the entrypoint of the container process.Uses runtime default if unset.May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.Note that this field cannot be set when spec.os.name is windows.
+- `run_as_non_root` (Boolean) Indicates that the container must run as a non-root user.If true, the Kubelet will validate the image at runtime to ensure that itdoes not run as UID 0 (root) and fail to start the container if it does.If unset or false, no such validation will be performed.May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.
+- `run_as_user` (Number) The UID to run the entrypoint of the container process.Defaults to user specified in image metadata if unspecified.May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.Note that this field cannot be set when spec.os.name is windows.
+- `se_linux_options` (Attributes) The SELinux context to be applied to the container.If unspecified, the container runtime will allocate a random SELinux context for eachcontainer. May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--template--spec--containers--security_context--se_linux_options))
+- `seccomp_profile` (Attributes) The seccomp options to use by this container. If seccomp options areprovided at both the pod & container level, the container optionsoverride the pod options.Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--template--spec--containers--security_context--seccomp_profile))
+- `windows_options` (Attributes) The Windows specific settings applied to all containers.If unspecified, the options from the PodSecurityContext will be used.If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.Note that this field cannot be set when spec.os.name is linux. (see [below for nested schema](#nestedatt--spec--template--spec--containers--security_context--windows_options))
### Nested Schema for `spec.template.spec.containers.security_context.capabilities`
@@ -640,11 +640,11 @@ Optional:
Required:
-- `type` (String) type indicates which kind of seccomp profile will be applied. Valid options are: Localhost - a profile defined in a file on the node should be used. RuntimeDefault - the container runtime default profile should be used. Unconfined - no profile should be applied.
+- `type` (String) type indicates which kind of seccomp profile will be applied.Valid options are:Localhost - a profile defined in a file on the node should be used.RuntimeDefault - the container runtime default profile should be used.Unconfined - no profile should be applied.
Optional:
-- `localhost_profile` (String) localhostProfile indicates a profile defined in a file on the node should be used. The profile must be preconfigured on the node to work. Must be a descending path, relative to the kubelet's configured seccomp profile location. Must be set if type is 'Localhost'. Must NOT be set for any other type.
+- `localhost_profile` (String) localhostProfile indicates a profile defined in a file on the node should be used.The profile must be preconfigured on the node to work.Must be a descending path, relative to the kubelet's configured seccomp profile location.Must be set if type is 'Localhost'. Must NOT be set for any other type.
@@ -652,10 +652,10 @@ Optional:
Optional:
-- `gmsa_credential_spec` (String) GMSACredentialSpec is where the GMSA admission webhook (https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of the GMSA credential spec named by the GMSACredentialSpecName field.
+- `gmsa_credential_spec` (String) GMSACredentialSpec is where the GMSA admission webhook(https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of theGMSA credential spec named by the GMSACredentialSpecName field.
- `gmsa_credential_spec_name` (String) GMSACredentialSpecName is the name of the GMSA credential spec to use.
-- `host_process` (Boolean) HostProcess determines if a container should be run as a 'Host Process' container. All of a Pod's containers must have the same effective HostProcess value (it is not allowed to have a mix of HostProcess containers and non-HostProcess containers). In addition, if HostProcess is true then HostNetwork must also be set to true.
-- `run_as_user_name` (String) The UserName in Windows to run the entrypoint of the container process. Defaults to the user specified in image metadata if unspecified. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
+- `host_process` (Boolean) HostProcess determines if a container should be run as a 'Host Process' container.All of a Pod's containers must have the same effective HostProcess value(it is not allowed to have a mix of HostProcess containers and non-HostProcess containers).In addition, if HostProcess is true then HostNetwork must also be set to true.
+- `run_as_user_name` (String) The UserName in Windows to run the entrypoint of the container process.Defaults to the user specified in image metadata if unspecified.May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.
@@ -665,22 +665,22 @@ Optional:
Optional:
- `exec` (Attributes) Exec specifies the action to take. (see [below for nested schema](#nestedatt--spec--template--spec--containers--startup_probe--exec))
-- `failure_threshold` (Number) Minimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1.
+- `failure_threshold` (Number) Minimum consecutive failures for the probe to be considered failed after having succeeded.Defaults to 3. Minimum value is 1.
- `grpc` (Attributes) GRPC specifies an action involving a GRPC port. (see [below for nested schema](#nestedatt--spec--template--spec--containers--startup_probe--grpc))
- `http_get` (Attributes) HTTPGet specifies the http request to perform. (see [below for nested schema](#nestedatt--spec--template--spec--containers--startup_probe--http_get))
-- `initial_delay_seconds` (Number) Number of seconds after the container has started before liveness probes are initiated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-- `period_seconds` (Number) How often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1.
-- `success_threshold` (Number) Minimum consecutive successes for the probe to be considered successful after having failed. Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
+- `initial_delay_seconds` (Number) Number of seconds after the container has started before liveness probes are initiated.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
+- `period_seconds` (Number) How often (in seconds) to perform the probe.Default to 10 seconds. Minimum value is 1.
+- `success_threshold` (Number) Minimum consecutive successes for the probe to be considered successful after having failed.Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
- `tcp_socket` (Attributes) TCPSocket specifies an action involving a TCP port. (see [below for nested schema](#nestedatt--spec--template--spec--containers--startup_probe--tcp_socket))
-- `termination_grace_period_seconds` (Number) Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
-- `timeout_seconds` (Number) Number of seconds after which the probe times out. Defaults to 1 second. Minimum value is 1. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
+- `termination_grace_period_seconds` (Number) Optional duration in seconds the pod needs to terminate gracefully upon probe failure.The grace period is the duration in seconds after the processes running in the pod are senta termination signal and the time when the processes are forcibly halted with a kill signal.Set this value longer than the expected cleanup time for your process.If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, thisvalue overrides the value provided by the pod spec.Value must be non-negative integer. The value zero indicates stop immediately viathe kill signal (no opportunity to shut down).This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate.Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
+- `timeout_seconds` (Number) Number of seconds after which the probe times out.Defaults to 1 second. Minimum value is 1.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
### Nested Schema for `spec.template.spec.containers.startup_probe.exec`
Optional:
-- `command` (List of String) Command is the command line to execute inside the container, the working directory for the command is root ('/') in the container's filesystem. The command is simply exec'd, it is not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
+- `command` (List of String) Command is the command line to execute inside the container, the working directory for thecommand is root ('/') in the container's filesystem. The command is simply exec'd, it isnot run inside a shell, so traditional shell instructions ('|', etc) won't work. To usea shell, you need to explicitly call out to that shell.Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
@@ -692,7 +692,7 @@ Required:
Optional:
-- `service` (String) Service is the name of the service to place in the gRPC HealthCheckRequest (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md). If this is not specified, the default behavior is defined by gRPC.
+- `service` (String) Service is the name of the service to place in the gRPC HealthCheckRequest(see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).If this is not specified, the default behavior is defined by gRPC.
@@ -700,21 +700,21 @@ Optional:
Required:
-- `port` (String) Name or number of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
+- `port` (String) Name or number of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
Optional:
-- `host` (String) Host name to connect to, defaults to the pod IP. You probably want to set 'Host' in httpHeaders instead.
+- `host` (String) Host name to connect to, defaults to the pod IP. You probably want to set'Host' in httpHeaders instead.
- `http_headers` (Attributes List) Custom headers to set in the request. HTTP allows repeated headers. (see [below for nested schema](#nestedatt--spec--template--spec--containers--startup_probe--http_get--http_headers))
- `path` (String) Path to access on the HTTP server.
-- `scheme` (String) Scheme to use for connecting to the host. Defaults to HTTP.
+- `scheme` (String) Scheme to use for connecting to the host.Defaults to HTTP.
### Nested Schema for `spec.template.spec.containers.startup_probe.http_get.http_headers`
Required:
-- `name` (String) The header field name. This will be canonicalized upon output, so case-variant names will be understood as the same header.
+- `name` (String) The header field name.This will be canonicalized upon output, so case-variant names will be understood as the same header.
- `value` (String) The header field value
@@ -724,7 +724,7 @@ Required:
Required:
-- `port` (String) Number or name of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
+- `port` (String) Number or name of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
Optional:
@@ -746,15 +746,15 @@ Required:
Required:
-- `mount_path` (String) Path within the container at which the volume should be mounted. Must not contain ':'.
+- `mount_path` (String) Path within the container at which the volume should be mounted. Mustnot contain ':'.
- `name` (String) This must match the Name of a Volume.
Optional:
-- `mount_propagation` (String) mountPropagation determines how mounts are propagated from the host to container and the other way around. When not set, MountPropagationNone is used. This field is beta in 1.10.
-- `read_only` (Boolean) Mounted read-only if true, read-write otherwise (false or unspecified). Defaults to false.
-- `sub_path` (String) Path within the volume from which the container's volume should be mounted. Defaults to '' (volume's root).
-- `sub_path_expr` (String) Expanded path within the volume from which the container's volume should be mounted. Behaves similarly to SubPath but environment variable references $(VAR_NAME) are expanded using the container's environment. Defaults to '' (volume's root). SubPathExpr and SubPath are mutually exclusive.
+- `mount_propagation` (String) mountPropagation determines how mounts are propagated from the hostto container and the other way around.When not set, MountPropagationNone is used.This field is beta in 1.10.
+- `read_only` (Boolean) Mounted read-only if true, read-write otherwise (false or unspecified).Defaults to false.
+- `sub_path` (String) Path within the volume from which the container's volume should be mounted.Defaults to '' (volume's root).
+- `sub_path_expr` (String) Expanded path within the volume from which the container's volume should be mounted.Behaves similarly to SubPath but environment variable references $(VAR_NAME) are expanded using the container's environment.Defaults to '' (volume's root).SubPathExpr and SubPath are mutually exclusive.
@@ -763,34 +763,34 @@ Optional:
Required:
-- `name` (String) Name of the ephemeral container specified as a DNS_LABEL. This name must be unique among all containers, init containers and ephemeral containers.
+- `name` (String) Name of the ephemeral container specified as a DNS_LABEL.This name must be unique among all containers, init containers and ephemeral containers.
Optional:
-- `args` (List of String) Arguments to the entrypoint. The image's CMD is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container's environment. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. '$$(VAR_NAME)' will produce the string literal '$(VAR_NAME)'. Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
-- `command` (List of String) Entrypoint array. Not executed within a shell. The image's ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container's environment. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. '$$(VAR_NAME)' will produce the string literal '$(VAR_NAME)'. Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
-- `env` (Attributes List) List of environment variables to set in the container. Cannot be updated. (see [below for nested schema](#nestedatt--spec--template--spec--ephemeral_containers--env))
-- `env_from` (Attributes List) List of sources to populate environment variables in the container. The keys defined within a source must be a C_IDENTIFIER. All invalid keys will be reported as an event when the container is starting. When a key exists in multiple sources, the value associated with the last source will take precedence. Values defined by an Env with a duplicate key will take precedence. Cannot be updated. (see [below for nested schema](#nestedatt--spec--template--spec--ephemeral_containers--env_from))
-- `image` (String) Container image name. More info: https://kubernetes.io/docs/concepts/containers/images
-- `image_pull_policy` (String) Image pull policy. One of Always, Never, IfNotPresent. Defaults to Always if :latest tag is specified, or IfNotPresent otherwise. Cannot be updated. More info: https://kubernetes.io/docs/concepts/containers/images#updating-images
+- `args` (List of String) Arguments to the entrypoint.The image's CMD is used if this is not provided.Variable references $(VAR_NAME) are expanded using the container's environment. If a variablecannot be resolved, the reference in the input string will be unchanged. Double $$ are reducedto a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. '$$(VAR_NAME)' willproduce the string literal '$(VAR_NAME)'. Escaped references will never be expanded, regardlessof whether the variable exists or not. Cannot be updated.More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
+- `command` (List of String) Entrypoint array. Not executed within a shell.The image's ENTRYPOINT is used if this is not provided.Variable references $(VAR_NAME) are expanded using the container's environment. If a variablecannot be resolved, the reference in the input string will be unchanged. Double $$ are reducedto a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. '$$(VAR_NAME)' willproduce the string literal '$(VAR_NAME)'. Escaped references will never be expanded, regardlessof whether the variable exists or not. Cannot be updated.More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
+- `env` (Attributes List) List of environment variables to set in the container.Cannot be updated. (see [below for nested schema](#nestedatt--spec--template--spec--ephemeral_containers--env))
+- `env_from` (Attributes List) List of sources to populate environment variables in the container.The keys defined within a source must be a C_IDENTIFIER. All invalid keyswill be reported as an event when the container is starting. When a key exists in multiplesources, the value associated with the last source will take precedence.Values defined by an Env with a duplicate key will take precedence.Cannot be updated. (see [below for nested schema](#nestedatt--spec--template--spec--ephemeral_containers--env_from))
+- `image` (String) Container image name.More info: https://kubernetes.io/docs/concepts/containers/images
+- `image_pull_policy` (String) Image pull policy.One of Always, Never, IfNotPresent.Defaults to Always if :latest tag is specified, or IfNotPresent otherwise.Cannot be updated.More info: https://kubernetes.io/docs/concepts/containers/images#updating-images
- `lifecycle` (Attributes) Lifecycle is not allowed for ephemeral containers. (see [below for nested schema](#nestedatt--spec--template--spec--ephemeral_containers--lifecycle))
- `liveness_probe` (Attributes) Probes are not allowed for ephemeral containers. (see [below for nested schema](#nestedatt--spec--template--spec--ephemeral_containers--liveness_probe))
- `ports` (Attributes List) Ports are not allowed for ephemeral containers. (see [below for nested schema](#nestedatt--spec--template--spec--ephemeral_containers--ports))
- `readiness_probe` (Attributes) Probes are not allowed for ephemeral containers. (see [below for nested schema](#nestedatt--spec--template--spec--ephemeral_containers--readiness_probe))
- `resize_policy` (Attributes List) Resources resize policy for the container. (see [below for nested schema](#nestedatt--spec--template--spec--ephemeral_containers--resize_policy))
-- `resources` (Attributes) Resources are not allowed for ephemeral containers. Ephemeral containers use spare resources already allocated to the pod. (see [below for nested schema](#nestedatt--spec--template--spec--ephemeral_containers--resources))
-- `restart_policy` (String) Restart policy for the container to manage the restart behavior of each container within a pod. This may only be set for init containers. You cannot set this field on ephemeral containers.
-- `security_context` (Attributes) Optional: SecurityContext defines the security options the ephemeral container should be run with. If set, the fields of SecurityContext override the equivalent fields of PodSecurityContext. (see [below for nested schema](#nestedatt--spec--template--spec--ephemeral_containers--security_context))
+- `resources` (Attributes) Resources are not allowed for ephemeral containers. Ephemeral containers use spare resourcesalready allocated to the pod. (see [below for nested schema](#nestedatt--spec--template--spec--ephemeral_containers--resources))
+- `restart_policy` (String) Restart policy for the container to manage the restart behavior of eachcontainer within a pod.This may only be set for init containers. You cannot set this field onephemeral containers.
+- `security_context` (Attributes) Optional: SecurityContext defines the security options the ephemeral container should be run with.If set, the fields of SecurityContext override the equivalent fields of PodSecurityContext. (see [below for nested schema](#nestedatt--spec--template--spec--ephemeral_containers--security_context))
- `startup_probe` (Attributes) Probes are not allowed for ephemeral containers. (see [below for nested schema](#nestedatt--spec--template--spec--ephemeral_containers--startup_probe))
-- `stdin` (Boolean) Whether this container should allocate a buffer for stdin in the container runtime. If this is not set, reads from stdin in the container will always result in EOF. Default is false.
-- `stdin_once` (Boolean) Whether the container runtime should close the stdin channel after it has been opened by a single attach. When stdin is true the stdin stream will remain open across multiple attach sessions. If stdinOnce is set to true, stdin is opened on container start, is empty until the first client attaches to stdin, and then remains open and accepts data until the client disconnects, at which time stdin is closed and remains closed until the container is restarted. If this flag is false, a container processes that reads from stdin will never receive an EOF. Default is false
-- `target_container_name` (String) If set, the name of the container from PodSpec that this ephemeral container targets. The ephemeral container will be run in the namespaces (IPC, PID, etc) of this container. If not set then the ephemeral container uses the namespaces configured in the Pod spec. The container runtime must implement support for this feature. If the runtime does not support namespace targeting then the result of setting this field is undefined.
-- `termination_message_path` (String) Optional: Path at which the file to which the container's termination message will be written is mounted into the container's filesystem. Message written is intended to be brief final status, such as an assertion failure message. Will be truncated by the node if greater than 4096 bytes. The total message length across all containers will be limited to 12kb. Defaults to /dev/termination-log. Cannot be updated.
-- `termination_message_policy` (String) Indicate how the termination message should be populated. File will use the contents of terminationMessagePath to populate the container status message on both success and failure. FallbackToLogsOnError will use the last chunk of container log output if the termination message file is empty and the container exited with an error. The log output is limited to 2048 bytes or 80 lines, whichever is smaller. Defaults to File. Cannot be updated.
-- `tty` (Boolean) Whether this container should allocate a TTY for itself, also requires 'stdin' to be true. Default is false.
+- `stdin` (Boolean) Whether this container should allocate a buffer for stdin in the container runtime. If thisis not set, reads from stdin in the container will always result in EOF.Default is false.
+- `stdin_once` (Boolean) Whether the container runtime should close the stdin channel after it has been opened bya single attach. When stdin is true the stdin stream will remain open across multiple attachsessions. If stdinOnce is set to true, stdin is opened on container start, is empty until thefirst client attaches to stdin, and then remains open and accepts data until the client disconnects,at which time stdin is closed and remains closed until the container is restarted. If thisflag is false, a container processes that reads from stdin will never receive an EOF.Default is false
+- `target_container_name` (String) If set, the name of the container from PodSpec that this ephemeral container targets.The ephemeral container will be run in the namespaces (IPC, PID, etc) of this container.If not set then the ephemeral container uses the namespaces configured in the Pod spec.The container runtime must implement support for this feature. If the runtime does notsupport namespace targeting then the result of setting this field is undefined.
+- `termination_message_path` (String) Optional: Path at which the file to which the container's termination messagewill be written is mounted into the container's filesystem.Message written is intended to be brief final status, such as an assertion failure message.Will be truncated by the node if greater than 4096 bytes. The total message length acrossall containers will be limited to 12kb.Defaults to /dev/termination-log.Cannot be updated.
+- `termination_message_policy` (String) Indicate how the termination message should be populated. File will use the contents ofterminationMessagePath to populate the container status message on both success and failure.FallbackToLogsOnError will use the last chunk of container log output if the terminationmessage file is empty and the container exited with an error.The log output is limited to 2048 bytes or 80 lines, whichever is smaller.Defaults to File.Cannot be updated.
+- `tty` (Boolean) Whether this container should allocate a TTY for itself, also requires 'stdin' to be true.Default is false.
- `volume_devices` (Attributes List) volumeDevices is the list of block devices to be used by the container. (see [below for nested schema](#nestedatt--spec--template--spec--ephemeral_containers--volume_devices))
-- `volume_mounts` (Attributes List) Pod volumes to mount into the container's filesystem. Subpath mounts are not allowed for ephemeral containers. Cannot be updated. (see [below for nested schema](#nestedatt--spec--template--spec--ephemeral_containers--volume_mounts))
-- `working_dir` (String) Container's working directory. If not specified, the container runtime's default will be used, which might be configured in the container image. Cannot be updated.
+- `volume_mounts` (Attributes List) Pod volumes to mount into the container's filesystem. Subpath mounts are not allowed for ephemeral containers.Cannot be updated. (see [below for nested schema](#nestedatt--spec--template--spec--ephemeral_containers--volume_mounts))
+- `working_dir` (String) Container's working directory.If not specified, the container runtime's default will be used, whichmight be configured in the container image.Cannot be updated.
### Nested Schema for `spec.template.spec.ephemeral_containers.env`
@@ -801,7 +801,7 @@ Required:
Optional:
-- `value` (String) Variable references $(VAR_NAME) are expanded using the previously defined environment variables in the container and any service environment variables. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. '$$(VAR_NAME)' will produce the string literal '$(VAR_NAME)'. Escaped references will never be expanded, regardless of whether the variable exists or not. Defaults to ''.
+- `value` (String) Variable references $(VAR_NAME) are expandedusing the previously defined environment variables in the container andany service environment variables. If a variable cannot be resolved,the reference in the input string will be unchanged. Double $$ are reducedto a single $, which allows for escaping the $(VAR_NAME) syntax: i.e.'$$(VAR_NAME)' will produce the string literal '$(VAR_NAME)'.Escaped references will never be expanded, regardless of whether the variableexists or not.Defaults to ''.
- `value_from` (Attributes) Source for the environment variable's value. Cannot be used if value is not empty. (see [below for nested schema](#nestedatt--spec--template--spec--ephemeral_containers--env--value_from))
@@ -810,8 +810,8 @@ Optional:
Optional:
- `config_map_key_ref` (Attributes) Selects a key of a ConfigMap. (see [below for nested schema](#nestedatt--spec--template--spec--ephemeral_containers--env--value_from--config_map_key_ref))
-- `field_ref` (Attributes) Selects a field of the pod: supports metadata.name, metadata.namespace, 'metadata.labels['']', 'metadata.annotations['']', spec.nodeName, spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs. (see [below for nested schema](#nestedatt--spec--template--spec--ephemeral_containers--env--value_from--field_ref))
-- `resource_field_ref` (Attributes) Selects a resource of the container: only resources limits and requests (limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu, requests.memory and requests.ephemeral-storage) are currently supported. (see [below for nested schema](#nestedatt--spec--template--spec--ephemeral_containers--env--value_from--resource_field_ref))
+- `field_ref` (Attributes) Selects a field of the pod: supports metadata.name, metadata.namespace, 'metadata.labels['']', 'metadata.annotations['']',spec.nodeName, spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs. (see [below for nested schema](#nestedatt--spec--template--spec--ephemeral_containers--env--value_from--field_ref))
+- `resource_field_ref` (Attributes) Selects a resource of the container: only resources limits and requests(limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu, requests.memory and requests.ephemeral-storage) are currently supported. (see [below for nested schema](#nestedatt--spec--template--spec--ephemeral_containers--env--value_from--resource_field_ref))
- `secret_key_ref` (Attributes) Selects a key of a secret in the pod's namespace (see [below for nested schema](#nestedatt--spec--template--spec--ephemeral_containers--env--value_from--secret_key_ref))
@@ -823,7 +823,7 @@ Required:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
@@ -861,7 +861,7 @@ Required:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
- `optional` (Boolean) Specify whether the Secret or its key must be defined
@@ -881,7 +881,7 @@ Optional:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
- `optional` (Boolean) Specify whether the ConfigMap must be defined
@@ -890,7 +890,7 @@ Optional:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
- `optional` (Boolean) Specify whether the Secret must be defined
@@ -900,8 +900,8 @@ Optional:
Optional:
-- `post_start` (Attributes) PostStart is called immediately after a container is created. If the handler fails, the container is terminated and restarted according to its restart policy. Other management of the container blocks until the hook completes. More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks (see [below for nested schema](#nestedatt--spec--template--spec--ephemeral_containers--lifecycle--post_start))
-- `pre_stop` (Attributes) PreStop is called immediately before a container is terminated due to an API request or management event such as liveness/startup probe failure, preemption, resource contention, etc. The handler is not called if the container crashes or exits. The Pod's termination grace period countdown begins before the PreStop hook is executed. Regardless of the outcome of the handler, the container will eventually terminate within the Pod's termination grace period (unless delayed by finalizers). Other management of the container blocks until the hook completes or until the termination grace period is reached. More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks (see [below for nested schema](#nestedatt--spec--template--spec--ephemeral_containers--lifecycle--pre_stop))
+- `post_start` (Attributes) PostStart is called immediately after a container is created. If the handler fails,the container is terminated and restarted according to its restart policy.Other management of the container blocks until the hook completes.More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks (see [below for nested schema](#nestedatt--spec--template--spec--ephemeral_containers--lifecycle--post_start))
+- `pre_stop` (Attributes) PreStop is called immediately before a container is terminated due to anAPI request or management event such as liveness/startup probe failure,preemption, resource contention, etc. The handler is not called if thecontainer crashes or exits. The Pod's termination grace period countdown begins before thePreStop hook is executed. Regardless of the outcome of the handler, thecontainer will eventually terminate within the Pod's termination graceperiod (unless delayed by finalizers). Other management of the container blocks until the hook completesor until the termination grace period is reached.More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks (see [below for nested schema](#nestedatt--spec--template--spec--ephemeral_containers--lifecycle--pre_stop))
### Nested Schema for `spec.template.spec.ephemeral_containers.lifecycle.post_start`
@@ -911,14 +911,14 @@ Optional:
- `exec` (Attributes) Exec specifies the action to take. (see [below for nested schema](#nestedatt--spec--template--spec--ephemeral_containers--lifecycle--post_start--exec))
- `http_get` (Attributes) HTTPGet specifies the http request to perform. (see [below for nested schema](#nestedatt--spec--template--spec--ephemeral_containers--lifecycle--post_start--http_get))
- `sleep` (Attributes) Sleep represents the duration that the container should sleep before being terminated. (see [below for nested schema](#nestedatt--spec--template--spec--ephemeral_containers--lifecycle--post_start--sleep))
-- `tcp_socket` (Attributes) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and kept for the backward compatibility. There are no validation of this field and lifecycle hooks will fail in runtime when tcp handler is specified. (see [below for nested schema](#nestedatt--spec--template--spec--ephemeral_containers--lifecycle--post_start--tcp_socket))
+- `tcp_socket` (Attributes) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and keptfor the backward compatibility. There are no validation of this field andlifecycle hooks will fail in runtime when tcp handler is specified. (see [below for nested schema](#nestedatt--spec--template--spec--ephemeral_containers--lifecycle--post_start--tcp_socket))
### Nested Schema for `spec.template.spec.ephemeral_containers.lifecycle.post_start.exec`
Optional:
-- `command` (List of String) Command is the command line to execute inside the container, the working directory for the command is root ('/') in the container's filesystem. The command is simply exec'd, it is not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
+- `command` (List of String) Command is the command line to execute inside the container, the working directory for thecommand is root ('/') in the container's filesystem. The command is simply exec'd, it isnot run inside a shell, so traditional shell instructions ('|', etc) won't work. To usea shell, you need to explicitly call out to that shell.Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
@@ -926,21 +926,21 @@ Optional:
Required:
-- `port` (String) Name or number of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
+- `port` (String) Name or number of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
Optional:
-- `host` (String) Host name to connect to, defaults to the pod IP. You probably want to set 'Host' in httpHeaders instead.
+- `host` (String) Host name to connect to, defaults to the pod IP. You probably want to set'Host' in httpHeaders instead.
- `http_headers` (Attributes List) Custom headers to set in the request. HTTP allows repeated headers. (see [below for nested schema](#nestedatt--spec--template--spec--ephemeral_containers--lifecycle--post_start--http_get--http_headers))
- `path` (String) Path to access on the HTTP server.
-- `scheme` (String) Scheme to use for connecting to the host. Defaults to HTTP.
+- `scheme` (String) Scheme to use for connecting to the host.Defaults to HTTP.
### Nested Schema for `spec.template.spec.ephemeral_containers.lifecycle.post_start.http_get.http_headers`
Required:
-- `name` (String) The header field name. This will be canonicalized upon output, so case-variant names will be understood as the same header.
+- `name` (String) The header field name.This will be canonicalized upon output, so case-variant names will be understood as the same header.
- `value` (String) The header field value
@@ -958,7 +958,7 @@ Required:
Required:
-- `port` (String) Number or name of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
+- `port` (String) Number or name of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
Optional:
@@ -974,14 +974,14 @@ Optional:
- `exec` (Attributes) Exec specifies the action to take. (see [below for nested schema](#nestedatt--spec--template--spec--ephemeral_containers--lifecycle--pre_stop--exec))
- `http_get` (Attributes) HTTPGet specifies the http request to perform. (see [below for nested schema](#nestedatt--spec--template--spec--ephemeral_containers--lifecycle--pre_stop--http_get))
- `sleep` (Attributes) Sleep represents the duration that the container should sleep before being terminated. (see [below for nested schema](#nestedatt--spec--template--spec--ephemeral_containers--lifecycle--pre_stop--sleep))
-- `tcp_socket` (Attributes) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and kept for the backward compatibility. There are no validation of this field and lifecycle hooks will fail in runtime when tcp handler is specified. (see [below for nested schema](#nestedatt--spec--template--spec--ephemeral_containers--lifecycle--pre_stop--tcp_socket))
+- `tcp_socket` (Attributes) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and keptfor the backward compatibility. There are no validation of this field andlifecycle hooks will fail in runtime when tcp handler is specified. (see [below for nested schema](#nestedatt--spec--template--spec--ephemeral_containers--lifecycle--pre_stop--tcp_socket))
### Nested Schema for `spec.template.spec.ephemeral_containers.lifecycle.pre_stop.exec`
Optional:
-- `command` (List of String) Command is the command line to execute inside the container, the working directory for the command is root ('/') in the container's filesystem. The command is simply exec'd, it is not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
+- `command` (List of String) Command is the command line to execute inside the container, the working directory for thecommand is root ('/') in the container's filesystem. The command is simply exec'd, it isnot run inside a shell, so traditional shell instructions ('|', etc) won't work. To usea shell, you need to explicitly call out to that shell.Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
@@ -989,21 +989,21 @@ Optional:
Required:
-- `port` (String) Name or number of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
+- `port` (String) Name or number of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
Optional:
-- `host` (String) Host name to connect to, defaults to the pod IP. You probably want to set 'Host' in httpHeaders instead.
+- `host` (String) Host name to connect to, defaults to the pod IP. You probably want to set'Host' in httpHeaders instead.
- `http_headers` (Attributes List) Custom headers to set in the request. HTTP allows repeated headers. (see [below for nested schema](#nestedatt--spec--template--spec--ephemeral_containers--lifecycle--pre_stop--http_get--http_headers))
- `path` (String) Path to access on the HTTP server.
-- `scheme` (String) Scheme to use for connecting to the host. Defaults to HTTP.
+- `scheme` (String) Scheme to use for connecting to the host.Defaults to HTTP.
### Nested Schema for `spec.template.spec.ephemeral_containers.lifecycle.pre_stop.http_get.http_headers`
Required:
-- `name` (String) The header field name. This will be canonicalized upon output, so case-variant names will be understood as the same header.
+- `name` (String) The header field name.This will be canonicalized upon output, so case-variant names will be understood as the same header.
- `value` (String) The header field value
@@ -1021,7 +1021,7 @@ Required:
Required:
-- `port` (String) Number or name of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
+- `port` (String) Number or name of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
Optional:
@@ -1036,22 +1036,22 @@ Optional:
Optional:
- `exec` (Attributes) Exec specifies the action to take. (see [below for nested schema](#nestedatt--spec--template--spec--ephemeral_containers--liveness_probe--exec))
-- `failure_threshold` (Number) Minimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1.
+- `failure_threshold` (Number) Minimum consecutive failures for the probe to be considered failed after having succeeded.Defaults to 3. Minimum value is 1.
- `grpc` (Attributes) GRPC specifies an action involving a GRPC port. (see [below for nested schema](#nestedatt--spec--template--spec--ephemeral_containers--liveness_probe--grpc))
- `http_get` (Attributes) HTTPGet specifies the http request to perform. (see [below for nested schema](#nestedatt--spec--template--spec--ephemeral_containers--liveness_probe--http_get))
-- `initial_delay_seconds` (Number) Number of seconds after the container has started before liveness probes are initiated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-- `period_seconds` (Number) How often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1.
-- `success_threshold` (Number) Minimum consecutive successes for the probe to be considered successful after having failed. Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
+- `initial_delay_seconds` (Number) Number of seconds after the container has started before liveness probes are initiated.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
+- `period_seconds` (Number) How often (in seconds) to perform the probe.Default to 10 seconds. Minimum value is 1.
+- `success_threshold` (Number) Minimum consecutive successes for the probe to be considered successful after having failed.Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
- `tcp_socket` (Attributes) TCPSocket specifies an action involving a TCP port. (see [below for nested schema](#nestedatt--spec--template--spec--ephemeral_containers--liveness_probe--tcp_socket))
-- `termination_grace_period_seconds` (Number) Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
-- `timeout_seconds` (Number) Number of seconds after which the probe times out. Defaults to 1 second. Minimum value is 1. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
+- `termination_grace_period_seconds` (Number) Optional duration in seconds the pod needs to terminate gracefully upon probe failure.The grace period is the duration in seconds after the processes running in the pod are senta termination signal and the time when the processes are forcibly halted with a kill signal.Set this value longer than the expected cleanup time for your process.If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, thisvalue overrides the value provided by the pod spec.Value must be non-negative integer. The value zero indicates stop immediately viathe kill signal (no opportunity to shut down).This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate.Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
+- `timeout_seconds` (Number) Number of seconds after which the probe times out.Defaults to 1 second. Minimum value is 1.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
### Nested Schema for `spec.template.spec.ephemeral_containers.liveness_probe.exec`
Optional:
-- `command` (List of String) Command is the command line to execute inside the container, the working directory for the command is root ('/') in the container's filesystem. The command is simply exec'd, it is not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
+- `command` (List of String) Command is the command line to execute inside the container, the working directory for thecommand is root ('/') in the container's filesystem. The command is simply exec'd, it isnot run inside a shell, so traditional shell instructions ('|', etc) won't work. To usea shell, you need to explicitly call out to that shell.Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
@@ -1063,7 +1063,7 @@ Required:
Optional:
-- `service` (String) Service is the name of the service to place in the gRPC HealthCheckRequest (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md). If this is not specified, the default behavior is defined by gRPC.
+- `service` (String) Service is the name of the service to place in the gRPC HealthCheckRequest(see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).If this is not specified, the default behavior is defined by gRPC.
@@ -1071,21 +1071,21 @@ Optional:
Required:
-- `port` (String) Name or number of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
+- `port` (String) Name or number of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
Optional:
-- `host` (String) Host name to connect to, defaults to the pod IP. You probably want to set 'Host' in httpHeaders instead.
+- `host` (String) Host name to connect to, defaults to the pod IP. You probably want to set'Host' in httpHeaders instead.
- `http_headers` (Attributes List) Custom headers to set in the request. HTTP allows repeated headers. (see [below for nested schema](#nestedatt--spec--template--spec--ephemeral_containers--liveness_probe--http_get--http_headers))
- `path` (String) Path to access on the HTTP server.
-- `scheme` (String) Scheme to use for connecting to the host. Defaults to HTTP.
+- `scheme` (String) Scheme to use for connecting to the host.Defaults to HTTP.
### Nested Schema for `spec.template.spec.ephemeral_containers.liveness_probe.http_get.http_headers`
Required:
-- `name` (String) The header field name. This will be canonicalized upon output, so case-variant names will be understood as the same header.
+- `name` (String) The header field name.This will be canonicalized upon output, so case-variant names will be understood as the same header.
- `value` (String) The header field value
@@ -1095,7 +1095,7 @@ Required:
Required:
-- `port` (String) Number or name of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
+- `port` (String) Number or name of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
Optional:
@@ -1108,14 +1108,14 @@ Optional:
Required:
-- `container_port` (Number) Number of port to expose on the pod's IP address. This must be a valid port number, 0 < x < 65536.
+- `container_port` (Number) Number of port to expose on the pod's IP address.This must be a valid port number, 0 < x < 65536.
Optional:
- `host_ip` (String) What host IP to bind the external port to.
-- `host_port` (Number) Number of port to expose on the host. If specified, this must be a valid port number, 0 < x < 65536. If HostNetwork is specified, this must match ContainerPort. Most containers do not need this.
-- `name` (String) If specified, this must be an IANA_SVC_NAME and unique within the pod. Each named port in a pod must have a unique name. Name for the port that can be referred to by services.
-- `protocol` (String) Protocol for port. Must be UDP, TCP, or SCTP. Defaults to 'TCP'.
+- `host_port` (Number) Number of port to expose on the host.If specified, this must be a valid port number, 0 < x < 65536.If HostNetwork is specified, this must match ContainerPort.Most containers do not need this.
+- `name` (String) If specified, this must be an IANA_SVC_NAME and unique within the pod. Eachnamed port in a pod must have a unique name. Name for the port that can bereferred to by services.
+- `protocol` (String) Protocol for port. Must be UDP, TCP, or SCTP.Defaults to 'TCP'.
@@ -1124,22 +1124,22 @@ Optional:
Optional:
- `exec` (Attributes) Exec specifies the action to take. (see [below for nested schema](#nestedatt--spec--template--spec--ephemeral_containers--readiness_probe--exec))
-- `failure_threshold` (Number) Minimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1.
+- `failure_threshold` (Number) Minimum consecutive failures for the probe to be considered failed after having succeeded.Defaults to 3. Minimum value is 1.
- `grpc` (Attributes) GRPC specifies an action involving a GRPC port. (see [below for nested schema](#nestedatt--spec--template--spec--ephemeral_containers--readiness_probe--grpc))
- `http_get` (Attributes) HTTPGet specifies the http request to perform. (see [below for nested schema](#nestedatt--spec--template--spec--ephemeral_containers--readiness_probe--http_get))
-- `initial_delay_seconds` (Number) Number of seconds after the container has started before liveness probes are initiated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-- `period_seconds` (Number) How often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1.
-- `success_threshold` (Number) Minimum consecutive successes for the probe to be considered successful after having failed. Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
+- `initial_delay_seconds` (Number) Number of seconds after the container has started before liveness probes are initiated.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
+- `period_seconds` (Number) How often (in seconds) to perform the probe.Default to 10 seconds. Minimum value is 1.
+- `success_threshold` (Number) Minimum consecutive successes for the probe to be considered successful after having failed.Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
- `tcp_socket` (Attributes) TCPSocket specifies an action involving a TCP port. (see [below for nested schema](#nestedatt--spec--template--spec--ephemeral_containers--readiness_probe--tcp_socket))
-- `termination_grace_period_seconds` (Number) Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
-- `timeout_seconds` (Number) Number of seconds after which the probe times out. Defaults to 1 second. Minimum value is 1. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
+- `termination_grace_period_seconds` (Number) Optional duration in seconds the pod needs to terminate gracefully upon probe failure.The grace period is the duration in seconds after the processes running in the pod are senta termination signal and the time when the processes are forcibly halted with a kill signal.Set this value longer than the expected cleanup time for your process.If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, thisvalue overrides the value provided by the pod spec.Value must be non-negative integer. The value zero indicates stop immediately viathe kill signal (no opportunity to shut down).This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate.Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
+- `timeout_seconds` (Number) Number of seconds after which the probe times out.Defaults to 1 second. Minimum value is 1.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
### Nested Schema for `spec.template.spec.ephemeral_containers.readiness_probe.exec`
Optional:
-- `command` (List of String) Command is the command line to execute inside the container, the working directory for the command is root ('/') in the container's filesystem. The command is simply exec'd, it is not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
+- `command` (List of String) Command is the command line to execute inside the container, the working directory for thecommand is root ('/') in the container's filesystem. The command is simply exec'd, it isnot run inside a shell, so traditional shell instructions ('|', etc) won't work. To usea shell, you need to explicitly call out to that shell.Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
@@ -1151,7 +1151,7 @@ Required:
Optional:
-- `service` (String) Service is the name of the service to place in the gRPC HealthCheckRequest (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md). If this is not specified, the default behavior is defined by gRPC.
+- `service` (String) Service is the name of the service to place in the gRPC HealthCheckRequest(see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).If this is not specified, the default behavior is defined by gRPC.
@@ -1159,21 +1159,21 @@ Optional:
Required:
-- `port` (String) Name or number of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
+- `port` (String) Name or number of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
Optional:
-- `host` (String) Host name to connect to, defaults to the pod IP. You probably want to set 'Host' in httpHeaders instead.
+- `host` (String) Host name to connect to, defaults to the pod IP. You probably want to set'Host' in httpHeaders instead.
- `http_headers` (Attributes List) Custom headers to set in the request. HTTP allows repeated headers. (see [below for nested schema](#nestedatt--spec--template--spec--ephemeral_containers--readiness_probe--http_get--http_headers))
- `path` (String) Path to access on the HTTP server.
-- `scheme` (String) Scheme to use for connecting to the host. Defaults to HTTP.
+- `scheme` (String) Scheme to use for connecting to the host.Defaults to HTTP.
### Nested Schema for `spec.template.spec.ephemeral_containers.readiness_probe.http_get.http_headers`
Required:
-- `name` (String) The header field name. This will be canonicalized upon output, so case-variant names will be understood as the same header.
+- `name` (String) The header field name.This will be canonicalized upon output, so case-variant names will be understood as the same header.
- `value` (String) The header field value
@@ -1183,7 +1183,7 @@ Required:
Required:
-- `port` (String) Number or name of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
+- `port` (String) Number or name of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
Optional:
@@ -1196,8 +1196,8 @@ Optional:
Required:
-- `resource_name` (String) Name of the resource to which this resource resize policy applies. Supported values: cpu, memory.
-- `restart_policy` (String) Restart policy to apply when specified resource is resized. If not specified, it defaults to NotRequired.
+- `resource_name` (String) Name of the resource to which this resource resize policy applies.Supported values: cpu, memory.
+- `restart_policy` (String) Restart policy to apply when specified resource is resized.If not specified, it defaults to NotRequired.
@@ -1205,16 +1205,16 @@ Required:
Optional:
-- `claims` (Attributes List) Claims lists the names of resources, defined in spec.resourceClaims, that are used by this container. This is an alpha field and requires enabling the DynamicResourceAllocation feature gate. This field is immutable. It can only be set for containers. (see [below for nested schema](#nestedatt--spec--template--spec--ephemeral_containers--resources--claims))
-- `limits` (Map of String) Limits describes the maximum amount of compute resources allowed. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-- `requests` (Map of String) Requests describes the minimum amount of compute resources required. If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, otherwise to an implementation-defined value. Requests cannot exceed Limits. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
+- `claims` (Attributes List) Claims lists the names of resources, defined in spec.resourceClaims,that are used by this container.This is an alpha field and requires enabling theDynamicResourceAllocation feature gate.This field is immutable. It can only be set for containers. (see [below for nested schema](#nestedatt--spec--template--spec--ephemeral_containers--resources--claims))
+- `limits` (Map of String) Limits describes the maximum amount of compute resources allowed.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
+- `requests` (Map of String) Requests describes the minimum amount of compute resources required.If Requests is omitted for a container, it defaults to Limits if that is explicitly specified,otherwise to an implementation-defined value. Requests cannot exceed Limits.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
### Nested Schema for `spec.template.spec.ephemeral_containers.resources.claims`
Required:
-- `name` (String) Name must match the name of one entry in pod.spec.resourceClaims of the Pod where this field is used. It makes that resource available inside a container.
+- `name` (String) Name must match the name of one entry in pod.spec.resourceClaims ofthe Pod where this field is used. It makes that resource availableinside a container.
@@ -1223,17 +1223,17 @@ Required:
Optional:
-- `allow_privilege_escalation` (Boolean) AllowPrivilegeEscalation controls whether a process can gain more privileges than its parent process. This bool directly controls if the no_new_privs flag will be set on the container process. AllowPrivilegeEscalation is true always when the container is: 1) run as Privileged 2) has CAP_SYS_ADMIN Note that this field cannot be set when spec.os.name is windows.
-- `capabilities` (Attributes) The capabilities to add/drop when running containers. Defaults to the default set of capabilities granted by the container runtime. Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--template--spec--ephemeral_containers--security_context--capabilities))
-- `privileged` (Boolean) Run container in privileged mode. Processes in privileged containers are essentially equivalent to root on the host. Defaults to false. Note that this field cannot be set when spec.os.name is windows.
-- `proc_mount` (String) procMount denotes the type of proc mount to use for the containers. The default is DefaultProcMount which uses the container runtime defaults for readonly paths and masked paths. This requires the ProcMountType feature flag to be enabled. Note that this field cannot be set when spec.os.name is windows.
-- `read_only_root_filesystem` (Boolean) Whether this container has a read-only root filesystem. Default is false. Note that this field cannot be set when spec.os.name is windows.
-- `run_as_group` (Number) The GID to run the entrypoint of the container process. Uses runtime default if unset. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence. Note that this field cannot be set when spec.os.name is windows.
-- `run_as_non_root` (Boolean) Indicates that the container must run as a non-root user. If true, the Kubelet will validate the image at runtime to ensure that it does not run as UID 0 (root) and fail to start the container if it does. If unset or false, no such validation will be performed. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
-- `run_as_user` (Number) The UID to run the entrypoint of the container process. Defaults to user specified in image metadata if unspecified. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence. Note that this field cannot be set when spec.os.name is windows.
-- `se_linux_options` (Attributes) The SELinux context to be applied to the container. If unspecified, the container runtime will allocate a random SELinux context for each container. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence. Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--template--spec--ephemeral_containers--security_context--se_linux_options))
-- `seccomp_profile` (Attributes) The seccomp options to use by this container. If seccomp options are provided at both the pod & container level, the container options override the pod options. Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--template--spec--ephemeral_containers--security_context--seccomp_profile))
-- `windows_options` (Attributes) The Windows specific settings applied to all containers. If unspecified, the options from the PodSecurityContext will be used. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence. Note that this field cannot be set when spec.os.name is linux. (see [below for nested schema](#nestedatt--spec--template--spec--ephemeral_containers--security_context--windows_options))
+- `allow_privilege_escalation` (Boolean) AllowPrivilegeEscalation controls whether a process can gain moreprivileges than its parent process. This bool directly controls ifthe no_new_privs flag will be set on the container process.AllowPrivilegeEscalation is true always when the container is:1) run as Privileged2) has CAP_SYS_ADMINNote that this field cannot be set when spec.os.name is windows.
+- `capabilities` (Attributes) The capabilities to add/drop when running containers.Defaults to the default set of capabilities granted by the container runtime.Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--template--spec--ephemeral_containers--security_context--capabilities))
+- `privileged` (Boolean) Run container in privileged mode.Processes in privileged containers are essentially equivalent to root on the host.Defaults to false.Note that this field cannot be set when spec.os.name is windows.
+- `proc_mount` (String) procMount denotes the type of proc mount to use for the containers.The default is DefaultProcMount which uses the container runtime defaults forreadonly paths and masked paths.This requires the ProcMountType feature flag to be enabled.Note that this field cannot be set when spec.os.name is windows.
+- `read_only_root_filesystem` (Boolean) Whether this container has a read-only root filesystem.Default is false.Note that this field cannot be set when spec.os.name is windows.
+- `run_as_group` (Number) The GID to run the entrypoint of the container process.Uses runtime default if unset.May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.Note that this field cannot be set when spec.os.name is windows.
+- `run_as_non_root` (Boolean) Indicates that the container must run as a non-root user.If true, the Kubelet will validate the image at runtime to ensure that itdoes not run as UID 0 (root) and fail to start the container if it does.If unset or false, no such validation will be performed.May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.
+- `run_as_user` (Number) The UID to run the entrypoint of the container process.Defaults to user specified in image metadata if unspecified.May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.Note that this field cannot be set when spec.os.name is windows.
+- `se_linux_options` (Attributes) The SELinux context to be applied to the container.If unspecified, the container runtime will allocate a random SELinux context for eachcontainer. May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--template--spec--ephemeral_containers--security_context--se_linux_options))
+- `seccomp_profile` (Attributes) The seccomp options to use by this container. If seccomp options areprovided at both the pod & container level, the container optionsoverride the pod options.Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--template--spec--ephemeral_containers--security_context--seccomp_profile))
+- `windows_options` (Attributes) The Windows specific settings applied to all containers.If unspecified, the options from the PodSecurityContext will be used.If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.Note that this field cannot be set when spec.os.name is linux. (see [below for nested schema](#nestedatt--spec--template--spec--ephemeral_containers--security_context--windows_options))
### Nested Schema for `spec.template.spec.ephemeral_containers.security_context.capabilities`
@@ -1260,11 +1260,11 @@ Optional:
Required:
-- `type` (String) type indicates which kind of seccomp profile will be applied. Valid options are: Localhost - a profile defined in a file on the node should be used. RuntimeDefault - the container runtime default profile should be used. Unconfined - no profile should be applied.
+- `type` (String) type indicates which kind of seccomp profile will be applied.Valid options are:Localhost - a profile defined in a file on the node should be used.RuntimeDefault - the container runtime default profile should be used.Unconfined - no profile should be applied.
Optional:
-- `localhost_profile` (String) localhostProfile indicates a profile defined in a file on the node should be used. The profile must be preconfigured on the node to work. Must be a descending path, relative to the kubelet's configured seccomp profile location. Must be set if type is 'Localhost'. Must NOT be set for any other type.
+- `localhost_profile` (String) localhostProfile indicates a profile defined in a file on the node should be used.The profile must be preconfigured on the node to work.Must be a descending path, relative to the kubelet's configured seccomp profile location.Must be set if type is 'Localhost'. Must NOT be set for any other type.
@@ -1272,10 +1272,10 @@ Optional:
Optional:
-- `gmsa_credential_spec` (String) GMSACredentialSpec is where the GMSA admission webhook (https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of the GMSA credential spec named by the GMSACredentialSpecName field.
+- `gmsa_credential_spec` (String) GMSACredentialSpec is where the GMSA admission webhook(https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of theGMSA credential spec named by the GMSACredentialSpecName field.
- `gmsa_credential_spec_name` (String) GMSACredentialSpecName is the name of the GMSA credential spec to use.
-- `host_process` (Boolean) HostProcess determines if a container should be run as a 'Host Process' container. All of a Pod's containers must have the same effective HostProcess value (it is not allowed to have a mix of HostProcess containers and non-HostProcess containers). In addition, if HostProcess is true then HostNetwork must also be set to true.
-- `run_as_user_name` (String) The UserName in Windows to run the entrypoint of the container process. Defaults to the user specified in image metadata if unspecified. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
+- `host_process` (Boolean) HostProcess determines if a container should be run as a 'Host Process' container.All of a Pod's containers must have the same effective HostProcess value(it is not allowed to have a mix of HostProcess containers and non-HostProcess containers).In addition, if HostProcess is true then HostNetwork must also be set to true.
+- `run_as_user_name` (String) The UserName in Windows to run the entrypoint of the container process.Defaults to the user specified in image metadata if unspecified.May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.
@@ -1285,22 +1285,22 @@ Optional:
Optional:
- `exec` (Attributes) Exec specifies the action to take. (see [below for nested schema](#nestedatt--spec--template--spec--ephemeral_containers--startup_probe--exec))
-- `failure_threshold` (Number) Minimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1.
+- `failure_threshold` (Number) Minimum consecutive failures for the probe to be considered failed after having succeeded.Defaults to 3. Minimum value is 1.
- `grpc` (Attributes) GRPC specifies an action involving a GRPC port. (see [below for nested schema](#nestedatt--spec--template--spec--ephemeral_containers--startup_probe--grpc))
- `http_get` (Attributes) HTTPGet specifies the http request to perform. (see [below for nested schema](#nestedatt--spec--template--spec--ephemeral_containers--startup_probe--http_get))
-- `initial_delay_seconds` (Number) Number of seconds after the container has started before liveness probes are initiated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-- `period_seconds` (Number) How often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1.
-- `success_threshold` (Number) Minimum consecutive successes for the probe to be considered successful after having failed. Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
+- `initial_delay_seconds` (Number) Number of seconds after the container has started before liveness probes are initiated.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
+- `period_seconds` (Number) How often (in seconds) to perform the probe.Default to 10 seconds. Minimum value is 1.
+- `success_threshold` (Number) Minimum consecutive successes for the probe to be considered successful after having failed.Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
- `tcp_socket` (Attributes) TCPSocket specifies an action involving a TCP port. (see [below for nested schema](#nestedatt--spec--template--spec--ephemeral_containers--startup_probe--tcp_socket))
-- `termination_grace_period_seconds` (Number) Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
-- `timeout_seconds` (Number) Number of seconds after which the probe times out. Defaults to 1 second. Minimum value is 1. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
+- `termination_grace_period_seconds` (Number) Optional duration in seconds the pod needs to terminate gracefully upon probe failure.The grace period is the duration in seconds after the processes running in the pod are senta termination signal and the time when the processes are forcibly halted with a kill signal.Set this value longer than the expected cleanup time for your process.If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, thisvalue overrides the value provided by the pod spec.Value must be non-negative integer. The value zero indicates stop immediately viathe kill signal (no opportunity to shut down).This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate.Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
+- `timeout_seconds` (Number) Number of seconds after which the probe times out.Defaults to 1 second. Minimum value is 1.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
### Nested Schema for `spec.template.spec.ephemeral_containers.startup_probe.exec`
Optional:
-- `command` (List of String) Command is the command line to execute inside the container, the working directory for the command is root ('/') in the container's filesystem. The command is simply exec'd, it is not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
+- `command` (List of String) Command is the command line to execute inside the container, the working directory for thecommand is root ('/') in the container's filesystem. The command is simply exec'd, it isnot run inside a shell, so traditional shell instructions ('|', etc) won't work. To usea shell, you need to explicitly call out to that shell.Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
@@ -1312,7 +1312,7 @@ Required:
Optional:
-- `service` (String) Service is the name of the service to place in the gRPC HealthCheckRequest (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md). If this is not specified, the default behavior is defined by gRPC.
+- `service` (String) Service is the name of the service to place in the gRPC HealthCheckRequest(see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).If this is not specified, the default behavior is defined by gRPC.
@@ -1320,21 +1320,21 @@ Optional:
Required:
-- `port` (String) Name or number of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
+- `port` (String) Name or number of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
Optional:
-- `host` (String) Host name to connect to, defaults to the pod IP. You probably want to set 'Host' in httpHeaders instead.
+- `host` (String) Host name to connect to, defaults to the pod IP. You probably want to set'Host' in httpHeaders instead.
- `http_headers` (Attributes List) Custom headers to set in the request. HTTP allows repeated headers. (see [below for nested schema](#nestedatt--spec--template--spec--ephemeral_containers--startup_probe--http_get--http_headers))
- `path` (String) Path to access on the HTTP server.
-- `scheme` (String) Scheme to use for connecting to the host. Defaults to HTTP.
+- `scheme` (String) Scheme to use for connecting to the host.Defaults to HTTP.
### Nested Schema for `spec.template.spec.ephemeral_containers.startup_probe.http_get.http_headers`
Required:
-- `name` (String) The header field name. This will be canonicalized upon output, so case-variant names will be understood as the same header.
+- `name` (String) The header field name.This will be canonicalized upon output, so case-variant names will be understood as the same header.
- `value` (String) The header field value
@@ -1344,7 +1344,7 @@ Required:
Required:
-- `port` (String) Number or name of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
+- `port` (String) Number or name of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
Optional:
@@ -1366,15 +1366,15 @@ Required:
Required:
-- `mount_path` (String) Path within the container at which the volume should be mounted. Must not contain ':'.
+- `mount_path` (String) Path within the container at which the volume should be mounted. Mustnot contain ':'.
- `name` (String) This must match the Name of a Volume.
Optional:
-- `mount_propagation` (String) mountPropagation determines how mounts are propagated from the host to container and the other way around. When not set, MountPropagationNone is used. This field is beta in 1.10.
-- `read_only` (Boolean) Mounted read-only if true, read-write otherwise (false or unspecified). Defaults to false.
-- `sub_path` (String) Path within the volume from which the container's volume should be mounted. Defaults to '' (volume's root).
-- `sub_path_expr` (String) Expanded path within the volume from which the container's volume should be mounted. Behaves similarly to SubPath but environment variable references $(VAR_NAME) are expanded using the container's environment. Defaults to '' (volume's root). SubPathExpr and SubPath are mutually exclusive.
+- `mount_propagation` (String) mountPropagation determines how mounts are propagated from the hostto container and the other way around.When not set, MountPropagationNone is used.This field is beta in 1.10.
+- `read_only` (Boolean) Mounted read-only if true, read-write otherwise (false or unspecified).Defaults to false.
+- `sub_path` (String) Path within the volume from which the container's volume should be mounted.Defaults to '' (volume's root).
+- `sub_path_expr` (String) Expanded path within the volume from which the container's volume should be mounted.Behaves similarly to SubPath but environment variable references $(VAR_NAME) are expanded using the container's environment.Defaults to '' (volume's root).SubPathExpr and SubPath are mutually exclusive.
@@ -1383,33 +1383,33 @@ Optional:
Required:
-- `name` (String) Name of the container specified as a DNS_LABEL. Each container in a pod must have a unique name (DNS_LABEL). Cannot be updated.
+- `name` (String) Name of the container specified as a DNS_LABEL.Each container in a pod must have a unique name (DNS_LABEL).Cannot be updated.
Optional:
-- `args` (List of String) Arguments to the entrypoint. The container image's CMD is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container's environment. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. '$$(VAR_NAME)' will produce the string literal '$(VAR_NAME)'. Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
-- `command` (List of String) Entrypoint array. Not executed within a shell. The container image's ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container's environment. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. '$$(VAR_NAME)' will produce the string literal '$(VAR_NAME)'. Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
-- `env` (Attributes List) List of environment variables to set in the container. Cannot be updated. (see [below for nested schema](#nestedatt--spec--template--spec--init_containers--env))
-- `env_from` (Attributes List) List of sources to populate environment variables in the container. The keys defined within a source must be a C_IDENTIFIER. All invalid keys will be reported as an event when the container is starting. When a key exists in multiple sources, the value associated with the last source will take precedence. Values defined by an Env with a duplicate key will take precedence. Cannot be updated. (see [below for nested schema](#nestedatt--spec--template--spec--init_containers--env_from))
-- `image` (String) Container image name. More info: https://kubernetes.io/docs/concepts/containers/images This field is optional to allow higher level config management to default or override container images in workload controllers like Deployments and StatefulSets.
-- `image_pull_policy` (String) Image pull policy. One of Always, Never, IfNotPresent. Defaults to Always if :latest tag is specified, or IfNotPresent otherwise. Cannot be updated. More info: https://kubernetes.io/docs/concepts/containers/images#updating-images
-- `lifecycle` (Attributes) Actions that the management system should take in response to container lifecycle events. Cannot be updated. (see [below for nested schema](#nestedatt--spec--template--spec--init_containers--lifecycle))
-- `liveness_probe` (Attributes) Periodic probe of container liveness. Container will be restarted if the probe fails. Cannot be updated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes (see [below for nested schema](#nestedatt--spec--template--spec--init_containers--liveness_probe))
-- `ports` (Attributes List) List of ports to expose from the container. Not specifying a port here DOES NOT prevent that port from being exposed. Any port which is listening on the default '0.0.0.0' address inside a container will be accessible from the network. Modifying this array with strategic merge patch may corrupt the data. For more information See https://github.com/kubernetes/kubernetes/issues/108255. Cannot be updated. (see [below for nested schema](#nestedatt--spec--template--spec--init_containers--ports))
-- `readiness_probe` (Attributes) Periodic probe of container service readiness. Container will be removed from service endpoints if the probe fails. Cannot be updated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes (see [below for nested schema](#nestedatt--spec--template--spec--init_containers--readiness_probe))
+- `args` (List of String) Arguments to the entrypoint.The container image's CMD is used if this is not provided.Variable references $(VAR_NAME) are expanded using the container's environment. If a variablecannot be resolved, the reference in the input string will be unchanged. Double $$ are reducedto a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. '$$(VAR_NAME)' willproduce the string literal '$(VAR_NAME)'. Escaped references will never be expanded, regardlessof whether the variable exists or not. Cannot be updated.More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
+- `command` (List of String) Entrypoint array. Not executed within a shell.The container image's ENTRYPOINT is used if this is not provided.Variable references $(VAR_NAME) are expanded using the container's environment. If a variablecannot be resolved, the reference in the input string will be unchanged. Double $$ are reducedto a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. '$$(VAR_NAME)' willproduce the string literal '$(VAR_NAME)'. Escaped references will never be expanded, regardlessof whether the variable exists or not. Cannot be updated.More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
+- `env` (Attributes List) List of environment variables to set in the container.Cannot be updated. (see [below for nested schema](#nestedatt--spec--template--spec--init_containers--env))
+- `env_from` (Attributes List) List of sources to populate environment variables in the container.The keys defined within a source must be a C_IDENTIFIER. All invalid keyswill be reported as an event when the container is starting. When a key exists in multiplesources, the value associated with the last source will take precedence.Values defined by an Env with a duplicate key will take precedence.Cannot be updated. (see [below for nested schema](#nestedatt--spec--template--spec--init_containers--env_from))
+- `image` (String) Container image name.More info: https://kubernetes.io/docs/concepts/containers/imagesThis field is optional to allow higher level config management to default or overridecontainer images in workload controllers like Deployments and StatefulSets.
+- `image_pull_policy` (String) Image pull policy.One of Always, Never, IfNotPresent.Defaults to Always if :latest tag is specified, or IfNotPresent otherwise.Cannot be updated.More info: https://kubernetes.io/docs/concepts/containers/images#updating-images
+- `lifecycle` (Attributes) Actions that the management system should take in response to container lifecycle events.Cannot be updated. (see [below for nested schema](#nestedatt--spec--template--spec--init_containers--lifecycle))
+- `liveness_probe` (Attributes) Periodic probe of container liveness.Container will be restarted if the probe fails.Cannot be updated.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes (see [below for nested schema](#nestedatt--spec--template--spec--init_containers--liveness_probe))
+- `ports` (Attributes List) List of ports to expose from the container. Not specifying a port hereDOES NOT prevent that port from being exposed. Any port which islistening on the default '0.0.0.0' address inside a container will beaccessible from the network.Modifying this array with strategic merge patch may corrupt the data.For more information See https://github.com/kubernetes/kubernetes/issues/108255.Cannot be updated. (see [below for nested schema](#nestedatt--spec--template--spec--init_containers--ports))
+- `readiness_probe` (Attributes) Periodic probe of container service readiness.Container will be removed from service endpoints if the probe fails.Cannot be updated.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes (see [below for nested schema](#nestedatt--spec--template--spec--init_containers--readiness_probe))
- `resize_policy` (Attributes List) Resources resize policy for the container. (see [below for nested schema](#nestedatt--spec--template--spec--init_containers--resize_policy))
-- `resources` (Attributes) Compute Resources required by this container. Cannot be updated. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/ (see [below for nested schema](#nestedatt--spec--template--spec--init_containers--resources))
-- `restart_policy` (String) RestartPolicy defines the restart behavior of individual containers in a pod. This field may only be set for init containers, and the only allowed value is 'Always'. For non-init containers or when this field is not specified, the restart behavior is defined by the Pod's restart policy and the container type. Setting the RestartPolicy as 'Always' for the init container will have the following effect: this init container will be continually restarted on exit until all regular containers have terminated. Once all regular containers have completed, all init containers with restartPolicy 'Always' will be shut down. This lifecycle differs from normal init containers and is often referred to as a 'sidecar' container. Although this init container still starts in the init container sequence, it does not wait for the container to complete before proceeding to the next init container. Instead, the next init container starts immediately after this init container is started, or after any startupProbe has successfully completed.
-- `security_context` (Attributes) SecurityContext defines the security options the container should be run with. If set, the fields of SecurityContext override the equivalent fields of PodSecurityContext. More info: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ (see [below for nested schema](#nestedatt--spec--template--spec--init_containers--security_context))
-- `startup_probe` (Attributes) StartupProbe indicates that the Pod has successfully initialized. If specified, no other probes are executed until this completes successfully. If this probe fails, the Pod will be restarted, just as if the livenessProbe failed. This can be used to provide different probe parameters at the beginning of a Pod's lifecycle, when it might take a long time to load data or warm a cache, than during steady-state operation. This cannot be updated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes (see [below for nested schema](#nestedatt--spec--template--spec--init_containers--startup_probe))
-- `stdin` (Boolean) Whether this container should allocate a buffer for stdin in the container runtime. If this is not set, reads from stdin in the container will always result in EOF. Default is false.
-- `stdin_once` (Boolean) Whether the container runtime should close the stdin channel after it has been opened by a single attach. When stdin is true the stdin stream will remain open across multiple attach sessions. If stdinOnce is set to true, stdin is opened on container start, is empty until the first client attaches to stdin, and then remains open and accepts data until the client disconnects, at which time stdin is closed and remains closed until the container is restarted. If this flag is false, a container processes that reads from stdin will never receive an EOF. Default is false
-- `termination_message_path` (String) Optional: Path at which the file to which the container's termination message will be written is mounted into the container's filesystem. Message written is intended to be brief final status, such as an assertion failure message. Will be truncated by the node if greater than 4096 bytes. The total message length across all containers will be limited to 12kb. Defaults to /dev/termination-log. Cannot be updated.
-- `termination_message_policy` (String) Indicate how the termination message should be populated. File will use the contents of terminationMessagePath to populate the container status message on both success and failure. FallbackToLogsOnError will use the last chunk of container log output if the termination message file is empty and the container exited with an error. The log output is limited to 2048 bytes or 80 lines, whichever is smaller. Defaults to File. Cannot be updated.
-- `tty` (Boolean) Whether this container should allocate a TTY for itself, also requires 'stdin' to be true. Default is false.
+- `resources` (Attributes) Compute Resources required by this container.Cannot be updated.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/ (see [below for nested schema](#nestedatt--spec--template--spec--init_containers--resources))
+- `restart_policy` (String) RestartPolicy defines the restart behavior of individual containers in a pod.This field may only be set for init containers, and the only allowed value is 'Always'.For non-init containers or when this field is not specified,the restart behavior is defined by the Pod's restart policy and the container type.Setting the RestartPolicy as 'Always' for the init container will have the following effect:this init container will be continually restarted onexit until all regular containers have terminated. Once all regularcontainers have completed, all init containers with restartPolicy 'Always'will be shut down. This lifecycle differs from normal init containers andis often referred to as a 'sidecar' container. Although this initcontainer still starts in the init container sequence, it does not waitfor the container to complete before proceeding to the next initcontainer. Instead, the next init container starts immediately after thisinit container is started, or after any startupProbe has successfullycompleted.
+- `security_context` (Attributes) SecurityContext defines the security options the container should be run with.If set, the fields of SecurityContext override the equivalent fields of PodSecurityContext.More info: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ (see [below for nested schema](#nestedatt--spec--template--spec--init_containers--security_context))
+- `startup_probe` (Attributes) StartupProbe indicates that the Pod has successfully initialized.If specified, no other probes are executed until this completes successfully.If this probe fails, the Pod will be restarted, just as if the livenessProbe failed.This can be used to provide different probe parameters at the beginning of a Pod's lifecycle,when it might take a long time to load data or warm a cache, than during steady-state operation.This cannot be updated.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes (see [below for nested schema](#nestedatt--spec--template--spec--init_containers--startup_probe))
+- `stdin` (Boolean) Whether this container should allocate a buffer for stdin in the container runtime. If thisis not set, reads from stdin in the container will always result in EOF.Default is false.
+- `stdin_once` (Boolean) Whether the container runtime should close the stdin channel after it has been opened bya single attach. When stdin is true the stdin stream will remain open across multiple attachsessions. If stdinOnce is set to true, stdin is opened on container start, is empty until thefirst client attaches to stdin, and then remains open and accepts data until the client disconnects,at which time stdin is closed and remains closed until the container is restarted. If thisflag is false, a container processes that reads from stdin will never receive an EOF.Default is false
+- `termination_message_path` (String) Optional: Path at which the file to which the container's termination messagewill be written is mounted into the container's filesystem.Message written is intended to be brief final status, such as an assertion failure message.Will be truncated by the node if greater than 4096 bytes. The total message length acrossall containers will be limited to 12kb.Defaults to /dev/termination-log.Cannot be updated.
+- `termination_message_policy` (String) Indicate how the termination message should be populated. File will use the contents ofterminationMessagePath to populate the container status message on both success and failure.FallbackToLogsOnError will use the last chunk of container log output if the terminationmessage file is empty and the container exited with an error.The log output is limited to 2048 bytes or 80 lines, whichever is smaller.Defaults to File.Cannot be updated.
+- `tty` (Boolean) Whether this container should allocate a TTY for itself, also requires 'stdin' to be true.Default is false.
- `volume_devices` (Attributes List) volumeDevices is the list of block devices to be used by the container. (see [below for nested schema](#nestedatt--spec--template--spec--init_containers--volume_devices))
-- `volume_mounts` (Attributes List) Pod volumes to mount into the container's filesystem. Cannot be updated. (see [below for nested schema](#nestedatt--spec--template--spec--init_containers--volume_mounts))
-- `working_dir` (String) Container's working directory. If not specified, the container runtime's default will be used, which might be configured in the container image. Cannot be updated.
+- `volume_mounts` (Attributes List) Pod volumes to mount into the container's filesystem.Cannot be updated. (see [below for nested schema](#nestedatt--spec--template--spec--init_containers--volume_mounts))
+- `working_dir` (String) Container's working directory.If not specified, the container runtime's default will be used, whichmight be configured in the container image.Cannot be updated.
### Nested Schema for `spec.template.spec.init_containers.env`
@@ -1420,7 +1420,7 @@ Required:
Optional:
-- `value` (String) Variable references $(VAR_NAME) are expanded using the previously defined environment variables in the container and any service environment variables. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. '$$(VAR_NAME)' will produce the string literal '$(VAR_NAME)'. Escaped references will never be expanded, regardless of whether the variable exists or not. Defaults to ''.
+- `value` (String) Variable references $(VAR_NAME) are expandedusing the previously defined environment variables in the container andany service environment variables. If a variable cannot be resolved,the reference in the input string will be unchanged. Double $$ are reducedto a single $, which allows for escaping the $(VAR_NAME) syntax: i.e.'$$(VAR_NAME)' will produce the string literal '$(VAR_NAME)'.Escaped references will never be expanded, regardless of whether the variableexists or not.Defaults to ''.
- `value_from` (Attributes) Source for the environment variable's value. Cannot be used if value is not empty. (see [below for nested schema](#nestedatt--spec--template--spec--init_containers--env--value_from))
@@ -1429,8 +1429,8 @@ Optional:
Optional:
- `config_map_key_ref` (Attributes) Selects a key of a ConfigMap. (see [below for nested schema](#nestedatt--spec--template--spec--init_containers--env--value_from--config_map_key_ref))
-- `field_ref` (Attributes) Selects a field of the pod: supports metadata.name, metadata.namespace, 'metadata.labels['']', 'metadata.annotations['']', spec.nodeName, spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs. (see [below for nested schema](#nestedatt--spec--template--spec--init_containers--env--value_from--field_ref))
-- `resource_field_ref` (Attributes) Selects a resource of the container: only resources limits and requests (limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu, requests.memory and requests.ephemeral-storage) are currently supported. (see [below for nested schema](#nestedatt--spec--template--spec--init_containers--env--value_from--resource_field_ref))
+- `field_ref` (Attributes) Selects a field of the pod: supports metadata.name, metadata.namespace, 'metadata.labels['']', 'metadata.annotations['']',spec.nodeName, spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs. (see [below for nested schema](#nestedatt--spec--template--spec--init_containers--env--value_from--field_ref))
+- `resource_field_ref` (Attributes) Selects a resource of the container: only resources limits and requests(limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu, requests.memory and requests.ephemeral-storage) are currently supported. (see [below for nested schema](#nestedatt--spec--template--spec--init_containers--env--value_from--resource_field_ref))
- `secret_key_ref` (Attributes) Selects a key of a secret in the pod's namespace (see [below for nested schema](#nestedatt--spec--template--spec--init_containers--env--value_from--secret_key_ref))
@@ -1442,7 +1442,7 @@ Required:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
@@ -1480,7 +1480,7 @@ Required:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
- `optional` (Boolean) Specify whether the Secret or its key must be defined
@@ -1500,7 +1500,7 @@ Optional:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
- `optional` (Boolean) Specify whether the ConfigMap must be defined
@@ -1509,7 +1509,7 @@ Optional:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
- `optional` (Boolean) Specify whether the Secret must be defined
@@ -1519,8 +1519,8 @@ Optional:
Optional:
-- `post_start` (Attributes) PostStart is called immediately after a container is created. If the handler fails, the container is terminated and restarted according to its restart policy. Other management of the container blocks until the hook completes. More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks (see [below for nested schema](#nestedatt--spec--template--spec--init_containers--lifecycle--post_start))
-- `pre_stop` (Attributes) PreStop is called immediately before a container is terminated due to an API request or management event such as liveness/startup probe failure, preemption, resource contention, etc. The handler is not called if the container crashes or exits. The Pod's termination grace period countdown begins before the PreStop hook is executed. Regardless of the outcome of the handler, the container will eventually terminate within the Pod's termination grace period (unless delayed by finalizers). Other management of the container blocks until the hook completes or until the termination grace period is reached. More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks (see [below for nested schema](#nestedatt--spec--template--spec--init_containers--lifecycle--pre_stop))
+- `post_start` (Attributes) PostStart is called immediately after a container is created. If the handler fails,the container is terminated and restarted according to its restart policy.Other management of the container blocks until the hook completes.More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks (see [below for nested schema](#nestedatt--spec--template--spec--init_containers--lifecycle--post_start))
+- `pre_stop` (Attributes) PreStop is called immediately before a container is terminated due to anAPI request or management event such as liveness/startup probe failure,preemption, resource contention, etc. The handler is not called if thecontainer crashes or exits. The Pod's termination grace period countdown begins before thePreStop hook is executed. Regardless of the outcome of the handler, thecontainer will eventually terminate within the Pod's termination graceperiod (unless delayed by finalizers). Other management of the container blocks until the hook completesor until the termination grace period is reached.More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks (see [below for nested schema](#nestedatt--spec--template--spec--init_containers--lifecycle--pre_stop))
### Nested Schema for `spec.template.spec.init_containers.lifecycle.post_start`
@@ -1530,14 +1530,14 @@ Optional:
- `exec` (Attributes) Exec specifies the action to take. (see [below for nested schema](#nestedatt--spec--template--spec--init_containers--lifecycle--post_start--exec))
- `http_get` (Attributes) HTTPGet specifies the http request to perform. (see [below for nested schema](#nestedatt--spec--template--spec--init_containers--lifecycle--post_start--http_get))
- `sleep` (Attributes) Sleep represents the duration that the container should sleep before being terminated. (see [below for nested schema](#nestedatt--spec--template--spec--init_containers--lifecycle--post_start--sleep))
-- `tcp_socket` (Attributes) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and kept for the backward compatibility. There are no validation of this field and lifecycle hooks will fail in runtime when tcp handler is specified. (see [below for nested schema](#nestedatt--spec--template--spec--init_containers--lifecycle--post_start--tcp_socket))
+- `tcp_socket` (Attributes) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and keptfor the backward compatibility. There are no validation of this field andlifecycle hooks will fail in runtime when tcp handler is specified. (see [below for nested schema](#nestedatt--spec--template--spec--init_containers--lifecycle--post_start--tcp_socket))
### Nested Schema for `spec.template.spec.init_containers.lifecycle.post_start.exec`
Optional:
-- `command` (List of String) Command is the command line to execute inside the container, the working directory for the command is root ('/') in the container's filesystem. The command is simply exec'd, it is not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
+- `command` (List of String) Command is the command line to execute inside the container, the working directory for thecommand is root ('/') in the container's filesystem. The command is simply exec'd, it isnot run inside a shell, so traditional shell instructions ('|', etc) won't work. To usea shell, you need to explicitly call out to that shell.Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
@@ -1545,21 +1545,21 @@ Optional:
Required:
-- `port` (String) Name or number of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
+- `port` (String) Name or number of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
Optional:
-- `host` (String) Host name to connect to, defaults to the pod IP. You probably want to set 'Host' in httpHeaders instead.
+- `host` (String) Host name to connect to, defaults to the pod IP. You probably want to set'Host' in httpHeaders instead.
- `http_headers` (Attributes List) Custom headers to set in the request. HTTP allows repeated headers. (see [below for nested schema](#nestedatt--spec--template--spec--init_containers--lifecycle--post_start--http_get--http_headers))
- `path` (String) Path to access on the HTTP server.
-- `scheme` (String) Scheme to use for connecting to the host. Defaults to HTTP.
+- `scheme` (String) Scheme to use for connecting to the host.Defaults to HTTP.
### Nested Schema for `spec.template.spec.init_containers.lifecycle.post_start.http_get.http_headers`
Required:
-- `name` (String) The header field name. This will be canonicalized upon output, so case-variant names will be understood as the same header.
+- `name` (String) The header field name.This will be canonicalized upon output, so case-variant names will be understood as the same header.
- `value` (String) The header field value
@@ -1577,7 +1577,7 @@ Required:
Required:
-- `port` (String) Number or name of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
+- `port` (String) Number or name of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
Optional:
@@ -1593,14 +1593,14 @@ Optional:
- `exec` (Attributes) Exec specifies the action to take. (see [below for nested schema](#nestedatt--spec--template--spec--init_containers--lifecycle--pre_stop--exec))
- `http_get` (Attributes) HTTPGet specifies the http request to perform. (see [below for nested schema](#nestedatt--spec--template--spec--init_containers--lifecycle--pre_stop--http_get))
- `sleep` (Attributes) Sleep represents the duration that the container should sleep before being terminated. (see [below for nested schema](#nestedatt--spec--template--spec--init_containers--lifecycle--pre_stop--sleep))
-- `tcp_socket` (Attributes) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and kept for the backward compatibility. There are no validation of this field and lifecycle hooks will fail in runtime when tcp handler is specified. (see [below for nested schema](#nestedatt--spec--template--spec--init_containers--lifecycle--pre_stop--tcp_socket))
+- `tcp_socket` (Attributes) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and keptfor the backward compatibility. There are no validation of this field andlifecycle hooks will fail in runtime when tcp handler is specified. (see [below for nested schema](#nestedatt--spec--template--spec--init_containers--lifecycle--pre_stop--tcp_socket))
### Nested Schema for `spec.template.spec.init_containers.lifecycle.pre_stop.exec`
Optional:
-- `command` (List of String) Command is the command line to execute inside the container, the working directory for the command is root ('/') in the container's filesystem. The command is simply exec'd, it is not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
+- `command` (List of String) Command is the command line to execute inside the container, the working directory for thecommand is root ('/') in the container's filesystem. The command is simply exec'd, it isnot run inside a shell, so traditional shell instructions ('|', etc) won't work. To usea shell, you need to explicitly call out to that shell.Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
@@ -1608,21 +1608,21 @@ Optional:
Required:
-- `port` (String) Name or number of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
+- `port` (String) Name or number of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
Optional:
-- `host` (String) Host name to connect to, defaults to the pod IP. You probably want to set 'Host' in httpHeaders instead.
+- `host` (String) Host name to connect to, defaults to the pod IP. You probably want to set'Host' in httpHeaders instead.
- `http_headers` (Attributes List) Custom headers to set in the request. HTTP allows repeated headers. (see [below for nested schema](#nestedatt--spec--template--spec--init_containers--lifecycle--pre_stop--http_get--http_headers))
- `path` (String) Path to access on the HTTP server.
-- `scheme` (String) Scheme to use for connecting to the host. Defaults to HTTP.
+- `scheme` (String) Scheme to use for connecting to the host.Defaults to HTTP.
### Nested Schema for `spec.template.spec.init_containers.lifecycle.pre_stop.http_get.http_headers`
Required:
-- `name` (String) The header field name. This will be canonicalized upon output, so case-variant names will be understood as the same header.
+- `name` (String) The header field name.This will be canonicalized upon output, so case-variant names will be understood as the same header.
- `value` (String) The header field value
@@ -1640,7 +1640,7 @@ Required:
Required:
-- `port` (String) Number or name of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
+- `port` (String) Number or name of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
Optional:
@@ -1655,22 +1655,22 @@ Optional:
Optional:
- `exec` (Attributes) Exec specifies the action to take. (see [below for nested schema](#nestedatt--spec--template--spec--init_containers--liveness_probe--exec))
-- `failure_threshold` (Number) Minimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1.
+- `failure_threshold` (Number) Minimum consecutive failures for the probe to be considered failed after having succeeded.Defaults to 3. Minimum value is 1.
- `grpc` (Attributes) GRPC specifies an action involving a GRPC port. (see [below for nested schema](#nestedatt--spec--template--spec--init_containers--liveness_probe--grpc))
- `http_get` (Attributes) HTTPGet specifies the http request to perform. (see [below for nested schema](#nestedatt--spec--template--spec--init_containers--liveness_probe--http_get))
-- `initial_delay_seconds` (Number) Number of seconds after the container has started before liveness probes are initiated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-- `period_seconds` (Number) How often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1.
-- `success_threshold` (Number) Minimum consecutive successes for the probe to be considered successful after having failed. Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
+- `initial_delay_seconds` (Number) Number of seconds after the container has started before liveness probes are initiated.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
+- `period_seconds` (Number) How often (in seconds) to perform the probe.Default to 10 seconds. Minimum value is 1.
+- `success_threshold` (Number) Minimum consecutive successes for the probe to be considered successful after having failed.Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
- `tcp_socket` (Attributes) TCPSocket specifies an action involving a TCP port. (see [below for nested schema](#nestedatt--spec--template--spec--init_containers--liveness_probe--tcp_socket))
-- `termination_grace_period_seconds` (Number) Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
-- `timeout_seconds` (Number) Number of seconds after which the probe times out. Defaults to 1 second. Minimum value is 1. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
+- `termination_grace_period_seconds` (Number) Optional duration in seconds the pod needs to terminate gracefully upon probe failure.The grace period is the duration in seconds after the processes running in the pod are senta termination signal and the time when the processes are forcibly halted with a kill signal.Set this value longer than the expected cleanup time for your process.If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, thisvalue overrides the value provided by the pod spec.Value must be non-negative integer. The value zero indicates stop immediately viathe kill signal (no opportunity to shut down).This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate.Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
+- `timeout_seconds` (Number) Number of seconds after which the probe times out.Defaults to 1 second. Minimum value is 1.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
### Nested Schema for `spec.template.spec.init_containers.liveness_probe.exec`
Optional:
-- `command` (List of String) Command is the command line to execute inside the container, the working directory for the command is root ('/') in the container's filesystem. The command is simply exec'd, it is not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
+- `command` (List of String) Command is the command line to execute inside the container, the working directory for thecommand is root ('/') in the container's filesystem. The command is simply exec'd, it isnot run inside a shell, so traditional shell instructions ('|', etc) won't work. To usea shell, you need to explicitly call out to that shell.Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
@@ -1682,7 +1682,7 @@ Required:
Optional:
-- `service` (String) Service is the name of the service to place in the gRPC HealthCheckRequest (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md). If this is not specified, the default behavior is defined by gRPC.
+- `service` (String) Service is the name of the service to place in the gRPC HealthCheckRequest(see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).If this is not specified, the default behavior is defined by gRPC.
@@ -1690,21 +1690,21 @@ Optional:
Required:
-- `port` (String) Name or number of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
+- `port` (String) Name or number of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
Optional:
-- `host` (String) Host name to connect to, defaults to the pod IP. You probably want to set 'Host' in httpHeaders instead.
+- `host` (String) Host name to connect to, defaults to the pod IP. You probably want to set'Host' in httpHeaders instead.
- `http_headers` (Attributes List) Custom headers to set in the request. HTTP allows repeated headers. (see [below for nested schema](#nestedatt--spec--template--spec--init_containers--liveness_probe--http_get--http_headers))
- `path` (String) Path to access on the HTTP server.
-- `scheme` (String) Scheme to use for connecting to the host. Defaults to HTTP.
+- `scheme` (String) Scheme to use for connecting to the host.Defaults to HTTP.
### Nested Schema for `spec.template.spec.init_containers.liveness_probe.http_get.http_headers`
Required:
-- `name` (String) The header field name. This will be canonicalized upon output, so case-variant names will be understood as the same header.
+- `name` (String) The header field name.This will be canonicalized upon output, so case-variant names will be understood as the same header.
- `value` (String) The header field value
@@ -1714,7 +1714,7 @@ Required:
Required:
-- `port` (String) Number or name of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
+- `port` (String) Number or name of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
Optional:
@@ -1727,14 +1727,14 @@ Optional:
Required:
-- `container_port` (Number) Number of port to expose on the pod's IP address. This must be a valid port number, 0 < x < 65536.
+- `container_port` (Number) Number of port to expose on the pod's IP address.This must be a valid port number, 0 < x < 65536.
Optional:
- `host_ip` (String) What host IP to bind the external port to.
-- `host_port` (Number) Number of port to expose on the host. If specified, this must be a valid port number, 0 < x < 65536. If HostNetwork is specified, this must match ContainerPort. Most containers do not need this.
-- `name` (String) If specified, this must be an IANA_SVC_NAME and unique within the pod. Each named port in a pod must have a unique name. Name for the port that can be referred to by services.
-- `protocol` (String) Protocol for port. Must be UDP, TCP, or SCTP. Defaults to 'TCP'.
+- `host_port` (Number) Number of port to expose on the host.If specified, this must be a valid port number, 0 < x < 65536.If HostNetwork is specified, this must match ContainerPort.Most containers do not need this.
+- `name` (String) If specified, this must be an IANA_SVC_NAME and unique within the pod. Eachnamed port in a pod must have a unique name. Name for the port that can bereferred to by services.
+- `protocol` (String) Protocol for port. Must be UDP, TCP, or SCTP.Defaults to 'TCP'.
@@ -1743,22 +1743,22 @@ Optional:
Optional:
- `exec` (Attributes) Exec specifies the action to take. (see [below for nested schema](#nestedatt--spec--template--spec--init_containers--readiness_probe--exec))
-- `failure_threshold` (Number) Minimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1.
+- `failure_threshold` (Number) Minimum consecutive failures for the probe to be considered failed after having succeeded.Defaults to 3. Minimum value is 1.
- `grpc` (Attributes) GRPC specifies an action involving a GRPC port. (see [below for nested schema](#nestedatt--spec--template--spec--init_containers--readiness_probe--grpc))
- `http_get` (Attributes) HTTPGet specifies the http request to perform. (see [below for nested schema](#nestedatt--spec--template--spec--init_containers--readiness_probe--http_get))
-- `initial_delay_seconds` (Number) Number of seconds after the container has started before liveness probes are initiated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-- `period_seconds` (Number) How often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1.
-- `success_threshold` (Number) Minimum consecutive successes for the probe to be considered successful after having failed. Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
+- `initial_delay_seconds` (Number) Number of seconds after the container has started before liveness probes are initiated.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
+- `period_seconds` (Number) How often (in seconds) to perform the probe.Default to 10 seconds. Minimum value is 1.
+- `success_threshold` (Number) Minimum consecutive successes for the probe to be considered successful after having failed.Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
- `tcp_socket` (Attributes) TCPSocket specifies an action involving a TCP port. (see [below for nested schema](#nestedatt--spec--template--spec--init_containers--readiness_probe--tcp_socket))
-- `termination_grace_period_seconds` (Number) Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
-- `timeout_seconds` (Number) Number of seconds after which the probe times out. Defaults to 1 second. Minimum value is 1. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
+- `termination_grace_period_seconds` (Number) Optional duration in seconds the pod needs to terminate gracefully upon probe failure.The grace period is the duration in seconds after the processes running in the pod are senta termination signal and the time when the processes are forcibly halted with a kill signal.Set this value longer than the expected cleanup time for your process.If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, thisvalue overrides the value provided by the pod spec.Value must be non-negative integer. The value zero indicates stop immediately viathe kill signal (no opportunity to shut down).This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate.Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
+- `timeout_seconds` (Number) Number of seconds after which the probe times out.Defaults to 1 second. Minimum value is 1.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
### Nested Schema for `spec.template.spec.init_containers.readiness_probe.exec`
Optional:
-- `command` (List of String) Command is the command line to execute inside the container, the working directory for the command is root ('/') in the container's filesystem. The command is simply exec'd, it is not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
+- `command` (List of String) Command is the command line to execute inside the container, the working directory for thecommand is root ('/') in the container's filesystem. The command is simply exec'd, it isnot run inside a shell, so traditional shell instructions ('|', etc) won't work. To usea shell, you need to explicitly call out to that shell.Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
@@ -1770,7 +1770,7 @@ Required:
Optional:
-- `service` (String) Service is the name of the service to place in the gRPC HealthCheckRequest (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md). If this is not specified, the default behavior is defined by gRPC.
+- `service` (String) Service is the name of the service to place in the gRPC HealthCheckRequest(see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).If this is not specified, the default behavior is defined by gRPC.
@@ -1778,21 +1778,21 @@ Optional:
Required:
-- `port` (String) Name or number of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
+- `port` (String) Name or number of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
Optional:
-- `host` (String) Host name to connect to, defaults to the pod IP. You probably want to set 'Host' in httpHeaders instead.
+- `host` (String) Host name to connect to, defaults to the pod IP. You probably want to set'Host' in httpHeaders instead.
- `http_headers` (Attributes List) Custom headers to set in the request. HTTP allows repeated headers. (see [below for nested schema](#nestedatt--spec--template--spec--init_containers--readiness_probe--http_get--http_headers))
- `path` (String) Path to access on the HTTP server.
-- `scheme` (String) Scheme to use for connecting to the host. Defaults to HTTP.
+- `scheme` (String) Scheme to use for connecting to the host.Defaults to HTTP.
### Nested Schema for `spec.template.spec.init_containers.readiness_probe.http_get.http_headers`
Required:
-- `name` (String) The header field name. This will be canonicalized upon output, so case-variant names will be understood as the same header.
+- `name` (String) The header field name.This will be canonicalized upon output, so case-variant names will be understood as the same header.
- `value` (String) The header field value
@@ -1802,7 +1802,7 @@ Required:
Required:
-- `port` (String) Number or name of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
+- `port` (String) Number or name of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
Optional:
@@ -1815,8 +1815,8 @@ Optional:
Required:
-- `resource_name` (String) Name of the resource to which this resource resize policy applies. Supported values: cpu, memory.
-- `restart_policy` (String) Restart policy to apply when specified resource is resized. If not specified, it defaults to NotRequired.
+- `resource_name` (String) Name of the resource to which this resource resize policy applies.Supported values: cpu, memory.
+- `restart_policy` (String) Restart policy to apply when specified resource is resized.If not specified, it defaults to NotRequired.
@@ -1824,16 +1824,16 @@ Required:
Optional:
-- `claims` (Attributes List) Claims lists the names of resources, defined in spec.resourceClaims, that are used by this container. This is an alpha field and requires enabling the DynamicResourceAllocation feature gate. This field is immutable. It can only be set for containers. (see [below for nested schema](#nestedatt--spec--template--spec--init_containers--resources--claims))
-- `limits` (Map of String) Limits describes the maximum amount of compute resources allowed. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-- `requests` (Map of String) Requests describes the minimum amount of compute resources required. If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, otherwise to an implementation-defined value. Requests cannot exceed Limits. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
+- `claims` (Attributes List) Claims lists the names of resources, defined in spec.resourceClaims,that are used by this container.This is an alpha field and requires enabling theDynamicResourceAllocation feature gate.This field is immutable. It can only be set for containers. (see [below for nested schema](#nestedatt--spec--template--spec--init_containers--resources--claims))
+- `limits` (Map of String) Limits describes the maximum amount of compute resources allowed.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
+- `requests` (Map of String) Requests describes the minimum amount of compute resources required.If Requests is omitted for a container, it defaults to Limits if that is explicitly specified,otherwise to an implementation-defined value. Requests cannot exceed Limits.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
### Nested Schema for `spec.template.spec.init_containers.resources.claims`
Required:
-- `name` (String) Name must match the name of one entry in pod.spec.resourceClaims of the Pod where this field is used. It makes that resource available inside a container.
+- `name` (String) Name must match the name of one entry in pod.spec.resourceClaims ofthe Pod where this field is used. It makes that resource availableinside a container.
@@ -1842,17 +1842,17 @@ Required:
Optional:
-- `allow_privilege_escalation` (Boolean) AllowPrivilegeEscalation controls whether a process can gain more privileges than its parent process. This bool directly controls if the no_new_privs flag will be set on the container process. AllowPrivilegeEscalation is true always when the container is: 1) run as Privileged 2) has CAP_SYS_ADMIN Note that this field cannot be set when spec.os.name is windows.
-- `capabilities` (Attributes) The capabilities to add/drop when running containers. Defaults to the default set of capabilities granted by the container runtime. Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--template--spec--init_containers--security_context--capabilities))
-- `privileged` (Boolean) Run container in privileged mode. Processes in privileged containers are essentially equivalent to root on the host. Defaults to false. Note that this field cannot be set when spec.os.name is windows.
-- `proc_mount` (String) procMount denotes the type of proc mount to use for the containers. The default is DefaultProcMount which uses the container runtime defaults for readonly paths and masked paths. This requires the ProcMountType feature flag to be enabled. Note that this field cannot be set when spec.os.name is windows.
-- `read_only_root_filesystem` (Boolean) Whether this container has a read-only root filesystem. Default is false. Note that this field cannot be set when spec.os.name is windows.
-- `run_as_group` (Number) The GID to run the entrypoint of the container process. Uses runtime default if unset. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence. Note that this field cannot be set when spec.os.name is windows.
-- `run_as_non_root` (Boolean) Indicates that the container must run as a non-root user. If true, the Kubelet will validate the image at runtime to ensure that it does not run as UID 0 (root) and fail to start the container if it does. If unset or false, no such validation will be performed. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
-- `run_as_user` (Number) The UID to run the entrypoint of the container process. Defaults to user specified in image metadata if unspecified. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence. Note that this field cannot be set when spec.os.name is windows.
-- `se_linux_options` (Attributes) The SELinux context to be applied to the container. If unspecified, the container runtime will allocate a random SELinux context for each container. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence. Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--template--spec--init_containers--security_context--se_linux_options))
-- `seccomp_profile` (Attributes) The seccomp options to use by this container. If seccomp options are provided at both the pod & container level, the container options override the pod options. Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--template--spec--init_containers--security_context--seccomp_profile))
-- `windows_options` (Attributes) The Windows specific settings applied to all containers. If unspecified, the options from the PodSecurityContext will be used. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence. Note that this field cannot be set when spec.os.name is linux. (see [below for nested schema](#nestedatt--spec--template--spec--init_containers--security_context--windows_options))
+- `allow_privilege_escalation` (Boolean) AllowPrivilegeEscalation controls whether a process can gain moreprivileges than its parent process. This bool directly controls ifthe no_new_privs flag will be set on the container process.AllowPrivilegeEscalation is true always when the container is:1) run as Privileged2) has CAP_SYS_ADMINNote that this field cannot be set when spec.os.name is windows.
+- `capabilities` (Attributes) The capabilities to add/drop when running containers.Defaults to the default set of capabilities granted by the container runtime.Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--template--spec--init_containers--security_context--capabilities))
+- `privileged` (Boolean) Run container in privileged mode.Processes in privileged containers are essentially equivalent to root on the host.Defaults to false.Note that this field cannot be set when spec.os.name is windows.
+- `proc_mount` (String) procMount denotes the type of proc mount to use for the containers.The default is DefaultProcMount which uses the container runtime defaults forreadonly paths and masked paths.This requires the ProcMountType feature flag to be enabled.Note that this field cannot be set when spec.os.name is windows.
+- `read_only_root_filesystem` (Boolean) Whether this container has a read-only root filesystem.Default is false.Note that this field cannot be set when spec.os.name is windows.
+- `run_as_group` (Number) The GID to run the entrypoint of the container process.Uses runtime default if unset.May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.Note that this field cannot be set when spec.os.name is windows.
+- `run_as_non_root` (Boolean) Indicates that the container must run as a non-root user.If true, the Kubelet will validate the image at runtime to ensure that itdoes not run as UID 0 (root) and fail to start the container if it does.If unset or false, no such validation will be performed.May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.
+- `run_as_user` (Number) The UID to run the entrypoint of the container process.Defaults to user specified in image metadata if unspecified.May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.Note that this field cannot be set when spec.os.name is windows.
+- `se_linux_options` (Attributes) The SELinux context to be applied to the container.If unspecified, the container runtime will allocate a random SELinux context for eachcontainer. May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--template--spec--init_containers--security_context--se_linux_options))
+- `seccomp_profile` (Attributes) The seccomp options to use by this container. If seccomp options areprovided at both the pod & container level, the container optionsoverride the pod options.Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--template--spec--init_containers--security_context--seccomp_profile))
+- `windows_options` (Attributes) The Windows specific settings applied to all containers.If unspecified, the options from the PodSecurityContext will be used.If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.Note that this field cannot be set when spec.os.name is linux. (see [below for nested schema](#nestedatt--spec--template--spec--init_containers--security_context--windows_options))
### Nested Schema for `spec.template.spec.init_containers.security_context.capabilities`
@@ -1879,11 +1879,11 @@ Optional:
Required:
-- `type` (String) type indicates which kind of seccomp profile will be applied. Valid options are: Localhost - a profile defined in a file on the node should be used. RuntimeDefault - the container runtime default profile should be used. Unconfined - no profile should be applied.
+- `type` (String) type indicates which kind of seccomp profile will be applied.Valid options are:Localhost - a profile defined in a file on the node should be used.RuntimeDefault - the container runtime default profile should be used.Unconfined - no profile should be applied.
Optional:
-- `localhost_profile` (String) localhostProfile indicates a profile defined in a file on the node should be used. The profile must be preconfigured on the node to work. Must be a descending path, relative to the kubelet's configured seccomp profile location. Must be set if type is 'Localhost'. Must NOT be set for any other type.
+- `localhost_profile` (String) localhostProfile indicates a profile defined in a file on the node should be used.The profile must be preconfigured on the node to work.Must be a descending path, relative to the kubelet's configured seccomp profile location.Must be set if type is 'Localhost'. Must NOT be set for any other type.
@@ -1891,10 +1891,10 @@ Optional:
Optional:
-- `gmsa_credential_spec` (String) GMSACredentialSpec is where the GMSA admission webhook (https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of the GMSA credential spec named by the GMSACredentialSpecName field.
+- `gmsa_credential_spec` (String) GMSACredentialSpec is where the GMSA admission webhook(https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of theGMSA credential spec named by the GMSACredentialSpecName field.
- `gmsa_credential_spec_name` (String) GMSACredentialSpecName is the name of the GMSA credential spec to use.
-- `host_process` (Boolean) HostProcess determines if a container should be run as a 'Host Process' container. All of a Pod's containers must have the same effective HostProcess value (it is not allowed to have a mix of HostProcess containers and non-HostProcess containers). In addition, if HostProcess is true then HostNetwork must also be set to true.
-- `run_as_user_name` (String) The UserName in Windows to run the entrypoint of the container process. Defaults to the user specified in image metadata if unspecified. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
+- `host_process` (Boolean) HostProcess determines if a container should be run as a 'Host Process' container.All of a Pod's containers must have the same effective HostProcess value(it is not allowed to have a mix of HostProcess containers and non-HostProcess containers).In addition, if HostProcess is true then HostNetwork must also be set to true.
+- `run_as_user_name` (String) The UserName in Windows to run the entrypoint of the container process.Defaults to the user specified in image metadata if unspecified.May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.
@@ -1904,22 +1904,22 @@ Optional:
Optional:
- `exec` (Attributes) Exec specifies the action to take. (see [below for nested schema](#nestedatt--spec--template--spec--init_containers--startup_probe--exec))
-- `failure_threshold` (Number) Minimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1.
+- `failure_threshold` (Number) Minimum consecutive failures for the probe to be considered failed after having succeeded.Defaults to 3. Minimum value is 1.
- `grpc` (Attributes) GRPC specifies an action involving a GRPC port. (see [below for nested schema](#nestedatt--spec--template--spec--init_containers--startup_probe--grpc))
- `http_get` (Attributes) HTTPGet specifies the http request to perform. (see [below for nested schema](#nestedatt--spec--template--spec--init_containers--startup_probe--http_get))
-- `initial_delay_seconds` (Number) Number of seconds after the container has started before liveness probes are initiated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-- `period_seconds` (Number) How often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1.
-- `success_threshold` (Number) Minimum consecutive successes for the probe to be considered successful after having failed. Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
+- `initial_delay_seconds` (Number) Number of seconds after the container has started before liveness probes are initiated.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
+- `period_seconds` (Number) How often (in seconds) to perform the probe.Default to 10 seconds. Minimum value is 1.
+- `success_threshold` (Number) Minimum consecutive successes for the probe to be considered successful after having failed.Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
- `tcp_socket` (Attributes) TCPSocket specifies an action involving a TCP port. (see [below for nested schema](#nestedatt--spec--template--spec--init_containers--startup_probe--tcp_socket))
-- `termination_grace_period_seconds` (Number) Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
-- `timeout_seconds` (Number) Number of seconds after which the probe times out. Defaults to 1 second. Minimum value is 1. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
+- `termination_grace_period_seconds` (Number) Optional duration in seconds the pod needs to terminate gracefully upon probe failure.The grace period is the duration in seconds after the processes running in the pod are senta termination signal and the time when the processes are forcibly halted with a kill signal.Set this value longer than the expected cleanup time for your process.If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, thisvalue overrides the value provided by the pod spec.Value must be non-negative integer. The value zero indicates stop immediately viathe kill signal (no opportunity to shut down).This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate.Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
+- `timeout_seconds` (Number) Number of seconds after which the probe times out.Defaults to 1 second. Minimum value is 1.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
### Nested Schema for `spec.template.spec.init_containers.startup_probe.exec`
Optional:
-- `command` (List of String) Command is the command line to execute inside the container, the working directory for the command is root ('/') in the container's filesystem. The command is simply exec'd, it is not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
+- `command` (List of String) Command is the command line to execute inside the container, the working directory for thecommand is root ('/') in the container's filesystem. The command is simply exec'd, it isnot run inside a shell, so traditional shell instructions ('|', etc) won't work. To usea shell, you need to explicitly call out to that shell.Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
@@ -1931,7 +1931,7 @@ Required:
Optional:
-- `service` (String) Service is the name of the service to place in the gRPC HealthCheckRequest (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md). If this is not specified, the default behavior is defined by gRPC.
+- `service` (String) Service is the name of the service to place in the gRPC HealthCheckRequest(see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).If this is not specified, the default behavior is defined by gRPC.
@@ -1939,21 +1939,21 @@ Optional:
Required:
-- `port` (String) Name or number of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
+- `port` (String) Name or number of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
Optional:
-- `host` (String) Host name to connect to, defaults to the pod IP. You probably want to set 'Host' in httpHeaders instead.
+- `host` (String) Host name to connect to, defaults to the pod IP. You probably want to set'Host' in httpHeaders instead.
- `http_headers` (Attributes List) Custom headers to set in the request. HTTP allows repeated headers. (see [below for nested schema](#nestedatt--spec--template--spec--init_containers--startup_probe--http_get--http_headers))
- `path` (String) Path to access on the HTTP server.
-- `scheme` (String) Scheme to use for connecting to the host. Defaults to HTTP.
+- `scheme` (String) Scheme to use for connecting to the host.Defaults to HTTP.
### Nested Schema for `spec.template.spec.init_containers.startup_probe.http_get.http_headers`
Required:
-- `name` (String) The header field name. This will be canonicalized upon output, so case-variant names will be understood as the same header.
+- `name` (String) The header field name.This will be canonicalized upon output, so case-variant names will be understood as the same header.
- `value` (String) The header field value
@@ -1963,7 +1963,7 @@ Required:
Required:
-- `port` (String) Number or name of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
+- `port` (String) Number or name of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
Optional:
@@ -1985,15 +1985,15 @@ Required:
Required:
-- `mount_path` (String) Path within the container at which the volume should be mounted. Must not contain ':'.
+- `mount_path` (String) Path within the container at which the volume should be mounted. Mustnot contain ':'.
- `name` (String) This must match the Name of a Volume.
Optional:
-- `mount_propagation` (String) mountPropagation determines how mounts are propagated from the host to container and the other way around. When not set, MountPropagationNone is used. This field is beta in 1.10.
-- `read_only` (Boolean) Mounted read-only if true, read-write otherwise (false or unspecified). Defaults to false.
-- `sub_path` (String) Path within the volume from which the container's volume should be mounted. Defaults to '' (volume's root).
-- `sub_path_expr` (String) Expanded path within the volume from which the container's volume should be mounted. Behaves similarly to SubPath but environment variable references $(VAR_NAME) are expanded using the container's environment. Defaults to '' (volume's root). SubPathExpr and SubPath are mutually exclusive.
+- `mount_propagation` (String) mountPropagation determines how mounts are propagated from the hostto container and the other way around.When not set, MountPropagationNone is used.This field is beta in 1.10.
+- `read_only` (Boolean) Mounted read-only if true, read-write otherwise (false or unspecified).Defaults to false.
+- `sub_path` (String) Path within the volume from which the container's volume should be mounted.Defaults to '' (volume's root).
+- `sub_path_expr` (String) Expanded path within the volume from which the container's volume should be mounted.Behaves similarly to SubPath but environment variable references $(VAR_NAME) are expanded using the container's environment.Defaults to '' (volume's root).SubPathExpr and SubPath are mutually exclusive.
@@ -2002,16 +2002,16 @@ Optional:
Optional:
-- `fs_group` (Number) A special supplemental group that applies to all containers in a pod. Some volume types allow the Kubelet to change the ownership of that volume to be owned by the pod: 1. The owning GID will be the FSGroup 2. The setgid bit is set (new files created in the volume will be owned by FSGroup) 3. The permission bits are OR'd with rw-rw---- If unset, the Kubelet will not modify the ownership and permissions of any volume. Note that this field cannot be set when spec.os.name is windows.
-- `fs_group_change_policy` (String) fsGroupChangePolicy defines behavior of changing ownership and permission of the volume before being exposed inside Pod. This field will only apply to volume types which support fsGroup based ownership(and permissions). It will have no effect on ephemeral volume types such as: secret, configmaps and emptydir. Valid values are 'OnRootMismatch' and 'Always'. If not specified, 'Always' is used. Note that this field cannot be set when spec.os.name is windows.
-- `run_as_group` (Number) The GID to run the entrypoint of the container process. Uses runtime default if unset. May also be set in SecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence for that container. Note that this field cannot be set when spec.os.name is windows.
-- `run_as_non_root` (Boolean) Indicates that the container must run as a non-root user. If true, the Kubelet will validate the image at runtime to ensure that it does not run as UID 0 (root) and fail to start the container if it does. If unset or false, no such validation will be performed. May also be set in SecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
-- `run_as_user` (Number) The UID to run the entrypoint of the container process. Defaults to user specified in image metadata if unspecified. May also be set in SecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence for that container. Note that this field cannot be set when spec.os.name is windows.
-- `se_linux_options` (Attributes) The SELinux context to be applied to all containers. If unspecified, the container runtime will allocate a random SELinux context for each container. May also be set in SecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence for that container. Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--template--spec--security_context--se_linux_options))
-- `seccomp_profile` (Attributes) The seccomp options to use by the containers in this pod. Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--template--spec--security_context--seccomp_profile))
-- `supplemental_groups` (List of String) A list of groups applied to the first process run in each container, in addition to the container's primary GID, the fsGroup (if specified), and group memberships defined in the container image for the uid of the container process. If unspecified, no additional groups are added to any container. Note that group memberships defined in the container image for the uid of the container process are still effective, even if they are not included in this list. Note that this field cannot be set when spec.os.name is windows.
-- `sysctls` (Attributes List) Sysctls hold a list of namespaced sysctls used for the pod. Pods with unsupported sysctls (by the container runtime) might fail to launch. Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--template--spec--security_context--sysctls))
-- `windows_options` (Attributes) The Windows specific settings applied to all containers. If unspecified, the options within a container's SecurityContext will be used. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence. Note that this field cannot be set when spec.os.name is linux. (see [below for nested schema](#nestedatt--spec--template--spec--security_context--windows_options))
+- `fs_group` (Number) A special supplemental group that applies to all containers in a pod.Some volume types allow the Kubelet to change the ownership of that volumeto be owned by the pod:1. The owning GID will be the FSGroup2. The setgid bit is set (new files created in the volume will be owned by FSGroup)3. The permission bits are OR'd with rw-rw----If unset, the Kubelet will not modify the ownership and permissions of any volume.Note that this field cannot be set when spec.os.name is windows.
+- `fs_group_change_policy` (String) fsGroupChangePolicy defines behavior of changing ownership and permission of the volumebefore being exposed inside Pod. This field will only apply tovolume types which support fsGroup based ownership(and permissions).It will have no effect on ephemeral volume types such as: secret, configmapsand emptydir.Valid values are 'OnRootMismatch' and 'Always'. If not specified, 'Always' is used.Note that this field cannot be set when spec.os.name is windows.
+- `run_as_group` (Number) The GID to run the entrypoint of the container process.Uses runtime default if unset.May also be set in SecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedencefor that container.Note that this field cannot be set when spec.os.name is windows.
+- `run_as_non_root` (Boolean) Indicates that the container must run as a non-root user.If true, the Kubelet will validate the image at runtime to ensure that itdoes not run as UID 0 (root) and fail to start the container if it does.If unset or false, no such validation will be performed.May also be set in SecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.
+- `run_as_user` (Number) The UID to run the entrypoint of the container process.Defaults to user specified in image metadata if unspecified.May also be set in SecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedencefor that container.Note that this field cannot be set when spec.os.name is windows.
+- `se_linux_options` (Attributes) The SELinux context to be applied to all containers.If unspecified, the container runtime will allocate a random SELinux context for eachcontainer. May also be set in SecurityContext. If set inboth SecurityContext and PodSecurityContext, the value specified in SecurityContexttakes precedence for that container.Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--template--spec--security_context--se_linux_options))
+- `seccomp_profile` (Attributes) The seccomp options to use by the containers in this pod.Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--template--spec--security_context--seccomp_profile))
+- `supplemental_groups` (List of String) A list of groups applied to the first process run in each container, in additionto the container's primary GID, the fsGroup (if specified), and group membershipsdefined in the container image for the uid of the container process. If unspecified,no additional groups are added to any container. Note that group membershipsdefined in the container image for the uid of the container process are still effective,even if they are not included in this list.Note that this field cannot be set when spec.os.name is windows.
+- `sysctls` (Attributes List) Sysctls hold a list of namespaced sysctls used for the pod. Pods with unsupportedsysctls (by the container runtime) might fail to launch.Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--template--spec--security_context--sysctls))
+- `windows_options` (Attributes) The Windows specific settings applied to all containers.If unspecified, the options within a container's SecurityContext will be used.If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.Note that this field cannot be set when spec.os.name is linux. (see [below for nested schema](#nestedatt--spec--template--spec--security_context--windows_options))
### Nested Schema for `spec.template.spec.security_context.se_linux_options`
@@ -2029,11 +2029,11 @@ Optional:
Required:
-- `type` (String) type indicates which kind of seccomp profile will be applied. Valid options are: Localhost - a profile defined in a file on the node should be used. RuntimeDefault - the container runtime default profile should be used. Unconfined - no profile should be applied.
+- `type` (String) type indicates which kind of seccomp profile will be applied.Valid options are:Localhost - a profile defined in a file on the node should be used.RuntimeDefault - the container runtime default profile should be used.Unconfined - no profile should be applied.
Optional:
-- `localhost_profile` (String) localhostProfile indicates a profile defined in a file on the node should be used. The profile must be preconfigured on the node to work. Must be a descending path, relative to the kubelet's configured seccomp profile location. Must be set if type is 'Localhost'. Must NOT be set for any other type.
+- `localhost_profile` (String) localhostProfile indicates a profile defined in a file on the node should be used.The profile must be preconfigured on the node to work.Must be a descending path, relative to the kubelet's configured seccomp profile location.Must be set if type is 'Localhost'. Must NOT be set for any other type.
@@ -2050,10 +2050,10 @@ Required:
Optional:
-- `gmsa_credential_spec` (String) GMSACredentialSpec is where the GMSA admission webhook (https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of the GMSA credential spec named by the GMSACredentialSpecName field.
+- `gmsa_credential_spec` (String) GMSACredentialSpec is where the GMSA admission webhook(https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of theGMSA credential spec named by the GMSACredentialSpecName field.
- `gmsa_credential_spec_name` (String) GMSACredentialSpecName is the name of the GMSA credential spec to use.
-- `host_process` (Boolean) HostProcess determines if a container should be run as a 'Host Process' container. All of a Pod's containers must have the same effective HostProcess value (it is not allowed to have a mix of HostProcess containers and non-HostProcess containers). In addition, if HostProcess is true then HostNetwork must also be set to true.
-- `run_as_user_name` (String) The UserName in Windows to run the entrypoint of the container process. Defaults to the user specified in image metadata if unspecified. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
+- `host_process` (Boolean) HostProcess determines if a container should be run as a 'Host Process' container.All of a Pod's containers must have the same effective HostProcess value(it is not allowed to have a mix of HostProcess containers and non-HostProcess containers).In addition, if HostProcess is true then HostNetwork must also be set to true.
+- `run_as_user_name` (String) The UserName in Windows to run the entrypoint of the container process.Defaults to the user specified in image metadata if unspecified.May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.
@@ -2062,17 +2062,17 @@ Optional:
Required:
-- `max_skew` (Number) MaxSkew describes the degree to which pods may be unevenly distributed. When 'whenUnsatisfiable=DoNotSchedule', it is the maximum permitted difference between the number of matching pods in the target topology and the global minimum. The global minimum is the minimum number of matching pods in an eligible domain or zero if the number of eligible domains is less than MinDomains. For example, in a 3-zone cluster, MaxSkew is set to 1, and pods with the same labelSelector spread as 2/2/1: In this case, the global minimum is 1. | zone1 | zone2 | zone3 | | P P | P P | P | - if MaxSkew is 1, incoming pod can only be scheduled to zone3 to become 2/2/2; scheduling it onto zone1(zone2) would make the ActualSkew(3-1) on zone1(zone2) violate MaxSkew(1). - if MaxSkew is 2, incoming pod can be scheduled onto any zone. When 'whenUnsatisfiable=ScheduleAnyway', it is used to give higher precedence to topologies that satisfy it. It's a required field. Default value is 1 and 0 is not allowed.
-- `topology_key` (String) TopologyKey is the key of node labels. Nodes that have a label with this key and identical values are considered to be in the same topology. We consider each as a 'bucket', and try to put balanced number of pods into each bucket. We define a domain as a particular instance of a topology. Also, we define an eligible domain as a domain whose nodes meet the requirements of nodeAffinityPolicy and nodeTaintsPolicy. e.g. If TopologyKey is 'kubernetes.io/hostname', each Node is a domain of that topology. And, if TopologyKey is 'topology.kubernetes.io/zone', each zone is a domain of that topology. It's a required field.
-- `when_unsatisfiable` (String) WhenUnsatisfiable indicates how to deal with a pod if it doesn't satisfy the spread constraint. - DoNotSchedule (default) tells the scheduler not to schedule it. - ScheduleAnyway tells the scheduler to schedule the pod in any location, but giving higher precedence to topologies that would help reduce the skew. A constraint is considered 'Unsatisfiable' for an incoming pod if and only if every possible node assignment for that pod would violate 'MaxSkew' on some topology. For example, in a 3-zone cluster, MaxSkew is set to 1, and pods with the same labelSelector spread as 3/1/1: | zone1 | zone2 | zone3 | | P P P | P | P | If WhenUnsatisfiable is set to DoNotSchedule, incoming pod can only be scheduled to zone2(zone3) to become 3/2/1(3/1/2) as ActualSkew(2-1) on zone2(zone3) satisfies MaxSkew(1). In other words, the cluster can still be imbalanced, but scheduler won't make it *more* imbalanced. It's a required field.
+- `max_skew` (Number) MaxSkew describes the degree to which pods may be unevenly distributed.When 'whenUnsatisfiable=DoNotSchedule', it is the maximum permitted differencebetween the number of matching pods in the target topology and the global minimum.The global minimum is the minimum number of matching pods in an eligible domainor zero if the number of eligible domains is less than MinDomains.For example, in a 3-zone cluster, MaxSkew is set to 1, and pods with the samelabelSelector spread as 2/2/1:In this case, the global minimum is 1.| zone1 | zone2 | zone3 || P P | P P | P |- if MaxSkew is 1, incoming pod can only be scheduled to zone3 to become 2/2/2;scheduling it onto zone1(zone2) would make the ActualSkew(3-1) on zone1(zone2)violate MaxSkew(1).- if MaxSkew is 2, incoming pod can be scheduled onto any zone.When 'whenUnsatisfiable=ScheduleAnyway', it is used to give higher precedenceto topologies that satisfy it.It's a required field. Default value is 1 and 0 is not allowed.
+- `topology_key` (String) TopologyKey is the key of node labels. Nodes that have a label with this keyand identical values are considered to be in the same topology.We consider each as a 'bucket', and try to put balanced numberof pods into each bucket.We define a domain as a particular instance of a topology.Also, we define an eligible domain as a domain whose nodes meet the requirements ofnodeAffinityPolicy and nodeTaintsPolicy.e.g. If TopologyKey is 'kubernetes.io/hostname', each Node is a domain of that topology.And, if TopologyKey is 'topology.kubernetes.io/zone', each zone is a domain of that topology.It's a required field.
+- `when_unsatisfiable` (String) WhenUnsatisfiable indicates how to deal with a pod if it doesn't satisfythe spread constraint.- DoNotSchedule (default) tells the scheduler not to schedule it.- ScheduleAnyway tells the scheduler to schedule the pod in any location, but giving higher precedence to topologies that would help reduce the skew.A constraint is considered 'Unsatisfiable' for an incoming podif and only if every possible node assignment for that pod would violate'MaxSkew' on some topology.For example, in a 3-zone cluster, MaxSkew is set to 1, and pods with the samelabelSelector spread as 3/1/1:| zone1 | zone2 | zone3 || P P P | P | P |If WhenUnsatisfiable is set to DoNotSchedule, incoming pod can only be scheduledto zone2(zone3) to become 3/2/1(3/1/2) as ActualSkew(2-1) on zone2(zone3) satisfiesMaxSkew(1). In other words, the cluster can still be imbalanced, but schedulerwon't make it *more* imbalanced.It's a required field.
Optional:
-- `label_selector` (Attributes) LabelSelector is used to find matching pods. Pods that match this label selector are counted to determine the number of pods in their corresponding topology domain. (see [below for nested schema](#nestedatt--spec--template--spec--topology_spread_constraints--label_selector))
-- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select the pods over which spreading will be calculated. The keys are used to lookup values from the incoming pod labels, those key-value labels are ANDed with labelSelector to select the group of existing pods over which spreading will be calculated for the incoming pod. The same key is forbidden to exist in both MatchLabelKeys and LabelSelector. MatchLabelKeys cannot be set when LabelSelector isn't set. Keys that don't exist in the incoming pod labels will be ignored. A null or empty list means only match against labelSelector. This is a beta field and requires the MatchLabelKeysInPodTopologySpread feature gate to be enabled (enabled by default).
-- `min_domains` (Number) MinDomains indicates a minimum number of eligible domains. When the number of eligible domains with matching topology keys is less than minDomains, Pod Topology Spread treats 'global minimum' as 0, and then the calculation of Skew is performed. And when the number of eligible domains with matching topology keys equals or greater than minDomains, this value has no effect on scheduling. As a result, when the number of eligible domains is less than minDomains, scheduler won't schedule more than maxSkew Pods to those domains. If value is nil, the constraint behaves as if MinDomains is equal to 1. Valid values are integers greater than 0. When value is not nil, WhenUnsatisfiable must be DoNotSchedule. For example, in a 3-zone cluster, MaxSkew is set to 2, MinDomains is set to 5 and pods with the same labelSelector spread as 2/2/2: | zone1 | zone2 | zone3 | | P P | P P | P P | The number of domains is less than 5(MinDomains), so 'global minimum' is treated as 0. In this situation, new pod with the same labelSelector cannot be scheduled, because computed skew will be 3(3 - 0) if new Pod is scheduled to any of the three zones, it will violate MaxSkew. This is a beta field and requires the MinDomainsInPodTopologySpread feature gate to be enabled (enabled by default).
-- `node_affinity_policy` (String) NodeAffinityPolicy indicates how we will treat Pod's nodeAffinity/nodeSelector when calculating pod topology spread skew. Options are: - Honor: only nodes matching nodeAffinity/nodeSelector are included in the calculations. - Ignore: nodeAffinity/nodeSelector are ignored. All nodes are included in the calculations. If this value is nil, the behavior is equivalent to the Honor policy. This is a beta-level feature default enabled by the NodeInclusionPolicyInPodTopologySpread feature flag.
-- `node_taints_policy` (String) NodeTaintsPolicy indicates how we will treat node taints when calculating pod topology spread skew. Options are: - Honor: nodes without taints, along with tainted nodes for which the incoming pod has a toleration, are included. - Ignore: node taints are ignored. All nodes are included. If this value is nil, the behavior is equivalent to the Ignore policy. This is a beta-level feature default enabled by the NodeInclusionPolicyInPodTopologySpread feature flag.
+- `label_selector` (Attributes) LabelSelector is used to find matching pods.Pods that match this label selector are counted to determine the number of podsin their corresponding topology domain. (see [below for nested schema](#nestedatt--spec--template--spec--topology_spread_constraints--label_selector))
+- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select the pods over whichspreading will be calculated. The keys are used to lookup values from theincoming pod labels, those key-value labels are ANDed with labelSelectorto select the group of existing pods over which spreading will be calculatedfor the incoming pod. The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.MatchLabelKeys cannot be set when LabelSelector isn't set.Keys that don't exist in the incoming pod labels willbe ignored. A null or empty list means only match against labelSelector.This is a beta field and requires the MatchLabelKeysInPodTopologySpread feature gate to be enabled (enabled by default).
+- `min_domains` (Number) MinDomains indicates a minimum number of eligible domains.When the number of eligible domains with matching topology keys is less than minDomains,Pod Topology Spread treats 'global minimum' as 0, and then the calculation of Skew is performed.And when the number of eligible domains with matching topology keys equals or greater than minDomains,this value has no effect on scheduling.As a result, when the number of eligible domains is less than minDomains,scheduler won't schedule more than maxSkew Pods to those domains.If value is nil, the constraint behaves as if MinDomains is equal to 1.Valid values are integers greater than 0.When value is not nil, WhenUnsatisfiable must be DoNotSchedule.For example, in a 3-zone cluster, MaxSkew is set to 2, MinDomains is set to 5 and pods with the samelabelSelector spread as 2/2/2:| zone1 | zone2 | zone3 || P P | P P | P P |The number of domains is less than 5(MinDomains), so 'global minimum' is treated as 0.In this situation, new pod with the same labelSelector cannot be scheduled,because computed skew will be 3(3 - 0) if new Pod is scheduled to any of the three zones,it will violate MaxSkew.This is a beta field and requires the MinDomainsInPodTopologySpread feature gate to be enabled (enabled by default).
+- `node_affinity_policy` (String) NodeAffinityPolicy indicates how we will treat Pod's nodeAffinity/nodeSelectorwhen calculating pod topology spread skew. Options are:- Honor: only nodes matching nodeAffinity/nodeSelector are included in the calculations.- Ignore: nodeAffinity/nodeSelector are ignored. All nodes are included in the calculations.If this value is nil, the behavior is equivalent to the Honor policy.This is a beta-level feature default enabled by the NodeInclusionPolicyInPodTopologySpread feature flag.
+- `node_taints_policy` (String) NodeTaintsPolicy indicates how we will treat node taints when calculatingpod topology spread skew. Options are:- Honor: nodes without taints, along with tainted nodes for which the incoming podhas a toleration, are included.- Ignore: node taints are ignored. All nodes are included.If this value is nil, the behavior is equivalent to the Ignore policy.This is a beta-level feature default enabled by the NodeInclusionPolicyInPodTopologySpread feature flag.
### Nested Schema for `spec.template.spec.topology_spread_constraints.label_selector`
@@ -2080,7 +2080,7 @@ Optional:
Optional:
- `match_expressions` (Attributes List) matchExpressions is a list of label selector requirements. The requirements are ANDed. (see [below for nested schema](#nestedatt--spec--template--spec--topology_spread_constraints--label_selector--match_expressions))
-- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is 'key', the operator is 'In', and the values array contains only 'value'. The requirements are ANDed.
+- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.
### Nested Schema for `spec.template.spec.topology_spread_constraints.label_selector.match_expressions`
@@ -2088,11 +2088,11 @@ Optional:
Required:
- `key` (String) key is the label key that the selector applies to.
-- `operator` (String) operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist.
+- `operator` (String) operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.
Optional:
-- `values` (List of String) values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch.
+- `values` (List of String) values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.
@@ -2102,37 +2102,37 @@ Optional:
Required:
-- `name` (String) name of the volume. Must be a DNS_LABEL and unique within the pod. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+- `name` (String) name of the volume.Must be a DNS_LABEL and unique within the pod.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Optional:
-- `aws_elastic_block_store` (Attributes) awsElasticBlockStore represents an AWS Disk resource that is attached to a kubelet's host machine and then exposed to the pod. More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore (see [below for nested schema](#nestedatt--spec--template--spec--volumes--aws_elastic_block_store))
+- `aws_elastic_block_store` (Attributes) awsElasticBlockStore represents an AWS Disk resource that is attached to akubelet's host machine and then exposed to the pod.More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore (see [below for nested schema](#nestedatt--spec--template--spec--volumes--aws_elastic_block_store))
- `azure_disk` (Attributes) azureDisk represents an Azure Data Disk mount on the host and bind mount to the pod. (see [below for nested schema](#nestedatt--spec--template--spec--volumes--azure_disk))
- `azure_file` (Attributes) azureFile represents an Azure File Service mount on the host and bind mount to the pod. (see [below for nested schema](#nestedatt--spec--template--spec--volumes--azure_file))
- `cephfs` (Attributes) cephFS represents a Ceph FS mount on the host that shares a pod's lifetime (see [below for nested schema](#nestedatt--spec--template--spec--volumes--cephfs))
-- `cinder` (Attributes) cinder represents a cinder volume attached and mounted on kubelets host machine. More info: https://examples.k8s.io/mysql-cinder-pd/README.md (see [below for nested schema](#nestedatt--spec--template--spec--volumes--cinder))
+- `cinder` (Attributes) cinder represents a cinder volume attached and mounted on kubelets host machine.More info: https://examples.k8s.io/mysql-cinder-pd/README.md (see [below for nested schema](#nestedatt--spec--template--spec--volumes--cinder))
- `config_map` (Attributes) configMap represents a configMap that should populate this volume (see [below for nested schema](#nestedatt--spec--template--spec--volumes--config_map))
- `csi` (Attributes) csi (Container Storage Interface) represents ephemeral storage that is handled by certain external CSI drivers (Beta feature). (see [below for nested schema](#nestedatt--spec--template--spec--volumes--csi))
- `downward_api` (Attributes) downwardAPI represents downward API about the pod that should populate this volume (see [below for nested schema](#nestedatt--spec--template--spec--volumes--downward_api))
-- `empty_dir` (Attributes) emptyDir represents a temporary directory that shares a pod's lifetime. More info: https://kubernetes.io/docs/concepts/storage/volumes#emptydir (see [below for nested schema](#nestedatt--spec--template--spec--volumes--empty_dir))
-- `ephemeral` (Attributes) ephemeral represents a volume that is handled by a cluster storage driver. The volume's lifecycle is tied to the pod that defines it - it will be created before the pod starts, and deleted when the pod is removed. Use this if: a) the volume is only needed while the pod runs, b) features of normal volumes like restoring from snapshot or capacity tracking are needed, c) the storage driver is specified through a storage class, and d) the storage driver supports dynamic volume provisioning through a PersistentVolumeClaim (see EphemeralVolumeSource for more information on the connection between this volume type and PersistentVolumeClaim). Use PersistentVolumeClaim or one of the vendor-specific APIs for volumes that persist for longer than the lifecycle of an individual pod. Use CSI for light-weight local ephemeral volumes if the CSI driver is meant to be used that way - see the documentation of the driver for more information. A pod can use both types of ephemeral volumes and persistent volumes at the same time. (see [below for nested schema](#nestedatt--spec--template--spec--volumes--ephemeral))
+- `empty_dir` (Attributes) emptyDir represents a temporary directory that shares a pod's lifetime.More info: https://kubernetes.io/docs/concepts/storage/volumes#emptydir (see [below for nested schema](#nestedatt--spec--template--spec--volumes--empty_dir))
+- `ephemeral` (Attributes) ephemeral represents a volume that is handled by a cluster storage driver.The volume's lifecycle is tied to the pod that defines it - it will be created before the pod starts,and deleted when the pod is removed.Use this if:a) the volume is only needed while the pod runs,b) features of normal volumes like restoring from snapshot or capacity tracking are needed,c) the storage driver is specified through a storage class, andd) the storage driver supports dynamic volume provisioning through a PersistentVolumeClaim (see EphemeralVolumeSource for more information on the connection between this volume type and PersistentVolumeClaim).Use PersistentVolumeClaim or one of the vendor-specificAPIs for volumes that persist for longer than the lifecycleof an individual pod.Use CSI for light-weight local ephemeral volumes if the CSI driver is meant tobe used that way - see the documentation of the driver formore information.A pod can use both types of ephemeral volumes andpersistent volumes at the same time. (see [below for nested schema](#nestedatt--spec--template--spec--volumes--ephemeral))
- `fc` (Attributes) fc represents a Fibre Channel resource that is attached to a kubelet's host machine and then exposed to the pod. (see [below for nested schema](#nestedatt--spec--template--spec--volumes--fc))
-- `flex_volume` (Attributes) flexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin. (see [below for nested schema](#nestedatt--spec--template--spec--volumes--flex_volume))
+- `flex_volume` (Attributes) flexVolume represents a generic volume resource that isprovisioned/attached using an exec based plugin. (see [below for nested schema](#nestedatt--spec--template--spec--volumes--flex_volume))
- `flocker` (Attributes) flocker represents a Flocker volume attached to a kubelet's host machine. This depends on the Flocker control service being running (see [below for nested schema](#nestedatt--spec--template--spec--volumes--flocker))
-- `gce_persistent_disk` (Attributes) gcePersistentDisk represents a GCE Disk resource that is attached to a kubelet's host machine and then exposed to the pod. More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk (see [below for nested schema](#nestedatt--spec--template--spec--volumes--gce_persistent_disk))
-- `git_repo` (Attributes) gitRepo represents a git repository at a particular revision. DEPRECATED: GitRepo is deprecated. To provision a container with a git repo, mount an EmptyDir into an InitContainer that clones the repo using git, then mount the EmptyDir into the Pod's container. (see [below for nested schema](#nestedatt--spec--template--spec--volumes--git_repo))
-- `glusterfs` (Attributes) glusterfs represents a Glusterfs mount on the host that shares a pod's lifetime. More info: https://examples.k8s.io/volumes/glusterfs/README.md (see [below for nested schema](#nestedatt--spec--template--spec--volumes--glusterfs))
-- `host_path` (Attributes) hostPath represents a pre-existing file or directory on the host machine that is directly exposed to the container. This is generally used for system agents or other privileged things that are allowed to see the host machine. Most containers will NOT need this. More info: https://kubernetes.io/docs/concepts/storage/volumes#hostpath --- TODO(jonesdl) We need to restrict who can use host directory mounts and who can/can not mount host directories as read/write. (see [below for nested schema](#nestedatt--spec--template--spec--volumes--host_path))
-- `iscsi` (Attributes) iscsi represents an ISCSI Disk resource that is attached to a kubelet's host machine and then exposed to the pod. More info: https://examples.k8s.io/volumes/iscsi/README.md (see [below for nested schema](#nestedatt--spec--template--spec--volumes--iscsi))
-- `nfs` (Attributes) nfs represents an NFS mount on the host that shares a pod's lifetime More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs (see [below for nested schema](#nestedatt--spec--template--spec--volumes--nfs))
-- `persistent_volume_claim` (Attributes) persistentVolumeClaimVolumeSource represents a reference to a PersistentVolumeClaim in the same namespace. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims (see [below for nested schema](#nestedatt--spec--template--spec--volumes--persistent_volume_claim))
+- `gce_persistent_disk` (Attributes) gcePersistentDisk represents a GCE Disk resource that is attached to akubelet's host machine and then exposed to the pod.More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk (see [below for nested schema](#nestedatt--spec--template--spec--volumes--gce_persistent_disk))
+- `git_repo` (Attributes) gitRepo represents a git repository at a particular revision.DEPRECATED: GitRepo is deprecated. To provision a container with a git repo, mount anEmptyDir into an InitContainer that clones the repo using git, then mount the EmptyDirinto the Pod's container. (see [below for nested schema](#nestedatt--spec--template--spec--volumes--git_repo))
+- `glusterfs` (Attributes) glusterfs represents a Glusterfs mount on the host that shares a pod's lifetime.More info: https://examples.k8s.io/volumes/glusterfs/README.md (see [below for nested schema](#nestedatt--spec--template--spec--volumes--glusterfs))
+- `host_path` (Attributes) hostPath represents a pre-existing file or directory on the hostmachine that is directly exposed to the container. This is generallyused for system agents or other privileged things that are allowedto see the host machine. Most containers will NOT need this.More info: https://kubernetes.io/docs/concepts/storage/volumes#hostpath---TODO(jonesdl) We need to restrict who can use host directory mounts and who can/can notmount host directories as read/write. (see [below for nested schema](#nestedatt--spec--template--spec--volumes--host_path))
+- `iscsi` (Attributes) iscsi represents an ISCSI Disk resource that is attached to akubelet's host machine and then exposed to the pod.More info: https://examples.k8s.io/volumes/iscsi/README.md (see [below for nested schema](#nestedatt--spec--template--spec--volumes--iscsi))
+- `nfs` (Attributes) nfs represents an NFS mount on the host that shares a pod's lifetimeMore info: https://kubernetes.io/docs/concepts/storage/volumes#nfs (see [below for nested schema](#nestedatt--spec--template--spec--volumes--nfs))
+- `persistent_volume_claim` (Attributes) persistentVolumeClaimVolumeSource represents a reference to aPersistentVolumeClaim in the same namespace.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims (see [below for nested schema](#nestedatt--spec--template--spec--volumes--persistent_volume_claim))
- `photon_persistent_disk` (Attributes) photonPersistentDisk represents a PhotonController persistent disk attached and mounted on kubelets host machine (see [below for nested schema](#nestedatt--spec--template--spec--volumes--photon_persistent_disk))
- `portworx_volume` (Attributes) portworxVolume represents a portworx volume attached and mounted on kubelets host machine (see [below for nested schema](#nestedatt--spec--template--spec--volumes--portworx_volume))
- `projected` (Attributes) projected items for all in one resources secrets, configmaps, and downward API (see [below for nested schema](#nestedatt--spec--template--spec--volumes--projected))
- `quobyte` (Attributes) quobyte represents a Quobyte mount on the host that shares a pod's lifetime (see [below for nested schema](#nestedatt--spec--template--spec--volumes--quobyte))
-- `rbd` (Attributes) rbd represents a Rados Block Device mount on the host that shares a pod's lifetime. More info: https://examples.k8s.io/volumes/rbd/README.md (see [below for nested schema](#nestedatt--spec--template--spec--volumes--rbd))
+- `rbd` (Attributes) rbd represents a Rados Block Device mount on the host that shares a pod's lifetime.More info: https://examples.k8s.io/volumes/rbd/README.md (see [below for nested schema](#nestedatt--spec--template--spec--volumes--rbd))
- `scale_io` (Attributes) scaleIO represents a ScaleIO persistent volume attached and mounted on Kubernetes nodes. (see [below for nested schema](#nestedatt--spec--template--spec--volumes--scale_io))
-- `secret` (Attributes) secret represents a secret that should populate this volume. More info: https://kubernetes.io/docs/concepts/storage/volumes#secret (see [below for nested schema](#nestedatt--spec--template--spec--volumes--secret))
+- `secret` (Attributes) secret represents a secret that should populate this volume.More info: https://kubernetes.io/docs/concepts/storage/volumes#secret (see [below for nested schema](#nestedatt--spec--template--spec--volumes--secret))
- `storageos` (Attributes) storageOS represents a StorageOS volume attached and mounted on Kubernetes nodes. (see [below for nested schema](#nestedatt--spec--template--spec--volumes--storageos))
- `vsphere_volume` (Attributes) vsphereVolume represents a vSphere volume attached and mounted on kubelets host machine (see [below for nested schema](#nestedatt--spec--template--spec--volumes--vsphere_volume))
@@ -2141,13 +2141,13 @@ Optional:
Required:
-- `volume_id` (String) volumeID is unique ID of the persistent disk resource in AWS (Amazon EBS volume). More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore
+- `volume_id` (String) volumeID is unique ID of the persistent disk resource in AWS (Amazon EBS volume).More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore
Optional:
-- `fs_type` (String) fsType is the filesystem type of the volume that you want to mount. Tip: Ensure that the filesystem type is supported by the host operating system. Examples: 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified. More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore TODO: how do we prevent errors in the filesystem from compromising the machine
-- `partition` (Number) partition is the partition in the volume that you want to mount. If omitted, the default is to mount by volume name. Examples: For volume /dev/sda1, you specify the partition as '1'. Similarly, the volume partition for /dev/sda is '0' (or you can leave the property empty).
-- `read_only` (Boolean) readOnly value true will force the readOnly setting in VolumeMounts. More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore
+- `fs_type` (String) fsType is the filesystem type of the volume that you want to mount.Tip: Ensure that the filesystem type is supported by the host operating system.Examples: 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified.More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstoreTODO: how do we prevent errors in the filesystem from compromising the machine
+- `partition` (Number) partition is the partition in the volume that you want to mount.If omitted, the default is to mount by volume name.Examples: For volume /dev/sda1, you specify the partition as '1'.Similarly, the volume partition for /dev/sda is '0' (or you can leave the property empty).
+- `read_only` (Boolean) readOnly value true will force the readOnly setting in VolumeMounts.More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore
@@ -2161,9 +2161,9 @@ Required:
Optional:
- `caching_mode` (String) cachingMode is the Host Caching mode: None, Read Only, Read Write.
-- `fs_type` (String) fsType is Filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified.
+- `fs_type` (String) fsType is Filesystem type to mount.Must be a filesystem type supported by the host operating system.Ex. 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified.
- `kind` (String) kind expected values are Shared: multiple blob disks per storage account Dedicated: single blob disk per storage account Managed: azure managed data disk (only in managed availability set). defaults to shared
-- `read_only` (Boolean) readOnly Defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.
+- `read_only` (Boolean) readOnly Defaults to false (read/write). ReadOnly here will forcethe ReadOnly setting in VolumeMounts.
@@ -2176,7 +2176,7 @@ Required:
Optional:
-- `read_only` (Boolean) readOnly defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.
+- `read_only` (Boolean) readOnly defaults to false (read/write). ReadOnly here will forcethe ReadOnly setting in VolumeMounts.
@@ -2184,22 +2184,22 @@ Optional:
Required:
-- `monitors` (List of String) monitors is Required: Monitors is a collection of Ceph monitors More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it
+- `monitors` (List of String) monitors is Required: Monitors is a collection of Ceph monitorsMore info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it
Optional:
- `path` (String) path is Optional: Used as the mounted root, rather than the full Ceph tree, default is /
-- `read_only` (Boolean) readOnly is Optional: Defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts. More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it
-- `secret_file` (String) secretFile is Optional: SecretFile is the path to key ring for User, default is /etc/ceph/user.secret More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it
-- `secret_ref` (Attributes) secretRef is Optional: SecretRef is reference to the authentication secret for User, default is empty. More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it (see [below for nested schema](#nestedatt--spec--template--spec--volumes--cephfs--secret_ref))
-- `user` (String) user is optional: User is the rados user name, default is admin More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it
+- `read_only` (Boolean) readOnly is Optional: Defaults to false (read/write). ReadOnly here will forcethe ReadOnly setting in VolumeMounts.More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it
+- `secret_file` (String) secretFile is Optional: SecretFile is the path to key ring for User, default is /etc/ceph/user.secretMore info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it
+- `secret_ref` (Attributes) secretRef is Optional: SecretRef is reference to the authentication secret for User, default is empty.More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it (see [below for nested schema](#nestedatt--spec--template--spec--volumes--cephfs--secret_ref))
+- `user` (String) user is optional: User is the rados user name, default is adminMore info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it
### Nested Schema for `spec.template.spec.volumes.cephfs.secret_ref`
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
@@ -2208,20 +2208,20 @@ Optional:
Required:
-- `volume_id` (String) volumeID used to identify the volume in cinder. More info: https://examples.k8s.io/mysql-cinder-pd/README.md
+- `volume_id` (String) volumeID used to identify the volume in cinder.More info: https://examples.k8s.io/mysql-cinder-pd/README.md
Optional:
-- `fs_type` (String) fsType is the filesystem type to mount. Must be a filesystem type supported by the host operating system. Examples: 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified. More info: https://examples.k8s.io/mysql-cinder-pd/README.md
-- `read_only` (Boolean) readOnly defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts. More info: https://examples.k8s.io/mysql-cinder-pd/README.md
-- `secret_ref` (Attributes) secretRef is optional: points to a secret object containing parameters used to connect to OpenStack. (see [below for nested schema](#nestedatt--spec--template--spec--volumes--cinder--secret_ref))
+- `fs_type` (String) fsType is the filesystem type to mount.Must be a filesystem type supported by the host operating system.Examples: 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified.More info: https://examples.k8s.io/mysql-cinder-pd/README.md
+- `read_only` (Boolean) readOnly defaults to false (read/write). ReadOnly here will forcethe ReadOnly setting in VolumeMounts.More info: https://examples.k8s.io/mysql-cinder-pd/README.md
+- `secret_ref` (Attributes) secretRef is optional: points to a secret object containing parameters used to connectto OpenStack. (see [below for nested schema](#nestedatt--spec--template--spec--volumes--cinder--secret_ref))
### Nested Schema for `spec.template.spec.volumes.cinder.secret_ref`
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
@@ -2230,9 +2230,9 @@ Optional:
Optional:
-- `default_mode` (Number) defaultMode is optional: mode bits used to set permissions on created files by default. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. Defaults to 0644. Directories within the path are not affected by this setting. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
-- `items` (Attributes List) items if unspecified, each key-value pair in the Data field of the referenced ConfigMap will be projected into the volume as a file whose name is the key and content is the value. If specified, the listed keys will be projected into the specified paths, and unlisted keys will not be present. If a key is specified which is not present in the ConfigMap, the volume setup will error unless it is marked optional. Paths must be relative and may not contain the '..' path or start with '..'. (see [below for nested schema](#nestedatt--spec--template--spec--volumes--config_map--items))
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `default_mode` (Number) defaultMode is optional: mode bits used to set permissions on created files by default.Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511.YAML accepts both octal and decimal values, JSON requires decimal values for mode bits.Defaults to 0644.Directories within the path are not affected by this setting.This might be in conflict with other options that affect the filemode, like fsGroup, and the result can be other mode bits set.
+- `items` (Attributes List) items if unspecified, each key-value pair in the Data field of the referencedConfigMap will be projected into the volume as a file whose name is thekey and content is the value. If specified, the listed keys will beprojected into the specified paths, and unlisted keys will not bepresent. If a key is specified which is not present in the ConfigMap,the volume setup will error unless it is marked optional. Paths must berelative and may not contain the '..' path or start with '..'. (see [below for nested schema](#nestedatt--spec--template--spec--volumes--config_map--items))
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
- `optional` (Boolean) optional specify whether the ConfigMap or its keys must be defined
@@ -2241,11 +2241,11 @@ Optional:
Required:
- `key` (String) key is the key to project.
-- `path` (String) path is the relative path of the file to map the key to. May not be an absolute path. May not contain the path element '..'. May not start with the string '..'.
+- `path` (String) path is the relative path of the file to map the key to.May not be an absolute path.May not contain the path element '..'.May not start with the string '..'.
Optional:
-- `mode` (Number) mode is Optional: mode bits used to set permissions on this file. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. If not specified, the volume defaultMode will be used. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
+- `mode` (Number) mode is Optional: mode bits used to set permissions on this file.Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511.YAML accepts both octal and decimal values, JSON requires decimal values for mode bits.If not specified, the volume defaultMode will be used.This might be in conflict with other options that affect the filemode, like fsGroup, and the result can be other mode bits set.
@@ -2254,21 +2254,21 @@ Optional:
Required:
-- `driver` (String) driver is the name of the CSI driver that handles this volume. Consult with your admin for the correct name as registered in the cluster.
+- `driver` (String) driver is the name of the CSI driver that handles this volume.Consult with your admin for the correct name as registered in the cluster.
Optional:
-- `fs_type` (String) fsType to mount. Ex. 'ext4', 'xfs', 'ntfs'. If not provided, the empty value is passed to the associated CSI driver which will determine the default filesystem to apply.
-- `node_publish_secret_ref` (Attributes) nodePublishSecretRef is a reference to the secret object containing sensitive information to pass to the CSI driver to complete the CSI NodePublishVolume and NodeUnpublishVolume calls. This field is optional, and may be empty if no secret is required. If the secret object contains more than one secret, all secret references are passed. (see [below for nested schema](#nestedatt--spec--template--spec--volumes--csi--node_publish_secret_ref))
-- `read_only` (Boolean) readOnly specifies a read-only configuration for the volume. Defaults to false (read/write).
-- `volume_attributes` (Map of String) volumeAttributes stores driver-specific properties that are passed to the CSI driver. Consult your driver's documentation for supported values.
+- `fs_type` (String) fsType to mount. Ex. 'ext4', 'xfs', 'ntfs'.If not provided, the empty value is passed to the associated CSI driverwhich will determine the default filesystem to apply.
+- `node_publish_secret_ref` (Attributes) nodePublishSecretRef is a reference to the secret object containingsensitive information to pass to the CSI driver to complete the CSINodePublishVolume and NodeUnpublishVolume calls.This field is optional, and may be empty if no secret is required. If thesecret object contains more than one secret, all secret references are passed. (see [below for nested schema](#nestedatt--spec--template--spec--volumes--csi--node_publish_secret_ref))
+- `read_only` (Boolean) readOnly specifies a read-only configuration for the volume.Defaults to false (read/write).
+- `volume_attributes` (Map of String) volumeAttributes stores driver-specific properties that are passed to the CSIdriver. Consult your driver's documentation for supported values.
### Nested Schema for `spec.template.spec.volumes.csi.node_publish_secret_ref`
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
@@ -2277,7 +2277,7 @@ Optional:
Optional:
-- `default_mode` (Number) Optional: mode bits to use on created files by default. Must be a Optional: mode bits used to set permissions on created files by default. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. Defaults to 0644. Directories within the path are not affected by this setting. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
+- `default_mode` (Number) Optional: mode bits to use on created files by default. Must be aOptional: mode bits used to set permissions on created files by default.Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511.YAML accepts both octal and decimal values, JSON requires decimal values for mode bits.Defaults to 0644.Directories within the path are not affected by this setting.This might be in conflict with other options that affect the filemode, like fsGroup, and the result can be other mode bits set.
- `items` (Attributes List) Items is a list of downward API volume file (see [below for nested schema](#nestedatt--spec--template--spec--volumes--downward_api--items))
@@ -2290,8 +2290,8 @@ Required:
Optional:
- `field_ref` (Attributes) Required: Selects a field of the pod: only annotations, labels, name and namespace are supported. (see [below for nested schema](#nestedatt--spec--template--spec--volumes--downward_api--items--field_ref))
-- `mode` (Number) Optional: mode bits used to set permissions on this file, must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. If not specified, the volume defaultMode will be used. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
-- `resource_field_ref` (Attributes) Selects a resource of the container: only resources limits and requests (limits.cpu, limits.memory, requests.cpu and requests.memory) are currently supported. (see [below for nested schema](#nestedatt--spec--template--spec--volumes--downward_api--items--resource_field_ref))
+- `mode` (Number) Optional: mode bits used to set permissions on this file, must be an octal valuebetween 0000 and 0777 or a decimal value between 0 and 511.YAML accepts both octal and decimal values, JSON requires decimal values for mode bits.If not specified, the volume defaultMode will be used.This might be in conflict with other options that affect the filemode, like fsGroup, and the result can be other mode bits set.
+- `resource_field_ref` (Attributes) Selects a resource of the container: only resources limits and requests(limits.cpu, limits.memory, requests.cpu and requests.memory) are currently supported. (see [below for nested schema](#nestedatt--spec--template--spec--volumes--downward_api--items--resource_field_ref))
### Nested Schema for `spec.template.spec.volumes.downward_api.items.field_ref`
@@ -2325,8 +2325,8 @@ Optional:
Optional:
-- `medium` (String) medium represents what type of storage medium should back this directory. The default is '' which means to use the node's default medium. Must be an empty string (default) or Memory. More info: https://kubernetes.io/docs/concepts/storage/volumes#emptydir
-- `size_limit` (String) sizeLimit is the total amount of local storage required for this EmptyDir volume. The size limit is also applicable for memory medium. The maximum usage on memory medium EmptyDir would be the minimum value between the SizeLimit specified here and the sum of memory limits of all containers in a pod. The default is nil which means that the limit is undefined. More info: https://kubernetes.io/docs/concepts/storage/volumes#emptydir
+- `medium` (String) medium represents what type of storage medium should back this directory.The default is '' which means to use the node's default medium.Must be an empty string (default) or Memory.More info: https://kubernetes.io/docs/concepts/storage/volumes#emptydir
+- `size_limit` (String) sizeLimit is the total amount of local storage required for this EmptyDir volume.The size limit is also applicable for memory medium.The maximum usage on memory medium EmptyDir would be the minimum value betweenthe SizeLimit specified here and the sum of memory limits of all containers in a pod.The default is nil which means that the limit is undefined.More info: https://kubernetes.io/docs/concepts/storage/volumes#emptydir
@@ -2334,32 +2334,32 @@ Optional:
Optional:
-- `volume_claim_template` (Attributes) Will be used to create a stand-alone PVC to provision the volume. The pod in which this EphemeralVolumeSource is embedded will be the owner of the PVC, i.e. the PVC will be deleted together with the pod. The name of the PVC will be '-' where '' is the name from the 'PodSpec.Volumes' array entry. Pod validation will reject the pod if the concatenated name is not valid for a PVC (for example, too long). An existing PVC with that name that is not owned by the pod will *not* be used for the pod to avoid using an unrelated volume by mistake. Starting the pod is then blocked until the unrelated PVC is removed. If such a pre-created PVC is meant to be used by the pod, the PVC has to updated with an owner reference to the pod once the pod exists. Normally this should not be necessary, but it may be useful when manually reconstructing a broken cluster. This field is read-only and no changes will be made by Kubernetes to the PVC after it has been created. Required, must not be nil. (see [below for nested schema](#nestedatt--spec--template--spec--volumes--ephemeral--volume_claim_template))
+- `volume_claim_template` (Attributes) Will be used to create a stand-alone PVC to provision the volume.The pod in which this EphemeralVolumeSource is embedded will be theowner of the PVC, i.e. the PVC will be deleted together with thepod. The name of the PVC will be '-' where'' is the name from the 'PodSpec.Volumes' arrayentry. Pod validation will reject the pod if the concatenated nameis not valid for a PVC (for example, too long).An existing PVC with that name that is not owned by the podwill *not* be used for the pod to avoid using an unrelatedvolume by mistake. Starting the pod is then blocked untilthe unrelated PVC is removed. If such a pre-created PVC ismeant to be used by the pod, the PVC has to updated with anowner reference to the pod once the pod exists. Normallythis should not be necessary, but it may be useful whenmanually reconstructing a broken cluster.This field is read-only and no changes will be made by Kubernetesto the PVC after it has been created.Required, must not be nil. (see [below for nested schema](#nestedatt--spec--template--spec--volumes--ephemeral--volume_claim_template))
### Nested Schema for `spec.template.spec.volumes.ephemeral.volume_claim_template`
Required:
-- `spec` (Attributes) The specification for the PersistentVolumeClaim. The entire content is copied unchanged into the PVC that gets created from this template. The same fields as in a PersistentVolumeClaim are also valid here. (see [below for nested schema](#nestedatt--spec--template--spec--volumes--ephemeral--volume_claim_template--spec))
+- `spec` (Attributes) The specification for the PersistentVolumeClaim. The entire content iscopied unchanged into the PVC that gets created from thistemplate. The same fields as in a PersistentVolumeClaimare also valid here. (see [below for nested schema](#nestedatt--spec--template--spec--volumes--ephemeral--volume_claim_template--spec))
Optional:
-- `metadata` (Map of String) May contain labels and annotations that will be copied into the PVC when creating it. No other fields are allowed and will be rejected during validation.
+- `metadata` (Map of String) May contain labels and annotations that will be copied into the PVCwhen creating it. No other fields are allowed and will be rejected duringvalidation.
### Nested Schema for `spec.template.spec.volumes.ephemeral.volume_claim_template.spec`
Optional:
-- `access_modes` (List of String) accessModes contains the desired access modes the volume should have. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#access-modes-1
-- `data_source` (Attributes) dataSource field can be used to specify either: * An existing VolumeSnapshot object (snapshot.storage.k8s.io/VolumeSnapshot) * An existing PVC (PersistentVolumeClaim) If the provisioner or an external controller can support the specified data source, it will create a new volume based on the contents of the specified data source. When the AnyVolumeDataSource feature gate is enabled, dataSource contents will be copied to dataSourceRef, and dataSourceRef contents will be copied to dataSource when dataSourceRef.namespace is not specified. If the namespace is specified, then dataSourceRef will not be copied to dataSource. (see [below for nested schema](#nestedatt--spec--template--spec--volumes--ephemeral--volume_claim_template--spec--data_source))
-- `data_source_ref` (Attributes) dataSourceRef specifies the object from which to populate the volume with data, if a non-empty volume is desired. This may be any object from a non-empty API group (non core object) or a PersistentVolumeClaim object. When this field is specified, volume binding will only succeed if the type of the specified object matches some installed volume populator or dynamic provisioner. This field will replace the functionality of the dataSource field and as such if both fields are non-empty, they must have the same value. For backwards compatibility, when namespace isn't specified in dataSourceRef, both fields (dataSource and dataSourceRef) will be set to the same value automatically if one of them is empty and the other is non-empty. When namespace is specified in dataSourceRef, dataSource isn't set to the same value and must be empty. There are three important differences between dataSource and dataSourceRef: * While dataSource only allows two specific types of objects, dataSourceRef allows any non-core object, as well as PersistentVolumeClaim objects. * While dataSource ignores disallowed values (dropping them), dataSourceRef preserves all values, and generates an error if a disallowed value is specified. * While dataSource only allows local objects, dataSourceRef allows objects in any namespaces. (Beta) Using this field requires the AnyVolumeDataSource feature gate to be enabled. (Alpha) Using the namespace field of dataSourceRef requires the CrossNamespaceVolumeDataSource feature gate to be enabled. (see [below for nested schema](#nestedatt--spec--template--spec--volumes--ephemeral--volume_claim_template--spec--data_source_ref))
-- `resources` (Attributes) resources represents the minimum resources the volume should have. If RecoverVolumeExpansionFailure feature is enabled users are allowed to specify resource requirements that are lower than previous value but must still be higher than capacity recorded in the status field of the claim. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources (see [below for nested schema](#nestedatt--spec--template--spec--volumes--ephemeral--volume_claim_template--spec--resources))
+- `access_modes` (List of String) accessModes contains the desired access modes the volume should have.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#access-modes-1
+- `data_source` (Attributes) dataSource field can be used to specify either:* An existing VolumeSnapshot object (snapshot.storage.k8s.io/VolumeSnapshot)* An existing PVC (PersistentVolumeClaim)If the provisioner or an external controller can support the specified data source,it will create a new volume based on the contents of the specified data source.When the AnyVolumeDataSource feature gate is enabled, dataSource contents will be copied to dataSourceRef,and dataSourceRef contents will be copied to dataSource when dataSourceRef.namespace is not specified.If the namespace is specified, then dataSourceRef will not be copied to dataSource. (see [below for nested schema](#nestedatt--spec--template--spec--volumes--ephemeral--volume_claim_template--spec--data_source))
+- `data_source_ref` (Attributes) dataSourceRef specifies the object from which to populate the volume with data, if a non-emptyvolume is desired. This may be any object from a non-empty API group (noncore object) or a PersistentVolumeClaim object.When this field is specified, volume binding will only succeed if the type ofthe specified object matches some installed volume populator or dynamicprovisioner.This field will replace the functionality of the dataSource field and as suchif both fields are non-empty, they must have the same value. For backwardscompatibility, when namespace isn't specified in dataSourceRef,both fields (dataSource and dataSourceRef) will be set to the samevalue automatically if one of them is empty and the other is non-empty.When namespace is specified in dataSourceRef,dataSource isn't set to the same value and must be empty.There are three important differences between dataSource and dataSourceRef:* While dataSource only allows two specific types of objects, dataSourceRef allows any non-core object, as well as PersistentVolumeClaim objects.* While dataSource ignores disallowed values (dropping them), dataSourceRef preserves all values, and generates an error if a disallowed value is specified.* While dataSource only allows local objects, dataSourceRef allows objects in any namespaces.(Beta) Using this field requires the AnyVolumeDataSource feature gate to be enabled.(Alpha) Using the namespace field of dataSourceRef requires the CrossNamespaceVolumeDataSource feature gate to be enabled. (see [below for nested schema](#nestedatt--spec--template--spec--volumes--ephemeral--volume_claim_template--spec--data_source_ref))
+- `resources` (Attributes) resources represents the minimum resources the volume should have.If RecoverVolumeExpansionFailure feature is enabled users are allowed to specify resource requirementsthat are lower than previous value but must still be higher than capacity recorded in thestatus field of the claim.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources (see [below for nested schema](#nestedatt--spec--template--spec--volumes--ephemeral--volume_claim_template--spec--resources))
- `selector` (Attributes) selector is a label query over volumes to consider for binding. (see [below for nested schema](#nestedatt--spec--template--spec--volumes--ephemeral--volume_claim_template--spec--selector))
-- `storage_class_name` (String) storageClassName is the name of the StorageClass required by the claim. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#class-1
-- `volume_attributes_class_name` (String) volumeAttributesClassName may be used to set the VolumeAttributesClass used by this claim. If specified, the CSI driver will create or update the volume with the attributes defined in the corresponding VolumeAttributesClass. This has a different purpose than storageClassName, it can be changed after the claim is created. An empty string value means that no VolumeAttributesClass will be applied to the claim but it's not allowed to reset this field to empty string once it is set. If unspecified and the PersistentVolumeClaim is unbound, the default VolumeAttributesClass will be set by the persistentvolume controller if it exists. If the resource referred to by volumeAttributesClass does not exist, this PersistentVolumeClaim will be set to a Pending state, as reflected by the modifyVolumeStatus field, until such as a resource exists. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#volumeattributesclass (Alpha) Using this field requires the VolumeAttributesClass feature gate to be enabled.
-- `volume_mode` (String) volumeMode defines what type of volume is required by the claim. Value of Filesystem is implied when not included in claim spec.
+- `storage_class_name` (String) storageClassName is the name of the StorageClass required by the claim.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#class-1
+- `volume_attributes_class_name` (String) volumeAttributesClassName may be used to set the VolumeAttributesClass used by this claim.If specified, the CSI driver will create or update the volume with the attributes definedin the corresponding VolumeAttributesClass. This has a different purpose than storageClassName,it can be changed after the claim is created. An empty string value means that no VolumeAttributesClasswill be applied to the claim but it's not allowed to reset this field to empty string once it is set.If unspecified and the PersistentVolumeClaim is unbound, the default VolumeAttributesClasswill be set by the persistentvolume controller if it exists.If the resource referred to by volumeAttributesClass does not exist, this PersistentVolumeClaim will beset to a Pending state, as reflected by the modifyVolumeStatus field, until such as a resourceexists.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#volumeattributesclass(Alpha) Using this field requires the VolumeAttributesClass feature gate to be enabled.
+- `volume_mode` (String) volumeMode defines what type of volume is required by the claim.Value of Filesystem is implied when not included in claim spec.
- `volume_name` (String) volumeName is the binding reference to the PersistentVolume backing this claim.
@@ -2372,7 +2372,7 @@ Required:
Optional:
-- `api_group` (String) APIGroup is the group for the resource being referenced. If APIGroup is not specified, the specified Kind must be in the core API group. For any other third-party types, APIGroup is required.
+- `api_group` (String) APIGroup is the group for the resource being referenced.If APIGroup is not specified, the specified Kind must be in the core API group.For any other third-party types, APIGroup is required.
@@ -2385,8 +2385,8 @@ Required:
Optional:
-- `api_group` (String) APIGroup is the group for the resource being referenced. If APIGroup is not specified, the specified Kind must be in the core API group. For any other third-party types, APIGroup is required.
-- `namespace` (String) Namespace is the namespace of resource being referenced Note that when a namespace is specified, a gateway.networking.k8s.io/ReferenceGrant object is required in the referent namespace to allow that namespace's owner to accept the reference. See the ReferenceGrant documentation for details. (Alpha) This field requires the CrossNamespaceVolumeDataSource feature gate to be enabled.
+- `api_group` (String) APIGroup is the group for the resource being referenced.If APIGroup is not specified, the specified Kind must be in the core API group.For any other third-party types, APIGroup is required.
+- `namespace` (String) Namespace is the namespace of resource being referencedNote that when a namespace is specified, a gateway.networking.k8s.io/ReferenceGrant object is required in the referent namespace to allow that namespace's owner to accept the reference. See the ReferenceGrant documentation for details.(Alpha) This field requires the CrossNamespaceVolumeDataSource feature gate to be enabled.
@@ -2394,8 +2394,8 @@ Optional:
Optional:
-- `limits` (Map of String) Limits describes the maximum amount of compute resources allowed. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-- `requests` (Map of String) Requests describes the minimum amount of compute resources required. If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, otherwise to an implementation-defined value. Requests cannot exceed Limits. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
+- `limits` (Map of String) Limits describes the maximum amount of compute resources allowed.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
+- `requests` (Map of String) Requests describes the minimum amount of compute resources required.If Requests is omitted for a container, it defaults to Limits if that is explicitly specified,otherwise to an implementation-defined value. Requests cannot exceed Limits.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
@@ -2404,7 +2404,7 @@ Optional:
Optional:
- `match_expressions` (Attributes List) matchExpressions is a list of label selector requirements. The requirements are ANDed. (see [below for nested schema](#nestedatt--spec--template--spec--volumes--ephemeral--volume_claim_template--spec--selector--match_expressions))
-- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is 'key', the operator is 'In', and the values array contains only 'value'. The requirements are ANDed.
+- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.
### Nested Schema for `spec.template.spec.volumes.ephemeral.volume_claim_template.spec.selector.match_expressions`
@@ -2412,11 +2412,11 @@ Optional:
Required:
- `key` (String) key is the label key that the selector applies to.
-- `operator` (String) operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist.
+- `operator` (String) operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.
Optional:
-- `values` (List of String) values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch.
+- `values` (List of String) values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.
@@ -2428,11 +2428,11 @@ Optional:
Optional:
-- `fs_type` (String) fsType is the filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified. TODO: how do we prevent errors in the filesystem from compromising the machine
+- `fs_type` (String) fsType is the filesystem type to mount.Must be a filesystem type supported by the host operating system.Ex. 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified.TODO: how do we prevent errors in the filesystem from compromising the machine
- `lun` (Number) lun is Optional: FC target lun number
-- `read_only` (Boolean) readOnly is Optional: Defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.
+- `read_only` (Boolean) readOnly is Optional: Defaults to false (read/write). ReadOnly here will forcethe ReadOnly setting in VolumeMounts.
- `target_ww_ns` (List of String) targetWWNs is Optional: FC target worldwide names (WWNs)
-- `wwids` (List of String) wwids Optional: FC volume world wide identifiers (wwids) Either wwids or combination of targetWWNs and lun must be set, but not both simultaneously.
+- `wwids` (List of String) wwids Optional: FC volume world wide identifiers (wwids)Either wwids or combination of targetWWNs and lun must be set, but not both simultaneously.
@@ -2444,17 +2444,17 @@ Required:
Optional:
-- `fs_type` (String) fsType is the filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. 'ext4', 'xfs', 'ntfs'. The default filesystem depends on FlexVolume script.
+- `fs_type` (String) fsType is the filesystem type to mount.Must be a filesystem type supported by the host operating system.Ex. 'ext4', 'xfs', 'ntfs'. The default filesystem depends on FlexVolume script.
- `options` (Map of String) options is Optional: this field holds extra command options if any.
-- `read_only` (Boolean) readOnly is Optional: defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.
-- `secret_ref` (Attributes) secretRef is Optional: secretRef is reference to the secret object containing sensitive information to pass to the plugin scripts. This may be empty if no secret object is specified. If the secret object contains more than one secret, all secrets are passed to the plugin scripts. (see [below for nested schema](#nestedatt--spec--template--spec--volumes--flex_volume--secret_ref))
+- `read_only` (Boolean) readOnly is Optional: defaults to false (read/write). ReadOnly here will forcethe ReadOnly setting in VolumeMounts.
+- `secret_ref` (Attributes) secretRef is Optional: secretRef is reference to the secret object containingsensitive information to pass to the plugin scripts. This may beempty if no secret object is specified. If the secret objectcontains more than one secret, all secrets are passed to the pluginscripts. (see [below for nested schema](#nestedatt--spec--template--spec--volumes--flex_volume--secret_ref))
### Nested Schema for `spec.template.spec.volumes.flex_volume.secret_ref`
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
@@ -2463,7 +2463,7 @@ Optional:
Optional:
-- `dataset_name` (String) datasetName is Name of the dataset stored as metadata -> name on the dataset for Flocker should be considered as deprecated
+- `dataset_name` (String) datasetName is Name of the dataset stored as metadata -> name on the dataset for Flockershould be considered as deprecated
- `dataset_uuid` (String) datasetUUID is the UUID of the dataset. This is unique identifier of a Flocker dataset
@@ -2472,13 +2472,13 @@ Optional:
Required:
-- `pd_name` (String) pdName is unique name of the PD resource in GCE. Used to identify the disk in GCE. More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk
+- `pd_name` (String) pdName is unique name of the PD resource in GCE. Used to identify the disk in GCE.More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk
Optional:
-- `fs_type` (String) fsType is filesystem type of the volume that you want to mount. Tip: Ensure that the filesystem type is supported by the host operating system. Examples: 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified. More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk TODO: how do we prevent errors in the filesystem from compromising the machine
-- `partition` (Number) partition is the partition in the volume that you want to mount. If omitted, the default is to mount by volume name. Examples: For volume /dev/sda1, you specify the partition as '1'. Similarly, the volume partition for /dev/sda is '0' (or you can leave the property empty). More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk
-- `read_only` (Boolean) readOnly here will force the ReadOnly setting in VolumeMounts. Defaults to false. More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk
+- `fs_type` (String) fsType is filesystem type of the volume that you want to mount.Tip: Ensure that the filesystem type is supported by the host operating system.Examples: 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified.More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdiskTODO: how do we prevent errors in the filesystem from compromising the machine
+- `partition` (Number) partition is the partition in the volume that you want to mount.If omitted, the default is to mount by volume name.Examples: For volume /dev/sda1, you specify the partition as '1'.Similarly, the volume partition for /dev/sda is '0' (or you can leave the property empty).More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk
+- `read_only` (Boolean) readOnly here will force the ReadOnly setting in VolumeMounts.Defaults to false.More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk
@@ -2490,7 +2490,7 @@ Required:
Optional:
-- `directory` (String) directory is the target directory name. Must not contain or start with '..'. If '.' is supplied, the volume directory will be the git repository. Otherwise, if specified, the volume will contain the git repository in the subdirectory with the given name.
+- `directory` (String) directory is the target directory name.Must not contain or start with '..'. If '.' is supplied, the volume directory will be thegit repository. Otherwise, if specified, the volume will contain the git repository inthe subdirectory with the given name.
- `revision` (String) revision is the commit hash for the specified revision.
@@ -2499,12 +2499,12 @@ Optional:
Required:
-- `endpoints` (String) endpoints is the endpoint name that details Glusterfs topology. More info: https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod
-- `path` (String) path is the Glusterfs volume path. More info: https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod
+- `endpoints` (String) endpoints is the endpoint name that details Glusterfs topology.More info: https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod
+- `path` (String) path is the Glusterfs volume path.More info: https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod
Optional:
-- `read_only` (Boolean) readOnly here will force the Glusterfs volume to be mounted with read-only permissions. Defaults to false. More info: https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod
+- `read_only` (Boolean) readOnly here will force the Glusterfs volume to be mounted with read-only permissions.Defaults to false.More info: https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod
@@ -2512,11 +2512,11 @@ Optional:
Required:
-- `path` (String) path of the directory on the host. If the path is a symlink, it will follow the link to the real path. More info: https://kubernetes.io/docs/concepts/storage/volumes#hostpath
+- `path` (String) path of the directory on the host.If the path is a symlink, it will follow the link to the real path.More info: https://kubernetes.io/docs/concepts/storage/volumes#hostpath
Optional:
-- `type` (String) type for HostPath Volume Defaults to '' More info: https://kubernetes.io/docs/concepts/storage/volumes#hostpath
+- `type` (String) type for HostPath VolumeDefaults to ''More info: https://kubernetes.io/docs/concepts/storage/volumes#hostpath
@@ -2526,17 +2526,17 @@ Required:
- `iqn` (String) iqn is the target iSCSI Qualified Name.
- `lun` (Number) lun represents iSCSI Target Lun number.
-- `target_portal` (String) targetPortal is iSCSI Target Portal. The Portal is either an IP or ip_addr:port if the port is other than default (typically TCP ports 860 and 3260).
+- `target_portal` (String) targetPortal is iSCSI Target Portal. The Portal is either an IP or ip_addr:port if the portis other than default (typically TCP ports 860 and 3260).
Optional:
- `chap_auth_discovery` (Boolean) chapAuthDiscovery defines whether support iSCSI Discovery CHAP authentication
- `chap_auth_session` (Boolean) chapAuthSession defines whether support iSCSI Session CHAP authentication
-- `fs_type` (String) fsType is the filesystem type of the volume that you want to mount. Tip: Ensure that the filesystem type is supported by the host operating system. Examples: 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified. More info: https://kubernetes.io/docs/concepts/storage/volumes#iscsi TODO: how do we prevent errors in the filesystem from compromising the machine
-- `initiator_name` (String) initiatorName is the custom iSCSI Initiator Name. If initiatorName is specified with iscsiInterface simultaneously, new iSCSI interface : will be created for the connection.
-- `iscsi_interface` (String) iscsiInterface is the interface Name that uses an iSCSI transport. Defaults to 'default' (tcp).
-- `portals` (List of String) portals is the iSCSI Target Portal List. The portal is either an IP or ip_addr:port if the port is other than default (typically TCP ports 860 and 3260).
-- `read_only` (Boolean) readOnly here will force the ReadOnly setting in VolumeMounts. Defaults to false.
+- `fs_type` (String) fsType is the filesystem type of the volume that you want to mount.Tip: Ensure that the filesystem type is supported by the host operating system.Examples: 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified.More info: https://kubernetes.io/docs/concepts/storage/volumes#iscsiTODO: how do we prevent errors in the filesystem from compromising the machine
+- `initiator_name` (String) initiatorName is the custom iSCSI Initiator Name.If initiatorName is specified with iscsiInterface simultaneously, new iSCSI interface: will be created for the connection.
+- `iscsi_interface` (String) iscsiInterface is the interface Name that uses an iSCSI transport.Defaults to 'default' (tcp).
+- `portals` (List of String) portals is the iSCSI Target Portal List. The portal is either an IP or ip_addr:port if the portis other than default (typically TCP ports 860 and 3260).
+- `read_only` (Boolean) readOnly here will force the ReadOnly setting in VolumeMounts.Defaults to false.
- `secret_ref` (Attributes) secretRef is the CHAP Secret for iSCSI target and initiator authentication (see [below for nested schema](#nestedatt--spec--template--spec--volumes--iscsi--secret_ref))
@@ -2544,7 +2544,7 @@ Optional:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
@@ -2553,12 +2553,12 @@ Optional:
Required:
-- `path` (String) path that is exported by the NFS server. More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs
-- `server` (String) server is the hostname or IP address of the NFS server. More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs
+- `path` (String) path that is exported by the NFS server.More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs
+- `server` (String) server is the hostname or IP address of the NFS server.More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs
Optional:
-- `read_only` (Boolean) readOnly here will force the NFS export to be mounted with read-only permissions. Defaults to false. More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs
+- `read_only` (Boolean) readOnly here will force the NFS export to be mounted with read-only permissions.Defaults to false.More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs
@@ -2566,11 +2566,11 @@ Optional:
Required:
-- `claim_name` (String) claimName is the name of a PersistentVolumeClaim in the same namespace as the pod using this volume. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims
+- `claim_name` (String) claimName is the name of a PersistentVolumeClaim in the same namespace as the pod using this volume.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims
Optional:
-- `read_only` (Boolean) readOnly Will force the ReadOnly setting in VolumeMounts. Default false.
+- `read_only` (Boolean) readOnly Will force the ReadOnly setting in VolumeMounts.Default false.
@@ -2582,7 +2582,7 @@ Required:
Optional:
-- `fs_type` (String) fsType is the filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified.
+- `fs_type` (String) fsType is the filesystem type to mount.Must be a filesystem type supported by the host operating system.Ex. 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified.
@@ -2594,8 +2594,8 @@ Required:
Optional:
-- `fs_type` (String) fSType represents the filesystem type to mount Must be a filesystem type supported by the host operating system. Ex. 'ext4', 'xfs'. Implicitly inferred to be 'ext4' if unspecified.
-- `read_only` (Boolean) readOnly defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.
+- `fs_type` (String) fSType represents the filesystem type to mountMust be a filesystem type supported by the host operating system.Ex. 'ext4', 'xfs'. Implicitly inferred to be 'ext4' if unspecified.
+- `read_only` (Boolean) readOnly defaults to false (read/write). ReadOnly here will forcethe ReadOnly setting in VolumeMounts.
@@ -2603,7 +2603,7 @@ Optional:
Optional:
-- `default_mode` (Number) defaultMode are the mode bits used to set permissions on created files by default. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. Directories within the path are not affected by this setting. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
+- `default_mode` (Number) defaultMode are the mode bits used to set permissions on created files by default.Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511.YAML accepts both octal and decimal values, JSON requires decimal values for mode bits.Directories within the path are not affected by this setting.This might be in conflict with other options that affect the filemode, like fsGroup, and the result can be other mode bits set.
- `sources` (Attributes List) sources is the list of volume projections (see [below for nested schema](#nestedatt--spec--template--spec--volumes--projected--sources))
@@ -2611,7 +2611,7 @@ Optional:
Optional:
-- `cluster_trust_bundle` (Attributes) ClusterTrustBundle allows a pod to access the '.spec.trustBundle' field of ClusterTrustBundle objects in an auto-updating file. Alpha, gated by the ClusterTrustBundleProjection feature gate. ClusterTrustBundle objects can either be selected by name, or by the combination of signer name and a label selector. Kubelet performs aggressive normalization of the PEM contents written into the pod filesystem. Esoteric PEM features such as inter-block comments and block headers are stripped. Certificates are deduplicated. The ordering of certificates within the file is arbitrary, and Kubelet may change the order over time. (see [below for nested schema](#nestedatt--spec--template--spec--volumes--projected--sources--cluster_trust_bundle))
+- `cluster_trust_bundle` (Attributes) ClusterTrustBundle allows a pod to access the '.spec.trustBundle' fieldof ClusterTrustBundle objects in an auto-updating file.Alpha, gated by the ClusterTrustBundleProjection feature gate.ClusterTrustBundle objects can either be selected by name, or by thecombination of signer name and a label selector.Kubelet performs aggressive normalization of the PEM contents writteninto the pod filesystem. Esoteric PEM features such as inter-blockcomments and block headers are stripped. Certificates are deduplicated.The ordering of certificates within the file is arbitrary, and Kubeletmay change the order over time. (see [below for nested schema](#nestedatt--spec--template--spec--volumes--projected--sources--cluster_trust_bundle))
- `config_map` (Attributes) configMap information about the configMap data to project (see [below for nested schema](#nestedatt--spec--template--spec--volumes--projected--sources--config_map))
- `downward_api` (Attributes) downwardAPI information about the downwardAPI data to project (see [below for nested schema](#nestedatt--spec--template--spec--volumes--projected--sources--downward_api))
- `secret` (Attributes) secret information about the secret data to project (see [below for nested schema](#nestedatt--spec--template--spec--volumes--projected--sources--secret))
@@ -2626,10 +2626,10 @@ Required:
Optional:
-- `label_selector` (Attributes) Select all ClusterTrustBundles that match this label selector. Only has effect if signerName is set. Mutually-exclusive with name. If unset, interpreted as 'match nothing'. If set but empty, interpreted as 'match everything'. (see [below for nested schema](#nestedatt--spec--template--spec--volumes--projected--sources--cluster_trust_bundle--label_selector))
-- `name` (String) Select a single ClusterTrustBundle by object name. Mutually-exclusive with signerName and labelSelector.
-- `optional` (Boolean) If true, don't block pod startup if the referenced ClusterTrustBundle(s) aren't available. If using name, then the named ClusterTrustBundle is allowed not to exist. If using signerName, then the combination of signerName and labelSelector is allowed to match zero ClusterTrustBundles.
-- `signer_name` (String) Select all ClusterTrustBundles that match this signer name. Mutually-exclusive with name. The contents of all selected ClusterTrustBundles will be unified and deduplicated.
+- `label_selector` (Attributes) Select all ClusterTrustBundles that match this label selector. Only haseffect if signerName is set. Mutually-exclusive with name. If unset,interpreted as 'match nothing'. If set but empty, interpreted as 'matcheverything'. (see [below for nested schema](#nestedatt--spec--template--spec--volumes--projected--sources--cluster_trust_bundle--label_selector))
+- `name` (String) Select a single ClusterTrustBundle by object name. Mutually-exclusivewith signerName and labelSelector.
+- `optional` (Boolean) If true, don't block pod startup if the referenced ClusterTrustBundle(s)aren't available. If using name, then the named ClusterTrustBundle isallowed not to exist. If using signerName, then the combination ofsignerName and labelSelector is allowed to match zeroClusterTrustBundles.
+- `signer_name` (String) Select all ClusterTrustBundles that match this signer name.Mutually-exclusive with name. The contents of all selectedClusterTrustBundles will be unified and deduplicated.
### Nested Schema for `spec.template.spec.volumes.projected.sources.cluster_trust_bundle.label_selector`
@@ -2637,7 +2637,7 @@ Optional:
Optional:
- `match_expressions` (Attributes List) matchExpressions is a list of label selector requirements. The requirements are ANDed. (see [below for nested schema](#nestedatt--spec--template--spec--volumes--projected--sources--cluster_trust_bundle--label_selector--match_expressions))
-- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is 'key', the operator is 'In', and the values array contains only 'value'. The requirements are ANDed.
+- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.
### Nested Schema for `spec.template.spec.volumes.projected.sources.cluster_trust_bundle.label_selector.match_expressions`
@@ -2645,11 +2645,11 @@ Optional:
Required:
- `key` (String) key is the label key that the selector applies to.
-- `operator` (String) operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist.
+- `operator` (String) operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.
Optional:
-- `values` (List of String) values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch.
+- `values` (List of String) values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.
@@ -2659,8 +2659,8 @@ Optional:
Optional:
-- `items` (Attributes List) items if unspecified, each key-value pair in the Data field of the referenced ConfigMap will be projected into the volume as a file whose name is the key and content is the value. If specified, the listed keys will be projected into the specified paths, and unlisted keys will not be present. If a key is specified which is not present in the ConfigMap, the volume setup will error unless it is marked optional. Paths must be relative and may not contain the '..' path or start with '..'. (see [below for nested schema](#nestedatt--spec--template--spec--volumes--projected--sources--config_map--items))
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `items` (Attributes List) items if unspecified, each key-value pair in the Data field of the referencedConfigMap will be projected into the volume as a file whose name is thekey and content is the value. If specified, the listed keys will beprojected into the specified paths, and unlisted keys will not bepresent. If a key is specified which is not present in the ConfigMap,the volume setup will error unless it is marked optional. Paths must berelative and may not contain the '..' path or start with '..'. (see [below for nested schema](#nestedatt--spec--template--spec--volumes--projected--sources--config_map--items))
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
- `optional` (Boolean) optional specify whether the ConfigMap or its keys must be defined
@@ -2669,11 +2669,11 @@ Optional:
Required:
- `key` (String) key is the key to project.
-- `path` (String) path is the relative path of the file to map the key to. May not be an absolute path. May not contain the path element '..'. May not start with the string '..'.
+- `path` (String) path is the relative path of the file to map the key to.May not be an absolute path.May not contain the path element '..'.May not start with the string '..'.
Optional:
-- `mode` (Number) mode is Optional: mode bits used to set permissions on this file. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. If not specified, the volume defaultMode will be used. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
+- `mode` (Number) mode is Optional: mode bits used to set permissions on this file.Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511.YAML accepts both octal and decimal values, JSON requires decimal values for mode bits.If not specified, the volume defaultMode will be used.This might be in conflict with other options that affect the filemode, like fsGroup, and the result can be other mode bits set.
@@ -2694,8 +2694,8 @@ Required:
Optional:
- `field_ref` (Attributes) Required: Selects a field of the pod: only annotations, labels, name and namespace are supported. (see [below for nested schema](#nestedatt--spec--template--spec--volumes--projected--sources--downward_api--items--field_ref))
-- `mode` (Number) Optional: mode bits used to set permissions on this file, must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. If not specified, the volume defaultMode will be used. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
-- `resource_field_ref` (Attributes) Selects a resource of the container: only resources limits and requests (limits.cpu, limits.memory, requests.cpu and requests.memory) are currently supported. (see [below for nested schema](#nestedatt--spec--template--spec--volumes--projected--sources--downward_api--items--resource_field_ref))
+- `mode` (Number) Optional: mode bits used to set permissions on this file, must be an octal valuebetween 0000 and 0777 or a decimal value between 0 and 511.YAML accepts both octal and decimal values, JSON requires decimal values for mode bits.If not specified, the volume defaultMode will be used.This might be in conflict with other options that affect the filemode, like fsGroup, and the result can be other mode bits set.
+- `resource_field_ref` (Attributes) Selects a resource of the container: only resources limits and requests(limits.cpu, limits.memory, requests.cpu and requests.memory) are currently supported. (see [below for nested schema](#nestedatt--spec--template--spec--volumes--projected--sources--downward_api--items--resource_field_ref))
### Nested Schema for `spec.template.spec.volumes.projected.sources.downward_api.items.field_ref`
@@ -2729,8 +2729,8 @@ Optional:
Optional:
-- `items` (Attributes List) items if unspecified, each key-value pair in the Data field of the referenced Secret will be projected into the volume as a file whose name is the key and content is the value. If specified, the listed keys will be projected into the specified paths, and unlisted keys will not be present. If a key is specified which is not present in the Secret, the volume setup will error unless it is marked optional. Paths must be relative and may not contain the '..' path or start with '..'. (see [below for nested schema](#nestedatt--spec--template--spec--volumes--projected--sources--secret--items))
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `items` (Attributes List) items if unspecified, each key-value pair in the Data field of the referencedSecret will be projected into the volume as a file whose name is thekey and content is the value. If specified, the listed keys will beprojected into the specified paths, and unlisted keys will not bepresent. If a key is specified which is not present in the Secret,the volume setup will error unless it is marked optional. Paths must berelative and may not contain the '..' path or start with '..'. (see [below for nested schema](#nestedatt--spec--template--spec--volumes--projected--sources--secret--items))
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
- `optional` (Boolean) optional field specify whether the Secret or its key must be defined
@@ -2739,11 +2739,11 @@ Optional:
Required:
- `key` (String) key is the key to project.
-- `path` (String) path is the relative path of the file to map the key to. May not be an absolute path. May not contain the path element '..'. May not start with the string '..'.
+- `path` (String) path is the relative path of the file to map the key to.May not be an absolute path.May not contain the path element '..'.May not start with the string '..'.
Optional:
-- `mode` (Number) mode is Optional: mode bits used to set permissions on this file. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. If not specified, the volume defaultMode will be used. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
+- `mode` (Number) mode is Optional: mode bits used to set permissions on this file.Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511.YAML accepts both octal and decimal values, JSON requires decimal values for mode bits.If not specified, the volume defaultMode will be used.This might be in conflict with other options that affect the filemode, like fsGroup, and the result can be other mode bits set.
@@ -2752,12 +2752,12 @@ Optional:
Required:
-- `path` (String) path is the path relative to the mount point of the file to project the token into.
+- `path` (String) path is the path relative to the mount point of the file to project thetoken into.
Optional:
-- `audience` (String) audience is the intended audience of the token. A recipient of a token must identify itself with an identifier specified in the audience of the token, and otherwise should reject the token. The audience defaults to the identifier of the apiserver.
-- `expiration_seconds` (Number) expirationSeconds is the requested duration of validity of the service account token. As the token approaches expiration, the kubelet volume plugin will proactively rotate the service account token. The kubelet will start trying to rotate the token if the token is older than 80 percent of its time to live or if the token is older than 24 hours.Defaults to 1 hour and must be at least 10 minutes.
+- `audience` (String) audience is the intended audience of the token. A recipient of a tokenmust identify itself with an identifier specified in the audience of thetoken, and otherwise should reject the token. The audience defaults to theidentifier of the apiserver.
+- `expiration_seconds` (Number) expirationSeconds is the requested duration of validity of the serviceaccount token. As the token approaches expiration, the kubelet volumeplugin will proactively rotate the service account token. The kubelet willstart trying to rotate the token if the token is older than 80 percent ofits time to live or if the token is older than 24 hours.Defaults to 1 hourand must be at least 10 minutes.
@@ -2767,15 +2767,15 @@ Optional:
Required:
-- `registry` (String) registry represents a single or multiple Quobyte Registry services specified as a string as host:port pair (multiple entries are separated with commas) which acts as the central registry for volumes
+- `registry` (String) registry represents a single or multiple Quobyte Registry servicesspecified as a string as host:port pair (multiple entries are separated with commas)which acts as the central registry for volumes
- `volume` (String) volume is a string that references an already created Quobyte volume by name.
Optional:
-- `group` (String) group to map volume access to Default is no group
-- `read_only` (Boolean) readOnly here will force the Quobyte volume to be mounted with read-only permissions. Defaults to false.
-- `tenant` (String) tenant owning the given Quobyte volume in the Backend Used with dynamically provisioned Quobyte volumes, value is set by the plugin
-- `user` (String) user to map volume access to Defaults to serivceaccount user
+- `group` (String) group to map volume access toDefault is no group
+- `read_only` (Boolean) readOnly here will force the Quobyte volume to be mounted with read-only permissions.Defaults to false.
+- `tenant` (String) tenant owning the given Quobyte volume in the BackendUsed with dynamically provisioned Quobyte volumes, value is set by the plugin
+- `user` (String) user to map volume access toDefaults to serivceaccount user
@@ -2783,24 +2783,24 @@ Optional:
Required:
-- `image` (String) image is the rados image name. More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
-- `monitors` (List of String) monitors is a collection of Ceph monitors. More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
+- `image` (String) image is the rados image name.More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
+- `monitors` (List of String) monitors is a collection of Ceph monitors.More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
Optional:
-- `fs_type` (String) fsType is the filesystem type of the volume that you want to mount. Tip: Ensure that the filesystem type is supported by the host operating system. Examples: 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified. More info: https://kubernetes.io/docs/concepts/storage/volumes#rbd TODO: how do we prevent errors in the filesystem from compromising the machine
-- `keyring` (String) keyring is the path to key ring for RBDUser. Default is /etc/ceph/keyring. More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
-- `pool` (String) pool is the rados pool name. Default is rbd. More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
-- `read_only` (Boolean) readOnly here will force the ReadOnly setting in VolumeMounts. Defaults to false. More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
-- `secret_ref` (Attributes) secretRef is name of the authentication secret for RBDUser. If provided overrides keyring. Default is nil. More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it (see [below for nested schema](#nestedatt--spec--template--spec--volumes--rbd--secret_ref))
-- `user` (String) user is the rados user name. Default is admin. More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
+- `fs_type` (String) fsType is the filesystem type of the volume that you want to mount.Tip: Ensure that the filesystem type is supported by the host operating system.Examples: 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified.More info: https://kubernetes.io/docs/concepts/storage/volumes#rbdTODO: how do we prevent errors in the filesystem from compromising the machine
+- `keyring` (String) keyring is the path to key ring for RBDUser.Default is /etc/ceph/keyring.More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
+- `pool` (String) pool is the rados pool name.Default is rbd.More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
+- `read_only` (Boolean) readOnly here will force the ReadOnly setting in VolumeMounts.Defaults to false.More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
+- `secret_ref` (Attributes) secretRef is name of the authentication secret for RBDUser. If providedoverrides keyring.Default is nil.More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it (see [below for nested schema](#nestedatt--spec--template--spec--volumes--rbd--secret_ref))
+- `user` (String) user is the rados user name.Default is admin.More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
### Nested Schema for `spec.template.spec.volumes.rbd.secret_ref`
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
@@ -2810,25 +2810,25 @@ Optional:
Required:
- `gateway` (String) gateway is the host address of the ScaleIO API Gateway.
-- `secret_ref` (Attributes) secretRef references to the secret for ScaleIO user and other sensitive information. If this is not provided, Login operation will fail. (see [below for nested schema](#nestedatt--spec--template--spec--volumes--scale_io--secret_ref))
+- `secret_ref` (Attributes) secretRef references to the secret for ScaleIO user and othersensitive information. If this is not provided, Login operation will fail. (see [below for nested schema](#nestedatt--spec--template--spec--volumes--scale_io--secret_ref))
- `system` (String) system is the name of the storage system as configured in ScaleIO.
Optional:
-- `fs_type` (String) fsType is the filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. 'ext4', 'xfs', 'ntfs'. Default is 'xfs'.
+- `fs_type` (String) fsType is the filesystem type to mount.Must be a filesystem type supported by the host operating system.Ex. 'ext4', 'xfs', 'ntfs'.Default is 'xfs'.
- `protection_domain` (String) protectionDomain is the name of the ScaleIO Protection Domain for the configured storage.
-- `read_only` (Boolean) readOnly Defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.
+- `read_only` (Boolean) readOnly Defaults to false (read/write). ReadOnly here will forcethe ReadOnly setting in VolumeMounts.
- `ssl_enabled` (Boolean) sslEnabled Flag enable/disable SSL communication with Gateway, default false
-- `storage_mode` (String) storageMode indicates whether the storage for a volume should be ThickProvisioned or ThinProvisioned. Default is ThinProvisioned.
+- `storage_mode` (String) storageMode indicates whether the storage for a volume should be ThickProvisioned or ThinProvisioned.Default is ThinProvisioned.
- `storage_pool` (String) storagePool is the ScaleIO Storage Pool associated with the protection domain.
-- `volume_name` (String) volumeName is the name of a volume already created in the ScaleIO system that is associated with this volume source.
+- `volume_name` (String) volumeName is the name of a volume already created in the ScaleIO systemthat is associated with this volume source.
### Nested Schema for `spec.template.spec.volumes.scale_io.secret_ref`
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
@@ -2837,10 +2837,10 @@ Optional:
Optional:
-- `default_mode` (Number) defaultMode is Optional: mode bits used to set permissions on created files by default. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. Defaults to 0644. Directories within the path are not affected by this setting. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
-- `items` (Attributes List) items If unspecified, each key-value pair in the Data field of the referenced Secret will be projected into the volume as a file whose name is the key and content is the value. If specified, the listed keys will be projected into the specified paths, and unlisted keys will not be present. If a key is specified which is not present in the Secret, the volume setup will error unless it is marked optional. Paths must be relative and may not contain the '..' path or start with '..'. (see [below for nested schema](#nestedatt--spec--template--spec--volumes--secret--items))
+- `default_mode` (Number) defaultMode is Optional: mode bits used to set permissions on created files by default.Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511.YAML accepts both octal and decimal values, JSON requires decimal valuesfor mode bits. Defaults to 0644.Directories within the path are not affected by this setting.This might be in conflict with other options that affect the filemode, like fsGroup, and the result can be other mode bits set.
+- `items` (Attributes List) items If unspecified, each key-value pair in the Data field of the referencedSecret will be projected into the volume as a file whose name is thekey and content is the value. If specified, the listed keys will beprojected into the specified paths, and unlisted keys will not bepresent. If a key is specified which is not present in the Secret,the volume setup will error unless it is marked optional. Paths must berelative and may not contain the '..' path or start with '..'. (see [below for nested schema](#nestedatt--spec--template--spec--volumes--secret--items))
- `optional` (Boolean) optional field specify whether the Secret or its keys must be defined
-- `secret_name` (String) secretName is the name of the secret in the pod's namespace to use. More info: https://kubernetes.io/docs/concepts/storage/volumes#secret
+- `secret_name` (String) secretName is the name of the secret in the pod's namespace to use.More info: https://kubernetes.io/docs/concepts/storage/volumes#secret
### Nested Schema for `spec.template.spec.volumes.secret.items`
@@ -2848,11 +2848,11 @@ Optional:
Required:
- `key` (String) key is the key to project.
-- `path` (String) path is the relative path of the file to map the key to. May not be an absolute path. May not contain the path element '..'. May not start with the string '..'.
+- `path` (String) path is the relative path of the file to map the key to.May not be an absolute path.May not contain the path element '..'.May not start with the string '..'.
Optional:
-- `mode` (Number) mode is Optional: mode bits used to set permissions on this file. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. If not specified, the volume defaultMode will be used. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
+- `mode` (Number) mode is Optional: mode bits used to set permissions on this file.Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511.YAML accepts both octal and decimal values, JSON requires decimal values for mode bits.If not specified, the volume defaultMode will be used.This might be in conflict with other options that affect the filemode, like fsGroup, and the result can be other mode bits set.
@@ -2861,18 +2861,18 @@ Optional:
Optional:
-- `fs_type` (String) fsType is the filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified.
-- `read_only` (Boolean) readOnly defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.
-- `secret_ref` (Attributes) secretRef specifies the secret to use for obtaining the StorageOS API credentials. If not specified, default values will be attempted. (see [below for nested schema](#nestedatt--spec--template--spec--volumes--storageos--secret_ref))
-- `volume_name` (String) volumeName is the human-readable name of the StorageOS volume. Volume names are only unique within a namespace.
-- `volume_namespace` (String) volumeNamespace specifies the scope of the volume within StorageOS. If no namespace is specified then the Pod's namespace will be used. This allows the Kubernetes name scoping to be mirrored within StorageOS for tighter integration. Set VolumeName to any name to override the default behaviour. Set to 'default' if you are not using namespaces within StorageOS. Namespaces that do not pre-exist within StorageOS will be created.
+- `fs_type` (String) fsType is the filesystem type to mount.Must be a filesystem type supported by the host operating system.Ex. 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified.
+- `read_only` (Boolean) readOnly defaults to false (read/write). ReadOnly here will forcethe ReadOnly setting in VolumeMounts.
+- `secret_ref` (Attributes) secretRef specifies the secret to use for obtaining the StorageOS APIcredentials. If not specified, default values will be attempted. (see [below for nested schema](#nestedatt--spec--template--spec--volumes--storageos--secret_ref))
+- `volume_name` (String) volumeName is the human-readable name of the StorageOS volume. Volumenames are only unique within a namespace.
+- `volume_namespace` (String) volumeNamespace specifies the scope of the volume within StorageOS. If nonamespace is specified then the Pod's namespace will be used. This allows theKubernetes name scoping to be mirrored within StorageOS for tighter integration.Set VolumeName to any name to override the default behaviour.Set to 'default' if you are not using namespaces within StorageOS.Namespaces that do not pre-exist within StorageOS will be created.
### Nested Schema for `spec.template.spec.volumes.storageos.secret_ref`
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
@@ -2885,7 +2885,7 @@ Required:
Optional:
-- `fs_type` (String) fsType is filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified.
+- `fs_type` (String) fsType is filesystem type to mount.Must be a filesystem type supported by the host operating system.Ex. 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified.
- `storage_policy_id` (String) storagePolicyID is the storage Policy Based Management (SPBM) profile ID associated with the StoragePolicyName.
- `storage_policy_name` (String) storagePolicyName is the storage Policy Based Management (SPBM) profile name.
@@ -2930,7 +2930,7 @@ Optional:
- `prometheus` (Attributes) The configuration of Prometheus trait (see [below for nested schema](#nestedatt--spec--traits--prometheus))
- `pull_secret` (Attributes) The configuration of Pull Secret trait (see [below for nested schema](#nestedatt--spec--traits--pull_secret))
- `quarkus` (Attributes) The configuration of Quarkus trait (see [below for nested schema](#nestedatt--spec--traits--quarkus))
-- `registry` (Attributes) The configuration of Registry trait Deprecated: use jvm trait or read documentation. (see [below for nested schema](#nestedatt--spec--traits--registry))
+- `registry` (Attributes) The configuration of Registry trait (support removed since version 2.5.0).Deprecated: use jvm trait or read documentation. (see [below for nested schema](#nestedatt--spec--traits--registry))
- `route` (Attributes) The configuration of Route trait (see [below for nested schema](#nestedatt--spec--traits--route))
- `security_context` (Attributes) The configuration of Security Context trait (see [below for nested schema](#nestedatt--spec--traits--security_context))
- `service` (Attributes) The configuration of Service trait (see [below for nested schema](#nestedatt--spec--traits--service))
@@ -2945,13 +2945,13 @@ Optional:
Optional:
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
- `node_affinity_labels` (List of String) Defines a set of nodes the integration pod(s) are eligible to be scheduled on, based on labels on the node.
- `pod_affinity` (Boolean) Always co-locates multiple replicas of the integration in the same node (default 'false').
-- `pod_affinity_labels` (List of String) Defines a set of pods (namely those matching the label selector, relative to the given namespace) that the integration pod(s) should be co-located with.
+- `pod_affinity_labels` (List of String) Defines a set of pods (namely those matching the label selector, relative to the given namespace) that theintegration pod(s) should be co-located with.
- `pod_anti_affinity` (Boolean) Never co-locates multiple replicas of the integration in the same node (default 'false').
-- `pod_anti_affinity_labels` (List of String) Defines a set of pods (namely those matching the label selector, relative to the given namespace) that the integration pod(s) should not be co-located with.
+- `pod_anti_affinity_labels` (List of String) Defines a set of pods (namely those matching the label selector, relative to the given namespace) that theintegration pod(s) should not be co-located with.
@@ -2960,27 +2960,27 @@ Optional:
Optional:
- `annotations` (Map of String) When using 'pod' strategy, annotation to use for the builder pod.
-- `base_image` (String) Specify a base image. In order to have the application working properly it must be a container image which has a Java JDK installed and ready to use on path (ie '/usr/bin/java').
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `base_image` (String) Specify a base image. In order to have the application working properly it must be a container image which has a Java JDKinstalled and ready to use on path (ie '/usr/bin/java').
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Deprecated: no longer in use.
- `incremental_image_build` (Boolean) Use the incremental image build option, to reuse existing containers (default 'true')
-- `limit_cpu` (String) When using 'pod' strategy, the maximum amount of CPU required by the pod builder. Deprecated: use TasksRequestCPU instead with task name 'builder'.
-- `limit_memory` (String) When using 'pod' strategy, the maximum amount of memory required by the pod builder. Deprecated: use TasksRequestCPU instead with task name 'builder'.
-- `maven_profiles` (List of String) A list of references pointing to configmaps/secrets that contains a maven profile. This configmap/secret is a resource of the IntegrationKit created, therefore it needs to be present in the namespace where the operator is going to create the IntegrationKit. The content of the maven profile is expected to be a text containing a valid maven profile starting with '' and ending with '' that will be integrated as an inline profile in the POM. Syntax: [configmap|secret]:name[/key], where name represents the resource name, key optionally represents the resource key to be filtered (default key value = profile.xml).
+- `limit_cpu` (String) When using 'pod' strategy, the maximum amount of CPU required by the pod builder.Deprecated: use TasksRequestCPU instead with task name 'builder'.
+- `limit_memory` (String) When using 'pod' strategy, the maximum amount of memory required by the pod builder.Deprecated: use TasksRequestCPU instead with task name 'builder'.
+- `maven_profiles` (List of String) A list of references pointing to configmaps/secrets that contains a maven profile.This configmap/secret is a resource of the IntegrationKit created, therefore it needs to be present in the namespace where the operator is going to create the IntegrationKit.The content of the maven profile is expected to be a text containing a valid maven profile starting with '' and ending with '' that will be integrated as an inline profile in the POM.Syntax: [configmap|secret]:name[/key], where name represents the resource name, key optionally represents the resource key to be filtered (default key value = profile.xml).
- `node_selector` (Map of String) Defines a set of nodes the builder pod is eligible to be scheduled on, based on labels on the node.
- `order_strategy` (String) The build order strategy to use, either 'dependencies', 'fifo' or 'sequential' (default is the platform default)
- `platforms` (List of String) The list of manifest platforms to use to build a container image (default 'linux/amd64').
- `properties` (List of String) A list of properties to be provided to the build task
-- `request_cpu` (String) When using 'pod' strategy, the minimum amount of CPU required by the pod builder. Deprecated: use TasksRequestCPU instead with task name 'builder'.
-- `request_memory` (String) When using 'pod' strategy, the minimum amount of memory required by the pod builder. Deprecated: use TasksRequestCPU instead with task name 'builder'.
+- `request_cpu` (String) When using 'pod' strategy, the minimum amount of CPU required by the pod builder.Deprecated: use TasksRequestCPU instead with task name 'builder'.
+- `request_memory` (String) When using 'pod' strategy, the minimum amount of memory required by the pod builder.Deprecated: use TasksRequestCPU instead with task name 'builder'.
- `strategy` (String) The strategy to use, either 'pod' or 'routine' (default 'routine')
- `tasks` (List of String) A list of tasks to be executed (available only when using 'pod' strategy) with format ';;'.
-- `tasks_filter` (String) A list of tasks sorted by the order of execution in a csv format, ie, ',,...'. Mind that you must include also the operator tasks ('builder', 'quarkus-native', 'package', 'jib', 's2i') if you need to execute them. Useful only with 'pod' strategy.
+- `tasks_filter` (String) A list of tasks sorted by the order of execution in a csv format, ie, ',,...'.Mind that you must include also the operator tasks ('builder', 'quarkus-native', 'package', 'jib', 's2i')if you need to execute them. Useful only with 'pod' strategy.
- `tasks_limit_cpu` (List of String) A list of limit cpu configuration for the specific task with format ':'.
- `tasks_limit_memory` (List of String) A list of limit memory configuration for the specific task with format ':'.
- `tasks_request_cpu` (List of String) A list of request cpu configuration for the specific task with format ':'.
- `tasks_request_memory` (List of String) A list of request memory configuration for the specific task with format ':'.
-- `verbose` (Boolean) Enable verbose logging on build components that support it (e.g. Kaniko build pod). Deprecated no longer in use
+- `verbose` (Boolean) Enable verbose logging on build components that support it (e.g. Kaniko build pod).Deprecated no longer in use
@@ -2988,10 +2988,10 @@ Optional:
Optional:
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Deprecated: no longer in use.
- `properties` (List of String) A list of properties to be provided to the Integration runtime
-- `runtime_version` (String) The camel-k-runtime version to use for the integration. It overrides the default version set in the Integration Platform. You can use a fixed version (for example '3.2.3') or a semantic version (for example '3.x') which will try to resolve to the best matching Catalog existing on the cluster.
+- `runtime_version` (String) The camel-k-runtime version to use for the integration. It overrides the default version set in the Integration Platform.You can use a fixed version (for example '3.2.3') or a semantic version (for example '3.x') which will try to resolveto the best matching Catalog existing on the cluster.
@@ -3003,10 +3003,10 @@ Optional:
- `auto` (Boolean) To automatically enable the trait
- `capabilities_add` (List of String) Security Context Capabilities Add configuration (default none).
- `capabilities_drop` (List of String) Security Context Capabilities Drop configuration (default ALL).
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Deprecated: no longer in use.
- `expose` (Boolean) Can be used to enable/disable exposure via kubernetes Service.
-- `image` (String) The main container image to use for the Integration. When using this parameter the operator will create a synthetic IntegrationKit which won't be able to execute traits requiring CamelCatalog. If the container image you're using is coming from an IntegrationKit, use instead Integration '.spec.integrationKit' parameter. If you're moving the Integration across environments, you will also need to create an 'external' IntegrationKit.
+- `image` (String) The main container image to use for the Integration. When using this parameter the operator will create a synthetic IntegrationKit whichwon't be able to execute traits requiring CamelCatalog. If the container image you're using is coming from an IntegrationKit, use insteadIntegration '.spec.integrationKit' parameter. If you're moving the Integration across environments, you will also need to create an 'external' IntegrationKit.
- `image_pull_policy` (String) The pull policy: Always|Never|IfNotPresent
- `limit_cpu` (String) The maximum amount of CPU to be provided (default 500 millicores).
- `limit_memory` (String) The maximum amount of memory to be provided (default 512 Mi).
@@ -3027,16 +3027,16 @@ Optional:
Optional:
-- `active_deadline_seconds` (Number) Specifies the duration in seconds, relative to the start time, that the job may be continuously active before it is considered to be failed. It defaults to 60s.
-- `auto` (Boolean) Automatically deploy the integration as CronJob when all routes are either starting from a periodic consumer (only 'cron', 'timer' and 'quartz' are supported) or a passive consumer (e.g. 'direct' is a passive consumer). It's required that all periodic consumers have the same period, and it can be expressed as cron schedule (e.g. '1m' can be expressed as '0/1 * * * *', while '35m' or '50s' cannot).
-- `backoff_limit` (Number) Specifies the number of retries before marking the job failed. It defaults to 2.
-- `components` (String) A comma separated list of the Camel components that need to be customized in order for them to work when the schedule is triggered externally by Kubernetes. A specific customizer is activated for each specified component. E.g. for the 'timer' component, the 'cron-timer' customizer is activated (it's present in the 'org.apache.camel.k:camel-k-cron' library). Supported components are currently: 'cron', 'timer' and 'quartz'.
-- `concurrency_policy` (String) Specifies how to treat concurrent executions of a Job. Valid values are: - 'Allow': allows CronJobs to run concurrently; - 'Forbid' (default): forbids concurrent runs, skipping next run if previous run hasn't finished yet; - 'Replace': cancels currently running job and replaces it with a new one
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `active_deadline_seconds` (Number) Specifies the duration in seconds, relative to the start time, that the jobmay be continuously active before it is considered to be failed.It defaults to 60s.
+- `auto` (Boolean) Automatically deploy the integration as CronJob when all routes areeither starting from a periodic consumer (only 'cron', 'timer' and 'quartz' are supported) or a passive consumer (e.g. 'direct' is a passive consumer).It's required that all periodic consumers have the same period, and it can be expressed as cron schedule (e.g. '1m' can be expressed as '0/1 * * * *',while '35m' or '50s' cannot).
+- `backoff_limit` (Number) Specifies the number of retries before marking the job failed.It defaults to 2.
+- `components` (String) A comma separated list of the Camel components that need to be customized in order for them to work when the schedule is triggered externally by Kubernetes.A specific customizer is activated for each specified component. E.g. for the 'timer' component, the 'cron-timer' customizer isactivated (it's present in the 'org.apache.camel.k:camel-k-cron' library).Supported components are currently: 'cron', 'timer' and 'quartz'.
+- `concurrency_policy` (String) Specifies how to treat concurrent executions of a Job.Valid values are:- 'Allow': allows CronJobs to run concurrently;- 'Forbid' (default): forbids concurrent runs, skipping next run if previous run hasn't finished yet;- 'Replace': cancels currently running job and replaces it with a new one
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
-- `fallback` (Boolean) Use the default Camel implementation of the 'cron' endpoint ('quartz') instead of trying to materialize the integration as Kubernetes CronJob.
-- `schedule` (String) The CronJob schedule for the whole integration. If multiple routes are declared, they must have the same schedule for this mechanism to work correctly.
-- `starting_deadline_seconds` (Number) Optional deadline in seconds for starting the job if it misses scheduled time for any reason. Missed jobs executions will be counted as failed ones.
+- `fallback` (Boolean) Use the default Camel implementation of the 'cron' endpoint ('quartz') instead of trying to materialize the integrationas Kubernetes CronJob.
+- `schedule` (String) The CronJob schedule for the whole integration. If multiple routes are declared, they must have the same schedule for thismechanism to work correctly.
+- `starting_deadline_seconds` (Number) Optional deadline in seconds for starting the job if it misses scheduledtime for any reason. Missed jobs executions will be counted as failed ones.
- `time_zone` (String) The timezone that the CronJob will run on
@@ -3045,7 +3045,7 @@ Optional:
Optional:
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Deprecated: no longer in use.
@@ -3054,10 +3054,10 @@ Optional:
Optional:
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Deprecated: no longer in use.
- `kind` (String) Allows to explicitly select the desired deployment kind between 'deployment', 'cron-job' or 'knative-service' when creating the resources for running the integration.
-- `use_ssa` (Boolean) Use server-side apply to update the owned resources (default 'true'). Note that it automatically falls back to client-side patching, if SSA is not available, e.g., on old Kubernetes clusters.
+- `use_ssa` (Boolean) Use server-side apply to update the owned resources (default 'true').Note that it automatically falls back to client-side patching, if SSA is not available, e.g., on old Kubernetes clusters.
@@ -3065,11 +3065,11 @@ Optional:
Optional:
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Deprecated: no longer in use.
-- `progress_deadline_seconds` (Number) The maximum time in seconds for the deployment to make progress before it is considered to be failed. It defaults to '60s'.
-- `rolling_update_max_surge` (String) The maximum number of pods that can be scheduled above the desired number of pods. Value can be an absolute number (ex: 5) or a percentage of desired pods (ex: 10%). This can not be 0 if MaxUnavailable is 0. Absolute number is calculated from percentage by rounding up. Defaults to '25%'.
-- `rolling_update_max_unavailable` (String) The maximum number of pods that can be unavailable during the update. Value can be an absolute number (ex: 5) or a percentage of desired pods (ex: 10%). Absolute number is calculated from percentage by rounding down. This can not be 0 if MaxSurge is 0. Defaults to '25%'.
+- `progress_deadline_seconds` (Number) The maximum time in seconds for the deployment to make progress before itis considered to be failed. It defaults to '60s'.
+- `rolling_update_max_surge` (String) The maximum number of pods that can be scheduled above the desired number ofpods.Value can be an absolute number (ex: 5) or a percentage of desired pods (ex: 10%).This can not be 0 if MaxUnavailable is 0.Absolute number is calculated from percentage by rounding up.Defaults to '25%'.
+- `rolling_update_max_unavailable` (String) The maximum number of pods that can be unavailable during the update.Value can be an absolute number (ex: 5) or a percentage of desired pods (ex: 10%).Absolute number is calculated from percentage by rounding down.This can not be 0 if MaxSurge is 0.Defaults to '25%'.
- `strategy` (String) The deployment strategy to use to replace existing pods with new ones.
@@ -3078,11 +3078,11 @@ Optional:
Optional:
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `container_meta` (Boolean) Enables injection of 'NAMESPACE' and 'POD_NAME' environment variables (default 'true')
- `enabled` (Boolean) Deprecated: no longer in use.
- `http_proxy` (Boolean) Propagates the 'HTTP_PROXY', 'HTTPS_PROXY' and 'NO_PROXY' environment variables (default 'true')
-- `vars` (List of String) A list of environment variables to be added to the integration container. The syntax is KEY=VALUE, e.g., 'MY_VAR='my value''. These take precedence over the previously defined environment variables.
+- `vars` (List of String) A list of environment variables to be added to the integration container.The syntax is KEY=VALUE, e.g., 'MY_VAR='my value''.These take precedence over the previously defined environment variables.
@@ -3090,7 +3090,7 @@ Optional:
Optional:
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Deprecated: no longer in use.
- `ref` (String) The error handler ref name provided or found in application properties
@@ -3100,8 +3100,8 @@ Optional:
Optional:
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
-- `discovery_cache` (String) Discovery client cache to be used, either 'disabled', 'disk' or 'memory' (default 'memory'). Deprecated: to be removed from trait configuration.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
+- `discovery_cache` (String) Discovery client cache to be used, either 'disabled', 'disk' or 'memory' (default 'memory').Deprecated: to be removed from trait configuration.
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
@@ -3110,7 +3110,7 @@ Optional:
Optional:
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
- `liveness_failure_threshold` (Number) Minimum consecutive failures for the liveness probe to be considered failed after having succeeded.
- `liveness_initial_delay` (Number) Number of seconds after the container has started before the liveness probe is initiated.
@@ -3143,13 +3143,13 @@ Optional:
Optional:
-- `annotations` (Map of String) The annotations added to the ingress. This can be used to set controller specific annotations, e.g., when using the NGINX Ingress controller: See https://github.com/kubernetes/ingress-nginx/blob/main/docs/user-guide/nginx-configuration/annotations.md
+- `annotations` (Map of String) The annotations added to the ingress.This can be used to set controller specific annotations, e.g., when using the NGINX Ingress controller:See https://github.com/kubernetes/ingress-nginx/blob/main/docs/user-guide/nginx-configuration/annotations.md
- `auto` (Boolean) To automatically add an ingress whenever the integration uses an HTTP endpoint consumer.
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
- `host` (String) To configure the host exposed by the ingress.
- `path` (String) To configure the path exposed by the ingress (default '/').
-- `path_type` (String) To configure the path type exposed by the ingress. One of 'Exact', 'Prefix', 'ImplementationSpecific' (default to 'Prefix').
+- `path_type` (String) To configure the path type exposed by the ingress.One of 'Exact', 'Prefix', 'ImplementationSpecific' (default to 'Prefix').
- `tls_hosts` (List of String) To configure tls hosts
- `tls_secret_name` (String) To configure tls secret name
@@ -3160,7 +3160,7 @@ Optional:
Optional:
- `allow` (String) Configures a (comma-separated) list of CIDR subnets that should not be intercepted by the Istio proxy ('10.0.0.0/8,172.16.0.0/12,192.168.0.0/16' by default).
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
- `inject` (Boolean) Forces the value for labels 'sidecar.istio.io/inject'. By default the label is set to 'true' on deployment and not set on Knative Service.
@@ -3170,14 +3170,14 @@ Optional:
Optional:
-- `ca_cert` (String) The PEM encoded CA certification file path, used to verify client certificates, applicable when 'protocol' is 'https' and 'use-ssl-client-authentication' is 'true' (default '/var/run/secrets/kubernetes.io/serviceaccount/service-ca.crt' for OpenShift).
-- `client_principal` (List of String) The principal(s) which must be given in a client certificate to allow access to the Jolokia endpoint, applicable when 'protocol' is 'https' and 'use-ssl-client-authentication' is 'true' (default 'clientPrincipal=cn=system:master-proxy', 'cn=hawtio-online.hawtio.svc' and 'cn=fuse-console.fuse.svc' for OpenShift).
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `ca_cert` (String) The PEM encoded CA certification file path, used to verify client certificates,applicable when 'protocol' is 'https' and 'use-ssl-client-authentication' is 'true'(default '/var/run/secrets/kubernetes.io/serviceaccount/service-ca.crt' for OpenShift).
+- `client_principal` (List of String) The principal(s) which must be given in a client certificate to allow access to the Jolokia endpoint,applicable when 'protocol' is 'https' and 'use-ssl-client-authentication' is 'true'(default 'clientPrincipal=cn=system:master-proxy', 'cn=hawtio-online.hawtio.svc' and 'cn=fuse-console.fuse.svc' for OpenShift).
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `discovery_enabled` (Boolean) Listen for multicast requests (default 'false')
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
-- `extended_client_check` (Boolean) Mandate the client certificate contains a client flag in the extended key usage section, applicable when 'protocol' is 'https' and 'use-ssl-client-authentication' is 'true' (default 'true' for OpenShift).
-- `host` (String) The Host address to which the Jolokia agent should bind to. If ''*'' or ''0.0.0.0'' is given, the servers binds to every network interface (default ''*'').
-- `options` (List of String) A list of additional Jolokia options as defined in https://jolokia.org/reference/html/agents.html#agent-jvm-config[JVM agent configuration options]
+- `extended_client_check` (Boolean) Mandate the client certificate contains a client flag in the extended key usage section,applicable when 'protocol' is 'https' and 'use-ssl-client-authentication' is 'true'(default 'true' for OpenShift).
+- `host` (String) The Host address to which the Jolokia agent should bind to. If ''*'' or ''0.0.0.0'' is given,the servers binds to every network interface (default ''*'').
+- `options` (List of String) A list of additional Jolokia options as definedin https://jolokia.org/reference/html/agents.html#agent-jvm-config[JVM agent configuration options]
- `password` (String) The password used for authentication, applicable when the 'user' option is set.
- `port` (Number) The Jolokia endpoint port (default '8778').
- `protocol` (String) The protocol to use, either 'http' or 'https' (default 'https' for OpenShift)
@@ -3191,14 +3191,14 @@ Optional:
Optional:
- `classpath` (String) Additional JVM classpath (use 'Linux' classpath separator)
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `debug` (Boolean) Activates remote debugging, so that a debugger can be attached to the JVM, e.g., using port-forwarding
- `debug_address` (String) Transport address at which to listen for the newly launched JVM (default '*:5005')
- `debug_suspend` (Boolean) Suspends the target JVM immediately before the main class is loaded
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
- `jar` (String) The Jar dependency which will run the application. Leave it empty for managed Integrations.
- `options` (List of String) A list of JVM options
-- `print_command` (Boolean) Prints the command used the start the JVM in the container logs (default 'true') Deprecated: no longer in use.
+- `print_command` (Boolean) Prints the command used the start the JVM in the container logs (default 'true')Deprecated: no longer in use.
@@ -3207,7 +3207,7 @@ Optional:
Optional:
- `auto` (Boolean) Automatically inject all referenced Kamelets and their default configuration (enabled by default)
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
- `list` (String) Comma separated list of Kamelet names to load into the current integration
- `mount_point` (String) The directory where the application mounts and reads Kamelet spec (default '/etc/camel/kamelets')
@@ -3227,20 +3227,20 @@ Required:
Optional:
- `auto` (Boolean) Enable automatic discovery of all trait properties.
-- `channel_sinks` (List of String) List of channels used as destination of integration routes. Can contain simple channel names or full Camel URIs.
-- `channel_sources` (List of String) List of channels used as source of integration routes. Can contain simple channel names or full Camel URIs.
+- `channel_sinks` (List of String) List of channels used as destination of integration routes.Can contain simple channel names or full Camel URIs.
+- `channel_sources` (List of String) List of channels used as source of integration routes.Can contain simple channel names or full Camel URIs.
- `config` (String) Can be used to inject a Knative complete configuration in JSON format.
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
-- `endpoint_sinks` (List of String) List of endpoints used as destination of integration routes. Can contain simple endpoint names or full Camel URIs.
+- `endpoint_sinks` (List of String) List of endpoints used as destination of integration routes.Can contain simple endpoint names or full Camel URIs.
- `endpoint_sources` (List of String) List of channels used as source of integration routes.
-- `event_sinks` (List of String) List of event types that the integration will produce. Can contain simple event types or full Camel URIs (to use a specific broker).
-- `event_sources` (List of String) List of event types that the integration will be subscribed to. Can contain simple event types or full Camel URIs (to use a specific broker different from 'default').
-- `filter_event_type` (Boolean) Enables the default filtering for the Knative trigger using the event type If this is true, the created Knative trigger uses the event type as a filter on the event stream when no other filter criteria is given. (default: true)
-- `filter_source_channels` (Boolean) Enables filtering on events based on the header 'ce-knativehistory'. Since this header has been removed in newer versions of Knative, filtering is disabled by default.
-- `filters` (List of String) Sets filter attributes on the event stream (such as event type, source, subject and so on). A list of key-value pairs that represent filter attributes and its values. The syntax is KEY=VALUE, e.g., 'source='my.source''. Filter attributes get set on the Knative trigger that is being created as part of this integration.
-- `namespace_label` (Boolean) Enables the camel-k-operator to set the 'bindings.knative.dev/include=true' label to the namespace As Knative requires this label to perform injection of K_SINK URL into the service. If this is false, the integration pod may start and fail, read the SinkBinding Knative documentation. (default: true)
-- `sink_binding` (Boolean) Allows binding the integration to a sink via a Knative SinkBinding resource. This can be used when the integration targets a single sink. It's enabled by default when the integration targets a single sink (except when the integration is owned by a Knative source).
+- `event_sinks` (List of String) List of event types that the integration will produce.Can contain simple event types or full Camel URIs (to use a specific broker).
+- `event_sources` (List of String) List of event types that the integration will be subscribed to.Can contain simple event types or full Camel URIs (to use a specific broker different from 'default').
+- `filter_event_type` (Boolean) Enables the default filtering for the Knative trigger using the event typeIf this is true, the created Knative trigger uses the event type as a filter on the event stream when no other filter criteria is given. (default: true)
+- `filter_source_channels` (Boolean) Enables filtering on events based on the header 'ce-knativehistory'. Since this header has been removed in newer versions ofKnative, filtering is disabled by default.
+- `filters` (List of String) Sets filter attributes on the event stream (such as event type, source, subject and so on).A list of key-value pairs that represent filter attributes and its values.The syntax is KEY=VALUE, e.g., 'source='my.source''.Filter attributes get set on the Knative trigger that is being created as part of this integration.
+- `namespace_label` (Boolean) Enables the camel-k-operator to set the 'bindings.knative.dev/include=true' label to the namespaceAs Knative requires this label to perform injection of K_SINK URL into the service.If this is false, the integration pod may start and fail, read the SinkBinding Knative documentation. (default: true)
+- `sink_binding` (Boolean) Allows binding the integration to a sink via a Knative SinkBinding resource.This can be used when the integration targets a single sink.It's enabled by default when the integration targets a single sink(except when the integration is owned by a Knative source).
@@ -3248,18 +3248,18 @@ Optional:
Optional:
-- `annotations` (Map of String) The annotations added to route. This can be used to set knative service specific annotations CLI usage example: -t 'knative-service.annotations.'haproxy.router.openshift.io/balance'=true'
-- `auto` (Boolean) Automatically deploy the integration as Knative service when all conditions hold: * Integration is using the Knative profile * All routes are either starting from an HTTP based consumer or a passive consumer (e.g. 'direct' is a passive consumer)
-- `autoscaling_metric` (String) Configures the Knative autoscaling metric property (e.g. to set 'concurrency' based or 'cpu' based autoscaling). Refer to the Knative documentation for more information.
-- `autoscaling_target` (Number) Sets the allowed concurrency level or CPU percentage (depending on the autoscaling metric) for each Pod. Refer to the Knative documentation for more information.
-- `class` (String) Configures the Knative autoscaling class property (e.g. to set 'hpa.autoscaling.knative.dev' or 'kpa.autoscaling.knative.dev' autoscaling). Refer to the Knative documentation for more information.
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `annotations` (Map of String) The annotations added to route.This can be used to set knative service specific annotationsCLI usage example: -t 'knative-service.annotations.'haproxy.router.openshift.io/balance'=true'
+- `auto` (Boolean) Automatically deploy the integration as Knative service when all conditions hold:* Integration is using the Knative profile* All routes are either starting from an HTTP based consumer or a passive consumer (e.g. 'direct' is a passive consumer)
+- `autoscaling_metric` (String) Configures the Knative autoscaling metric property (e.g. to set 'concurrency' based or 'cpu' based autoscaling).Refer to the Knative documentation for more information.
+- `autoscaling_target` (Number) Sets the allowed concurrency level or CPU percentage (depending on the autoscaling metric) for each Pod.Refer to the Knative documentation for more information.
+- `class` (String) Configures the Knative autoscaling class property (e.g. to set 'hpa.autoscaling.knative.dev' or 'kpa.autoscaling.knative.dev' autoscaling).Refer to the Knative documentation for more information.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
-- `max_scale` (Number) An upper bound for the number of Pods that can be running in parallel for the integration. Knative has its own cap value that depends on the installation. Refer to the Knative documentation for more information.
-- `min_scale` (Number) The minimum number of Pods that should be running at any time for the integration. It's **zero** by default, meaning that the integration is scaled down to zero when not used for a configured amount of time. Refer to the Knative documentation for more information.
-- `rollout_duration` (String) Enables to gradually shift traffic to the latest Revision and sets the rollout duration. It's disabled by default and must be expressed as a Golang 'time.Duration' string representation, rounded to a second precision.
-- `timeout_seconds` (Number) The maximum duration in seconds that the request instance is allowed to respond to a request. This field propagates to the integration pod's terminationGracePeriodSeconds Refer to the Knative documentation for more information.
-- `visibility` (String) Setting 'cluster-local', Knative service becomes a private service. Specifically, this option applies the 'networking.knative.dev/visibility' label to Knative service. Refer to the Knative documentation for more information.
+- `max_scale` (Number) An upper bound for the number of Pods that can be running in parallel for the integration.Knative has its own cap value that depends on the installation.Refer to the Knative documentation for more information.
+- `min_scale` (Number) The minimum number of Pods that should be running at any time for the integration. It's **zero** by default, meaning thatthe integration is scaled down to zero when not used for a configured amount of time.Refer to the Knative documentation for more information.
+- `rollout_duration` (String) Enables to gradually shift traffic to the latest Revision and sets the rollout duration.It's disabled by default and must be expressed as a Golang 'time.Duration' string representation,rounded to a second precision.
+- `timeout_seconds` (Number) The maximum duration in seconds that the request instance is allowed to respond to a request.This field propagates to the integration pod's terminationGracePeriodSecondsRefer to the Knative documentation for more information.
+- `visibility` (String) Setting 'cluster-local', Knative service becomes a private service.Specifically, this option applies the 'networking.knative.dev/visibility' label to Knative service.Refer to the Knative documentation for more information.
@@ -3268,7 +3268,7 @@ Optional:
Optional:
- `color` (Boolean) Colorize the log output
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
- `format` (String) Logs message format
- `json` (Boolean) Output the logs in JSON
@@ -3289,13 +3289,13 @@ Required:
Optional:
-- `configs` (List of String) A list of configuration pointing to configmap/secret. The configuration are expected to be UTF-8 resources as they are processed by runtime Camel Context and tried to be parsed as property files. They are also made available on the classpath in order to ease their usage directly from the Route. Syntax: [configmap|secret]:name[/key], where name represents the resource name and key optionally represents the resource key to be filtered
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configs` (List of String) A list of configuration pointing to configmap/secret.The configuration are expected to be UTF-8 resources as they are processed by runtime Camel Context and tried to be parsed as property files.They are also made available on the classpath in order to ease their usage directly from the Route.Syntax: [configmap|secret]:name[/key], where name represents the resource name and key optionally represents the resource key to be filtered
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `empty_dirs` (List of String) A list of EmptyDir volumes to be mounted. Syntax: [name:/container/path]
- `enabled` (Boolean) Deprecated: no longer in use.
-- `hot_reload` (Boolean) Enable 'hot reload' when a secret/configmap mounted is edited (default 'false'). The configmap/secret must be marked with 'camel.apache.org/integration' label to be taken in account. The resource will be watched for any kind change, also for changes in metadata.
-- `resources` (List of String) A list of resources (text or binary content) pointing to configmap/secret. The resources are expected to be any resource type (text or binary content). The destination path can be either a default location or any path specified by the user. Syntax: [configmap|secret]:name[/key][@path], where name represents the resource name, key optionally represents the resource key to be filtered and path represents the destination path
-- `scan_kamelets_implicit_label_secrets` (Boolean) Deprecated: include your properties in an explicit property file backed by a secret. Let the operator to scan for secret labeled with 'camel.apache.org/kamelet' and 'camel.apache.org/kamelet.configuration'. These secrets are mounted to the application and treated as plain properties file with their key/value list (ie .spec.data['camel.my-property'] = my-value) (default 'true').
+- `hot_reload` (Boolean) Enable 'hot reload' when a secret/configmap mounted is edited (default 'false'). The configmap/secret must bemarked with 'camel.apache.org/integration' label to be taken in account. The resource will be watched for any kind change, also forchanges in metadata.
+- `resources` (List of String) A list of resources (text or binary content) pointing to configmap/secret.The resources are expected to be any resource type (text or binary content).The destination path can be either a default location or any path specified by the user.Syntax: [configmap|secret]:name[/key][@path], where name represents the resource name, key optionally represents the resource key to be filtered and path represents the destination path
+- `scan_kamelets_implicit_label_secrets` (Boolean) Deprecated: include your properties in an explicit property file backed by a secret.Let the operator to scan for secret labeled with 'camel.apache.org/kamelet' and 'camel.apache.org/kamelet.configuration'.These secrets are mounted to the application and treated as plain properties file with their key/value list(ie .spec.data['camel.my-property'] = my-value) (default 'true').
- `volumes` (List of String) A list of Persistent Volume Claims to be mounted. Syntax: [pvcname:/container/path]
@@ -3304,8 +3304,8 @@ Optional:
Optional:
-- `configmaps` (List of String) The configmaps holding the spec of the OpenAPI
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configmaps` (List of String) The configmaps holding the spec of the OpenAPI (compatible with > 3.0 spec only).
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Deprecated: no longer in use.
@@ -3314,7 +3314,7 @@ Optional:
Optional:
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
- `target_annotations` (List of String) The set of annotations to be transferred
- `target_labels` (List of String) The set of labels to be transferred
@@ -3325,10 +3325,10 @@ Optional:
Optional:
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
-- `max_unavailable` (String) The number of pods for the Integration that can be unavailable after an eviction. It can be either an absolute number or a percentage (default '1' if 'min-available' is also not set). Only one of 'max-unavailable' and 'min-available' can be specified.
-- `min_available` (String) The number of pods for the Integration that must still be available after an eviction. It can be either an absolute number or a percentage. Only one of 'min-available' and 'max-unavailable' can be specified.
+- `max_unavailable` (String) The number of pods for the Integration that can be unavailable after an eviction.It can be either an absolute number or a percentage (default '1' if 'min-available' is also not set).Only one of 'max-unavailable' and 'min-available' can be specified.
+- `min_available` (String) The number of pods for the Integration that must still be available after an eviction.It can be either an absolute number or a percentage.Only one of 'min-available' and 'max-unavailable' can be specified.
@@ -3336,11 +3336,11 @@ Optional:
Optional:
-- `auto` (Boolean) To automatically detect from the environment if a default platform can be created (it will be created on OpenShift or when a registry address is set). Deprecated: Platform is auto generated by the operator install procedure - maintained for backward compatibility
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
-- `create_default` (Boolean) To create a default (empty) platform when the platform is missing. Deprecated: Platform is auto generated by the operator install procedure - maintained for backward compatibility
+- `auto` (Boolean) To automatically detect from the environment if a default platform can be created (it will be created on OpenShift or when a registry address is set).Deprecated: Platform is auto generated by the operator install procedure - maintained for backward compatibility
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
+- `create_default` (Boolean) To create a default (empty) platform when the platform is missing.Deprecated: Platform is auto generated by the operator install procedure - maintained for backward compatibility
- `enabled` (Boolean) Deprecated: no longer in use.
-- `global` (Boolean) Indicates if the platform should be created globally in the case of global operator (default true). Deprecated: Platform is auto generated by the operator install procedure - maintained for backward compatibility
+- `global` (Boolean) Indicates if the platform should be created globally in the case of global operator (default true).Deprecated: Platform is auto generated by the operator install procedure - maintained for backward compatibility
@@ -3348,7 +3348,7 @@ Optional:
Optional:
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
@@ -3357,7 +3357,7 @@ Optional:
Optional:
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
- `pod_monitor` (Boolean) Whether a 'PodMonitor' resource is created (default 'true').
- `pod_monitor_labels` (List of String) The 'PodMonitor' resource labels, applicable when 'pod-monitor' is 'true'.
@@ -3369,7 +3369,7 @@ Optional:
Optional:
- `auto` (Boolean) Automatically configures the platform registry secret on the pod if it is of type 'kubernetes.io/dockerconfigjson'.
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
- `image_puller_delegation` (Boolean) When using a global operator with a shared platform, this enables delegation of the 'system:image-puller' cluster role on the operator namespace to the integration service account.
- `secret_name` (String) The pull secret name to set on the Pod. If left empty this is automatically taken from the 'IntegrationPlatform' registry configuration.
@@ -3380,12 +3380,12 @@ Optional:
Optional:
-- `build_mode` (List of String) The Quarkus mode to run: either 'jvm' or 'native' (default 'jvm'). In case both 'jvm' and 'native' are specified, two 'IntegrationKit' resources are created, with the 'native' kit having precedence over the 'jvm' one once ready.
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `build_mode` (List of String) The Quarkus mode to run: either 'jvm' or 'native' (default 'jvm').In case both 'jvm' and 'native' are specified, two 'IntegrationKit' resources are created,with the 'native' kit having precedence over the 'jvm' one once ready.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Deprecated: no longer in use.
- `native_base_image` (String) The base image to use when running a native build (default 'quay.io/quarkus/quarkus-micro-image:2.0')
- `native_builder_image` (String) The image containing the tooling required for a native build (by default it will use the one provided in the runtime catalog)
-- `package_types` (List of String) The Quarkus package types, 'fast-jar' or 'native' (default 'fast-jar'). In case both 'fast-jar' and 'native' are specified, two 'IntegrationKit' resources are created, with the native kit having precedence over the 'fast-jar' one once ready. The order influences the resolution of the current kit for the integration. The kit corresponding to the first package type will be assigned to the integration in case no existing kit that matches the integration exists. Deprecated: use 'build-mode' instead.
+- `package_types` (List of String) The Quarkus package types, 'fast-jar' or 'native' (default 'fast-jar').In case both 'fast-jar' and 'native' are specified, two 'IntegrationKit' resources are created,with the native kit having precedence over the 'fast-jar' one once ready.The order influences the resolution of the current kit for the integration.The kit corresponding to the first package type will be assigned to theintegration in case no existing kit that matches the integration exists.Deprecated: use 'build-mode' instead.
@@ -3393,7 +3393,7 @@ Optional:
Optional:
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
@@ -3402,20 +3402,20 @@ Optional:
Optional:
-- `annotations` (Map of String) The annotations added to route. This can be used to set route specific annotations For annotations options see https://docs.openshift.com/container-platform/3.11/architecture/networking/routes.html#route-specific-annotations CLI usage example: -t 'route.annotations.'haproxy.router.openshift.io/balance'=true'
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `annotations` (Map of String) The annotations added to route.This can be used to set route specific annotationsFor annotations options see https://docs.openshift.com/container-platform/3.11/architecture/networking/routes.html#route-specific-annotationsCLI usage example: -t 'route.annotations.'haproxy.router.openshift.io/balance'=true'
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
- `host` (String) To configure the host exposed by the route.
-- `tls_ca_certificate` (String) The TLS CA certificate contents. Refer to the OpenShift route documentation for additional information.
-- `tls_ca_certificate_secret` (String) The secret name and key reference to the TLS CA certificate. The format is 'secret-name[/key-name]', the value represents the secret name, if there is only one key in the secret it will be read, otherwise you can set a key name separated with a '/'. Refer to the OpenShift route documentation for additional information.
-- `tls_certificate` (String) The TLS certificate contents. Refer to the OpenShift route documentation for additional information.
-- `tls_certificate_secret` (String) The secret name and key reference to the TLS certificate. The format is 'secret-name[/key-name]', the value represents the secret name, if there is only one key in the secret it will be read, otherwise you can set a key name separated with a '/'. Refer to the OpenShift route documentation for additional information.
-- `tls_destination_ca_certificate` (String) The destination CA certificate provides the contents of the ca certificate of the final destination. When using reencrypt termination this file should be provided in order to have routers use it for health checks on the secure connection. If this field is not specified, the router may provide its own destination CA and perform hostname validation using the short service name (service.namespace.svc), which allows infrastructure generated certificates to automatically verify. Refer to the OpenShift route documentation for additional information.
-- `tls_destination_ca_certificate_secret` (String) The secret name and key reference to the destination CA certificate. The format is 'secret-name[/key-name]', the value represents the secret name, if there is only one key in the secret it will be read, otherwise you can set a key name separated with a '/'. Refer to the OpenShift route documentation for additional information.
-- `tls_insecure_edge_termination_policy` (String) To configure how to deal with insecure traffic, e.g. 'Allow', 'Disable' or 'Redirect' traffic. Refer to the OpenShift route documentation for additional information.
-- `tls_key` (String) The TLS certificate key contents. Refer to the OpenShift route documentation for additional information.
-- `tls_key_secret` (String) The secret name and key reference to the TLS certificate key. The format is 'secret-name[/key-name]', the value represents the secret name, if there is only one key in the secret it will be read, otherwise you can set a key name separated with a '/'. Refer to the OpenShift route documentation for additional information.
-- `tls_termination` (String) The TLS termination type, like 'edge', 'passthrough' or 'reencrypt'. Refer to the OpenShift route documentation for additional information.
+- `tls_ca_certificate` (String) The TLS CA certificate contents.Refer to the OpenShift route documentation for additional information.
+- `tls_ca_certificate_secret` (String) The secret name and key reference to the TLS CA certificate. The format is 'secret-name[/key-name]', the value represents the secret name, if there is only one key in the secret it will be read, otherwise you can set a key name separated with a '/'.Refer to the OpenShift route documentation for additional information.
+- `tls_certificate` (String) The TLS certificate contents.Refer to the OpenShift route documentation for additional information.
+- `tls_certificate_secret` (String) The secret name and key reference to the TLS certificate. The format is 'secret-name[/key-name]', the value represents the secret name, if there is only one key in the secret it will be read, otherwise you can set a key name separated with a '/'.Refer to the OpenShift route documentation for additional information.
+- `tls_destination_ca_certificate` (String) The destination CA certificate provides the contents of the ca certificate of the final destination. When using reencrypttermination this file should be provided in order to have routers use it for health checks on the secure connection.If this field is not specified, the router may provide its own destination CA and perform hostname validation usingthe short service name (service.namespace.svc), which allows infrastructure generated certificates to automaticallyverify.Refer to the OpenShift route documentation for additional information.
+- `tls_destination_ca_certificate_secret` (String) The secret name and key reference to the destination CA certificate. The format is 'secret-name[/key-name]', the value represents the secret name, if there is only one key in the secret it will be read, otherwise you can set a key name separated with a '/'.Refer to the OpenShift route documentation for additional information.
+- `tls_insecure_edge_termination_policy` (String) To configure how to deal with insecure traffic, e.g. 'Allow', 'Disable' or 'Redirect' traffic.Refer to the OpenShift route documentation for additional information.
+- `tls_key` (String) The TLS certificate key contents.Refer to the OpenShift route documentation for additional information.
+- `tls_key_secret` (String) The secret name and key reference to the TLS certificate key. The format is 'secret-name[/key-name]', the value represents the secret name, if there is only one key in the secret it will be read, otherwise you can set a key name separated with a '/'.Refer to the OpenShift route documentation for additional information.
+- `tls_termination` (String) The TLS termination type, like 'edge', 'passthrough' or 'reencrypt'.Refer to the OpenShift route documentation for additional information.
@@ -3423,7 +3423,7 @@ Optional:
Optional:
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Deprecated: no longer in use.
- `run_as_non_root` (Boolean) Security Context RunAsNonRoot configuration (default false).
- `run_as_user` (Number) Security Context RunAsUser configuration (default none): this value is automatically retrieved in Openshift clusters when not explicitly set.
@@ -3436,9 +3436,9 @@ Optional:
Optional:
- `auto` (Boolean) To automatically detect from the code if a Service needs to be created.
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
-- `node_port` (Boolean) Enable Service to be exposed as NodePort (default 'false'). Deprecated: Use service type instead.
+- `node_port` (Boolean) Enable Service to be exposed as NodePort (default 'false').Deprecated: Use service type instead.
- `type` (String) The type of service to be used, either 'ClusterIP', 'NodePort' or 'LoadBalancer'.
@@ -3447,7 +3447,7 @@ Optional:
Optional:
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
- `services` (List of String) List of Services in the form [[apigroup/]version:]kind:[namespace/]name
@@ -3473,7 +3473,7 @@ Required:
Optional:
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
- `taints` (List of String) The list of taints to tolerate, in the form 'Key[=Value]:Effect[:Seconds]'
diff --git a/docs/data-sources/camel_apache_org_kamelet_binding_v1alpha1_manifest.md b/docs/data-sources/camel_apache_org_kamelet_binding_v1alpha1_manifest.md
index 6447d4103..ae421bc2f 100644
--- a/docs/data-sources/camel_apache_org_kamelet_binding_v1alpha1_manifest.md
+++ b/docs/data-sources/camel_apache_org_kamelet_binding_v1alpha1_manifest.md
@@ -68,7 +68,7 @@ Optional:
Optional:
-- `configuration` (Attributes List) Deprecated: Use camel trait (camel.properties) to manage properties Use mount trait (mount.configs) to manage configs Use mount trait (mount.resources) to manage resources Use mount trait (mount.volumes) to manage volumes (see [below for nested schema](#nestedatt--spec--integration--configuration))
+- `configuration` (Attributes List) Deprecated:Use camel trait (camel.properties) to manage propertiesUse mount trait (mount.configs) to manage configsUse mount trait (mount.resources) to manage resourcesUse mount trait (mount.volumes) to manage volumes (see [below for nested schema](#nestedatt--spec--integration--configuration))
- `dependencies` (List of String) the list of Camel or Maven dependencies required by the Integration
- `flows` (List of Map of String) a source in YAML DSL language which contain the routes to run
- `integration_kit` (Attributes) the reference of the 'IntegrationKit' which is used for this Integration (see [below for nested schema](#nestedatt--spec--integration--integration_kit))
@@ -95,12 +95,12 @@ Required:
Optional:
- `api_version` (String) API version of the referent.
-- `field_path` (String) If referring to a piece of an object instead of an entire object, this string should contain a valid JSON/Go field access statement, such as desiredState.manifest.containers[2]. For example, if the object reference is to a container within a pod, this would take on a value like: 'spec.containers{name}' (where 'name' refers to the name of the container that triggered the event) or if no container name is specified 'spec.containers[2]' (container with index 2 in this pod). This syntax is chosen only to have some well-defined way of referencing a part of an object. TODO: this design is not final and this field is subject to change in the future.
-- `kind` (String) Kind of the referent. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-- `namespace` (String) Namespace of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/
-- `resource_version` (String) Specific resourceVersion to which this reference is made, if any. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
-- `uid` (String) UID of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids
+- `field_path` (String) If referring to a piece of an object instead of an entire object, this stringshould contain a valid JSON/Go field access statement, such as desiredState.manifest.containers[2].For example, if the object reference is to a container within a pod, this would take on a value like:'spec.containers{name}' (where 'name' refers to the name of the container that triggeredthe event) or if no container name is specified 'spec.containers[2]' (container withindex 2 in this pod). This syntax is chosen only to have some well-defined way ofreferencing a part of an object.TODO: this design is not final and this field is subject to change in the future.
+- `kind` (String) Kind of the referent.More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+- `namespace` (String) Namespace of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/
+- `resource_version` (String) Specific resourceVersion to which this reference is made, if any.More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
+- `uid` (String) UID of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids
@@ -114,9 +114,9 @@ Optional:
- `content_ref` (String) the confimap reference holding the source content
- `content_type` (String) the content type (tipically text or binary)
- `from_kamelet` (Boolean) True if the spec is generated from a Kamelet
-- `interceptors` (List of String) Interceptors are optional identifiers the org.apache.camel.k.RoutesLoader uses to pre/post process sources
+- `interceptors` (List of String) Interceptors are optional identifiers the org.apache.camel.k.RoutesLoaderuses to pre/post process sources
- `language` (String) specify which is the language (Camel DSL) used to interpret this source code
-- `loader` (String) Loader is an optional id of the org.apache.camel.k.RoutesLoader that will interpret this source at runtime
+- `loader` (String) Loader is an optional id of the org.apache.camel.k.RoutesLoader that willinterpret this source at runtime
- `name` (String) the name of the specification
- `path` (String) the path where the file is stored
- `property_names` (List of String) List of property names defined in the source (e.g. if type is 'template')
@@ -157,33 +157,33 @@ Optional:
Required:
-- `name` (String) Name of the container specified as a DNS_LABEL. Each container in a pod must have a unique name (DNS_LABEL). Cannot be updated.
+- `name` (String) Name of the container specified as a DNS_LABEL.Each container in a pod must have a unique name (DNS_LABEL).Cannot be updated.
Optional:
-- `args` (List of String) Arguments to the entrypoint. The container image's CMD is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container's environment. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. '$$(VAR_NAME)' will produce the string literal '$(VAR_NAME)'. Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
-- `command` (List of String) Entrypoint array. Not executed within a shell. The container image's ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container's environment. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. '$$(VAR_NAME)' will produce the string literal '$(VAR_NAME)'. Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
-- `env` (Attributes List) List of environment variables to set in the container. Cannot be updated. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--env))
-- `env_from` (Attributes List) List of sources to populate environment variables in the container. The keys defined within a source must be a C_IDENTIFIER. All invalid keys will be reported as an event when the container is starting. When a key exists in multiple sources, the value associated with the last source will take precedence. Values defined by an Env with a duplicate key will take precedence. Cannot be updated. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--env_from))
-- `image` (String) Container image name. More info: https://kubernetes.io/docs/concepts/containers/images This field is optional to allow higher level config management to default or override container images in workload controllers like Deployments and StatefulSets.
-- `image_pull_policy` (String) Image pull policy. One of Always, Never, IfNotPresent. Defaults to Always if :latest tag is specified, or IfNotPresent otherwise. Cannot be updated. More info: https://kubernetes.io/docs/concepts/containers/images#updating-images
-- `lifecycle` (Attributes) Actions that the management system should take in response to container lifecycle events. Cannot be updated. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--lifecycle))
-- `liveness_probe` (Attributes) Periodic probe of container liveness. Container will be restarted if the probe fails. Cannot be updated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--liveness_probe))
-- `ports` (Attributes List) List of ports to expose from the container. Not specifying a port here DOES NOT prevent that port from being exposed. Any port which is listening on the default '0.0.0.0' address inside a container will be accessible from the network. Modifying this array with strategic merge patch may corrupt the data. For more information See https://github.com/kubernetes/kubernetes/issues/108255. Cannot be updated. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--ports))
-- `readiness_probe` (Attributes) Periodic probe of container service readiness. Container will be removed from service endpoints if the probe fails. Cannot be updated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--readiness_probe))
+- `args` (List of String) Arguments to the entrypoint.The container image's CMD is used if this is not provided.Variable references $(VAR_NAME) are expanded using the container's environment. If a variablecannot be resolved, the reference in the input string will be unchanged. Double $$ are reducedto a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. '$$(VAR_NAME)' willproduce the string literal '$(VAR_NAME)'. Escaped references will never be expanded, regardlessof whether the variable exists or not. Cannot be updated.More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
+- `command` (List of String) Entrypoint array. Not executed within a shell.The container image's ENTRYPOINT is used if this is not provided.Variable references $(VAR_NAME) are expanded using the container's environment. If a variablecannot be resolved, the reference in the input string will be unchanged. Double $$ are reducedto a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. '$$(VAR_NAME)' willproduce the string literal '$(VAR_NAME)'. Escaped references will never be expanded, regardlessof whether the variable exists or not. Cannot be updated.More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
+- `env` (Attributes List) List of environment variables to set in the container.Cannot be updated. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--env))
+- `env_from` (Attributes List) List of sources to populate environment variables in the container.The keys defined within a source must be a C_IDENTIFIER. All invalid keyswill be reported as an event when the container is starting. When a key exists in multiplesources, the value associated with the last source will take precedence.Values defined by an Env with a duplicate key will take precedence.Cannot be updated. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--env_from))
+- `image` (String) Container image name.More info: https://kubernetes.io/docs/concepts/containers/imagesThis field is optional to allow higher level config management to default or overridecontainer images in workload controllers like Deployments and StatefulSets.
+- `image_pull_policy` (String) Image pull policy.One of Always, Never, IfNotPresent.Defaults to Always if :latest tag is specified, or IfNotPresent otherwise.Cannot be updated.More info: https://kubernetes.io/docs/concepts/containers/images#updating-images
+- `lifecycle` (Attributes) Actions that the management system should take in response to container lifecycle events.Cannot be updated. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--lifecycle))
+- `liveness_probe` (Attributes) Periodic probe of container liveness.Container will be restarted if the probe fails.Cannot be updated.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--liveness_probe))
+- `ports` (Attributes List) List of ports to expose from the container. Not specifying a port hereDOES NOT prevent that port from being exposed. Any port which islistening on the default '0.0.0.0' address inside a container will beaccessible from the network.Modifying this array with strategic merge patch may corrupt the data.For more information See https://github.com/kubernetes/kubernetes/issues/108255.Cannot be updated. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--ports))
+- `readiness_probe` (Attributes) Periodic probe of container service readiness.Container will be removed from service endpoints if the probe fails.Cannot be updated.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--readiness_probe))
- `resize_policy` (Attributes List) Resources resize policy for the container. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--resize_policy))
-- `resources` (Attributes) Compute Resources required by this container. Cannot be updated. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/ (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--resources))
-- `restart_policy` (String) RestartPolicy defines the restart behavior of individual containers in a pod. This field may only be set for init containers, and the only allowed value is 'Always'. For non-init containers or when this field is not specified, the restart behavior is defined by the Pod's restart policy and the container type. Setting the RestartPolicy as 'Always' for the init container will have the following effect: this init container will be continually restarted on exit until all regular containers have terminated. Once all regular containers have completed, all init containers with restartPolicy 'Always' will be shut down. This lifecycle differs from normal init containers and is often referred to as a 'sidecar' container. Although this init container still starts in the init container sequence, it does not wait for the container to complete before proceeding to the next init container. Instead, the next init container starts immediately after this init container is started, or after any startupProbe has successfully completed.
-- `security_context` (Attributes) SecurityContext defines the security options the container should be run with. If set, the fields of SecurityContext override the equivalent fields of PodSecurityContext. More info: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--security_context))
-- `startup_probe` (Attributes) StartupProbe indicates that the Pod has successfully initialized. If specified, no other probes are executed until this completes successfully. If this probe fails, the Pod will be restarted, just as if the livenessProbe failed. This can be used to provide different probe parameters at the beginning of a Pod's lifecycle, when it might take a long time to load data or warm a cache, than during steady-state operation. This cannot be updated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--startup_probe))
-- `stdin` (Boolean) Whether this container should allocate a buffer for stdin in the container runtime. If this is not set, reads from stdin in the container will always result in EOF. Default is false.
-- `stdin_once` (Boolean) Whether the container runtime should close the stdin channel after it has been opened by a single attach. When stdin is true the stdin stream will remain open across multiple attach sessions. If stdinOnce is set to true, stdin is opened on container start, is empty until the first client attaches to stdin, and then remains open and accepts data until the client disconnects, at which time stdin is closed and remains closed until the container is restarted. If this flag is false, a container processes that reads from stdin will never receive an EOF. Default is false
-- `termination_message_path` (String) Optional: Path at which the file to which the container's termination message will be written is mounted into the container's filesystem. Message written is intended to be brief final status, such as an assertion failure message. Will be truncated by the node if greater than 4096 bytes. The total message length across all containers will be limited to 12kb. Defaults to /dev/termination-log. Cannot be updated.
-- `termination_message_policy` (String) Indicate how the termination message should be populated. File will use the contents of terminationMessagePath to populate the container status message on both success and failure. FallbackToLogsOnError will use the last chunk of container log output if the termination message file is empty and the container exited with an error. The log output is limited to 2048 bytes or 80 lines, whichever is smaller. Defaults to File. Cannot be updated.
-- `tty` (Boolean) Whether this container should allocate a TTY for itself, also requires 'stdin' to be true. Default is false.
+- `resources` (Attributes) Compute Resources required by this container.Cannot be updated.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/ (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--resources))
+- `restart_policy` (String) RestartPolicy defines the restart behavior of individual containers in a pod.This field may only be set for init containers, and the only allowed value is 'Always'.For non-init containers or when this field is not specified,the restart behavior is defined by the Pod's restart policy and the container type.Setting the RestartPolicy as 'Always' for the init container will have the following effect:this init container will be continually restarted onexit until all regular containers have terminated. Once all regularcontainers have completed, all init containers with restartPolicy 'Always'will be shut down. This lifecycle differs from normal init containers andis often referred to as a 'sidecar' container. Although this initcontainer still starts in the init container sequence, it does not waitfor the container to complete before proceeding to the next initcontainer. Instead, the next init container starts immediately after thisinit container is started, or after any startupProbe has successfullycompleted.
+- `security_context` (Attributes) SecurityContext defines the security options the container should be run with.If set, the fields of SecurityContext override the equivalent fields of PodSecurityContext.More info: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--security_context))
+- `startup_probe` (Attributes) StartupProbe indicates that the Pod has successfully initialized.If specified, no other probes are executed until this completes successfully.If this probe fails, the Pod will be restarted, just as if the livenessProbe failed.This can be used to provide different probe parameters at the beginning of a Pod's lifecycle,when it might take a long time to load data or warm a cache, than during steady-state operation.This cannot be updated.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--startup_probe))
+- `stdin` (Boolean) Whether this container should allocate a buffer for stdin in the container runtime. If thisis not set, reads from stdin in the container will always result in EOF.Default is false.
+- `stdin_once` (Boolean) Whether the container runtime should close the stdin channel after it has been opened bya single attach. When stdin is true the stdin stream will remain open across multiple attachsessions. If stdinOnce is set to true, stdin is opened on container start, is empty until thefirst client attaches to stdin, and then remains open and accepts data until the client disconnects,at which time stdin is closed and remains closed until the container is restarted. If thisflag is false, a container processes that reads from stdin will never receive an EOF.Default is false
+- `termination_message_path` (String) Optional: Path at which the file to which the container's termination messagewill be written is mounted into the container's filesystem.Message written is intended to be brief final status, such as an assertion failure message.Will be truncated by the node if greater than 4096 bytes. The total message length acrossall containers will be limited to 12kb.Defaults to /dev/termination-log.Cannot be updated.
+- `termination_message_policy` (String) Indicate how the termination message should be populated. File will use the contents ofterminationMessagePath to populate the container status message on both success and failure.FallbackToLogsOnError will use the last chunk of container log output if the terminationmessage file is empty and the container exited with an error.The log output is limited to 2048 bytes or 80 lines, whichever is smaller.Defaults to File.Cannot be updated.
+- `tty` (Boolean) Whether this container should allocate a TTY for itself, also requires 'stdin' to be true.Default is false.
- `volume_devices` (Attributes List) volumeDevices is the list of block devices to be used by the container. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--volume_devices))
-- `volume_mounts` (Attributes List) Pod volumes to mount into the container's filesystem. Cannot be updated. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--volume_mounts))
-- `working_dir` (String) Container's working directory. If not specified, the container runtime's default will be used, which might be configured in the container image. Cannot be updated.
+- `volume_mounts` (Attributes List) Pod volumes to mount into the container's filesystem.Cannot be updated. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--volume_mounts))
+- `working_dir` (String) Container's working directory.If not specified, the container runtime's default will be used, whichmight be configured in the container image.Cannot be updated.
### Nested Schema for `spec.integration.template.spec.containers.env`
@@ -194,7 +194,7 @@ Required:
Optional:
-- `value` (String) Variable references $(VAR_NAME) are expanded using the previously defined environment variables in the container and any service environment variables. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. '$$(VAR_NAME)' will produce the string literal '$(VAR_NAME)'. Escaped references will never be expanded, regardless of whether the variable exists or not. Defaults to ''.
+- `value` (String) Variable references $(VAR_NAME) are expandedusing the previously defined environment variables in the container andany service environment variables. If a variable cannot be resolved,the reference in the input string will be unchanged. Double $$ are reducedto a single $, which allows for escaping the $(VAR_NAME) syntax: i.e.'$$(VAR_NAME)' will produce the string literal '$(VAR_NAME)'.Escaped references will never be expanded, regardless of whether the variableexists or not.Defaults to ''.
- `value_from` (Attributes) Source for the environment variable's value. Cannot be used if value is not empty. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--env--value_from))
@@ -203,8 +203,8 @@ Optional:
Optional:
- `config_map_key_ref` (Attributes) Selects a key of a ConfigMap. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--env--value_from--config_map_key_ref))
-- `field_ref` (Attributes) Selects a field of the pod: supports metadata.name, metadata.namespace, 'metadata.labels['']', 'metadata.annotations['']', spec.nodeName, spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--env--value_from--field_ref))
-- `resource_field_ref` (Attributes) Selects a resource of the container: only resources limits and requests (limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu, requests.memory and requests.ephemeral-storage) are currently supported. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--env--value_from--resource_field_ref))
+- `field_ref` (Attributes) Selects a field of the pod: supports metadata.name, metadata.namespace, 'metadata.labels['']', 'metadata.annotations['']',spec.nodeName, spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--env--value_from--field_ref))
+- `resource_field_ref` (Attributes) Selects a resource of the container: only resources limits and requests(limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu, requests.memory and requests.ephemeral-storage) are currently supported. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--env--value_from--resource_field_ref))
- `secret_key_ref` (Attributes) Selects a key of a secret in the pod's namespace (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--env--value_from--secret_key_ref))
@@ -216,7 +216,7 @@ Required:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
@@ -254,7 +254,7 @@ Required:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
- `optional` (Boolean) Specify whether the Secret or its key must be defined
@@ -274,7 +274,7 @@ Optional:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
- `optional` (Boolean) Specify whether the ConfigMap must be defined
@@ -283,7 +283,7 @@ Optional:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
- `optional` (Boolean) Specify whether the Secret must be defined
@@ -293,8 +293,8 @@ Optional:
Optional:
-- `post_start` (Attributes) PostStart is called immediately after a container is created. If the handler fails, the container is terminated and restarted according to its restart policy. Other management of the container blocks until the hook completes. More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--lifecycle--post_start))
-- `pre_stop` (Attributes) PreStop is called immediately before a container is terminated due to an API request or management event such as liveness/startup probe failure, preemption, resource contention, etc. The handler is not called if the container crashes or exits. The Pod's termination grace period countdown begins before the PreStop hook is executed. Regardless of the outcome of the handler, the container will eventually terminate within the Pod's termination grace period (unless delayed by finalizers). Other management of the container blocks until the hook completes or until the termination grace period is reached. More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--lifecycle--pre_stop))
+- `post_start` (Attributes) PostStart is called immediately after a container is created. If the handler fails,the container is terminated and restarted according to its restart policy.Other management of the container blocks until the hook completes.More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--lifecycle--post_start))
+- `pre_stop` (Attributes) PreStop is called immediately before a container is terminated due to anAPI request or management event such as liveness/startup probe failure,preemption, resource contention, etc. The handler is not called if thecontainer crashes or exits. The Pod's termination grace period countdown begins before thePreStop hook is executed. Regardless of the outcome of the handler, thecontainer will eventually terminate within the Pod's termination graceperiod (unless delayed by finalizers). Other management of the container blocks until the hook completesor until the termination grace period is reached.More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--lifecycle--pre_stop))
### Nested Schema for `spec.integration.template.spec.containers.lifecycle.post_start`
@@ -304,14 +304,14 @@ Optional:
- `exec` (Attributes) Exec specifies the action to take. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--lifecycle--post_start--exec))
- `http_get` (Attributes) HTTPGet specifies the http request to perform. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--lifecycle--post_start--http_get))
- `sleep` (Attributes) Sleep represents the duration that the container should sleep before being terminated. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--lifecycle--post_start--sleep))
-- `tcp_socket` (Attributes) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and kept for the backward compatibility. There are no validation of this field and lifecycle hooks will fail in runtime when tcp handler is specified. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--lifecycle--post_start--tcp_socket))
+- `tcp_socket` (Attributes) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and keptfor the backward compatibility. There are no validation of this field andlifecycle hooks will fail in runtime when tcp handler is specified. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--lifecycle--post_start--tcp_socket))
### Nested Schema for `spec.integration.template.spec.containers.lifecycle.post_start.exec`
Optional:
-- `command` (List of String) Command is the command line to execute inside the container, the working directory for the command is root ('/') in the container's filesystem. The command is simply exec'd, it is not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
+- `command` (List of String) Command is the command line to execute inside the container, the working directory for thecommand is root ('/') in the container's filesystem. The command is simply exec'd, it isnot run inside a shell, so traditional shell instructions ('|', etc) won't work. To usea shell, you need to explicitly call out to that shell.Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
@@ -319,21 +319,21 @@ Optional:
Required:
-- `port` (String) Name or number of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
+- `port` (String) Name or number of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
Optional:
-- `host` (String) Host name to connect to, defaults to the pod IP. You probably want to set 'Host' in httpHeaders instead.
+- `host` (String) Host name to connect to, defaults to the pod IP. You probably want to set'Host' in httpHeaders instead.
- `http_headers` (Attributes List) Custom headers to set in the request. HTTP allows repeated headers. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--lifecycle--post_start--http_get--http_headers))
- `path` (String) Path to access on the HTTP server.
-- `scheme` (String) Scheme to use for connecting to the host. Defaults to HTTP.
+- `scheme` (String) Scheme to use for connecting to the host.Defaults to HTTP.
### Nested Schema for `spec.integration.template.spec.containers.lifecycle.post_start.http_get.http_headers`
Required:
-- `name` (String) The header field name. This will be canonicalized upon output, so case-variant names will be understood as the same header.
+- `name` (String) The header field name.This will be canonicalized upon output, so case-variant names will be understood as the same header.
- `value` (String) The header field value
@@ -351,7 +351,7 @@ Required:
Required:
-- `port` (String) Number or name of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
+- `port` (String) Number or name of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
Optional:
@@ -367,14 +367,14 @@ Optional:
- `exec` (Attributes) Exec specifies the action to take. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--lifecycle--pre_stop--exec))
- `http_get` (Attributes) HTTPGet specifies the http request to perform. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--lifecycle--pre_stop--http_get))
- `sleep` (Attributes) Sleep represents the duration that the container should sleep before being terminated. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--lifecycle--pre_stop--sleep))
-- `tcp_socket` (Attributes) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and kept for the backward compatibility. There are no validation of this field and lifecycle hooks will fail in runtime when tcp handler is specified. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--lifecycle--pre_stop--tcp_socket))
+- `tcp_socket` (Attributes) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and keptfor the backward compatibility. There are no validation of this field andlifecycle hooks will fail in runtime when tcp handler is specified. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--lifecycle--pre_stop--tcp_socket))
### Nested Schema for `spec.integration.template.spec.containers.lifecycle.pre_stop.exec`
Optional:
-- `command` (List of String) Command is the command line to execute inside the container, the working directory for the command is root ('/') in the container's filesystem. The command is simply exec'd, it is not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
+- `command` (List of String) Command is the command line to execute inside the container, the working directory for thecommand is root ('/') in the container's filesystem. The command is simply exec'd, it isnot run inside a shell, so traditional shell instructions ('|', etc) won't work. To usea shell, you need to explicitly call out to that shell.Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
@@ -382,21 +382,21 @@ Optional:
Required:
-- `port` (String) Name or number of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
+- `port` (String) Name or number of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
Optional:
-- `host` (String) Host name to connect to, defaults to the pod IP. You probably want to set 'Host' in httpHeaders instead.
+- `host` (String) Host name to connect to, defaults to the pod IP. You probably want to set'Host' in httpHeaders instead.
- `http_headers` (Attributes List) Custom headers to set in the request. HTTP allows repeated headers. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--lifecycle--pre_stop--http_get--http_headers))
- `path` (String) Path to access on the HTTP server.
-- `scheme` (String) Scheme to use for connecting to the host. Defaults to HTTP.
+- `scheme` (String) Scheme to use for connecting to the host.Defaults to HTTP.
### Nested Schema for `spec.integration.template.spec.containers.lifecycle.pre_stop.http_get.http_headers`
Required:
-- `name` (String) The header field name. This will be canonicalized upon output, so case-variant names will be understood as the same header.
+- `name` (String) The header field name.This will be canonicalized upon output, so case-variant names will be understood as the same header.
- `value` (String) The header field value
@@ -414,7 +414,7 @@ Required:
Required:
-- `port` (String) Number or name of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
+- `port` (String) Number or name of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
Optional:
@@ -429,22 +429,22 @@ Optional:
Optional:
- `exec` (Attributes) Exec specifies the action to take. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--liveness_probe--exec))
-- `failure_threshold` (Number) Minimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1.
+- `failure_threshold` (Number) Minimum consecutive failures for the probe to be considered failed after having succeeded.Defaults to 3. Minimum value is 1.
- `grpc` (Attributes) GRPC specifies an action involving a GRPC port. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--liveness_probe--grpc))
- `http_get` (Attributes) HTTPGet specifies the http request to perform. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--liveness_probe--http_get))
-- `initial_delay_seconds` (Number) Number of seconds after the container has started before liveness probes are initiated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-- `period_seconds` (Number) How often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1.
-- `success_threshold` (Number) Minimum consecutive successes for the probe to be considered successful after having failed. Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
+- `initial_delay_seconds` (Number) Number of seconds after the container has started before liveness probes are initiated.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
+- `period_seconds` (Number) How often (in seconds) to perform the probe.Default to 10 seconds. Minimum value is 1.
+- `success_threshold` (Number) Minimum consecutive successes for the probe to be considered successful after having failed.Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
- `tcp_socket` (Attributes) TCPSocket specifies an action involving a TCP port. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--liveness_probe--tcp_socket))
-- `termination_grace_period_seconds` (Number) Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
-- `timeout_seconds` (Number) Number of seconds after which the probe times out. Defaults to 1 second. Minimum value is 1. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
+- `termination_grace_period_seconds` (Number) Optional duration in seconds the pod needs to terminate gracefully upon probe failure.The grace period is the duration in seconds after the processes running in the pod are senta termination signal and the time when the processes are forcibly halted with a kill signal.Set this value longer than the expected cleanup time for your process.If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, thisvalue overrides the value provided by the pod spec.Value must be non-negative integer. The value zero indicates stop immediately viathe kill signal (no opportunity to shut down).This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate.Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
+- `timeout_seconds` (Number) Number of seconds after which the probe times out.Defaults to 1 second. Minimum value is 1.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
### Nested Schema for `spec.integration.template.spec.containers.liveness_probe.exec`
Optional:
-- `command` (List of String) Command is the command line to execute inside the container, the working directory for the command is root ('/') in the container's filesystem. The command is simply exec'd, it is not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
+- `command` (List of String) Command is the command line to execute inside the container, the working directory for thecommand is root ('/') in the container's filesystem. The command is simply exec'd, it isnot run inside a shell, so traditional shell instructions ('|', etc) won't work. To usea shell, you need to explicitly call out to that shell.Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
@@ -456,7 +456,7 @@ Required:
Optional:
-- `service` (String) Service is the name of the service to place in the gRPC HealthCheckRequest (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md). If this is not specified, the default behavior is defined by gRPC.
+- `service` (String) Service is the name of the service to place in the gRPC HealthCheckRequest(see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).If this is not specified, the default behavior is defined by gRPC.
@@ -464,21 +464,21 @@ Optional:
Required:
-- `port` (String) Name or number of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
+- `port` (String) Name or number of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
Optional:
-- `host` (String) Host name to connect to, defaults to the pod IP. You probably want to set 'Host' in httpHeaders instead.
+- `host` (String) Host name to connect to, defaults to the pod IP. You probably want to set'Host' in httpHeaders instead.
- `http_headers` (Attributes List) Custom headers to set in the request. HTTP allows repeated headers. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--liveness_probe--http_get--http_headers))
- `path` (String) Path to access on the HTTP server.
-- `scheme` (String) Scheme to use for connecting to the host. Defaults to HTTP.
+- `scheme` (String) Scheme to use for connecting to the host.Defaults to HTTP.
### Nested Schema for `spec.integration.template.spec.containers.liveness_probe.http_get.http_headers`
Required:
-- `name` (String) The header field name. This will be canonicalized upon output, so case-variant names will be understood as the same header.
+- `name` (String) The header field name.This will be canonicalized upon output, so case-variant names will be understood as the same header.
- `value` (String) The header field value
@@ -488,7 +488,7 @@ Required:
Required:
-- `port` (String) Number or name of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
+- `port` (String) Number or name of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
Optional:
@@ -501,14 +501,14 @@ Optional:
Required:
-- `container_port` (Number) Number of port to expose on the pod's IP address. This must be a valid port number, 0 < x < 65536.
+- `container_port` (Number) Number of port to expose on the pod's IP address.This must be a valid port number, 0 < x < 65536.
Optional:
- `host_ip` (String) What host IP to bind the external port to.
-- `host_port` (Number) Number of port to expose on the host. If specified, this must be a valid port number, 0 < x < 65536. If HostNetwork is specified, this must match ContainerPort. Most containers do not need this.
-- `name` (String) If specified, this must be an IANA_SVC_NAME and unique within the pod. Each named port in a pod must have a unique name. Name for the port that can be referred to by services.
-- `protocol` (String) Protocol for port. Must be UDP, TCP, or SCTP. Defaults to 'TCP'.
+- `host_port` (Number) Number of port to expose on the host.If specified, this must be a valid port number, 0 < x < 65536.If HostNetwork is specified, this must match ContainerPort.Most containers do not need this.
+- `name` (String) If specified, this must be an IANA_SVC_NAME and unique within the pod. Eachnamed port in a pod must have a unique name. Name for the port that can bereferred to by services.
+- `protocol` (String) Protocol for port. Must be UDP, TCP, or SCTP.Defaults to 'TCP'.
@@ -517,22 +517,22 @@ Optional:
Optional:
- `exec` (Attributes) Exec specifies the action to take. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--readiness_probe--exec))
-- `failure_threshold` (Number) Minimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1.
+- `failure_threshold` (Number) Minimum consecutive failures for the probe to be considered failed after having succeeded.Defaults to 3. Minimum value is 1.
- `grpc` (Attributes) GRPC specifies an action involving a GRPC port. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--readiness_probe--grpc))
- `http_get` (Attributes) HTTPGet specifies the http request to perform. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--readiness_probe--http_get))
-- `initial_delay_seconds` (Number) Number of seconds after the container has started before liveness probes are initiated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-- `period_seconds` (Number) How often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1.
-- `success_threshold` (Number) Minimum consecutive successes for the probe to be considered successful after having failed. Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
+- `initial_delay_seconds` (Number) Number of seconds after the container has started before liveness probes are initiated.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
+- `period_seconds` (Number) How often (in seconds) to perform the probe.Default to 10 seconds. Minimum value is 1.
+- `success_threshold` (Number) Minimum consecutive successes for the probe to be considered successful after having failed.Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
- `tcp_socket` (Attributes) TCPSocket specifies an action involving a TCP port. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--readiness_probe--tcp_socket))
-- `termination_grace_period_seconds` (Number) Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
-- `timeout_seconds` (Number) Number of seconds after which the probe times out. Defaults to 1 second. Minimum value is 1. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
+- `termination_grace_period_seconds` (Number) Optional duration in seconds the pod needs to terminate gracefully upon probe failure.The grace period is the duration in seconds after the processes running in the pod are senta termination signal and the time when the processes are forcibly halted with a kill signal.Set this value longer than the expected cleanup time for your process.If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, thisvalue overrides the value provided by the pod spec.Value must be non-negative integer. The value zero indicates stop immediately viathe kill signal (no opportunity to shut down).This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate.Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
+- `timeout_seconds` (Number) Number of seconds after which the probe times out.Defaults to 1 second. Minimum value is 1.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
### Nested Schema for `spec.integration.template.spec.containers.readiness_probe.exec`
Optional:
-- `command` (List of String) Command is the command line to execute inside the container, the working directory for the command is root ('/') in the container's filesystem. The command is simply exec'd, it is not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
+- `command` (List of String) Command is the command line to execute inside the container, the working directory for thecommand is root ('/') in the container's filesystem. The command is simply exec'd, it isnot run inside a shell, so traditional shell instructions ('|', etc) won't work. To usea shell, you need to explicitly call out to that shell.Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
@@ -544,7 +544,7 @@ Required:
Optional:
-- `service` (String) Service is the name of the service to place in the gRPC HealthCheckRequest (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md). If this is not specified, the default behavior is defined by gRPC.
+- `service` (String) Service is the name of the service to place in the gRPC HealthCheckRequest(see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).If this is not specified, the default behavior is defined by gRPC.
@@ -552,21 +552,21 @@ Optional:
Required:
-- `port` (String) Name or number of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
+- `port` (String) Name or number of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
Optional:
-- `host` (String) Host name to connect to, defaults to the pod IP. You probably want to set 'Host' in httpHeaders instead.
+- `host` (String) Host name to connect to, defaults to the pod IP. You probably want to set'Host' in httpHeaders instead.
- `http_headers` (Attributes List) Custom headers to set in the request. HTTP allows repeated headers. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--readiness_probe--http_get--http_headers))
- `path` (String) Path to access on the HTTP server.
-- `scheme` (String) Scheme to use for connecting to the host. Defaults to HTTP.
+- `scheme` (String) Scheme to use for connecting to the host.Defaults to HTTP.
### Nested Schema for `spec.integration.template.spec.containers.readiness_probe.http_get.http_headers`
Required:
-- `name` (String) The header field name. This will be canonicalized upon output, so case-variant names will be understood as the same header.
+- `name` (String) The header field name.This will be canonicalized upon output, so case-variant names will be understood as the same header.
- `value` (String) The header field value
@@ -576,7 +576,7 @@ Required:
Required:
-- `port` (String) Number or name of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
+- `port` (String) Number or name of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
Optional:
@@ -589,8 +589,8 @@ Optional:
Required:
-- `resource_name` (String) Name of the resource to which this resource resize policy applies. Supported values: cpu, memory.
-- `restart_policy` (String) Restart policy to apply when specified resource is resized. If not specified, it defaults to NotRequired.
+- `resource_name` (String) Name of the resource to which this resource resize policy applies.Supported values: cpu, memory.
+- `restart_policy` (String) Restart policy to apply when specified resource is resized.If not specified, it defaults to NotRequired.
@@ -598,16 +598,16 @@ Required:
Optional:
-- `claims` (Attributes List) Claims lists the names of resources, defined in spec.resourceClaims, that are used by this container. This is an alpha field and requires enabling the DynamicResourceAllocation feature gate. This field is immutable. It can only be set for containers. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--resources--claims))
-- `limits` (Map of String) Limits describes the maximum amount of compute resources allowed. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-- `requests` (Map of String) Requests describes the minimum amount of compute resources required. If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, otherwise to an implementation-defined value. Requests cannot exceed Limits. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
+- `claims` (Attributes List) Claims lists the names of resources, defined in spec.resourceClaims,that are used by this container.This is an alpha field and requires enabling theDynamicResourceAllocation feature gate.This field is immutable. It can only be set for containers. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--resources--claims))
+- `limits` (Map of String) Limits describes the maximum amount of compute resources allowed.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
+- `requests` (Map of String) Requests describes the minimum amount of compute resources required.If Requests is omitted for a container, it defaults to Limits if that is explicitly specified,otherwise to an implementation-defined value. Requests cannot exceed Limits.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
### Nested Schema for `spec.integration.template.spec.containers.resources.claims`
Required:
-- `name` (String) Name must match the name of one entry in pod.spec.resourceClaims of the Pod where this field is used. It makes that resource available inside a container.
+- `name` (String) Name must match the name of one entry in pod.spec.resourceClaims ofthe Pod where this field is used. It makes that resource availableinside a container.
@@ -616,17 +616,17 @@ Required:
Optional:
-- `allow_privilege_escalation` (Boolean) AllowPrivilegeEscalation controls whether a process can gain more privileges than its parent process. This bool directly controls if the no_new_privs flag will be set on the container process. AllowPrivilegeEscalation is true always when the container is: 1) run as Privileged 2) has CAP_SYS_ADMIN Note that this field cannot be set when spec.os.name is windows.
-- `capabilities` (Attributes) The capabilities to add/drop when running containers. Defaults to the default set of capabilities granted by the container runtime. Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--security_context--capabilities))
-- `privileged` (Boolean) Run container in privileged mode. Processes in privileged containers are essentially equivalent to root on the host. Defaults to false. Note that this field cannot be set when spec.os.name is windows.
-- `proc_mount` (String) procMount denotes the type of proc mount to use for the containers. The default is DefaultProcMount which uses the container runtime defaults for readonly paths and masked paths. This requires the ProcMountType feature flag to be enabled. Note that this field cannot be set when spec.os.name is windows.
-- `read_only_root_filesystem` (Boolean) Whether this container has a read-only root filesystem. Default is false. Note that this field cannot be set when spec.os.name is windows.
-- `run_as_group` (Number) The GID to run the entrypoint of the container process. Uses runtime default if unset. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence. Note that this field cannot be set when spec.os.name is windows.
-- `run_as_non_root` (Boolean) Indicates that the container must run as a non-root user. If true, the Kubelet will validate the image at runtime to ensure that it does not run as UID 0 (root) and fail to start the container if it does. If unset or false, no such validation will be performed. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
-- `run_as_user` (Number) The UID to run the entrypoint of the container process. Defaults to user specified in image metadata if unspecified. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence. Note that this field cannot be set when spec.os.name is windows.
-- `se_linux_options` (Attributes) The SELinux context to be applied to the container. If unspecified, the container runtime will allocate a random SELinux context for each container. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence. Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--security_context--se_linux_options))
-- `seccomp_profile` (Attributes) The seccomp options to use by this container. If seccomp options are provided at both the pod & container level, the container options override the pod options. Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--security_context--seccomp_profile))
-- `windows_options` (Attributes) The Windows specific settings applied to all containers. If unspecified, the options from the PodSecurityContext will be used. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence. Note that this field cannot be set when spec.os.name is linux. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--security_context--windows_options))
+- `allow_privilege_escalation` (Boolean) AllowPrivilegeEscalation controls whether a process can gain moreprivileges than its parent process. This bool directly controls ifthe no_new_privs flag will be set on the container process.AllowPrivilegeEscalation is true always when the container is:1) run as Privileged2) has CAP_SYS_ADMINNote that this field cannot be set when spec.os.name is windows.
+- `capabilities` (Attributes) The capabilities to add/drop when running containers.Defaults to the default set of capabilities granted by the container runtime.Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--security_context--capabilities))
+- `privileged` (Boolean) Run container in privileged mode.Processes in privileged containers are essentially equivalent to root on the host.Defaults to false.Note that this field cannot be set when spec.os.name is windows.
+- `proc_mount` (String) procMount denotes the type of proc mount to use for the containers.The default is DefaultProcMount which uses the container runtime defaults forreadonly paths and masked paths.This requires the ProcMountType feature flag to be enabled.Note that this field cannot be set when spec.os.name is windows.
+- `read_only_root_filesystem` (Boolean) Whether this container has a read-only root filesystem.Default is false.Note that this field cannot be set when spec.os.name is windows.
+- `run_as_group` (Number) The GID to run the entrypoint of the container process.Uses runtime default if unset.May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.Note that this field cannot be set when spec.os.name is windows.
+- `run_as_non_root` (Boolean) Indicates that the container must run as a non-root user.If true, the Kubelet will validate the image at runtime to ensure that itdoes not run as UID 0 (root) and fail to start the container if it does.If unset or false, no such validation will be performed.May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.
+- `run_as_user` (Number) The UID to run the entrypoint of the container process.Defaults to user specified in image metadata if unspecified.May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.Note that this field cannot be set when spec.os.name is windows.
+- `se_linux_options` (Attributes) The SELinux context to be applied to the container.If unspecified, the container runtime will allocate a random SELinux context for eachcontainer. May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--security_context--se_linux_options))
+- `seccomp_profile` (Attributes) The seccomp options to use by this container. If seccomp options areprovided at both the pod & container level, the container optionsoverride the pod options.Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--security_context--seccomp_profile))
+- `windows_options` (Attributes) The Windows specific settings applied to all containers.If unspecified, the options from the PodSecurityContext will be used.If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.Note that this field cannot be set when spec.os.name is linux. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--security_context--windows_options))
### Nested Schema for `spec.integration.template.spec.containers.security_context.capabilities`
@@ -653,11 +653,11 @@ Optional:
Required:
-- `type` (String) type indicates which kind of seccomp profile will be applied. Valid options are: Localhost - a profile defined in a file on the node should be used. RuntimeDefault - the container runtime default profile should be used. Unconfined - no profile should be applied.
+- `type` (String) type indicates which kind of seccomp profile will be applied.Valid options are:Localhost - a profile defined in a file on the node should be used.RuntimeDefault - the container runtime default profile should be used.Unconfined - no profile should be applied.
Optional:
-- `localhost_profile` (String) localhostProfile indicates a profile defined in a file on the node should be used. The profile must be preconfigured on the node to work. Must be a descending path, relative to the kubelet's configured seccomp profile location. Must be set if type is 'Localhost'. Must NOT be set for any other type.
+- `localhost_profile` (String) localhostProfile indicates a profile defined in a file on the node should be used.The profile must be preconfigured on the node to work.Must be a descending path, relative to the kubelet's configured seccomp profile location.Must be set if type is 'Localhost'. Must NOT be set for any other type.
@@ -665,10 +665,10 @@ Optional:
Optional:
-- `gmsa_credential_spec` (String) GMSACredentialSpec is where the GMSA admission webhook (https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of the GMSA credential spec named by the GMSACredentialSpecName field.
+- `gmsa_credential_spec` (String) GMSACredentialSpec is where the GMSA admission webhook(https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of theGMSA credential spec named by the GMSACredentialSpecName field.
- `gmsa_credential_spec_name` (String) GMSACredentialSpecName is the name of the GMSA credential spec to use.
-- `host_process` (Boolean) HostProcess determines if a container should be run as a 'Host Process' container. All of a Pod's containers must have the same effective HostProcess value (it is not allowed to have a mix of HostProcess containers and non-HostProcess containers). In addition, if HostProcess is true then HostNetwork must also be set to true.
-- `run_as_user_name` (String) The UserName in Windows to run the entrypoint of the container process. Defaults to the user specified in image metadata if unspecified. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
+- `host_process` (Boolean) HostProcess determines if a container should be run as a 'Host Process' container.All of a Pod's containers must have the same effective HostProcess value(it is not allowed to have a mix of HostProcess containers and non-HostProcess containers).In addition, if HostProcess is true then HostNetwork must also be set to true.
+- `run_as_user_name` (String) The UserName in Windows to run the entrypoint of the container process.Defaults to the user specified in image metadata if unspecified.May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.
@@ -678,22 +678,22 @@ Optional:
Optional:
- `exec` (Attributes) Exec specifies the action to take. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--startup_probe--exec))
-- `failure_threshold` (Number) Minimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1.
+- `failure_threshold` (Number) Minimum consecutive failures for the probe to be considered failed after having succeeded.Defaults to 3. Minimum value is 1.
- `grpc` (Attributes) GRPC specifies an action involving a GRPC port. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--startup_probe--grpc))
- `http_get` (Attributes) HTTPGet specifies the http request to perform. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--startup_probe--http_get))
-- `initial_delay_seconds` (Number) Number of seconds after the container has started before liveness probes are initiated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-- `period_seconds` (Number) How often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1.
-- `success_threshold` (Number) Minimum consecutive successes for the probe to be considered successful after having failed. Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
+- `initial_delay_seconds` (Number) Number of seconds after the container has started before liveness probes are initiated.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
+- `period_seconds` (Number) How often (in seconds) to perform the probe.Default to 10 seconds. Minimum value is 1.
+- `success_threshold` (Number) Minimum consecutive successes for the probe to be considered successful after having failed.Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
- `tcp_socket` (Attributes) TCPSocket specifies an action involving a TCP port. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--startup_probe--tcp_socket))
-- `termination_grace_period_seconds` (Number) Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
-- `timeout_seconds` (Number) Number of seconds after which the probe times out. Defaults to 1 second. Minimum value is 1. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
+- `termination_grace_period_seconds` (Number) Optional duration in seconds the pod needs to terminate gracefully upon probe failure.The grace period is the duration in seconds after the processes running in the pod are senta termination signal and the time when the processes are forcibly halted with a kill signal.Set this value longer than the expected cleanup time for your process.If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, thisvalue overrides the value provided by the pod spec.Value must be non-negative integer. The value zero indicates stop immediately viathe kill signal (no opportunity to shut down).This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate.Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
+- `timeout_seconds` (Number) Number of seconds after which the probe times out.Defaults to 1 second. Minimum value is 1.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
### Nested Schema for `spec.integration.template.spec.containers.startup_probe.exec`
Optional:
-- `command` (List of String) Command is the command line to execute inside the container, the working directory for the command is root ('/') in the container's filesystem. The command is simply exec'd, it is not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
+- `command` (List of String) Command is the command line to execute inside the container, the working directory for thecommand is root ('/') in the container's filesystem. The command is simply exec'd, it isnot run inside a shell, so traditional shell instructions ('|', etc) won't work. To usea shell, you need to explicitly call out to that shell.Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
@@ -705,7 +705,7 @@ Required:
Optional:
-- `service` (String) Service is the name of the service to place in the gRPC HealthCheckRequest (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md). If this is not specified, the default behavior is defined by gRPC.
+- `service` (String) Service is the name of the service to place in the gRPC HealthCheckRequest(see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).If this is not specified, the default behavior is defined by gRPC.
@@ -713,21 +713,21 @@ Optional:
Required:
-- `port` (String) Name or number of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
+- `port` (String) Name or number of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
Optional:
-- `host` (String) Host name to connect to, defaults to the pod IP. You probably want to set 'Host' in httpHeaders instead.
+- `host` (String) Host name to connect to, defaults to the pod IP. You probably want to set'Host' in httpHeaders instead.
- `http_headers` (Attributes List) Custom headers to set in the request. HTTP allows repeated headers. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--startup_probe--http_get--http_headers))
- `path` (String) Path to access on the HTTP server.
-- `scheme` (String) Scheme to use for connecting to the host. Defaults to HTTP.
+- `scheme` (String) Scheme to use for connecting to the host.Defaults to HTTP.
### Nested Schema for `spec.integration.template.spec.containers.startup_probe.http_get.http_headers`
Required:
-- `name` (String) The header field name. This will be canonicalized upon output, so case-variant names will be understood as the same header.
+- `name` (String) The header field name.This will be canonicalized upon output, so case-variant names will be understood as the same header.
- `value` (String) The header field value
@@ -737,7 +737,7 @@ Required:
Required:
-- `port` (String) Number or name of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
+- `port` (String) Number or name of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
Optional:
@@ -759,15 +759,15 @@ Required:
Required:
-- `mount_path` (String) Path within the container at which the volume should be mounted. Must not contain ':'.
+- `mount_path` (String) Path within the container at which the volume should be mounted. Mustnot contain ':'.
- `name` (String) This must match the Name of a Volume.
Optional:
-- `mount_propagation` (String) mountPropagation determines how mounts are propagated from the host to container and the other way around. When not set, MountPropagationNone is used. This field is beta in 1.10.
-- `read_only` (Boolean) Mounted read-only if true, read-write otherwise (false or unspecified). Defaults to false.
-- `sub_path` (String) Path within the volume from which the container's volume should be mounted. Defaults to '' (volume's root).
-- `sub_path_expr` (String) Expanded path within the volume from which the container's volume should be mounted. Behaves similarly to SubPath but environment variable references $(VAR_NAME) are expanded using the container's environment. Defaults to '' (volume's root). SubPathExpr and SubPath are mutually exclusive.
+- `mount_propagation` (String) mountPropagation determines how mounts are propagated from the hostto container and the other way around.When not set, MountPropagationNone is used.This field is beta in 1.10.
+- `read_only` (Boolean) Mounted read-only if true, read-write otherwise (false or unspecified).Defaults to false.
+- `sub_path` (String) Path within the volume from which the container's volume should be mounted.Defaults to '' (volume's root).
+- `sub_path_expr` (String) Expanded path within the volume from which the container's volume should be mounted.Behaves similarly to SubPath but environment variable references $(VAR_NAME) are expanded using the container's environment.Defaults to '' (volume's root).SubPathExpr and SubPath are mutually exclusive.
@@ -776,34 +776,34 @@ Optional:
Required:
-- `name` (String) Name of the ephemeral container specified as a DNS_LABEL. This name must be unique among all containers, init containers and ephemeral containers.
+- `name` (String) Name of the ephemeral container specified as a DNS_LABEL.This name must be unique among all containers, init containers and ephemeral containers.
Optional:
-- `args` (List of String) Arguments to the entrypoint. The image's CMD is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container's environment. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. '$$(VAR_NAME)' will produce the string literal '$(VAR_NAME)'. Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
-- `command` (List of String) Entrypoint array. Not executed within a shell. The image's ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container's environment. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. '$$(VAR_NAME)' will produce the string literal '$(VAR_NAME)'. Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
-- `env` (Attributes List) List of environment variables to set in the container. Cannot be updated. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--env))
-- `env_from` (Attributes List) List of sources to populate environment variables in the container. The keys defined within a source must be a C_IDENTIFIER. All invalid keys will be reported as an event when the container is starting. When a key exists in multiple sources, the value associated with the last source will take precedence. Values defined by an Env with a duplicate key will take precedence. Cannot be updated. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--env_from))
-- `image` (String) Container image name. More info: https://kubernetes.io/docs/concepts/containers/images
-- `image_pull_policy` (String) Image pull policy. One of Always, Never, IfNotPresent. Defaults to Always if :latest tag is specified, or IfNotPresent otherwise. Cannot be updated. More info: https://kubernetes.io/docs/concepts/containers/images#updating-images
+- `args` (List of String) Arguments to the entrypoint.The image's CMD is used if this is not provided.Variable references $(VAR_NAME) are expanded using the container's environment. If a variablecannot be resolved, the reference in the input string will be unchanged. Double $$ are reducedto a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. '$$(VAR_NAME)' willproduce the string literal '$(VAR_NAME)'. Escaped references will never be expanded, regardlessof whether the variable exists or not. Cannot be updated.More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
+- `command` (List of String) Entrypoint array. Not executed within a shell.The image's ENTRYPOINT is used if this is not provided.Variable references $(VAR_NAME) are expanded using the container's environment. If a variablecannot be resolved, the reference in the input string will be unchanged. Double $$ are reducedto a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. '$$(VAR_NAME)' willproduce the string literal '$(VAR_NAME)'. Escaped references will never be expanded, regardlessof whether the variable exists or not. Cannot be updated.More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
+- `env` (Attributes List) List of environment variables to set in the container.Cannot be updated. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--env))
+- `env_from` (Attributes List) List of sources to populate environment variables in the container.The keys defined within a source must be a C_IDENTIFIER. All invalid keyswill be reported as an event when the container is starting. When a key exists in multiplesources, the value associated with the last source will take precedence.Values defined by an Env with a duplicate key will take precedence.Cannot be updated. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--env_from))
+- `image` (String) Container image name.More info: https://kubernetes.io/docs/concepts/containers/images
+- `image_pull_policy` (String) Image pull policy.One of Always, Never, IfNotPresent.Defaults to Always if :latest tag is specified, or IfNotPresent otherwise.Cannot be updated.More info: https://kubernetes.io/docs/concepts/containers/images#updating-images
- `lifecycle` (Attributes) Lifecycle is not allowed for ephemeral containers. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--lifecycle))
- `liveness_probe` (Attributes) Probes are not allowed for ephemeral containers. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--liveness_probe))
- `ports` (Attributes List) Ports are not allowed for ephemeral containers. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--ports))
- `readiness_probe` (Attributes) Probes are not allowed for ephemeral containers. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--readiness_probe))
- `resize_policy` (Attributes List) Resources resize policy for the container. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--resize_policy))
-- `resources` (Attributes) Resources are not allowed for ephemeral containers. Ephemeral containers use spare resources already allocated to the pod. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--resources))
-- `restart_policy` (String) Restart policy for the container to manage the restart behavior of each container within a pod. This may only be set for init containers. You cannot set this field on ephemeral containers.
-- `security_context` (Attributes) Optional: SecurityContext defines the security options the ephemeral container should be run with. If set, the fields of SecurityContext override the equivalent fields of PodSecurityContext. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--security_context))
+- `resources` (Attributes) Resources are not allowed for ephemeral containers. Ephemeral containers use spare resourcesalready allocated to the pod. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--resources))
+- `restart_policy` (String) Restart policy for the container to manage the restart behavior of eachcontainer within a pod.This may only be set for init containers. You cannot set this field onephemeral containers.
+- `security_context` (Attributes) Optional: SecurityContext defines the security options the ephemeral container should be run with.If set, the fields of SecurityContext override the equivalent fields of PodSecurityContext. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--security_context))
- `startup_probe` (Attributes) Probes are not allowed for ephemeral containers. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--startup_probe))
-- `stdin` (Boolean) Whether this container should allocate a buffer for stdin in the container runtime. If this is not set, reads from stdin in the container will always result in EOF. Default is false.
-- `stdin_once` (Boolean) Whether the container runtime should close the stdin channel after it has been opened by a single attach. When stdin is true the stdin stream will remain open across multiple attach sessions. If stdinOnce is set to true, stdin is opened on container start, is empty until the first client attaches to stdin, and then remains open and accepts data until the client disconnects, at which time stdin is closed and remains closed until the container is restarted. If this flag is false, a container processes that reads from stdin will never receive an EOF. Default is false
-- `target_container_name` (String) If set, the name of the container from PodSpec that this ephemeral container targets. The ephemeral container will be run in the namespaces (IPC, PID, etc) of this container. If not set then the ephemeral container uses the namespaces configured in the Pod spec. The container runtime must implement support for this feature. If the runtime does not support namespace targeting then the result of setting this field is undefined.
-- `termination_message_path` (String) Optional: Path at which the file to which the container's termination message will be written is mounted into the container's filesystem. Message written is intended to be brief final status, such as an assertion failure message. Will be truncated by the node if greater than 4096 bytes. The total message length across all containers will be limited to 12kb. Defaults to /dev/termination-log. Cannot be updated.
-- `termination_message_policy` (String) Indicate how the termination message should be populated. File will use the contents of terminationMessagePath to populate the container status message on both success and failure. FallbackToLogsOnError will use the last chunk of container log output if the termination message file is empty and the container exited with an error. The log output is limited to 2048 bytes or 80 lines, whichever is smaller. Defaults to File. Cannot be updated.
-- `tty` (Boolean) Whether this container should allocate a TTY for itself, also requires 'stdin' to be true. Default is false.
+- `stdin` (Boolean) Whether this container should allocate a buffer for stdin in the container runtime. If thisis not set, reads from stdin in the container will always result in EOF.Default is false.
+- `stdin_once` (Boolean) Whether the container runtime should close the stdin channel after it has been opened bya single attach. When stdin is true the stdin stream will remain open across multiple attachsessions. If stdinOnce is set to true, stdin is opened on container start, is empty until thefirst client attaches to stdin, and then remains open and accepts data until the client disconnects,at which time stdin is closed and remains closed until the container is restarted. If thisflag is false, a container processes that reads from stdin will never receive an EOF.Default is false
+- `target_container_name` (String) If set, the name of the container from PodSpec that this ephemeral container targets.The ephemeral container will be run in the namespaces (IPC, PID, etc) of this container.If not set then the ephemeral container uses the namespaces configured in the Pod spec.The container runtime must implement support for this feature. If the runtime does notsupport namespace targeting then the result of setting this field is undefined.
+- `termination_message_path` (String) Optional: Path at which the file to which the container's termination messagewill be written is mounted into the container's filesystem.Message written is intended to be brief final status, such as an assertion failure message.Will be truncated by the node if greater than 4096 bytes. The total message length acrossall containers will be limited to 12kb.Defaults to /dev/termination-log.Cannot be updated.
+- `termination_message_policy` (String) Indicate how the termination message should be populated. File will use the contents ofterminationMessagePath to populate the container status message on both success and failure.FallbackToLogsOnError will use the last chunk of container log output if the terminationmessage file is empty and the container exited with an error.The log output is limited to 2048 bytes or 80 lines, whichever is smaller.Defaults to File.Cannot be updated.
+- `tty` (Boolean) Whether this container should allocate a TTY for itself, also requires 'stdin' to be true.Default is false.
- `volume_devices` (Attributes List) volumeDevices is the list of block devices to be used by the container. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--volume_devices))
-- `volume_mounts` (Attributes List) Pod volumes to mount into the container's filesystem. Subpath mounts are not allowed for ephemeral containers. Cannot be updated. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--volume_mounts))
-- `working_dir` (String) Container's working directory. If not specified, the container runtime's default will be used, which might be configured in the container image. Cannot be updated.
+- `volume_mounts` (Attributes List) Pod volumes to mount into the container's filesystem. Subpath mounts are not allowed for ephemeral containers.Cannot be updated. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--volume_mounts))
+- `working_dir` (String) Container's working directory.If not specified, the container runtime's default will be used, whichmight be configured in the container image.Cannot be updated.
### Nested Schema for `spec.integration.template.spec.ephemeral_containers.env`
@@ -814,7 +814,7 @@ Required:
Optional:
-- `value` (String) Variable references $(VAR_NAME) are expanded using the previously defined environment variables in the container and any service environment variables. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. '$$(VAR_NAME)' will produce the string literal '$(VAR_NAME)'. Escaped references will never be expanded, regardless of whether the variable exists or not. Defaults to ''.
+- `value` (String) Variable references $(VAR_NAME) are expandedusing the previously defined environment variables in the container andany service environment variables. If a variable cannot be resolved,the reference in the input string will be unchanged. Double $$ are reducedto a single $, which allows for escaping the $(VAR_NAME) syntax: i.e.'$$(VAR_NAME)' will produce the string literal '$(VAR_NAME)'.Escaped references will never be expanded, regardless of whether the variableexists or not.Defaults to ''.
- `value_from` (Attributes) Source for the environment variable's value. Cannot be used if value is not empty. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--env--value_from))
@@ -823,8 +823,8 @@ Optional:
Optional:
- `config_map_key_ref` (Attributes) Selects a key of a ConfigMap. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--env--value_from--config_map_key_ref))
-- `field_ref` (Attributes) Selects a field of the pod: supports metadata.name, metadata.namespace, 'metadata.labels['']', 'metadata.annotations['']', spec.nodeName, spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--env--value_from--field_ref))
-- `resource_field_ref` (Attributes) Selects a resource of the container: only resources limits and requests (limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu, requests.memory and requests.ephemeral-storage) are currently supported. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--env--value_from--resource_field_ref))
+- `field_ref` (Attributes) Selects a field of the pod: supports metadata.name, metadata.namespace, 'metadata.labels['']', 'metadata.annotations['']',spec.nodeName, spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--env--value_from--field_ref))
+- `resource_field_ref` (Attributes) Selects a resource of the container: only resources limits and requests(limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu, requests.memory and requests.ephemeral-storage) are currently supported. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--env--value_from--resource_field_ref))
- `secret_key_ref` (Attributes) Selects a key of a secret in the pod's namespace (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--env--value_from--secret_key_ref))
@@ -836,7 +836,7 @@ Required:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
@@ -874,7 +874,7 @@ Required:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
- `optional` (Boolean) Specify whether the Secret or its key must be defined
@@ -894,7 +894,7 @@ Optional:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
- `optional` (Boolean) Specify whether the ConfigMap must be defined
@@ -903,7 +903,7 @@ Optional:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
- `optional` (Boolean) Specify whether the Secret must be defined
@@ -913,8 +913,8 @@ Optional:
Optional:
-- `post_start` (Attributes) PostStart is called immediately after a container is created. If the handler fails, the container is terminated and restarted according to its restart policy. Other management of the container blocks until the hook completes. More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--lifecycle--post_start))
-- `pre_stop` (Attributes) PreStop is called immediately before a container is terminated due to an API request or management event such as liveness/startup probe failure, preemption, resource contention, etc. The handler is not called if the container crashes or exits. The Pod's termination grace period countdown begins before the PreStop hook is executed. Regardless of the outcome of the handler, the container will eventually terminate within the Pod's termination grace period (unless delayed by finalizers). Other management of the container blocks until the hook completes or until the termination grace period is reached. More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--lifecycle--pre_stop))
+- `post_start` (Attributes) PostStart is called immediately after a container is created. If the handler fails,the container is terminated and restarted according to its restart policy.Other management of the container blocks until the hook completes.More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--lifecycle--post_start))
+- `pre_stop` (Attributes) PreStop is called immediately before a container is terminated due to anAPI request or management event such as liveness/startup probe failure,preemption, resource contention, etc. The handler is not called if thecontainer crashes or exits. The Pod's termination grace period countdown begins before thePreStop hook is executed. Regardless of the outcome of the handler, thecontainer will eventually terminate within the Pod's termination graceperiod (unless delayed by finalizers). Other management of the container blocks until the hook completesor until the termination grace period is reached.More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--lifecycle--pre_stop))
### Nested Schema for `spec.integration.template.spec.ephemeral_containers.lifecycle.post_start`
@@ -924,14 +924,14 @@ Optional:
- `exec` (Attributes) Exec specifies the action to take. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--lifecycle--post_start--exec))
- `http_get` (Attributes) HTTPGet specifies the http request to perform. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--lifecycle--post_start--http_get))
- `sleep` (Attributes) Sleep represents the duration that the container should sleep before being terminated. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--lifecycle--post_start--sleep))
-- `tcp_socket` (Attributes) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and kept for the backward compatibility. There are no validation of this field and lifecycle hooks will fail in runtime when tcp handler is specified. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--lifecycle--post_start--tcp_socket))
+- `tcp_socket` (Attributes) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and keptfor the backward compatibility. There are no validation of this field andlifecycle hooks will fail in runtime when tcp handler is specified. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--lifecycle--post_start--tcp_socket))
### Nested Schema for `spec.integration.template.spec.ephemeral_containers.lifecycle.post_start.exec`
Optional:
-- `command` (List of String) Command is the command line to execute inside the container, the working directory for the command is root ('/') in the container's filesystem. The command is simply exec'd, it is not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
+- `command` (List of String) Command is the command line to execute inside the container, the working directory for thecommand is root ('/') in the container's filesystem. The command is simply exec'd, it isnot run inside a shell, so traditional shell instructions ('|', etc) won't work. To usea shell, you need to explicitly call out to that shell.Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
@@ -939,21 +939,21 @@ Optional:
Required:
-- `port` (String) Name or number of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
+- `port` (String) Name or number of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
Optional:
-- `host` (String) Host name to connect to, defaults to the pod IP. You probably want to set 'Host' in httpHeaders instead.
+- `host` (String) Host name to connect to, defaults to the pod IP. You probably want to set'Host' in httpHeaders instead.
- `http_headers` (Attributes List) Custom headers to set in the request. HTTP allows repeated headers. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--lifecycle--post_start--http_get--http_headers))
- `path` (String) Path to access on the HTTP server.
-- `scheme` (String) Scheme to use for connecting to the host. Defaults to HTTP.
+- `scheme` (String) Scheme to use for connecting to the host.Defaults to HTTP.
### Nested Schema for `spec.integration.template.spec.ephemeral_containers.lifecycle.post_start.http_get.http_headers`
Required:
-- `name` (String) The header field name. This will be canonicalized upon output, so case-variant names will be understood as the same header.
+- `name` (String) The header field name.This will be canonicalized upon output, so case-variant names will be understood as the same header.
- `value` (String) The header field value
@@ -971,7 +971,7 @@ Required:
Required:
-- `port` (String) Number or name of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
+- `port` (String) Number or name of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
Optional:
@@ -987,14 +987,14 @@ Optional:
- `exec` (Attributes) Exec specifies the action to take. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--lifecycle--pre_stop--exec))
- `http_get` (Attributes) HTTPGet specifies the http request to perform. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--lifecycle--pre_stop--http_get))
- `sleep` (Attributes) Sleep represents the duration that the container should sleep before being terminated. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--lifecycle--pre_stop--sleep))
-- `tcp_socket` (Attributes) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and kept for the backward compatibility. There are no validation of this field and lifecycle hooks will fail in runtime when tcp handler is specified. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--lifecycle--pre_stop--tcp_socket))
+- `tcp_socket` (Attributes) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and keptfor the backward compatibility. There are no validation of this field andlifecycle hooks will fail in runtime when tcp handler is specified. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--lifecycle--pre_stop--tcp_socket))
### Nested Schema for `spec.integration.template.spec.ephemeral_containers.lifecycle.pre_stop.exec`
Optional:
-- `command` (List of String) Command is the command line to execute inside the container, the working directory for the command is root ('/') in the container's filesystem. The command is simply exec'd, it is not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
+- `command` (List of String) Command is the command line to execute inside the container, the working directory for thecommand is root ('/') in the container's filesystem. The command is simply exec'd, it isnot run inside a shell, so traditional shell instructions ('|', etc) won't work. To usea shell, you need to explicitly call out to that shell.Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
@@ -1002,21 +1002,21 @@ Optional:
Required:
-- `port` (String) Name or number of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
+- `port` (String) Name or number of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
Optional:
-- `host` (String) Host name to connect to, defaults to the pod IP. You probably want to set 'Host' in httpHeaders instead.
+- `host` (String) Host name to connect to, defaults to the pod IP. You probably want to set'Host' in httpHeaders instead.
- `http_headers` (Attributes List) Custom headers to set in the request. HTTP allows repeated headers. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--lifecycle--pre_stop--http_get--http_headers))
- `path` (String) Path to access on the HTTP server.
-- `scheme` (String) Scheme to use for connecting to the host. Defaults to HTTP.
+- `scheme` (String) Scheme to use for connecting to the host.Defaults to HTTP.
### Nested Schema for `spec.integration.template.spec.ephemeral_containers.lifecycle.pre_stop.http_get.http_headers`
Required:
-- `name` (String) The header field name. This will be canonicalized upon output, so case-variant names will be understood as the same header.
+- `name` (String) The header field name.This will be canonicalized upon output, so case-variant names will be understood as the same header.
- `value` (String) The header field value
@@ -1034,7 +1034,7 @@ Required:
Required:
-- `port` (String) Number or name of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
+- `port` (String) Number or name of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
Optional:
@@ -1049,22 +1049,22 @@ Optional:
Optional:
- `exec` (Attributes) Exec specifies the action to take. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--liveness_probe--exec))
-- `failure_threshold` (Number) Minimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1.
+- `failure_threshold` (Number) Minimum consecutive failures for the probe to be considered failed after having succeeded.Defaults to 3. Minimum value is 1.
- `grpc` (Attributes) GRPC specifies an action involving a GRPC port. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--liveness_probe--grpc))
- `http_get` (Attributes) HTTPGet specifies the http request to perform. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--liveness_probe--http_get))
-- `initial_delay_seconds` (Number) Number of seconds after the container has started before liveness probes are initiated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-- `period_seconds` (Number) How often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1.
-- `success_threshold` (Number) Minimum consecutive successes for the probe to be considered successful after having failed. Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
+- `initial_delay_seconds` (Number) Number of seconds after the container has started before liveness probes are initiated.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
+- `period_seconds` (Number) How often (in seconds) to perform the probe.Default to 10 seconds. Minimum value is 1.
+- `success_threshold` (Number) Minimum consecutive successes for the probe to be considered successful after having failed.Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
- `tcp_socket` (Attributes) TCPSocket specifies an action involving a TCP port. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--liveness_probe--tcp_socket))
-- `termination_grace_period_seconds` (Number) Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
-- `timeout_seconds` (Number) Number of seconds after which the probe times out. Defaults to 1 second. Minimum value is 1. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
+- `termination_grace_period_seconds` (Number) Optional duration in seconds the pod needs to terminate gracefully upon probe failure.The grace period is the duration in seconds after the processes running in the pod are senta termination signal and the time when the processes are forcibly halted with a kill signal.Set this value longer than the expected cleanup time for your process.If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, thisvalue overrides the value provided by the pod spec.Value must be non-negative integer. The value zero indicates stop immediately viathe kill signal (no opportunity to shut down).This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate.Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
+- `timeout_seconds` (Number) Number of seconds after which the probe times out.Defaults to 1 second. Minimum value is 1.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
### Nested Schema for `spec.integration.template.spec.ephemeral_containers.liveness_probe.exec`
Optional:
-- `command` (List of String) Command is the command line to execute inside the container, the working directory for the command is root ('/') in the container's filesystem. The command is simply exec'd, it is not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
+- `command` (List of String) Command is the command line to execute inside the container, the working directory for thecommand is root ('/') in the container's filesystem. The command is simply exec'd, it isnot run inside a shell, so traditional shell instructions ('|', etc) won't work. To usea shell, you need to explicitly call out to that shell.Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
@@ -1076,7 +1076,7 @@ Required:
Optional:
-- `service` (String) Service is the name of the service to place in the gRPC HealthCheckRequest (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md). If this is not specified, the default behavior is defined by gRPC.
+- `service` (String) Service is the name of the service to place in the gRPC HealthCheckRequest(see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).If this is not specified, the default behavior is defined by gRPC.
@@ -1084,21 +1084,21 @@ Optional:
Required:
-- `port` (String) Name or number of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
+- `port` (String) Name or number of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
Optional:
-- `host` (String) Host name to connect to, defaults to the pod IP. You probably want to set 'Host' in httpHeaders instead.
+- `host` (String) Host name to connect to, defaults to the pod IP. You probably want to set'Host' in httpHeaders instead.
- `http_headers` (Attributes List) Custom headers to set in the request. HTTP allows repeated headers. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--liveness_probe--http_get--http_headers))
- `path` (String) Path to access on the HTTP server.
-- `scheme` (String) Scheme to use for connecting to the host. Defaults to HTTP.
+- `scheme` (String) Scheme to use for connecting to the host.Defaults to HTTP.
### Nested Schema for `spec.integration.template.spec.ephemeral_containers.liveness_probe.http_get.http_headers`
Required:
-- `name` (String) The header field name. This will be canonicalized upon output, so case-variant names will be understood as the same header.
+- `name` (String) The header field name.This will be canonicalized upon output, so case-variant names will be understood as the same header.
- `value` (String) The header field value
@@ -1108,7 +1108,7 @@ Required:
Required:
-- `port` (String) Number or name of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
+- `port` (String) Number or name of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
Optional:
@@ -1121,14 +1121,14 @@ Optional:
Required:
-- `container_port` (Number) Number of port to expose on the pod's IP address. This must be a valid port number, 0 < x < 65536.
+- `container_port` (Number) Number of port to expose on the pod's IP address.This must be a valid port number, 0 < x < 65536.
Optional:
- `host_ip` (String) What host IP to bind the external port to.
-- `host_port` (Number) Number of port to expose on the host. If specified, this must be a valid port number, 0 < x < 65536. If HostNetwork is specified, this must match ContainerPort. Most containers do not need this.
-- `name` (String) If specified, this must be an IANA_SVC_NAME and unique within the pod. Each named port in a pod must have a unique name. Name for the port that can be referred to by services.
-- `protocol` (String) Protocol for port. Must be UDP, TCP, or SCTP. Defaults to 'TCP'.
+- `host_port` (Number) Number of port to expose on the host.If specified, this must be a valid port number, 0 < x < 65536.If HostNetwork is specified, this must match ContainerPort.Most containers do not need this.
+- `name` (String) If specified, this must be an IANA_SVC_NAME and unique within the pod. Eachnamed port in a pod must have a unique name. Name for the port that can bereferred to by services.
+- `protocol` (String) Protocol for port. Must be UDP, TCP, or SCTP.Defaults to 'TCP'.
@@ -1137,22 +1137,22 @@ Optional:
Optional:
- `exec` (Attributes) Exec specifies the action to take. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--readiness_probe--exec))
-- `failure_threshold` (Number) Minimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1.
+- `failure_threshold` (Number) Minimum consecutive failures for the probe to be considered failed after having succeeded.Defaults to 3. Minimum value is 1.
- `grpc` (Attributes) GRPC specifies an action involving a GRPC port. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--readiness_probe--grpc))
- `http_get` (Attributes) HTTPGet specifies the http request to perform. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--readiness_probe--http_get))
-- `initial_delay_seconds` (Number) Number of seconds after the container has started before liveness probes are initiated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-- `period_seconds` (Number) How often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1.
-- `success_threshold` (Number) Minimum consecutive successes for the probe to be considered successful after having failed. Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
+- `initial_delay_seconds` (Number) Number of seconds after the container has started before liveness probes are initiated.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
+- `period_seconds` (Number) How often (in seconds) to perform the probe.Default to 10 seconds. Minimum value is 1.
+- `success_threshold` (Number) Minimum consecutive successes for the probe to be considered successful after having failed.Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
- `tcp_socket` (Attributes) TCPSocket specifies an action involving a TCP port. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--readiness_probe--tcp_socket))
-- `termination_grace_period_seconds` (Number) Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
-- `timeout_seconds` (Number) Number of seconds after which the probe times out. Defaults to 1 second. Minimum value is 1. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
+- `termination_grace_period_seconds` (Number) Optional duration in seconds the pod needs to terminate gracefully upon probe failure.The grace period is the duration in seconds after the processes running in the pod are senta termination signal and the time when the processes are forcibly halted with a kill signal.Set this value longer than the expected cleanup time for your process.If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, thisvalue overrides the value provided by the pod spec.Value must be non-negative integer. The value zero indicates stop immediately viathe kill signal (no opportunity to shut down).This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate.Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
+- `timeout_seconds` (Number) Number of seconds after which the probe times out.Defaults to 1 second. Minimum value is 1.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
### Nested Schema for `spec.integration.template.spec.ephemeral_containers.readiness_probe.exec`
Optional:
-- `command` (List of String) Command is the command line to execute inside the container, the working directory for the command is root ('/') in the container's filesystem. The command is simply exec'd, it is not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
+- `command` (List of String) Command is the command line to execute inside the container, the working directory for thecommand is root ('/') in the container's filesystem. The command is simply exec'd, it isnot run inside a shell, so traditional shell instructions ('|', etc) won't work. To usea shell, you need to explicitly call out to that shell.Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
@@ -1164,7 +1164,7 @@ Required:
Optional:
-- `service` (String) Service is the name of the service to place in the gRPC HealthCheckRequest (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md). If this is not specified, the default behavior is defined by gRPC.
+- `service` (String) Service is the name of the service to place in the gRPC HealthCheckRequest(see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).If this is not specified, the default behavior is defined by gRPC.
@@ -1172,21 +1172,21 @@ Optional:
Required:
-- `port` (String) Name or number of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
+- `port` (String) Name or number of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
Optional:
-- `host` (String) Host name to connect to, defaults to the pod IP. You probably want to set 'Host' in httpHeaders instead.
+- `host` (String) Host name to connect to, defaults to the pod IP. You probably want to set'Host' in httpHeaders instead.
- `http_headers` (Attributes List) Custom headers to set in the request. HTTP allows repeated headers. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--readiness_probe--http_get--http_headers))
- `path` (String) Path to access on the HTTP server.
-- `scheme` (String) Scheme to use for connecting to the host. Defaults to HTTP.
+- `scheme` (String) Scheme to use for connecting to the host.Defaults to HTTP.
### Nested Schema for `spec.integration.template.spec.ephemeral_containers.readiness_probe.http_get.http_headers`
Required:
-- `name` (String) The header field name. This will be canonicalized upon output, so case-variant names will be understood as the same header.
+- `name` (String) The header field name.This will be canonicalized upon output, so case-variant names will be understood as the same header.
- `value` (String) The header field value
@@ -1196,7 +1196,7 @@ Required:
Required:
-- `port` (String) Number or name of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
+- `port` (String) Number or name of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
Optional:
@@ -1209,8 +1209,8 @@ Optional:
Required:
-- `resource_name` (String) Name of the resource to which this resource resize policy applies. Supported values: cpu, memory.
-- `restart_policy` (String) Restart policy to apply when specified resource is resized. If not specified, it defaults to NotRequired.
+- `resource_name` (String) Name of the resource to which this resource resize policy applies.Supported values: cpu, memory.
+- `restart_policy` (String) Restart policy to apply when specified resource is resized.If not specified, it defaults to NotRequired.
@@ -1218,16 +1218,16 @@ Required:
Optional:
-- `claims` (Attributes List) Claims lists the names of resources, defined in spec.resourceClaims, that are used by this container. This is an alpha field and requires enabling the DynamicResourceAllocation feature gate. This field is immutable. It can only be set for containers. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--resources--claims))
-- `limits` (Map of String) Limits describes the maximum amount of compute resources allowed. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-- `requests` (Map of String) Requests describes the minimum amount of compute resources required. If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, otherwise to an implementation-defined value. Requests cannot exceed Limits. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
+- `claims` (Attributes List) Claims lists the names of resources, defined in spec.resourceClaims,that are used by this container.This is an alpha field and requires enabling theDynamicResourceAllocation feature gate.This field is immutable. It can only be set for containers. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--resources--claims))
+- `limits` (Map of String) Limits describes the maximum amount of compute resources allowed.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
+- `requests` (Map of String) Requests describes the minimum amount of compute resources required.If Requests is omitted for a container, it defaults to Limits if that is explicitly specified,otherwise to an implementation-defined value. Requests cannot exceed Limits.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
### Nested Schema for `spec.integration.template.spec.ephemeral_containers.resources.claims`
Required:
-- `name` (String) Name must match the name of one entry in pod.spec.resourceClaims of the Pod where this field is used. It makes that resource available inside a container.
+- `name` (String) Name must match the name of one entry in pod.spec.resourceClaims ofthe Pod where this field is used. It makes that resource availableinside a container.
@@ -1236,17 +1236,17 @@ Required:
Optional:
-- `allow_privilege_escalation` (Boolean) AllowPrivilegeEscalation controls whether a process can gain more privileges than its parent process. This bool directly controls if the no_new_privs flag will be set on the container process. AllowPrivilegeEscalation is true always when the container is: 1) run as Privileged 2) has CAP_SYS_ADMIN Note that this field cannot be set when spec.os.name is windows.
-- `capabilities` (Attributes) The capabilities to add/drop when running containers. Defaults to the default set of capabilities granted by the container runtime. Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--security_context--capabilities))
-- `privileged` (Boolean) Run container in privileged mode. Processes in privileged containers are essentially equivalent to root on the host. Defaults to false. Note that this field cannot be set when spec.os.name is windows.
-- `proc_mount` (String) procMount denotes the type of proc mount to use for the containers. The default is DefaultProcMount which uses the container runtime defaults for readonly paths and masked paths. This requires the ProcMountType feature flag to be enabled. Note that this field cannot be set when spec.os.name is windows.
-- `read_only_root_filesystem` (Boolean) Whether this container has a read-only root filesystem. Default is false. Note that this field cannot be set when spec.os.name is windows.
-- `run_as_group` (Number) The GID to run the entrypoint of the container process. Uses runtime default if unset. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence. Note that this field cannot be set when spec.os.name is windows.
-- `run_as_non_root` (Boolean) Indicates that the container must run as a non-root user. If true, the Kubelet will validate the image at runtime to ensure that it does not run as UID 0 (root) and fail to start the container if it does. If unset or false, no such validation will be performed. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
-- `run_as_user` (Number) The UID to run the entrypoint of the container process. Defaults to user specified in image metadata if unspecified. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence. Note that this field cannot be set when spec.os.name is windows.
-- `se_linux_options` (Attributes) The SELinux context to be applied to the container. If unspecified, the container runtime will allocate a random SELinux context for each container. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence. Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--security_context--se_linux_options))
-- `seccomp_profile` (Attributes) The seccomp options to use by this container. If seccomp options are provided at both the pod & container level, the container options override the pod options. Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--security_context--seccomp_profile))
-- `windows_options` (Attributes) The Windows specific settings applied to all containers. If unspecified, the options from the PodSecurityContext will be used. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence. Note that this field cannot be set when spec.os.name is linux. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--security_context--windows_options))
+- `allow_privilege_escalation` (Boolean) AllowPrivilegeEscalation controls whether a process can gain moreprivileges than its parent process. This bool directly controls ifthe no_new_privs flag will be set on the container process.AllowPrivilegeEscalation is true always when the container is:1) run as Privileged2) has CAP_SYS_ADMINNote that this field cannot be set when spec.os.name is windows.
+- `capabilities` (Attributes) The capabilities to add/drop when running containers.Defaults to the default set of capabilities granted by the container runtime.Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--security_context--capabilities))
+- `privileged` (Boolean) Run container in privileged mode.Processes in privileged containers are essentially equivalent to root on the host.Defaults to false.Note that this field cannot be set when spec.os.name is windows.
+- `proc_mount` (String) procMount denotes the type of proc mount to use for the containers.The default is DefaultProcMount which uses the container runtime defaults forreadonly paths and masked paths.This requires the ProcMountType feature flag to be enabled.Note that this field cannot be set when spec.os.name is windows.
+- `read_only_root_filesystem` (Boolean) Whether this container has a read-only root filesystem.Default is false.Note that this field cannot be set when spec.os.name is windows.
+- `run_as_group` (Number) The GID to run the entrypoint of the container process.Uses runtime default if unset.May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.Note that this field cannot be set when spec.os.name is windows.
+- `run_as_non_root` (Boolean) Indicates that the container must run as a non-root user.If true, the Kubelet will validate the image at runtime to ensure that itdoes not run as UID 0 (root) and fail to start the container if it does.If unset or false, no such validation will be performed.May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.
+- `run_as_user` (Number) The UID to run the entrypoint of the container process.Defaults to user specified in image metadata if unspecified.May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.Note that this field cannot be set when spec.os.name is windows.
+- `se_linux_options` (Attributes) The SELinux context to be applied to the container.If unspecified, the container runtime will allocate a random SELinux context for eachcontainer. May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--security_context--se_linux_options))
+- `seccomp_profile` (Attributes) The seccomp options to use by this container. If seccomp options areprovided at both the pod & container level, the container optionsoverride the pod options.Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--security_context--seccomp_profile))
+- `windows_options` (Attributes) The Windows specific settings applied to all containers.If unspecified, the options from the PodSecurityContext will be used.If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.Note that this field cannot be set when spec.os.name is linux. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--security_context--windows_options))
### Nested Schema for `spec.integration.template.spec.ephemeral_containers.security_context.capabilities`
@@ -1273,11 +1273,11 @@ Optional:
Required:
-- `type` (String) type indicates which kind of seccomp profile will be applied. Valid options are: Localhost - a profile defined in a file on the node should be used. RuntimeDefault - the container runtime default profile should be used. Unconfined - no profile should be applied.
+- `type` (String) type indicates which kind of seccomp profile will be applied.Valid options are:Localhost - a profile defined in a file on the node should be used.RuntimeDefault - the container runtime default profile should be used.Unconfined - no profile should be applied.
Optional:
-- `localhost_profile` (String) localhostProfile indicates a profile defined in a file on the node should be used. The profile must be preconfigured on the node to work. Must be a descending path, relative to the kubelet's configured seccomp profile location. Must be set if type is 'Localhost'. Must NOT be set for any other type.
+- `localhost_profile` (String) localhostProfile indicates a profile defined in a file on the node should be used.The profile must be preconfigured on the node to work.Must be a descending path, relative to the kubelet's configured seccomp profile location.Must be set if type is 'Localhost'. Must NOT be set for any other type.
@@ -1285,10 +1285,10 @@ Optional:
Optional:
-- `gmsa_credential_spec` (String) GMSACredentialSpec is where the GMSA admission webhook (https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of the GMSA credential spec named by the GMSACredentialSpecName field.
+- `gmsa_credential_spec` (String) GMSACredentialSpec is where the GMSA admission webhook(https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of theGMSA credential spec named by the GMSACredentialSpecName field.
- `gmsa_credential_spec_name` (String) GMSACredentialSpecName is the name of the GMSA credential spec to use.
-- `host_process` (Boolean) HostProcess determines if a container should be run as a 'Host Process' container. All of a Pod's containers must have the same effective HostProcess value (it is not allowed to have a mix of HostProcess containers and non-HostProcess containers). In addition, if HostProcess is true then HostNetwork must also be set to true.
-- `run_as_user_name` (String) The UserName in Windows to run the entrypoint of the container process. Defaults to the user specified in image metadata if unspecified. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
+- `host_process` (Boolean) HostProcess determines if a container should be run as a 'Host Process' container.All of a Pod's containers must have the same effective HostProcess value(it is not allowed to have a mix of HostProcess containers and non-HostProcess containers).In addition, if HostProcess is true then HostNetwork must also be set to true.
+- `run_as_user_name` (String) The UserName in Windows to run the entrypoint of the container process.Defaults to the user specified in image metadata if unspecified.May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.
@@ -1298,22 +1298,22 @@ Optional:
Optional:
- `exec` (Attributes) Exec specifies the action to take. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--startup_probe--exec))
-- `failure_threshold` (Number) Minimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1.
+- `failure_threshold` (Number) Minimum consecutive failures for the probe to be considered failed after having succeeded.Defaults to 3. Minimum value is 1.
- `grpc` (Attributes) GRPC specifies an action involving a GRPC port. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--startup_probe--grpc))
- `http_get` (Attributes) HTTPGet specifies the http request to perform. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--startup_probe--http_get))
-- `initial_delay_seconds` (Number) Number of seconds after the container has started before liveness probes are initiated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-- `period_seconds` (Number) How often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1.
-- `success_threshold` (Number) Minimum consecutive successes for the probe to be considered successful after having failed. Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
+- `initial_delay_seconds` (Number) Number of seconds after the container has started before liveness probes are initiated.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
+- `period_seconds` (Number) How often (in seconds) to perform the probe.Default to 10 seconds. Minimum value is 1.
+- `success_threshold` (Number) Minimum consecutive successes for the probe to be considered successful after having failed.Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
- `tcp_socket` (Attributes) TCPSocket specifies an action involving a TCP port. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--startup_probe--tcp_socket))
-- `termination_grace_period_seconds` (Number) Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
-- `timeout_seconds` (Number) Number of seconds after which the probe times out. Defaults to 1 second. Minimum value is 1. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
+- `termination_grace_period_seconds` (Number) Optional duration in seconds the pod needs to terminate gracefully upon probe failure.The grace period is the duration in seconds after the processes running in the pod are senta termination signal and the time when the processes are forcibly halted with a kill signal.Set this value longer than the expected cleanup time for your process.If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, thisvalue overrides the value provided by the pod spec.Value must be non-negative integer. The value zero indicates stop immediately viathe kill signal (no opportunity to shut down).This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate.Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
+- `timeout_seconds` (Number) Number of seconds after which the probe times out.Defaults to 1 second. Minimum value is 1.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
### Nested Schema for `spec.integration.template.spec.ephemeral_containers.startup_probe.exec`
Optional:
-- `command` (List of String) Command is the command line to execute inside the container, the working directory for the command is root ('/') in the container's filesystem. The command is simply exec'd, it is not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
+- `command` (List of String) Command is the command line to execute inside the container, the working directory for thecommand is root ('/') in the container's filesystem. The command is simply exec'd, it isnot run inside a shell, so traditional shell instructions ('|', etc) won't work. To usea shell, you need to explicitly call out to that shell.Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
@@ -1325,7 +1325,7 @@ Required:
Optional:
-- `service` (String) Service is the name of the service to place in the gRPC HealthCheckRequest (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md). If this is not specified, the default behavior is defined by gRPC.
+- `service` (String) Service is the name of the service to place in the gRPC HealthCheckRequest(see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).If this is not specified, the default behavior is defined by gRPC.
@@ -1333,21 +1333,21 @@ Optional:
Required:
-- `port` (String) Name or number of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
+- `port` (String) Name or number of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
Optional:
-- `host` (String) Host name to connect to, defaults to the pod IP. You probably want to set 'Host' in httpHeaders instead.
+- `host` (String) Host name to connect to, defaults to the pod IP. You probably want to set'Host' in httpHeaders instead.
- `http_headers` (Attributes List) Custom headers to set in the request. HTTP allows repeated headers. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--startup_probe--http_get--http_headers))
- `path` (String) Path to access on the HTTP server.
-- `scheme` (String) Scheme to use for connecting to the host. Defaults to HTTP.
+- `scheme` (String) Scheme to use for connecting to the host.Defaults to HTTP.
### Nested Schema for `spec.integration.template.spec.ephemeral_containers.startup_probe.http_get.http_headers`
Required:
-- `name` (String) The header field name. This will be canonicalized upon output, so case-variant names will be understood as the same header.
+- `name` (String) The header field name.This will be canonicalized upon output, so case-variant names will be understood as the same header.
- `value` (String) The header field value
@@ -1357,7 +1357,7 @@ Required:
Required:
-- `port` (String) Number or name of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
+- `port` (String) Number or name of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
Optional:
@@ -1379,15 +1379,15 @@ Required:
Required:
-- `mount_path` (String) Path within the container at which the volume should be mounted. Must not contain ':'.
+- `mount_path` (String) Path within the container at which the volume should be mounted. Mustnot contain ':'.
- `name` (String) This must match the Name of a Volume.
Optional:
-- `mount_propagation` (String) mountPropagation determines how mounts are propagated from the host to container and the other way around. When not set, MountPropagationNone is used. This field is beta in 1.10.
-- `read_only` (Boolean) Mounted read-only if true, read-write otherwise (false or unspecified). Defaults to false.
-- `sub_path` (String) Path within the volume from which the container's volume should be mounted. Defaults to '' (volume's root).
-- `sub_path_expr` (String) Expanded path within the volume from which the container's volume should be mounted. Behaves similarly to SubPath but environment variable references $(VAR_NAME) are expanded using the container's environment. Defaults to '' (volume's root). SubPathExpr and SubPath are mutually exclusive.
+- `mount_propagation` (String) mountPropagation determines how mounts are propagated from the hostto container and the other way around.When not set, MountPropagationNone is used.This field is beta in 1.10.
+- `read_only` (Boolean) Mounted read-only if true, read-write otherwise (false or unspecified).Defaults to false.
+- `sub_path` (String) Path within the volume from which the container's volume should be mounted.Defaults to '' (volume's root).
+- `sub_path_expr` (String) Expanded path within the volume from which the container's volume should be mounted.Behaves similarly to SubPath but environment variable references $(VAR_NAME) are expanded using the container's environment.Defaults to '' (volume's root).SubPathExpr and SubPath are mutually exclusive.
@@ -1396,33 +1396,33 @@ Optional:
Required:
-- `name` (String) Name of the container specified as a DNS_LABEL. Each container in a pod must have a unique name (DNS_LABEL). Cannot be updated.
+- `name` (String) Name of the container specified as a DNS_LABEL.Each container in a pod must have a unique name (DNS_LABEL).Cannot be updated.
Optional:
-- `args` (List of String) Arguments to the entrypoint. The container image's CMD is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container's environment. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. '$$(VAR_NAME)' will produce the string literal '$(VAR_NAME)'. Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
-- `command` (List of String) Entrypoint array. Not executed within a shell. The container image's ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container's environment. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. '$$(VAR_NAME)' will produce the string literal '$(VAR_NAME)'. Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
-- `env` (Attributes List) List of environment variables to set in the container. Cannot be updated. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--env))
-- `env_from` (Attributes List) List of sources to populate environment variables in the container. The keys defined within a source must be a C_IDENTIFIER. All invalid keys will be reported as an event when the container is starting. When a key exists in multiple sources, the value associated with the last source will take precedence. Values defined by an Env with a duplicate key will take precedence. Cannot be updated. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--env_from))
-- `image` (String) Container image name. More info: https://kubernetes.io/docs/concepts/containers/images This field is optional to allow higher level config management to default or override container images in workload controllers like Deployments and StatefulSets.
-- `image_pull_policy` (String) Image pull policy. One of Always, Never, IfNotPresent. Defaults to Always if :latest tag is specified, or IfNotPresent otherwise. Cannot be updated. More info: https://kubernetes.io/docs/concepts/containers/images#updating-images
-- `lifecycle` (Attributes) Actions that the management system should take in response to container lifecycle events. Cannot be updated. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--lifecycle))
-- `liveness_probe` (Attributes) Periodic probe of container liveness. Container will be restarted if the probe fails. Cannot be updated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--liveness_probe))
-- `ports` (Attributes List) List of ports to expose from the container. Not specifying a port here DOES NOT prevent that port from being exposed. Any port which is listening on the default '0.0.0.0' address inside a container will be accessible from the network. Modifying this array with strategic merge patch may corrupt the data. For more information See https://github.com/kubernetes/kubernetes/issues/108255. Cannot be updated. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--ports))
-- `readiness_probe` (Attributes) Periodic probe of container service readiness. Container will be removed from service endpoints if the probe fails. Cannot be updated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--readiness_probe))
+- `args` (List of String) Arguments to the entrypoint.The container image's CMD is used if this is not provided.Variable references $(VAR_NAME) are expanded using the container's environment. If a variablecannot be resolved, the reference in the input string will be unchanged. Double $$ are reducedto a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. '$$(VAR_NAME)' willproduce the string literal '$(VAR_NAME)'. Escaped references will never be expanded, regardlessof whether the variable exists or not. Cannot be updated.More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
+- `command` (List of String) Entrypoint array. Not executed within a shell.The container image's ENTRYPOINT is used if this is not provided.Variable references $(VAR_NAME) are expanded using the container's environment. If a variablecannot be resolved, the reference in the input string will be unchanged. Double $$ are reducedto a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. '$$(VAR_NAME)' willproduce the string literal '$(VAR_NAME)'. Escaped references will never be expanded, regardlessof whether the variable exists or not. Cannot be updated.More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
+- `env` (Attributes List) List of environment variables to set in the container.Cannot be updated. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--env))
+- `env_from` (Attributes List) List of sources to populate environment variables in the container.The keys defined within a source must be a C_IDENTIFIER. All invalid keyswill be reported as an event when the container is starting. When a key exists in multiplesources, the value associated with the last source will take precedence.Values defined by an Env with a duplicate key will take precedence.Cannot be updated. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--env_from))
+- `image` (String) Container image name.More info: https://kubernetes.io/docs/concepts/containers/imagesThis field is optional to allow higher level config management to default or overridecontainer images in workload controllers like Deployments and StatefulSets.
+- `image_pull_policy` (String) Image pull policy.One of Always, Never, IfNotPresent.Defaults to Always if :latest tag is specified, or IfNotPresent otherwise.Cannot be updated.More info: https://kubernetes.io/docs/concepts/containers/images#updating-images
+- `lifecycle` (Attributes) Actions that the management system should take in response to container lifecycle events.Cannot be updated. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--lifecycle))
+- `liveness_probe` (Attributes) Periodic probe of container liveness.Container will be restarted if the probe fails.Cannot be updated.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--liveness_probe))
+- `ports` (Attributes List) List of ports to expose from the container. Not specifying a port hereDOES NOT prevent that port from being exposed. Any port which islistening on the default '0.0.0.0' address inside a container will beaccessible from the network.Modifying this array with strategic merge patch may corrupt the data.For more information See https://github.com/kubernetes/kubernetes/issues/108255.Cannot be updated. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--ports))
+- `readiness_probe` (Attributes) Periodic probe of container service readiness.Container will be removed from service endpoints if the probe fails.Cannot be updated.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--readiness_probe))
- `resize_policy` (Attributes List) Resources resize policy for the container. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--resize_policy))
-- `resources` (Attributes) Compute Resources required by this container. Cannot be updated. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/ (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--resources))
-- `restart_policy` (String) RestartPolicy defines the restart behavior of individual containers in a pod. This field may only be set for init containers, and the only allowed value is 'Always'. For non-init containers or when this field is not specified, the restart behavior is defined by the Pod's restart policy and the container type. Setting the RestartPolicy as 'Always' for the init container will have the following effect: this init container will be continually restarted on exit until all regular containers have terminated. Once all regular containers have completed, all init containers with restartPolicy 'Always' will be shut down. This lifecycle differs from normal init containers and is often referred to as a 'sidecar' container. Although this init container still starts in the init container sequence, it does not wait for the container to complete before proceeding to the next init container. Instead, the next init container starts immediately after this init container is started, or after any startupProbe has successfully completed.
-- `security_context` (Attributes) SecurityContext defines the security options the container should be run with. If set, the fields of SecurityContext override the equivalent fields of PodSecurityContext. More info: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--security_context))
-- `startup_probe` (Attributes) StartupProbe indicates that the Pod has successfully initialized. If specified, no other probes are executed until this completes successfully. If this probe fails, the Pod will be restarted, just as if the livenessProbe failed. This can be used to provide different probe parameters at the beginning of a Pod's lifecycle, when it might take a long time to load data or warm a cache, than during steady-state operation. This cannot be updated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--startup_probe))
-- `stdin` (Boolean) Whether this container should allocate a buffer for stdin in the container runtime. If this is not set, reads from stdin in the container will always result in EOF. Default is false.
-- `stdin_once` (Boolean) Whether the container runtime should close the stdin channel after it has been opened by a single attach. When stdin is true the stdin stream will remain open across multiple attach sessions. If stdinOnce is set to true, stdin is opened on container start, is empty until the first client attaches to stdin, and then remains open and accepts data until the client disconnects, at which time stdin is closed and remains closed until the container is restarted. If this flag is false, a container processes that reads from stdin will never receive an EOF. Default is false
-- `termination_message_path` (String) Optional: Path at which the file to which the container's termination message will be written is mounted into the container's filesystem. Message written is intended to be brief final status, such as an assertion failure message. Will be truncated by the node if greater than 4096 bytes. The total message length across all containers will be limited to 12kb. Defaults to /dev/termination-log. Cannot be updated.
-- `termination_message_policy` (String) Indicate how the termination message should be populated. File will use the contents of terminationMessagePath to populate the container status message on both success and failure. FallbackToLogsOnError will use the last chunk of container log output if the termination message file is empty and the container exited with an error. The log output is limited to 2048 bytes or 80 lines, whichever is smaller. Defaults to File. Cannot be updated.
-- `tty` (Boolean) Whether this container should allocate a TTY for itself, also requires 'stdin' to be true. Default is false.
+- `resources` (Attributes) Compute Resources required by this container.Cannot be updated.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/ (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--resources))
+- `restart_policy` (String) RestartPolicy defines the restart behavior of individual containers in a pod.This field may only be set for init containers, and the only allowed value is 'Always'.For non-init containers or when this field is not specified,the restart behavior is defined by the Pod's restart policy and the container type.Setting the RestartPolicy as 'Always' for the init container will have the following effect:this init container will be continually restarted onexit until all regular containers have terminated. Once all regularcontainers have completed, all init containers with restartPolicy 'Always'will be shut down. This lifecycle differs from normal init containers andis often referred to as a 'sidecar' container. Although this initcontainer still starts in the init container sequence, it does not waitfor the container to complete before proceeding to the next initcontainer. Instead, the next init container starts immediately after thisinit container is started, or after any startupProbe has successfullycompleted.
+- `security_context` (Attributes) SecurityContext defines the security options the container should be run with.If set, the fields of SecurityContext override the equivalent fields of PodSecurityContext.More info: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--security_context))
+- `startup_probe` (Attributes) StartupProbe indicates that the Pod has successfully initialized.If specified, no other probes are executed until this completes successfully.If this probe fails, the Pod will be restarted, just as if the livenessProbe failed.This can be used to provide different probe parameters at the beginning of a Pod's lifecycle,when it might take a long time to load data or warm a cache, than during steady-state operation.This cannot be updated.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--startup_probe))
+- `stdin` (Boolean) Whether this container should allocate a buffer for stdin in the container runtime. If thisis not set, reads from stdin in the container will always result in EOF.Default is false.
+- `stdin_once` (Boolean) Whether the container runtime should close the stdin channel after it has been opened bya single attach. When stdin is true the stdin stream will remain open across multiple attachsessions. If stdinOnce is set to true, stdin is opened on container start, is empty until thefirst client attaches to stdin, and then remains open and accepts data until the client disconnects,at which time stdin is closed and remains closed until the container is restarted. If thisflag is false, a container processes that reads from stdin will never receive an EOF.Default is false
+- `termination_message_path` (String) Optional: Path at which the file to which the container's termination messagewill be written is mounted into the container's filesystem.Message written is intended to be brief final status, such as an assertion failure message.Will be truncated by the node if greater than 4096 bytes. The total message length acrossall containers will be limited to 12kb.Defaults to /dev/termination-log.Cannot be updated.
+- `termination_message_policy` (String) Indicate how the termination message should be populated. File will use the contents ofterminationMessagePath to populate the container status message on both success and failure.FallbackToLogsOnError will use the last chunk of container log output if the terminationmessage file is empty and the container exited with an error.The log output is limited to 2048 bytes or 80 lines, whichever is smaller.Defaults to File.Cannot be updated.
+- `tty` (Boolean) Whether this container should allocate a TTY for itself, also requires 'stdin' to be true.Default is false.
- `volume_devices` (Attributes List) volumeDevices is the list of block devices to be used by the container. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--volume_devices))
-- `volume_mounts` (Attributes List) Pod volumes to mount into the container's filesystem. Cannot be updated. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--volume_mounts))
-- `working_dir` (String) Container's working directory. If not specified, the container runtime's default will be used, which might be configured in the container image. Cannot be updated.
+- `volume_mounts` (Attributes List) Pod volumes to mount into the container's filesystem.Cannot be updated. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--volume_mounts))
+- `working_dir` (String) Container's working directory.If not specified, the container runtime's default will be used, whichmight be configured in the container image.Cannot be updated.
### Nested Schema for `spec.integration.template.spec.init_containers.env`
@@ -1433,7 +1433,7 @@ Required:
Optional:
-- `value` (String) Variable references $(VAR_NAME) are expanded using the previously defined environment variables in the container and any service environment variables. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. '$$(VAR_NAME)' will produce the string literal '$(VAR_NAME)'. Escaped references will never be expanded, regardless of whether the variable exists or not. Defaults to ''.
+- `value` (String) Variable references $(VAR_NAME) are expandedusing the previously defined environment variables in the container andany service environment variables. If a variable cannot be resolved,the reference in the input string will be unchanged. Double $$ are reducedto a single $, which allows for escaping the $(VAR_NAME) syntax: i.e.'$$(VAR_NAME)' will produce the string literal '$(VAR_NAME)'.Escaped references will never be expanded, regardless of whether the variableexists or not.Defaults to ''.
- `value_from` (Attributes) Source for the environment variable's value. Cannot be used if value is not empty. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--env--value_from))
@@ -1442,8 +1442,8 @@ Optional:
Optional:
- `config_map_key_ref` (Attributes) Selects a key of a ConfigMap. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--env--value_from--config_map_key_ref))
-- `field_ref` (Attributes) Selects a field of the pod: supports metadata.name, metadata.namespace, 'metadata.labels['']', 'metadata.annotations['']', spec.nodeName, spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--env--value_from--field_ref))
-- `resource_field_ref` (Attributes) Selects a resource of the container: only resources limits and requests (limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu, requests.memory and requests.ephemeral-storage) are currently supported. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--env--value_from--resource_field_ref))
+- `field_ref` (Attributes) Selects a field of the pod: supports metadata.name, metadata.namespace, 'metadata.labels['']', 'metadata.annotations['']',spec.nodeName, spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--env--value_from--field_ref))
+- `resource_field_ref` (Attributes) Selects a resource of the container: only resources limits and requests(limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu, requests.memory and requests.ephemeral-storage) are currently supported. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--env--value_from--resource_field_ref))
- `secret_key_ref` (Attributes) Selects a key of a secret in the pod's namespace (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--env--value_from--secret_key_ref))
@@ -1455,7 +1455,7 @@ Required:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
@@ -1493,7 +1493,7 @@ Required:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
- `optional` (Boolean) Specify whether the Secret or its key must be defined
@@ -1513,7 +1513,7 @@ Optional:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
- `optional` (Boolean) Specify whether the ConfigMap must be defined
@@ -1522,7 +1522,7 @@ Optional:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
- `optional` (Boolean) Specify whether the Secret must be defined
@@ -1532,8 +1532,8 @@ Optional:
Optional:
-- `post_start` (Attributes) PostStart is called immediately after a container is created. If the handler fails, the container is terminated and restarted according to its restart policy. Other management of the container blocks until the hook completes. More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--lifecycle--post_start))
-- `pre_stop` (Attributes) PreStop is called immediately before a container is terminated due to an API request or management event such as liveness/startup probe failure, preemption, resource contention, etc. The handler is not called if the container crashes or exits. The Pod's termination grace period countdown begins before the PreStop hook is executed. Regardless of the outcome of the handler, the container will eventually terminate within the Pod's termination grace period (unless delayed by finalizers). Other management of the container blocks until the hook completes or until the termination grace period is reached. More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--lifecycle--pre_stop))
+- `post_start` (Attributes) PostStart is called immediately after a container is created. If the handler fails,the container is terminated and restarted according to its restart policy.Other management of the container blocks until the hook completes.More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--lifecycle--post_start))
+- `pre_stop` (Attributes) PreStop is called immediately before a container is terminated due to anAPI request or management event such as liveness/startup probe failure,preemption, resource contention, etc. The handler is not called if thecontainer crashes or exits. The Pod's termination grace period countdown begins before thePreStop hook is executed. Regardless of the outcome of the handler, thecontainer will eventually terminate within the Pod's termination graceperiod (unless delayed by finalizers). Other management of the container blocks until the hook completesor until the termination grace period is reached.More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--lifecycle--pre_stop))
### Nested Schema for `spec.integration.template.spec.init_containers.lifecycle.post_start`
@@ -1543,14 +1543,14 @@ Optional:
- `exec` (Attributes) Exec specifies the action to take. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--lifecycle--post_start--exec))
- `http_get` (Attributes) HTTPGet specifies the http request to perform. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--lifecycle--post_start--http_get))
- `sleep` (Attributes) Sleep represents the duration that the container should sleep before being terminated. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--lifecycle--post_start--sleep))
-- `tcp_socket` (Attributes) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and kept for the backward compatibility. There are no validation of this field and lifecycle hooks will fail in runtime when tcp handler is specified. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--lifecycle--post_start--tcp_socket))
+- `tcp_socket` (Attributes) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and keptfor the backward compatibility. There are no validation of this field andlifecycle hooks will fail in runtime when tcp handler is specified. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--lifecycle--post_start--tcp_socket))
### Nested Schema for `spec.integration.template.spec.init_containers.lifecycle.post_start.exec`
Optional:
-- `command` (List of String) Command is the command line to execute inside the container, the working directory for the command is root ('/') in the container's filesystem. The command is simply exec'd, it is not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
+- `command` (List of String) Command is the command line to execute inside the container, the working directory for thecommand is root ('/') in the container's filesystem. The command is simply exec'd, it isnot run inside a shell, so traditional shell instructions ('|', etc) won't work. To usea shell, you need to explicitly call out to that shell.Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
@@ -1558,21 +1558,21 @@ Optional:
Required:
-- `port` (String) Name or number of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
+- `port` (String) Name or number of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
Optional:
-- `host` (String) Host name to connect to, defaults to the pod IP. You probably want to set 'Host' in httpHeaders instead.
+- `host` (String) Host name to connect to, defaults to the pod IP. You probably want to set'Host' in httpHeaders instead.
- `http_headers` (Attributes List) Custom headers to set in the request. HTTP allows repeated headers. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--lifecycle--post_start--http_get--http_headers))
- `path` (String) Path to access on the HTTP server.
-- `scheme` (String) Scheme to use for connecting to the host. Defaults to HTTP.
+- `scheme` (String) Scheme to use for connecting to the host.Defaults to HTTP.
### Nested Schema for `spec.integration.template.spec.init_containers.lifecycle.post_start.http_get.http_headers`
Required:
-- `name` (String) The header field name. This will be canonicalized upon output, so case-variant names will be understood as the same header.
+- `name` (String) The header field name.This will be canonicalized upon output, so case-variant names will be understood as the same header.
- `value` (String) The header field value
@@ -1590,7 +1590,7 @@ Required:
Required:
-- `port` (String) Number or name of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
+- `port` (String) Number or name of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
Optional:
@@ -1606,14 +1606,14 @@ Optional:
- `exec` (Attributes) Exec specifies the action to take. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--lifecycle--pre_stop--exec))
- `http_get` (Attributes) HTTPGet specifies the http request to perform. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--lifecycle--pre_stop--http_get))
- `sleep` (Attributes) Sleep represents the duration that the container should sleep before being terminated. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--lifecycle--pre_stop--sleep))
-- `tcp_socket` (Attributes) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and kept for the backward compatibility. There are no validation of this field and lifecycle hooks will fail in runtime when tcp handler is specified. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--lifecycle--pre_stop--tcp_socket))
+- `tcp_socket` (Attributes) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and keptfor the backward compatibility. There are no validation of this field andlifecycle hooks will fail in runtime when tcp handler is specified. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--lifecycle--pre_stop--tcp_socket))
### Nested Schema for `spec.integration.template.spec.init_containers.lifecycle.pre_stop.exec`
Optional:
-- `command` (List of String) Command is the command line to execute inside the container, the working directory for the command is root ('/') in the container's filesystem. The command is simply exec'd, it is not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
+- `command` (List of String) Command is the command line to execute inside the container, the working directory for thecommand is root ('/') in the container's filesystem. The command is simply exec'd, it isnot run inside a shell, so traditional shell instructions ('|', etc) won't work. To usea shell, you need to explicitly call out to that shell.Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
@@ -1621,21 +1621,21 @@ Optional:
Required:
-- `port` (String) Name or number of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
+- `port` (String) Name or number of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
Optional:
-- `host` (String) Host name to connect to, defaults to the pod IP. You probably want to set 'Host' in httpHeaders instead.
+- `host` (String) Host name to connect to, defaults to the pod IP. You probably want to set'Host' in httpHeaders instead.
- `http_headers` (Attributes List) Custom headers to set in the request. HTTP allows repeated headers. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--lifecycle--pre_stop--http_get--http_headers))
- `path` (String) Path to access on the HTTP server.
-- `scheme` (String) Scheme to use for connecting to the host. Defaults to HTTP.
+- `scheme` (String) Scheme to use for connecting to the host.Defaults to HTTP.
### Nested Schema for `spec.integration.template.spec.init_containers.lifecycle.pre_stop.http_get.http_headers`
Required:
-- `name` (String) The header field name. This will be canonicalized upon output, so case-variant names will be understood as the same header.
+- `name` (String) The header field name.This will be canonicalized upon output, so case-variant names will be understood as the same header.
- `value` (String) The header field value
@@ -1653,7 +1653,7 @@ Required:
Required:
-- `port` (String) Number or name of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
+- `port` (String) Number or name of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
Optional:
@@ -1668,22 +1668,22 @@ Optional:
Optional:
- `exec` (Attributes) Exec specifies the action to take. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--liveness_probe--exec))
-- `failure_threshold` (Number) Minimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1.
+- `failure_threshold` (Number) Minimum consecutive failures for the probe to be considered failed after having succeeded.Defaults to 3. Minimum value is 1.
- `grpc` (Attributes) GRPC specifies an action involving a GRPC port. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--liveness_probe--grpc))
- `http_get` (Attributes) HTTPGet specifies the http request to perform. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--liveness_probe--http_get))
-- `initial_delay_seconds` (Number) Number of seconds after the container has started before liveness probes are initiated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-- `period_seconds` (Number) How often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1.
-- `success_threshold` (Number) Minimum consecutive successes for the probe to be considered successful after having failed. Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
+- `initial_delay_seconds` (Number) Number of seconds after the container has started before liveness probes are initiated.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
+- `period_seconds` (Number) How often (in seconds) to perform the probe.Default to 10 seconds. Minimum value is 1.
+- `success_threshold` (Number) Minimum consecutive successes for the probe to be considered successful after having failed.Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
- `tcp_socket` (Attributes) TCPSocket specifies an action involving a TCP port. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--liveness_probe--tcp_socket))
-- `termination_grace_period_seconds` (Number) Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
-- `timeout_seconds` (Number) Number of seconds after which the probe times out. Defaults to 1 second. Minimum value is 1. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
+- `termination_grace_period_seconds` (Number) Optional duration in seconds the pod needs to terminate gracefully upon probe failure.The grace period is the duration in seconds after the processes running in the pod are senta termination signal and the time when the processes are forcibly halted with a kill signal.Set this value longer than the expected cleanup time for your process.If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, thisvalue overrides the value provided by the pod spec.Value must be non-negative integer. The value zero indicates stop immediately viathe kill signal (no opportunity to shut down).This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate.Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
+- `timeout_seconds` (Number) Number of seconds after which the probe times out.Defaults to 1 second. Minimum value is 1.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
### Nested Schema for `spec.integration.template.spec.init_containers.liveness_probe.exec`
Optional:
-- `command` (List of String) Command is the command line to execute inside the container, the working directory for the command is root ('/') in the container's filesystem. The command is simply exec'd, it is not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
+- `command` (List of String) Command is the command line to execute inside the container, the working directory for thecommand is root ('/') in the container's filesystem. The command is simply exec'd, it isnot run inside a shell, so traditional shell instructions ('|', etc) won't work. To usea shell, you need to explicitly call out to that shell.Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
@@ -1695,7 +1695,7 @@ Required:
Optional:
-- `service` (String) Service is the name of the service to place in the gRPC HealthCheckRequest (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md). If this is not specified, the default behavior is defined by gRPC.
+- `service` (String) Service is the name of the service to place in the gRPC HealthCheckRequest(see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).If this is not specified, the default behavior is defined by gRPC.
@@ -1703,21 +1703,21 @@ Optional:
Required:
-- `port` (String) Name or number of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
+- `port` (String) Name or number of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
Optional:
-- `host` (String) Host name to connect to, defaults to the pod IP. You probably want to set 'Host' in httpHeaders instead.
+- `host` (String) Host name to connect to, defaults to the pod IP. You probably want to set'Host' in httpHeaders instead.
- `http_headers` (Attributes List) Custom headers to set in the request. HTTP allows repeated headers. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--liveness_probe--http_get--http_headers))
- `path` (String) Path to access on the HTTP server.
-- `scheme` (String) Scheme to use for connecting to the host. Defaults to HTTP.
+- `scheme` (String) Scheme to use for connecting to the host.Defaults to HTTP.
### Nested Schema for `spec.integration.template.spec.init_containers.liveness_probe.http_get.http_headers`
Required:
-- `name` (String) The header field name. This will be canonicalized upon output, so case-variant names will be understood as the same header.
+- `name` (String) The header field name.This will be canonicalized upon output, so case-variant names will be understood as the same header.
- `value` (String) The header field value
@@ -1727,7 +1727,7 @@ Required:
Required:
-- `port` (String) Number or name of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
+- `port` (String) Number or name of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
Optional:
@@ -1740,14 +1740,14 @@ Optional:
Required:
-- `container_port` (Number) Number of port to expose on the pod's IP address. This must be a valid port number, 0 < x < 65536.
+- `container_port` (Number) Number of port to expose on the pod's IP address.This must be a valid port number, 0 < x < 65536.
Optional:
- `host_ip` (String) What host IP to bind the external port to.
-- `host_port` (Number) Number of port to expose on the host. If specified, this must be a valid port number, 0 < x < 65536. If HostNetwork is specified, this must match ContainerPort. Most containers do not need this.
-- `name` (String) If specified, this must be an IANA_SVC_NAME and unique within the pod. Each named port in a pod must have a unique name. Name for the port that can be referred to by services.
-- `protocol` (String) Protocol for port. Must be UDP, TCP, or SCTP. Defaults to 'TCP'.
+- `host_port` (Number) Number of port to expose on the host.If specified, this must be a valid port number, 0 < x < 65536.If HostNetwork is specified, this must match ContainerPort.Most containers do not need this.
+- `name` (String) If specified, this must be an IANA_SVC_NAME and unique within the pod. Eachnamed port in a pod must have a unique name. Name for the port that can bereferred to by services.
+- `protocol` (String) Protocol for port. Must be UDP, TCP, or SCTP.Defaults to 'TCP'.
@@ -1756,22 +1756,22 @@ Optional:
Optional:
- `exec` (Attributes) Exec specifies the action to take. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--readiness_probe--exec))
-- `failure_threshold` (Number) Minimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1.
+- `failure_threshold` (Number) Minimum consecutive failures for the probe to be considered failed after having succeeded.Defaults to 3. Minimum value is 1.
- `grpc` (Attributes) GRPC specifies an action involving a GRPC port. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--readiness_probe--grpc))
- `http_get` (Attributes) HTTPGet specifies the http request to perform. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--readiness_probe--http_get))
-- `initial_delay_seconds` (Number) Number of seconds after the container has started before liveness probes are initiated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-- `period_seconds` (Number) How often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1.
-- `success_threshold` (Number) Minimum consecutive successes for the probe to be considered successful after having failed. Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
+- `initial_delay_seconds` (Number) Number of seconds after the container has started before liveness probes are initiated.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
+- `period_seconds` (Number) How often (in seconds) to perform the probe.Default to 10 seconds. Minimum value is 1.
+- `success_threshold` (Number) Minimum consecutive successes for the probe to be considered successful after having failed.Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
- `tcp_socket` (Attributes) TCPSocket specifies an action involving a TCP port. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--readiness_probe--tcp_socket))
-- `termination_grace_period_seconds` (Number) Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
-- `timeout_seconds` (Number) Number of seconds after which the probe times out. Defaults to 1 second. Minimum value is 1. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
+- `termination_grace_period_seconds` (Number) Optional duration in seconds the pod needs to terminate gracefully upon probe failure.The grace period is the duration in seconds after the processes running in the pod are senta termination signal and the time when the processes are forcibly halted with a kill signal.Set this value longer than the expected cleanup time for your process.If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, thisvalue overrides the value provided by the pod spec.Value must be non-negative integer. The value zero indicates stop immediately viathe kill signal (no opportunity to shut down).This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate.Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
+- `timeout_seconds` (Number) Number of seconds after which the probe times out.Defaults to 1 second. Minimum value is 1.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
### Nested Schema for `spec.integration.template.spec.init_containers.readiness_probe.exec`
Optional:
-- `command` (List of String) Command is the command line to execute inside the container, the working directory for the command is root ('/') in the container's filesystem. The command is simply exec'd, it is not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
+- `command` (List of String) Command is the command line to execute inside the container, the working directory for thecommand is root ('/') in the container's filesystem. The command is simply exec'd, it isnot run inside a shell, so traditional shell instructions ('|', etc) won't work. To usea shell, you need to explicitly call out to that shell.Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
@@ -1783,7 +1783,7 @@ Required:
Optional:
-- `service` (String) Service is the name of the service to place in the gRPC HealthCheckRequest (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md). If this is not specified, the default behavior is defined by gRPC.
+- `service` (String) Service is the name of the service to place in the gRPC HealthCheckRequest(see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).If this is not specified, the default behavior is defined by gRPC.
@@ -1791,21 +1791,21 @@ Optional:
Required:
-- `port` (String) Name or number of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
+- `port` (String) Name or number of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
Optional:
-- `host` (String) Host name to connect to, defaults to the pod IP. You probably want to set 'Host' in httpHeaders instead.
+- `host` (String) Host name to connect to, defaults to the pod IP. You probably want to set'Host' in httpHeaders instead.
- `http_headers` (Attributes List) Custom headers to set in the request. HTTP allows repeated headers. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--readiness_probe--http_get--http_headers))
- `path` (String) Path to access on the HTTP server.
-- `scheme` (String) Scheme to use for connecting to the host. Defaults to HTTP.
+- `scheme` (String) Scheme to use for connecting to the host.Defaults to HTTP.
### Nested Schema for `spec.integration.template.spec.init_containers.readiness_probe.http_get.http_headers`
Required:
-- `name` (String) The header field name. This will be canonicalized upon output, so case-variant names will be understood as the same header.
+- `name` (String) The header field name.This will be canonicalized upon output, so case-variant names will be understood as the same header.
- `value` (String) The header field value
@@ -1815,7 +1815,7 @@ Required:
Required:
-- `port` (String) Number or name of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
+- `port` (String) Number or name of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
Optional:
@@ -1828,8 +1828,8 @@ Optional:
Required:
-- `resource_name` (String) Name of the resource to which this resource resize policy applies. Supported values: cpu, memory.
-- `restart_policy` (String) Restart policy to apply when specified resource is resized. If not specified, it defaults to NotRequired.
+- `resource_name` (String) Name of the resource to which this resource resize policy applies.Supported values: cpu, memory.
+- `restart_policy` (String) Restart policy to apply when specified resource is resized.If not specified, it defaults to NotRequired.
@@ -1837,16 +1837,16 @@ Required:
Optional:
-- `claims` (Attributes List) Claims lists the names of resources, defined in spec.resourceClaims, that are used by this container. This is an alpha field and requires enabling the DynamicResourceAllocation feature gate. This field is immutable. It can only be set for containers. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--resources--claims))
-- `limits` (Map of String) Limits describes the maximum amount of compute resources allowed. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-- `requests` (Map of String) Requests describes the minimum amount of compute resources required. If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, otherwise to an implementation-defined value. Requests cannot exceed Limits. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
+- `claims` (Attributes List) Claims lists the names of resources, defined in spec.resourceClaims,that are used by this container.This is an alpha field and requires enabling theDynamicResourceAllocation feature gate.This field is immutable. It can only be set for containers. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--resources--claims))
+- `limits` (Map of String) Limits describes the maximum amount of compute resources allowed.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
+- `requests` (Map of String) Requests describes the minimum amount of compute resources required.If Requests is omitted for a container, it defaults to Limits if that is explicitly specified,otherwise to an implementation-defined value. Requests cannot exceed Limits.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
### Nested Schema for `spec.integration.template.spec.init_containers.resources.claims`
Required:
-- `name` (String) Name must match the name of one entry in pod.spec.resourceClaims of the Pod where this field is used. It makes that resource available inside a container.
+- `name` (String) Name must match the name of one entry in pod.spec.resourceClaims ofthe Pod where this field is used. It makes that resource availableinside a container.
@@ -1855,17 +1855,17 @@ Required:
Optional:
-- `allow_privilege_escalation` (Boolean) AllowPrivilegeEscalation controls whether a process can gain more privileges than its parent process. This bool directly controls if the no_new_privs flag will be set on the container process. AllowPrivilegeEscalation is true always when the container is: 1) run as Privileged 2) has CAP_SYS_ADMIN Note that this field cannot be set when spec.os.name is windows.
-- `capabilities` (Attributes) The capabilities to add/drop when running containers. Defaults to the default set of capabilities granted by the container runtime. Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--security_context--capabilities))
-- `privileged` (Boolean) Run container in privileged mode. Processes in privileged containers are essentially equivalent to root on the host. Defaults to false. Note that this field cannot be set when spec.os.name is windows.
-- `proc_mount` (String) procMount denotes the type of proc mount to use for the containers. The default is DefaultProcMount which uses the container runtime defaults for readonly paths and masked paths. This requires the ProcMountType feature flag to be enabled. Note that this field cannot be set when spec.os.name is windows.
-- `read_only_root_filesystem` (Boolean) Whether this container has a read-only root filesystem. Default is false. Note that this field cannot be set when spec.os.name is windows.
-- `run_as_group` (Number) The GID to run the entrypoint of the container process. Uses runtime default if unset. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence. Note that this field cannot be set when spec.os.name is windows.
-- `run_as_non_root` (Boolean) Indicates that the container must run as a non-root user. If true, the Kubelet will validate the image at runtime to ensure that it does not run as UID 0 (root) and fail to start the container if it does. If unset or false, no such validation will be performed. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
-- `run_as_user` (Number) The UID to run the entrypoint of the container process. Defaults to user specified in image metadata if unspecified. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence. Note that this field cannot be set when spec.os.name is windows.
-- `se_linux_options` (Attributes) The SELinux context to be applied to the container. If unspecified, the container runtime will allocate a random SELinux context for each container. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence. Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--security_context--se_linux_options))
-- `seccomp_profile` (Attributes) The seccomp options to use by this container. If seccomp options are provided at both the pod & container level, the container options override the pod options. Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--security_context--seccomp_profile))
-- `windows_options` (Attributes) The Windows specific settings applied to all containers. If unspecified, the options from the PodSecurityContext will be used. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence. Note that this field cannot be set when spec.os.name is linux. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--security_context--windows_options))
+- `allow_privilege_escalation` (Boolean) AllowPrivilegeEscalation controls whether a process can gain moreprivileges than its parent process. This bool directly controls ifthe no_new_privs flag will be set on the container process.AllowPrivilegeEscalation is true always when the container is:1) run as Privileged2) has CAP_SYS_ADMINNote that this field cannot be set when spec.os.name is windows.
+- `capabilities` (Attributes) The capabilities to add/drop when running containers.Defaults to the default set of capabilities granted by the container runtime.Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--security_context--capabilities))
+- `privileged` (Boolean) Run container in privileged mode.Processes in privileged containers are essentially equivalent to root on the host.Defaults to false.Note that this field cannot be set when spec.os.name is windows.
+- `proc_mount` (String) procMount denotes the type of proc mount to use for the containers.The default is DefaultProcMount which uses the container runtime defaults forreadonly paths and masked paths.This requires the ProcMountType feature flag to be enabled.Note that this field cannot be set when spec.os.name is windows.
+- `read_only_root_filesystem` (Boolean) Whether this container has a read-only root filesystem.Default is false.Note that this field cannot be set when spec.os.name is windows.
+- `run_as_group` (Number) The GID to run the entrypoint of the container process.Uses runtime default if unset.May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.Note that this field cannot be set when spec.os.name is windows.
+- `run_as_non_root` (Boolean) Indicates that the container must run as a non-root user.If true, the Kubelet will validate the image at runtime to ensure that itdoes not run as UID 0 (root) and fail to start the container if it does.If unset or false, no such validation will be performed.May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.
+- `run_as_user` (Number) The UID to run the entrypoint of the container process.Defaults to user specified in image metadata if unspecified.May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.Note that this field cannot be set when spec.os.name is windows.
+- `se_linux_options` (Attributes) The SELinux context to be applied to the container.If unspecified, the container runtime will allocate a random SELinux context for eachcontainer. May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--security_context--se_linux_options))
+- `seccomp_profile` (Attributes) The seccomp options to use by this container. If seccomp options areprovided at both the pod & container level, the container optionsoverride the pod options.Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--security_context--seccomp_profile))
+- `windows_options` (Attributes) The Windows specific settings applied to all containers.If unspecified, the options from the PodSecurityContext will be used.If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.Note that this field cannot be set when spec.os.name is linux. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--security_context--windows_options))
### Nested Schema for `spec.integration.template.spec.init_containers.security_context.capabilities`
@@ -1892,11 +1892,11 @@ Optional:
Required:
-- `type` (String) type indicates which kind of seccomp profile will be applied. Valid options are: Localhost - a profile defined in a file on the node should be used. RuntimeDefault - the container runtime default profile should be used. Unconfined - no profile should be applied.
+- `type` (String) type indicates which kind of seccomp profile will be applied.Valid options are:Localhost - a profile defined in a file on the node should be used.RuntimeDefault - the container runtime default profile should be used.Unconfined - no profile should be applied.
Optional:
-- `localhost_profile` (String) localhostProfile indicates a profile defined in a file on the node should be used. The profile must be preconfigured on the node to work. Must be a descending path, relative to the kubelet's configured seccomp profile location. Must be set if type is 'Localhost'. Must NOT be set for any other type.
+- `localhost_profile` (String) localhostProfile indicates a profile defined in a file on the node should be used.The profile must be preconfigured on the node to work.Must be a descending path, relative to the kubelet's configured seccomp profile location.Must be set if type is 'Localhost'. Must NOT be set for any other type.
@@ -1904,10 +1904,10 @@ Optional:
Optional:
-- `gmsa_credential_spec` (String) GMSACredentialSpec is where the GMSA admission webhook (https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of the GMSA credential spec named by the GMSACredentialSpecName field.
+- `gmsa_credential_spec` (String) GMSACredentialSpec is where the GMSA admission webhook(https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of theGMSA credential spec named by the GMSACredentialSpecName field.
- `gmsa_credential_spec_name` (String) GMSACredentialSpecName is the name of the GMSA credential spec to use.
-- `host_process` (Boolean) HostProcess determines if a container should be run as a 'Host Process' container. All of a Pod's containers must have the same effective HostProcess value (it is not allowed to have a mix of HostProcess containers and non-HostProcess containers). In addition, if HostProcess is true then HostNetwork must also be set to true.
-- `run_as_user_name` (String) The UserName in Windows to run the entrypoint of the container process. Defaults to the user specified in image metadata if unspecified. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
+- `host_process` (Boolean) HostProcess determines if a container should be run as a 'Host Process' container.All of a Pod's containers must have the same effective HostProcess value(it is not allowed to have a mix of HostProcess containers and non-HostProcess containers).In addition, if HostProcess is true then HostNetwork must also be set to true.
+- `run_as_user_name` (String) The UserName in Windows to run the entrypoint of the container process.Defaults to the user specified in image metadata if unspecified.May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.
@@ -1917,22 +1917,22 @@ Optional:
Optional:
- `exec` (Attributes) Exec specifies the action to take. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--startup_probe--exec))
-- `failure_threshold` (Number) Minimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1.
+- `failure_threshold` (Number) Minimum consecutive failures for the probe to be considered failed after having succeeded.Defaults to 3. Minimum value is 1.
- `grpc` (Attributes) GRPC specifies an action involving a GRPC port. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--startup_probe--grpc))
- `http_get` (Attributes) HTTPGet specifies the http request to perform. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--startup_probe--http_get))
-- `initial_delay_seconds` (Number) Number of seconds after the container has started before liveness probes are initiated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-- `period_seconds` (Number) How often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1.
-- `success_threshold` (Number) Minimum consecutive successes for the probe to be considered successful after having failed. Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
+- `initial_delay_seconds` (Number) Number of seconds after the container has started before liveness probes are initiated.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
+- `period_seconds` (Number) How often (in seconds) to perform the probe.Default to 10 seconds. Minimum value is 1.
+- `success_threshold` (Number) Minimum consecutive successes for the probe to be considered successful after having failed.Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
- `tcp_socket` (Attributes) TCPSocket specifies an action involving a TCP port. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--startup_probe--tcp_socket))
-- `termination_grace_period_seconds` (Number) Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
-- `timeout_seconds` (Number) Number of seconds after which the probe times out. Defaults to 1 second. Minimum value is 1. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
+- `termination_grace_period_seconds` (Number) Optional duration in seconds the pod needs to terminate gracefully upon probe failure.The grace period is the duration in seconds after the processes running in the pod are senta termination signal and the time when the processes are forcibly halted with a kill signal.Set this value longer than the expected cleanup time for your process.If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, thisvalue overrides the value provided by the pod spec.Value must be non-negative integer. The value zero indicates stop immediately viathe kill signal (no opportunity to shut down).This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate.Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
+- `timeout_seconds` (Number) Number of seconds after which the probe times out.Defaults to 1 second. Minimum value is 1.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
### Nested Schema for `spec.integration.template.spec.init_containers.startup_probe.exec`
Optional:
-- `command` (List of String) Command is the command line to execute inside the container, the working directory for the command is root ('/') in the container's filesystem. The command is simply exec'd, it is not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
+- `command` (List of String) Command is the command line to execute inside the container, the working directory for thecommand is root ('/') in the container's filesystem. The command is simply exec'd, it isnot run inside a shell, so traditional shell instructions ('|', etc) won't work. To usea shell, you need to explicitly call out to that shell.Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
@@ -1944,7 +1944,7 @@ Required:
Optional:
-- `service` (String) Service is the name of the service to place in the gRPC HealthCheckRequest (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md). If this is not specified, the default behavior is defined by gRPC.
+- `service` (String) Service is the name of the service to place in the gRPC HealthCheckRequest(see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).If this is not specified, the default behavior is defined by gRPC.
@@ -1952,21 +1952,21 @@ Optional:
Required:
-- `port` (String) Name or number of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
+- `port` (String) Name or number of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
Optional:
-- `host` (String) Host name to connect to, defaults to the pod IP. You probably want to set 'Host' in httpHeaders instead.
+- `host` (String) Host name to connect to, defaults to the pod IP. You probably want to set'Host' in httpHeaders instead.
- `http_headers` (Attributes List) Custom headers to set in the request. HTTP allows repeated headers. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--startup_probe--http_get--http_headers))
- `path` (String) Path to access on the HTTP server.
-- `scheme` (String) Scheme to use for connecting to the host. Defaults to HTTP.
+- `scheme` (String) Scheme to use for connecting to the host.Defaults to HTTP.
### Nested Schema for `spec.integration.template.spec.init_containers.startup_probe.http_get.http_headers`
Required:
-- `name` (String) The header field name. This will be canonicalized upon output, so case-variant names will be understood as the same header.
+- `name` (String) The header field name.This will be canonicalized upon output, so case-variant names will be understood as the same header.
- `value` (String) The header field value
@@ -1976,7 +1976,7 @@ Required:
Required:
-- `port` (String) Number or name of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
+- `port` (String) Number or name of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
Optional:
@@ -1998,15 +1998,15 @@ Required:
Required:
-- `mount_path` (String) Path within the container at which the volume should be mounted. Must not contain ':'.
+- `mount_path` (String) Path within the container at which the volume should be mounted. Mustnot contain ':'.
- `name` (String) This must match the Name of a Volume.
Optional:
-- `mount_propagation` (String) mountPropagation determines how mounts are propagated from the host to container and the other way around. When not set, MountPropagationNone is used. This field is beta in 1.10.
-- `read_only` (Boolean) Mounted read-only if true, read-write otherwise (false or unspecified). Defaults to false.
-- `sub_path` (String) Path within the volume from which the container's volume should be mounted. Defaults to '' (volume's root).
-- `sub_path_expr` (String) Expanded path within the volume from which the container's volume should be mounted. Behaves similarly to SubPath but environment variable references $(VAR_NAME) are expanded using the container's environment. Defaults to '' (volume's root). SubPathExpr and SubPath are mutually exclusive.
+- `mount_propagation` (String) mountPropagation determines how mounts are propagated from the hostto container and the other way around.When not set, MountPropagationNone is used.This field is beta in 1.10.
+- `read_only` (Boolean) Mounted read-only if true, read-write otherwise (false or unspecified).Defaults to false.
+- `sub_path` (String) Path within the volume from which the container's volume should be mounted.Defaults to '' (volume's root).
+- `sub_path_expr` (String) Expanded path within the volume from which the container's volume should be mounted.Behaves similarly to SubPath but environment variable references $(VAR_NAME) are expanded using the container's environment.Defaults to '' (volume's root).SubPathExpr and SubPath are mutually exclusive.
@@ -2015,16 +2015,16 @@ Optional:
Optional:
-- `fs_group` (Number) A special supplemental group that applies to all containers in a pod. Some volume types allow the Kubelet to change the ownership of that volume to be owned by the pod: 1. The owning GID will be the FSGroup 2. The setgid bit is set (new files created in the volume will be owned by FSGroup) 3. The permission bits are OR'd with rw-rw---- If unset, the Kubelet will not modify the ownership and permissions of any volume. Note that this field cannot be set when spec.os.name is windows.
-- `fs_group_change_policy` (String) fsGroupChangePolicy defines behavior of changing ownership and permission of the volume before being exposed inside Pod. This field will only apply to volume types which support fsGroup based ownership(and permissions). It will have no effect on ephemeral volume types such as: secret, configmaps and emptydir. Valid values are 'OnRootMismatch' and 'Always'. If not specified, 'Always' is used. Note that this field cannot be set when spec.os.name is windows.
-- `run_as_group` (Number) The GID to run the entrypoint of the container process. Uses runtime default if unset. May also be set in SecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence for that container. Note that this field cannot be set when spec.os.name is windows.
-- `run_as_non_root` (Boolean) Indicates that the container must run as a non-root user. If true, the Kubelet will validate the image at runtime to ensure that it does not run as UID 0 (root) and fail to start the container if it does. If unset or false, no such validation will be performed. May also be set in SecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
-- `run_as_user` (Number) The UID to run the entrypoint of the container process. Defaults to user specified in image metadata if unspecified. May also be set in SecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence for that container. Note that this field cannot be set when spec.os.name is windows.
-- `se_linux_options` (Attributes) The SELinux context to be applied to all containers. If unspecified, the container runtime will allocate a random SELinux context for each container. May also be set in SecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence for that container. Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--integration--template--spec--security_context--se_linux_options))
-- `seccomp_profile` (Attributes) The seccomp options to use by the containers in this pod. Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--integration--template--spec--security_context--seccomp_profile))
-- `supplemental_groups` (List of String) A list of groups applied to the first process run in each container, in addition to the container's primary GID, the fsGroup (if specified), and group memberships defined in the container image for the uid of the container process. If unspecified, no additional groups are added to any container. Note that group memberships defined in the container image for the uid of the container process are still effective, even if they are not included in this list. Note that this field cannot be set when spec.os.name is windows.
-- `sysctls` (Attributes List) Sysctls hold a list of namespaced sysctls used for the pod. Pods with unsupported sysctls (by the container runtime) might fail to launch. Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--integration--template--spec--security_context--sysctls))
-- `windows_options` (Attributes) The Windows specific settings applied to all containers. If unspecified, the options within a container's SecurityContext will be used. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence. Note that this field cannot be set when spec.os.name is linux. (see [below for nested schema](#nestedatt--spec--integration--template--spec--security_context--windows_options))
+- `fs_group` (Number) A special supplemental group that applies to all containers in a pod.Some volume types allow the Kubelet to change the ownership of that volumeto be owned by the pod:1. The owning GID will be the FSGroup2. The setgid bit is set (new files created in the volume will be owned by FSGroup)3. The permission bits are OR'd with rw-rw----If unset, the Kubelet will not modify the ownership and permissions of any volume.Note that this field cannot be set when spec.os.name is windows.
+- `fs_group_change_policy` (String) fsGroupChangePolicy defines behavior of changing ownership and permission of the volumebefore being exposed inside Pod. This field will only apply tovolume types which support fsGroup based ownership(and permissions).It will have no effect on ephemeral volume types such as: secret, configmapsand emptydir.Valid values are 'OnRootMismatch' and 'Always'. If not specified, 'Always' is used.Note that this field cannot be set when spec.os.name is windows.
+- `run_as_group` (Number) The GID to run the entrypoint of the container process.Uses runtime default if unset.May also be set in SecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedencefor that container.Note that this field cannot be set when spec.os.name is windows.
+- `run_as_non_root` (Boolean) Indicates that the container must run as a non-root user.If true, the Kubelet will validate the image at runtime to ensure that itdoes not run as UID 0 (root) and fail to start the container if it does.If unset or false, no such validation will be performed.May also be set in SecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.
+- `run_as_user` (Number) The UID to run the entrypoint of the container process.Defaults to user specified in image metadata if unspecified.May also be set in SecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedencefor that container.Note that this field cannot be set when spec.os.name is windows.
+- `se_linux_options` (Attributes) The SELinux context to be applied to all containers.If unspecified, the container runtime will allocate a random SELinux context for eachcontainer. May also be set in SecurityContext. If set inboth SecurityContext and PodSecurityContext, the value specified in SecurityContexttakes precedence for that container.Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--integration--template--spec--security_context--se_linux_options))
+- `seccomp_profile` (Attributes) The seccomp options to use by the containers in this pod.Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--integration--template--spec--security_context--seccomp_profile))
+- `supplemental_groups` (List of String) A list of groups applied to the first process run in each container, in additionto the container's primary GID, the fsGroup (if specified), and group membershipsdefined in the container image for the uid of the container process. If unspecified,no additional groups are added to any container. Note that group membershipsdefined in the container image for the uid of the container process are still effective,even if they are not included in this list.Note that this field cannot be set when spec.os.name is windows.
+- `sysctls` (Attributes List) Sysctls hold a list of namespaced sysctls used for the pod. Pods with unsupportedsysctls (by the container runtime) might fail to launch.Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--integration--template--spec--security_context--sysctls))
+- `windows_options` (Attributes) The Windows specific settings applied to all containers.If unspecified, the options within a container's SecurityContext will be used.If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.Note that this field cannot be set when spec.os.name is linux. (see [below for nested schema](#nestedatt--spec--integration--template--spec--security_context--windows_options))
### Nested Schema for `spec.integration.template.spec.security_context.se_linux_options`
@@ -2042,11 +2042,11 @@ Optional:
Required:
-- `type` (String) type indicates which kind of seccomp profile will be applied. Valid options are: Localhost - a profile defined in a file on the node should be used. RuntimeDefault - the container runtime default profile should be used. Unconfined - no profile should be applied.
+- `type` (String) type indicates which kind of seccomp profile will be applied.Valid options are:Localhost - a profile defined in a file on the node should be used.RuntimeDefault - the container runtime default profile should be used.Unconfined - no profile should be applied.
Optional:
-- `localhost_profile` (String) localhostProfile indicates a profile defined in a file on the node should be used. The profile must be preconfigured on the node to work. Must be a descending path, relative to the kubelet's configured seccomp profile location. Must be set if type is 'Localhost'. Must NOT be set for any other type.
+- `localhost_profile` (String) localhostProfile indicates a profile defined in a file on the node should be used.The profile must be preconfigured on the node to work.Must be a descending path, relative to the kubelet's configured seccomp profile location.Must be set if type is 'Localhost'. Must NOT be set for any other type.
@@ -2063,10 +2063,10 @@ Required:
Optional:
-- `gmsa_credential_spec` (String) GMSACredentialSpec is where the GMSA admission webhook (https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of the GMSA credential spec named by the GMSACredentialSpecName field.
+- `gmsa_credential_spec` (String) GMSACredentialSpec is where the GMSA admission webhook(https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of theGMSA credential spec named by the GMSACredentialSpecName field.
- `gmsa_credential_spec_name` (String) GMSACredentialSpecName is the name of the GMSA credential spec to use.
-- `host_process` (Boolean) HostProcess determines if a container should be run as a 'Host Process' container. All of a Pod's containers must have the same effective HostProcess value (it is not allowed to have a mix of HostProcess containers and non-HostProcess containers). In addition, if HostProcess is true then HostNetwork must also be set to true.
-- `run_as_user_name` (String) The UserName in Windows to run the entrypoint of the container process. Defaults to the user specified in image metadata if unspecified. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
+- `host_process` (Boolean) HostProcess determines if a container should be run as a 'Host Process' container.All of a Pod's containers must have the same effective HostProcess value(it is not allowed to have a mix of HostProcess containers and non-HostProcess containers).In addition, if HostProcess is true then HostNetwork must also be set to true.
+- `run_as_user_name` (String) The UserName in Windows to run the entrypoint of the container process.Defaults to the user specified in image metadata if unspecified.May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.
@@ -2075,17 +2075,17 @@ Optional:
Required:
-- `max_skew` (Number) MaxSkew describes the degree to which pods may be unevenly distributed. When 'whenUnsatisfiable=DoNotSchedule', it is the maximum permitted difference between the number of matching pods in the target topology and the global minimum. The global minimum is the minimum number of matching pods in an eligible domain or zero if the number of eligible domains is less than MinDomains. For example, in a 3-zone cluster, MaxSkew is set to 1, and pods with the same labelSelector spread as 2/2/1: In this case, the global minimum is 1. | zone1 | zone2 | zone3 | | P P | P P | P | - if MaxSkew is 1, incoming pod can only be scheduled to zone3 to become 2/2/2; scheduling it onto zone1(zone2) would make the ActualSkew(3-1) on zone1(zone2) violate MaxSkew(1). - if MaxSkew is 2, incoming pod can be scheduled onto any zone. When 'whenUnsatisfiable=ScheduleAnyway', it is used to give higher precedence to topologies that satisfy it. It's a required field. Default value is 1 and 0 is not allowed.
-- `topology_key` (String) TopologyKey is the key of node labels. Nodes that have a label with this key and identical values are considered to be in the same topology. We consider each as a 'bucket', and try to put balanced number of pods into each bucket. We define a domain as a particular instance of a topology. Also, we define an eligible domain as a domain whose nodes meet the requirements of nodeAffinityPolicy and nodeTaintsPolicy. e.g. If TopologyKey is 'kubernetes.io/hostname', each Node is a domain of that topology. And, if TopologyKey is 'topology.kubernetes.io/zone', each zone is a domain of that topology. It's a required field.
-- `when_unsatisfiable` (String) WhenUnsatisfiable indicates how to deal with a pod if it doesn't satisfy the spread constraint. - DoNotSchedule (default) tells the scheduler not to schedule it. - ScheduleAnyway tells the scheduler to schedule the pod in any location, but giving higher precedence to topologies that would help reduce the skew. A constraint is considered 'Unsatisfiable' for an incoming pod if and only if every possible node assignment for that pod would violate 'MaxSkew' on some topology. For example, in a 3-zone cluster, MaxSkew is set to 1, and pods with the same labelSelector spread as 3/1/1: | zone1 | zone2 | zone3 | | P P P | P | P | If WhenUnsatisfiable is set to DoNotSchedule, incoming pod can only be scheduled to zone2(zone3) to become 3/2/1(3/1/2) as ActualSkew(2-1) on zone2(zone3) satisfies MaxSkew(1). In other words, the cluster can still be imbalanced, but scheduler won't make it *more* imbalanced. It's a required field.
+- `max_skew` (Number) MaxSkew describes the degree to which pods may be unevenly distributed.When 'whenUnsatisfiable=DoNotSchedule', it is the maximum permitted differencebetween the number of matching pods in the target topology and the global minimum.The global minimum is the minimum number of matching pods in an eligible domainor zero if the number of eligible domains is less than MinDomains.For example, in a 3-zone cluster, MaxSkew is set to 1, and pods with the samelabelSelector spread as 2/2/1:In this case, the global minimum is 1.| zone1 | zone2 | zone3 || P P | P P | P |- if MaxSkew is 1, incoming pod can only be scheduled to zone3 to become 2/2/2;scheduling it onto zone1(zone2) would make the ActualSkew(3-1) on zone1(zone2)violate MaxSkew(1).- if MaxSkew is 2, incoming pod can be scheduled onto any zone.When 'whenUnsatisfiable=ScheduleAnyway', it is used to give higher precedenceto topologies that satisfy it.It's a required field. Default value is 1 and 0 is not allowed.
+- `topology_key` (String) TopologyKey is the key of node labels. Nodes that have a label with this keyand identical values are considered to be in the same topology.We consider each as a 'bucket', and try to put balanced numberof pods into each bucket.We define a domain as a particular instance of a topology.Also, we define an eligible domain as a domain whose nodes meet the requirements ofnodeAffinityPolicy and nodeTaintsPolicy.e.g. If TopologyKey is 'kubernetes.io/hostname', each Node is a domain of that topology.And, if TopologyKey is 'topology.kubernetes.io/zone', each zone is a domain of that topology.It's a required field.
+- `when_unsatisfiable` (String) WhenUnsatisfiable indicates how to deal with a pod if it doesn't satisfythe spread constraint.- DoNotSchedule (default) tells the scheduler not to schedule it.- ScheduleAnyway tells the scheduler to schedule the pod in any location, but giving higher precedence to topologies that would help reduce the skew.A constraint is considered 'Unsatisfiable' for an incoming podif and only if every possible node assignment for that pod would violate'MaxSkew' on some topology.For example, in a 3-zone cluster, MaxSkew is set to 1, and pods with the samelabelSelector spread as 3/1/1:| zone1 | zone2 | zone3 || P P P | P | P |If WhenUnsatisfiable is set to DoNotSchedule, incoming pod can only be scheduledto zone2(zone3) to become 3/2/1(3/1/2) as ActualSkew(2-1) on zone2(zone3) satisfiesMaxSkew(1). In other words, the cluster can still be imbalanced, but schedulerwon't make it *more* imbalanced.It's a required field.
Optional:
-- `label_selector` (Attributes) LabelSelector is used to find matching pods. Pods that match this label selector are counted to determine the number of pods in their corresponding topology domain. (see [below for nested schema](#nestedatt--spec--integration--template--spec--topology_spread_constraints--label_selector))
-- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select the pods over which spreading will be calculated. The keys are used to lookup values from the incoming pod labels, those key-value labels are ANDed with labelSelector to select the group of existing pods over which spreading will be calculated for the incoming pod. The same key is forbidden to exist in both MatchLabelKeys and LabelSelector. MatchLabelKeys cannot be set when LabelSelector isn't set. Keys that don't exist in the incoming pod labels will be ignored. A null or empty list means only match against labelSelector. This is a beta field and requires the MatchLabelKeysInPodTopologySpread feature gate to be enabled (enabled by default).
-- `min_domains` (Number) MinDomains indicates a minimum number of eligible domains. When the number of eligible domains with matching topology keys is less than minDomains, Pod Topology Spread treats 'global minimum' as 0, and then the calculation of Skew is performed. And when the number of eligible domains with matching topology keys equals or greater than minDomains, this value has no effect on scheduling. As a result, when the number of eligible domains is less than minDomains, scheduler won't schedule more than maxSkew Pods to those domains. If value is nil, the constraint behaves as if MinDomains is equal to 1. Valid values are integers greater than 0. When value is not nil, WhenUnsatisfiable must be DoNotSchedule. For example, in a 3-zone cluster, MaxSkew is set to 2, MinDomains is set to 5 and pods with the same labelSelector spread as 2/2/2: | zone1 | zone2 | zone3 | | P P | P P | P P | The number of domains is less than 5(MinDomains), so 'global minimum' is treated as 0. In this situation, new pod with the same labelSelector cannot be scheduled, because computed skew will be 3(3 - 0) if new Pod is scheduled to any of the three zones, it will violate MaxSkew. This is a beta field and requires the MinDomainsInPodTopologySpread feature gate to be enabled (enabled by default).
-- `node_affinity_policy` (String) NodeAffinityPolicy indicates how we will treat Pod's nodeAffinity/nodeSelector when calculating pod topology spread skew. Options are: - Honor: only nodes matching nodeAffinity/nodeSelector are included in the calculations. - Ignore: nodeAffinity/nodeSelector are ignored. All nodes are included in the calculations. If this value is nil, the behavior is equivalent to the Honor policy. This is a beta-level feature default enabled by the NodeInclusionPolicyInPodTopologySpread feature flag.
-- `node_taints_policy` (String) NodeTaintsPolicy indicates how we will treat node taints when calculating pod topology spread skew. Options are: - Honor: nodes without taints, along with tainted nodes for which the incoming pod has a toleration, are included. - Ignore: node taints are ignored. All nodes are included. If this value is nil, the behavior is equivalent to the Ignore policy. This is a beta-level feature default enabled by the NodeInclusionPolicyInPodTopologySpread feature flag.
+- `label_selector` (Attributes) LabelSelector is used to find matching pods.Pods that match this label selector are counted to determine the number of podsin their corresponding topology domain. (see [below for nested schema](#nestedatt--spec--integration--template--spec--topology_spread_constraints--label_selector))
+- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select the pods over whichspreading will be calculated. The keys are used to lookup values from theincoming pod labels, those key-value labels are ANDed with labelSelectorto select the group of existing pods over which spreading will be calculatedfor the incoming pod. The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.MatchLabelKeys cannot be set when LabelSelector isn't set.Keys that don't exist in the incoming pod labels willbe ignored. A null or empty list means only match against labelSelector.This is a beta field and requires the MatchLabelKeysInPodTopologySpread feature gate to be enabled (enabled by default).
+- `min_domains` (Number) MinDomains indicates a minimum number of eligible domains.When the number of eligible domains with matching topology keys is less than minDomains,Pod Topology Spread treats 'global minimum' as 0, and then the calculation of Skew is performed.And when the number of eligible domains with matching topology keys equals or greater than minDomains,this value has no effect on scheduling.As a result, when the number of eligible domains is less than minDomains,scheduler won't schedule more than maxSkew Pods to those domains.If value is nil, the constraint behaves as if MinDomains is equal to 1.Valid values are integers greater than 0.When value is not nil, WhenUnsatisfiable must be DoNotSchedule.For example, in a 3-zone cluster, MaxSkew is set to 2, MinDomains is set to 5 and pods with the samelabelSelector spread as 2/2/2:| zone1 | zone2 | zone3 || P P | P P | P P |The number of domains is less than 5(MinDomains), so 'global minimum' is treated as 0.In this situation, new pod with the same labelSelector cannot be scheduled,because computed skew will be 3(3 - 0) if new Pod is scheduled to any of the three zones,it will violate MaxSkew.This is a beta field and requires the MinDomainsInPodTopologySpread feature gate to be enabled (enabled by default).
+- `node_affinity_policy` (String) NodeAffinityPolicy indicates how we will treat Pod's nodeAffinity/nodeSelectorwhen calculating pod topology spread skew. Options are:- Honor: only nodes matching nodeAffinity/nodeSelector are included in the calculations.- Ignore: nodeAffinity/nodeSelector are ignored. All nodes are included in the calculations.If this value is nil, the behavior is equivalent to the Honor policy.This is a beta-level feature default enabled by the NodeInclusionPolicyInPodTopologySpread feature flag.
+- `node_taints_policy` (String) NodeTaintsPolicy indicates how we will treat node taints when calculatingpod topology spread skew. Options are:- Honor: nodes without taints, along with tainted nodes for which the incoming podhas a toleration, are included.- Ignore: node taints are ignored. All nodes are included.If this value is nil, the behavior is equivalent to the Ignore policy.This is a beta-level feature default enabled by the NodeInclusionPolicyInPodTopologySpread feature flag.
### Nested Schema for `spec.integration.template.spec.topology_spread_constraints.label_selector`
@@ -2093,7 +2093,7 @@ Optional:
Optional:
- `match_expressions` (Attributes List) matchExpressions is a list of label selector requirements. The requirements are ANDed. (see [below for nested schema](#nestedatt--spec--integration--template--spec--topology_spread_constraints--label_selector--match_expressions))
-- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is 'key', the operator is 'In', and the values array contains only 'value'. The requirements are ANDed.
+- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.
### Nested Schema for `spec.integration.template.spec.topology_spread_constraints.label_selector.match_expressions`
@@ -2101,11 +2101,11 @@ Optional:
Required:
- `key` (String) key is the label key that the selector applies to.
-- `operator` (String) operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist.
+- `operator` (String) operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.
Optional:
-- `values` (List of String) values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch.
+- `values` (List of String) values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.
@@ -2115,37 +2115,37 @@ Optional:
Required:
-- `name` (String) name of the volume. Must be a DNS_LABEL and unique within the pod. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+- `name` (String) name of the volume.Must be a DNS_LABEL and unique within the pod.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Optional:
-- `aws_elastic_block_store` (Attributes) awsElasticBlockStore represents an AWS Disk resource that is attached to a kubelet's host machine and then exposed to the pod. More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--aws_elastic_block_store))
+- `aws_elastic_block_store` (Attributes) awsElasticBlockStore represents an AWS Disk resource that is attached to akubelet's host machine and then exposed to the pod.More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--aws_elastic_block_store))
- `azure_disk` (Attributes) azureDisk represents an Azure Data Disk mount on the host and bind mount to the pod. (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--azure_disk))
- `azure_file` (Attributes) azureFile represents an Azure File Service mount on the host and bind mount to the pod. (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--azure_file))
- `cephfs` (Attributes) cephFS represents a Ceph FS mount on the host that shares a pod's lifetime (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--cephfs))
-- `cinder` (Attributes) cinder represents a cinder volume attached and mounted on kubelets host machine. More info: https://examples.k8s.io/mysql-cinder-pd/README.md (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--cinder))
+- `cinder` (Attributes) cinder represents a cinder volume attached and mounted on kubelets host machine.More info: https://examples.k8s.io/mysql-cinder-pd/README.md (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--cinder))
- `config_map` (Attributes) configMap represents a configMap that should populate this volume (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--config_map))
- `csi` (Attributes) csi (Container Storage Interface) represents ephemeral storage that is handled by certain external CSI drivers (Beta feature). (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--csi))
- `downward_api` (Attributes) downwardAPI represents downward API about the pod that should populate this volume (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--downward_api))
-- `empty_dir` (Attributes) emptyDir represents a temporary directory that shares a pod's lifetime. More info: https://kubernetes.io/docs/concepts/storage/volumes#emptydir (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--empty_dir))
-- `ephemeral` (Attributes) ephemeral represents a volume that is handled by a cluster storage driver. The volume's lifecycle is tied to the pod that defines it - it will be created before the pod starts, and deleted when the pod is removed. Use this if: a) the volume is only needed while the pod runs, b) features of normal volumes like restoring from snapshot or capacity tracking are needed, c) the storage driver is specified through a storage class, and d) the storage driver supports dynamic volume provisioning through a PersistentVolumeClaim (see EphemeralVolumeSource for more information on the connection between this volume type and PersistentVolumeClaim). Use PersistentVolumeClaim or one of the vendor-specific APIs for volumes that persist for longer than the lifecycle of an individual pod. Use CSI for light-weight local ephemeral volumes if the CSI driver is meant to be used that way - see the documentation of the driver for more information. A pod can use both types of ephemeral volumes and persistent volumes at the same time. (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--ephemeral))
+- `empty_dir` (Attributes) emptyDir represents a temporary directory that shares a pod's lifetime.More info: https://kubernetes.io/docs/concepts/storage/volumes#emptydir (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--empty_dir))
+- `ephemeral` (Attributes) ephemeral represents a volume that is handled by a cluster storage driver.The volume's lifecycle is tied to the pod that defines it - it will be created before the pod starts,and deleted when the pod is removed.Use this if:a) the volume is only needed while the pod runs,b) features of normal volumes like restoring from snapshot or capacity tracking are needed,c) the storage driver is specified through a storage class, andd) the storage driver supports dynamic volume provisioning through a PersistentVolumeClaim (see EphemeralVolumeSource for more information on the connection between this volume type and PersistentVolumeClaim).Use PersistentVolumeClaim or one of the vendor-specificAPIs for volumes that persist for longer than the lifecycleof an individual pod.Use CSI for light-weight local ephemeral volumes if the CSI driver is meant tobe used that way - see the documentation of the driver formore information.A pod can use both types of ephemeral volumes andpersistent volumes at the same time. (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--ephemeral))
- `fc` (Attributes) fc represents a Fibre Channel resource that is attached to a kubelet's host machine and then exposed to the pod. (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--fc))
-- `flex_volume` (Attributes) flexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin. (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--flex_volume))
+- `flex_volume` (Attributes) flexVolume represents a generic volume resource that isprovisioned/attached using an exec based plugin. (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--flex_volume))
- `flocker` (Attributes) flocker represents a Flocker volume attached to a kubelet's host machine. This depends on the Flocker control service being running (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--flocker))
-- `gce_persistent_disk` (Attributes) gcePersistentDisk represents a GCE Disk resource that is attached to a kubelet's host machine and then exposed to the pod. More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--gce_persistent_disk))
-- `git_repo` (Attributes) gitRepo represents a git repository at a particular revision. DEPRECATED: GitRepo is deprecated. To provision a container with a git repo, mount an EmptyDir into an InitContainer that clones the repo using git, then mount the EmptyDir into the Pod's container. (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--git_repo))
-- `glusterfs` (Attributes) glusterfs represents a Glusterfs mount on the host that shares a pod's lifetime. More info: https://examples.k8s.io/volumes/glusterfs/README.md (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--glusterfs))
-- `host_path` (Attributes) hostPath represents a pre-existing file or directory on the host machine that is directly exposed to the container. This is generally used for system agents or other privileged things that are allowed to see the host machine. Most containers will NOT need this. More info: https://kubernetes.io/docs/concepts/storage/volumes#hostpath --- TODO(jonesdl) We need to restrict who can use host directory mounts and who can/can not mount host directories as read/write. (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--host_path))
-- `iscsi` (Attributes) iscsi represents an ISCSI Disk resource that is attached to a kubelet's host machine and then exposed to the pod. More info: https://examples.k8s.io/volumes/iscsi/README.md (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--iscsi))
-- `nfs` (Attributes) nfs represents an NFS mount on the host that shares a pod's lifetime More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--nfs))
-- `persistent_volume_claim` (Attributes) persistentVolumeClaimVolumeSource represents a reference to a PersistentVolumeClaim in the same namespace. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--persistent_volume_claim))
+- `gce_persistent_disk` (Attributes) gcePersistentDisk represents a GCE Disk resource that is attached to akubelet's host machine and then exposed to the pod.More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--gce_persistent_disk))
+- `git_repo` (Attributes) gitRepo represents a git repository at a particular revision.DEPRECATED: GitRepo is deprecated. To provision a container with a git repo, mount anEmptyDir into an InitContainer that clones the repo using git, then mount the EmptyDirinto the Pod's container. (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--git_repo))
+- `glusterfs` (Attributes) glusterfs represents a Glusterfs mount on the host that shares a pod's lifetime.More info: https://examples.k8s.io/volumes/glusterfs/README.md (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--glusterfs))
+- `host_path` (Attributes) hostPath represents a pre-existing file or directory on the hostmachine that is directly exposed to the container. This is generallyused for system agents or other privileged things that are allowedto see the host machine. Most containers will NOT need this.More info: https://kubernetes.io/docs/concepts/storage/volumes#hostpath---TODO(jonesdl) We need to restrict who can use host directory mounts and who can/can notmount host directories as read/write. (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--host_path))
+- `iscsi` (Attributes) iscsi represents an ISCSI Disk resource that is attached to akubelet's host machine and then exposed to the pod.More info: https://examples.k8s.io/volumes/iscsi/README.md (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--iscsi))
+- `nfs` (Attributes) nfs represents an NFS mount on the host that shares a pod's lifetimeMore info: https://kubernetes.io/docs/concepts/storage/volumes#nfs (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--nfs))
+- `persistent_volume_claim` (Attributes) persistentVolumeClaimVolumeSource represents a reference to aPersistentVolumeClaim in the same namespace.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--persistent_volume_claim))
- `photon_persistent_disk` (Attributes) photonPersistentDisk represents a PhotonController persistent disk attached and mounted on kubelets host machine (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--photon_persistent_disk))
- `portworx_volume` (Attributes) portworxVolume represents a portworx volume attached and mounted on kubelets host machine (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--portworx_volume))
- `projected` (Attributes) projected items for all in one resources secrets, configmaps, and downward API (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--projected))
- `quobyte` (Attributes) quobyte represents a Quobyte mount on the host that shares a pod's lifetime (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--quobyte))
-- `rbd` (Attributes) rbd represents a Rados Block Device mount on the host that shares a pod's lifetime. More info: https://examples.k8s.io/volumes/rbd/README.md (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--rbd))
+- `rbd` (Attributes) rbd represents a Rados Block Device mount on the host that shares a pod's lifetime.More info: https://examples.k8s.io/volumes/rbd/README.md (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--rbd))
- `scale_io` (Attributes) scaleIO represents a ScaleIO persistent volume attached and mounted on Kubernetes nodes. (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--scale_io))
-- `secret` (Attributes) secret represents a secret that should populate this volume. More info: https://kubernetes.io/docs/concepts/storage/volumes#secret (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--secret))
+- `secret` (Attributes) secret represents a secret that should populate this volume.More info: https://kubernetes.io/docs/concepts/storage/volumes#secret (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--secret))
- `storageos` (Attributes) storageOS represents a StorageOS volume attached and mounted on Kubernetes nodes. (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--storageos))
- `vsphere_volume` (Attributes) vsphereVolume represents a vSphere volume attached and mounted on kubelets host machine (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--vsphere_volume))
@@ -2154,13 +2154,13 @@ Optional:
Required:
-- `volume_id` (String) volumeID is unique ID of the persistent disk resource in AWS (Amazon EBS volume). More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore
+- `volume_id` (String) volumeID is unique ID of the persistent disk resource in AWS (Amazon EBS volume).More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore
Optional:
-- `fs_type` (String) fsType is the filesystem type of the volume that you want to mount. Tip: Ensure that the filesystem type is supported by the host operating system. Examples: 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified. More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore TODO: how do we prevent errors in the filesystem from compromising the machine
-- `partition` (Number) partition is the partition in the volume that you want to mount. If omitted, the default is to mount by volume name. Examples: For volume /dev/sda1, you specify the partition as '1'. Similarly, the volume partition for /dev/sda is '0' (or you can leave the property empty).
-- `read_only` (Boolean) readOnly value true will force the readOnly setting in VolumeMounts. More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore
+- `fs_type` (String) fsType is the filesystem type of the volume that you want to mount.Tip: Ensure that the filesystem type is supported by the host operating system.Examples: 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified.More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstoreTODO: how do we prevent errors in the filesystem from compromising the machine
+- `partition` (Number) partition is the partition in the volume that you want to mount.If omitted, the default is to mount by volume name.Examples: For volume /dev/sda1, you specify the partition as '1'.Similarly, the volume partition for /dev/sda is '0' (or you can leave the property empty).
+- `read_only` (Boolean) readOnly value true will force the readOnly setting in VolumeMounts.More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore
@@ -2174,9 +2174,9 @@ Required:
Optional:
- `caching_mode` (String) cachingMode is the Host Caching mode: None, Read Only, Read Write.
-- `fs_type` (String) fsType is Filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified.
+- `fs_type` (String) fsType is Filesystem type to mount.Must be a filesystem type supported by the host operating system.Ex. 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified.
- `kind` (String) kind expected values are Shared: multiple blob disks per storage account Dedicated: single blob disk per storage account Managed: azure managed data disk (only in managed availability set). defaults to shared
-- `read_only` (Boolean) readOnly Defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.
+- `read_only` (Boolean) readOnly Defaults to false (read/write). ReadOnly here will forcethe ReadOnly setting in VolumeMounts.
@@ -2189,7 +2189,7 @@ Required:
Optional:
-- `read_only` (Boolean) readOnly defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.
+- `read_only` (Boolean) readOnly defaults to false (read/write). ReadOnly here will forcethe ReadOnly setting in VolumeMounts.
@@ -2197,22 +2197,22 @@ Optional:
Required:
-- `monitors` (List of String) monitors is Required: Monitors is a collection of Ceph monitors More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it
+- `monitors` (List of String) monitors is Required: Monitors is a collection of Ceph monitorsMore info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it
Optional:
- `path` (String) path is Optional: Used as the mounted root, rather than the full Ceph tree, default is /
-- `read_only` (Boolean) readOnly is Optional: Defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts. More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it
-- `secret_file` (String) secretFile is Optional: SecretFile is the path to key ring for User, default is /etc/ceph/user.secret More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it
-- `secret_ref` (Attributes) secretRef is Optional: SecretRef is reference to the authentication secret for User, default is empty. More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--cephfs--secret_ref))
-- `user` (String) user is optional: User is the rados user name, default is admin More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it
+- `read_only` (Boolean) readOnly is Optional: Defaults to false (read/write). ReadOnly here will forcethe ReadOnly setting in VolumeMounts.More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it
+- `secret_file` (String) secretFile is Optional: SecretFile is the path to key ring for User, default is /etc/ceph/user.secretMore info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it
+- `secret_ref` (Attributes) secretRef is Optional: SecretRef is reference to the authentication secret for User, default is empty.More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--cephfs--secret_ref))
+- `user` (String) user is optional: User is the rados user name, default is adminMore info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it
### Nested Schema for `spec.integration.template.spec.volumes.cephfs.secret_ref`
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
@@ -2221,20 +2221,20 @@ Optional:
Required:
-- `volume_id` (String) volumeID used to identify the volume in cinder. More info: https://examples.k8s.io/mysql-cinder-pd/README.md
+- `volume_id` (String) volumeID used to identify the volume in cinder.More info: https://examples.k8s.io/mysql-cinder-pd/README.md
Optional:
-- `fs_type` (String) fsType is the filesystem type to mount. Must be a filesystem type supported by the host operating system. Examples: 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified. More info: https://examples.k8s.io/mysql-cinder-pd/README.md
-- `read_only` (Boolean) readOnly defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts. More info: https://examples.k8s.io/mysql-cinder-pd/README.md
-- `secret_ref` (Attributes) secretRef is optional: points to a secret object containing parameters used to connect to OpenStack. (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--cinder--secret_ref))
+- `fs_type` (String) fsType is the filesystem type to mount.Must be a filesystem type supported by the host operating system.Examples: 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified.More info: https://examples.k8s.io/mysql-cinder-pd/README.md
+- `read_only` (Boolean) readOnly defaults to false (read/write). ReadOnly here will forcethe ReadOnly setting in VolumeMounts.More info: https://examples.k8s.io/mysql-cinder-pd/README.md
+- `secret_ref` (Attributes) secretRef is optional: points to a secret object containing parameters used to connectto OpenStack. (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--cinder--secret_ref))
### Nested Schema for `spec.integration.template.spec.volumes.cinder.secret_ref`
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
@@ -2243,9 +2243,9 @@ Optional:
Optional:
-- `default_mode` (Number) defaultMode is optional: mode bits used to set permissions on created files by default. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. Defaults to 0644. Directories within the path are not affected by this setting. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
-- `items` (Attributes List) items if unspecified, each key-value pair in the Data field of the referenced ConfigMap will be projected into the volume as a file whose name is the key and content is the value. If specified, the listed keys will be projected into the specified paths, and unlisted keys will not be present. If a key is specified which is not present in the ConfigMap, the volume setup will error unless it is marked optional. Paths must be relative and may not contain the '..' path or start with '..'. (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--config_map--items))
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `default_mode` (Number) defaultMode is optional: mode bits used to set permissions on created files by default.Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511.YAML accepts both octal and decimal values, JSON requires decimal values for mode bits.Defaults to 0644.Directories within the path are not affected by this setting.This might be in conflict with other options that affect the filemode, like fsGroup, and the result can be other mode bits set.
+- `items` (Attributes List) items if unspecified, each key-value pair in the Data field of the referencedConfigMap will be projected into the volume as a file whose name is thekey and content is the value. If specified, the listed keys will beprojected into the specified paths, and unlisted keys will not bepresent. If a key is specified which is not present in the ConfigMap,the volume setup will error unless it is marked optional. Paths must berelative and may not contain the '..' path or start with '..'. (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--config_map--items))
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
- `optional` (Boolean) optional specify whether the ConfigMap or its keys must be defined
@@ -2254,11 +2254,11 @@ Optional:
Required:
- `key` (String) key is the key to project.
-- `path` (String) path is the relative path of the file to map the key to. May not be an absolute path. May not contain the path element '..'. May not start with the string '..'.
+- `path` (String) path is the relative path of the file to map the key to.May not be an absolute path.May not contain the path element '..'.May not start with the string '..'.
Optional:
-- `mode` (Number) mode is Optional: mode bits used to set permissions on this file. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. If not specified, the volume defaultMode will be used. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
+- `mode` (Number) mode is Optional: mode bits used to set permissions on this file.Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511.YAML accepts both octal and decimal values, JSON requires decimal values for mode bits.If not specified, the volume defaultMode will be used.This might be in conflict with other options that affect the filemode, like fsGroup, and the result can be other mode bits set.
@@ -2267,21 +2267,21 @@ Optional:
Required:
-- `driver` (String) driver is the name of the CSI driver that handles this volume. Consult with your admin for the correct name as registered in the cluster.
+- `driver` (String) driver is the name of the CSI driver that handles this volume.Consult with your admin for the correct name as registered in the cluster.
Optional:
-- `fs_type` (String) fsType to mount. Ex. 'ext4', 'xfs', 'ntfs'. If not provided, the empty value is passed to the associated CSI driver which will determine the default filesystem to apply.
-- `node_publish_secret_ref` (Attributes) nodePublishSecretRef is a reference to the secret object containing sensitive information to pass to the CSI driver to complete the CSI NodePublishVolume and NodeUnpublishVolume calls. This field is optional, and may be empty if no secret is required. If the secret object contains more than one secret, all secret references are passed. (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--csi--node_publish_secret_ref))
-- `read_only` (Boolean) readOnly specifies a read-only configuration for the volume. Defaults to false (read/write).
-- `volume_attributes` (Map of String) volumeAttributes stores driver-specific properties that are passed to the CSI driver. Consult your driver's documentation for supported values.
+- `fs_type` (String) fsType to mount. Ex. 'ext4', 'xfs', 'ntfs'.If not provided, the empty value is passed to the associated CSI driverwhich will determine the default filesystem to apply.
+- `node_publish_secret_ref` (Attributes) nodePublishSecretRef is a reference to the secret object containingsensitive information to pass to the CSI driver to complete the CSINodePublishVolume and NodeUnpublishVolume calls.This field is optional, and may be empty if no secret is required. If thesecret object contains more than one secret, all secret references are passed. (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--csi--node_publish_secret_ref))
+- `read_only` (Boolean) readOnly specifies a read-only configuration for the volume.Defaults to false (read/write).
+- `volume_attributes` (Map of String) volumeAttributes stores driver-specific properties that are passed to the CSIdriver. Consult your driver's documentation for supported values.
### Nested Schema for `spec.integration.template.spec.volumes.csi.node_publish_secret_ref`
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
@@ -2290,7 +2290,7 @@ Optional:
Optional:
-- `default_mode` (Number) Optional: mode bits to use on created files by default. Must be a Optional: mode bits used to set permissions on created files by default. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. Defaults to 0644. Directories within the path are not affected by this setting. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
+- `default_mode` (Number) Optional: mode bits to use on created files by default. Must be aOptional: mode bits used to set permissions on created files by default.Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511.YAML accepts both octal and decimal values, JSON requires decimal values for mode bits.Defaults to 0644.Directories within the path are not affected by this setting.This might be in conflict with other options that affect the filemode, like fsGroup, and the result can be other mode bits set.
- `items` (Attributes List) Items is a list of downward API volume file (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--downward_api--items))
@@ -2303,8 +2303,8 @@ Required:
Optional:
- `field_ref` (Attributes) Required: Selects a field of the pod: only annotations, labels, name and namespace are supported. (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--downward_api--items--field_ref))
-- `mode` (Number) Optional: mode bits used to set permissions on this file, must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. If not specified, the volume defaultMode will be used. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
-- `resource_field_ref` (Attributes) Selects a resource of the container: only resources limits and requests (limits.cpu, limits.memory, requests.cpu and requests.memory) are currently supported. (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--downward_api--items--resource_field_ref))
+- `mode` (Number) Optional: mode bits used to set permissions on this file, must be an octal valuebetween 0000 and 0777 or a decimal value between 0 and 511.YAML accepts both octal and decimal values, JSON requires decimal values for mode bits.If not specified, the volume defaultMode will be used.This might be in conflict with other options that affect the filemode, like fsGroup, and the result can be other mode bits set.
+- `resource_field_ref` (Attributes) Selects a resource of the container: only resources limits and requests(limits.cpu, limits.memory, requests.cpu and requests.memory) are currently supported. (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--downward_api--items--resource_field_ref))
### Nested Schema for `spec.integration.template.spec.volumes.downward_api.items.field_ref`
@@ -2338,8 +2338,8 @@ Optional:
Optional:
-- `medium` (String) medium represents what type of storage medium should back this directory. The default is '' which means to use the node's default medium. Must be an empty string (default) or Memory. More info: https://kubernetes.io/docs/concepts/storage/volumes#emptydir
-- `size_limit` (String) sizeLimit is the total amount of local storage required for this EmptyDir volume. The size limit is also applicable for memory medium. The maximum usage on memory medium EmptyDir would be the minimum value between the SizeLimit specified here and the sum of memory limits of all containers in a pod. The default is nil which means that the limit is undefined. More info: https://kubernetes.io/docs/concepts/storage/volumes#emptydir
+- `medium` (String) medium represents what type of storage medium should back this directory.The default is '' which means to use the node's default medium.Must be an empty string (default) or Memory.More info: https://kubernetes.io/docs/concepts/storage/volumes#emptydir
+- `size_limit` (String) sizeLimit is the total amount of local storage required for this EmptyDir volume.The size limit is also applicable for memory medium.The maximum usage on memory medium EmptyDir would be the minimum value betweenthe SizeLimit specified here and the sum of memory limits of all containers in a pod.The default is nil which means that the limit is undefined.More info: https://kubernetes.io/docs/concepts/storage/volumes#emptydir
@@ -2347,32 +2347,32 @@ Optional:
Optional:
-- `volume_claim_template` (Attributes) Will be used to create a stand-alone PVC to provision the volume. The pod in which this EphemeralVolumeSource is embedded will be the owner of the PVC, i.e. the PVC will be deleted together with the pod. The name of the PVC will be '-' where '' is the name from the 'PodSpec.Volumes' array entry. Pod validation will reject the pod if the concatenated name is not valid for a PVC (for example, too long). An existing PVC with that name that is not owned by the pod will *not* be used for the pod to avoid using an unrelated volume by mistake. Starting the pod is then blocked until the unrelated PVC is removed. If such a pre-created PVC is meant to be used by the pod, the PVC has to updated with an owner reference to the pod once the pod exists. Normally this should not be necessary, but it may be useful when manually reconstructing a broken cluster. This field is read-only and no changes will be made by Kubernetes to the PVC after it has been created. Required, must not be nil. (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--ephemeral--volume_claim_template))
+- `volume_claim_template` (Attributes) Will be used to create a stand-alone PVC to provision the volume.The pod in which this EphemeralVolumeSource is embedded will be theowner of the PVC, i.e. the PVC will be deleted together with thepod. The name of the PVC will be '-' where'' is the name from the 'PodSpec.Volumes' arrayentry. Pod validation will reject the pod if the concatenated nameis not valid for a PVC (for example, too long).An existing PVC with that name that is not owned by the podwill *not* be used for the pod to avoid using an unrelatedvolume by mistake. Starting the pod is then blocked untilthe unrelated PVC is removed. If such a pre-created PVC ismeant to be used by the pod, the PVC has to updated with anowner reference to the pod once the pod exists. Normallythis should not be necessary, but it may be useful whenmanually reconstructing a broken cluster.This field is read-only and no changes will be made by Kubernetesto the PVC after it has been created.Required, must not be nil. (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--ephemeral--volume_claim_template))
### Nested Schema for `spec.integration.template.spec.volumes.ephemeral.volume_claim_template`
Required:
-- `spec` (Attributes) The specification for the PersistentVolumeClaim. The entire content is copied unchanged into the PVC that gets created from this template. The same fields as in a PersistentVolumeClaim are also valid here. (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--ephemeral--volume_claim_template--spec))
+- `spec` (Attributes) The specification for the PersistentVolumeClaim. The entire content iscopied unchanged into the PVC that gets created from thistemplate. The same fields as in a PersistentVolumeClaimare also valid here. (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--ephemeral--volume_claim_template--spec))
Optional:
-- `metadata` (Map of String) May contain labels and annotations that will be copied into the PVC when creating it. No other fields are allowed and will be rejected during validation.
+- `metadata` (Map of String) May contain labels and annotations that will be copied into the PVCwhen creating it. No other fields are allowed and will be rejected duringvalidation.
### Nested Schema for `spec.integration.template.spec.volumes.ephemeral.volume_claim_template.spec`
Optional:
-- `access_modes` (List of String) accessModes contains the desired access modes the volume should have. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#access-modes-1
-- `data_source` (Attributes) dataSource field can be used to specify either: * An existing VolumeSnapshot object (snapshot.storage.k8s.io/VolumeSnapshot) * An existing PVC (PersistentVolumeClaim) If the provisioner or an external controller can support the specified data source, it will create a new volume based on the contents of the specified data source. When the AnyVolumeDataSource feature gate is enabled, dataSource contents will be copied to dataSourceRef, and dataSourceRef contents will be copied to dataSource when dataSourceRef.namespace is not specified. If the namespace is specified, then dataSourceRef will not be copied to dataSource. (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--ephemeral--volume_claim_template--spec--data_source))
-- `data_source_ref` (Attributes) dataSourceRef specifies the object from which to populate the volume with data, if a non-empty volume is desired. This may be any object from a non-empty API group (non core object) or a PersistentVolumeClaim object. When this field is specified, volume binding will only succeed if the type of the specified object matches some installed volume populator or dynamic provisioner. This field will replace the functionality of the dataSource field and as such if both fields are non-empty, they must have the same value. For backwards compatibility, when namespace isn't specified in dataSourceRef, both fields (dataSource and dataSourceRef) will be set to the same value automatically if one of them is empty and the other is non-empty. When namespace is specified in dataSourceRef, dataSource isn't set to the same value and must be empty. There are three important differences between dataSource and dataSourceRef: * While dataSource only allows two specific types of objects, dataSourceRef allows any non-core object, as well as PersistentVolumeClaim objects. * While dataSource ignores disallowed values (dropping them), dataSourceRef preserves all values, and generates an error if a disallowed value is specified. * While dataSource only allows local objects, dataSourceRef allows objects in any namespaces. (Beta) Using this field requires the AnyVolumeDataSource feature gate to be enabled. (Alpha) Using the namespace field of dataSourceRef requires the CrossNamespaceVolumeDataSource feature gate to be enabled. (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--ephemeral--volume_claim_template--spec--data_source_ref))
-- `resources` (Attributes) resources represents the minimum resources the volume should have. If RecoverVolumeExpansionFailure feature is enabled users are allowed to specify resource requirements that are lower than previous value but must still be higher than capacity recorded in the status field of the claim. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--ephemeral--volume_claim_template--spec--resources))
+- `access_modes` (List of String) accessModes contains the desired access modes the volume should have.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#access-modes-1
+- `data_source` (Attributes) dataSource field can be used to specify either:* An existing VolumeSnapshot object (snapshot.storage.k8s.io/VolumeSnapshot)* An existing PVC (PersistentVolumeClaim)If the provisioner or an external controller can support the specified data source,it will create a new volume based on the contents of the specified data source.When the AnyVolumeDataSource feature gate is enabled, dataSource contents will be copied to dataSourceRef,and dataSourceRef contents will be copied to dataSource when dataSourceRef.namespace is not specified.If the namespace is specified, then dataSourceRef will not be copied to dataSource. (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--ephemeral--volume_claim_template--spec--data_source))
+- `data_source_ref` (Attributes) dataSourceRef specifies the object from which to populate the volume with data, if a non-emptyvolume is desired. This may be any object from a non-empty API group (noncore object) or a PersistentVolumeClaim object.When this field is specified, volume binding will only succeed if the type ofthe specified object matches some installed volume populator or dynamicprovisioner.This field will replace the functionality of the dataSource field and as suchif both fields are non-empty, they must have the same value. For backwardscompatibility, when namespace isn't specified in dataSourceRef,both fields (dataSource and dataSourceRef) will be set to the samevalue automatically if one of them is empty and the other is non-empty.When namespace is specified in dataSourceRef,dataSource isn't set to the same value and must be empty.There are three important differences between dataSource and dataSourceRef:* While dataSource only allows two specific types of objects, dataSourceRef allows any non-core object, as well as PersistentVolumeClaim objects.* While dataSource ignores disallowed values (dropping them), dataSourceRef preserves all values, and generates an error if a disallowed value is specified.* While dataSource only allows local objects, dataSourceRef allows objects in any namespaces.(Beta) Using this field requires the AnyVolumeDataSource feature gate to be enabled.(Alpha) Using the namespace field of dataSourceRef requires the CrossNamespaceVolumeDataSource feature gate to be enabled. (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--ephemeral--volume_claim_template--spec--data_source_ref))
+- `resources` (Attributes) resources represents the minimum resources the volume should have.If RecoverVolumeExpansionFailure feature is enabled users are allowed to specify resource requirementsthat are lower than previous value but must still be higher than capacity recorded in thestatus field of the claim.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--ephemeral--volume_claim_template--spec--resources))
- `selector` (Attributes) selector is a label query over volumes to consider for binding. (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--ephemeral--volume_claim_template--spec--selector))
-- `storage_class_name` (String) storageClassName is the name of the StorageClass required by the claim. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#class-1
-- `volume_attributes_class_name` (String) volumeAttributesClassName may be used to set the VolumeAttributesClass used by this claim. If specified, the CSI driver will create or update the volume with the attributes defined in the corresponding VolumeAttributesClass. This has a different purpose than storageClassName, it can be changed after the claim is created. An empty string value means that no VolumeAttributesClass will be applied to the claim but it's not allowed to reset this field to empty string once it is set. If unspecified and the PersistentVolumeClaim is unbound, the default VolumeAttributesClass will be set by the persistentvolume controller if it exists. If the resource referred to by volumeAttributesClass does not exist, this PersistentVolumeClaim will be set to a Pending state, as reflected by the modifyVolumeStatus field, until such as a resource exists. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#volumeattributesclass (Alpha) Using this field requires the VolumeAttributesClass feature gate to be enabled.
-- `volume_mode` (String) volumeMode defines what type of volume is required by the claim. Value of Filesystem is implied when not included in claim spec.
+- `storage_class_name` (String) storageClassName is the name of the StorageClass required by the claim.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#class-1
+- `volume_attributes_class_name` (String) volumeAttributesClassName may be used to set the VolumeAttributesClass used by this claim.If specified, the CSI driver will create or update the volume with the attributes definedin the corresponding VolumeAttributesClass. This has a different purpose than storageClassName,it can be changed after the claim is created. An empty string value means that no VolumeAttributesClasswill be applied to the claim but it's not allowed to reset this field to empty string once it is set.If unspecified and the PersistentVolumeClaim is unbound, the default VolumeAttributesClasswill be set by the persistentvolume controller if it exists.If the resource referred to by volumeAttributesClass does not exist, this PersistentVolumeClaim will beset to a Pending state, as reflected by the modifyVolumeStatus field, until such as a resourceexists.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#volumeattributesclass(Alpha) Using this field requires the VolumeAttributesClass feature gate to be enabled.
+- `volume_mode` (String) volumeMode defines what type of volume is required by the claim.Value of Filesystem is implied when not included in claim spec.
- `volume_name` (String) volumeName is the binding reference to the PersistentVolume backing this claim.
@@ -2385,7 +2385,7 @@ Required:
Optional:
-- `api_group` (String) APIGroup is the group for the resource being referenced. If APIGroup is not specified, the specified Kind must be in the core API group. For any other third-party types, APIGroup is required.
+- `api_group` (String) APIGroup is the group for the resource being referenced.If APIGroup is not specified, the specified Kind must be in the core API group.For any other third-party types, APIGroup is required.
@@ -2398,8 +2398,8 @@ Required:
Optional:
-- `api_group` (String) APIGroup is the group for the resource being referenced. If APIGroup is not specified, the specified Kind must be in the core API group. For any other third-party types, APIGroup is required.
-- `namespace` (String) Namespace is the namespace of resource being referenced Note that when a namespace is specified, a gateway.networking.k8s.io/ReferenceGrant object is required in the referent namespace to allow that namespace's owner to accept the reference. See the ReferenceGrant documentation for details. (Alpha) This field requires the CrossNamespaceVolumeDataSource feature gate to be enabled.
+- `api_group` (String) APIGroup is the group for the resource being referenced.If APIGroup is not specified, the specified Kind must be in the core API group.For any other third-party types, APIGroup is required.
+- `namespace` (String) Namespace is the namespace of resource being referencedNote that when a namespace is specified, a gateway.networking.k8s.io/ReferenceGrant object is required in the referent namespace to allow that namespace's owner to accept the reference. See the ReferenceGrant documentation for details.(Alpha) This field requires the CrossNamespaceVolumeDataSource feature gate to be enabled.
@@ -2407,8 +2407,8 @@ Optional:
Optional:
-- `limits` (Map of String) Limits describes the maximum amount of compute resources allowed. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-- `requests` (Map of String) Requests describes the minimum amount of compute resources required. If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, otherwise to an implementation-defined value. Requests cannot exceed Limits. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
+- `limits` (Map of String) Limits describes the maximum amount of compute resources allowed.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
+- `requests` (Map of String) Requests describes the minimum amount of compute resources required.If Requests is omitted for a container, it defaults to Limits if that is explicitly specified,otherwise to an implementation-defined value. Requests cannot exceed Limits.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
@@ -2417,7 +2417,7 @@ Optional:
Optional:
- `match_expressions` (Attributes List) matchExpressions is a list of label selector requirements. The requirements are ANDed. (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--ephemeral--volume_claim_template--spec--selector--match_expressions))
-- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is 'key', the operator is 'In', and the values array contains only 'value'. The requirements are ANDed.
+- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.
### Nested Schema for `spec.integration.template.spec.volumes.ephemeral.volume_claim_template.spec.selector.match_expressions`
@@ -2425,11 +2425,11 @@ Optional:
Required:
- `key` (String) key is the label key that the selector applies to.
-- `operator` (String) operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist.
+- `operator` (String) operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.
Optional:
-- `values` (List of String) values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch.
+- `values` (List of String) values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.
@@ -2441,11 +2441,11 @@ Optional:
Optional:
-- `fs_type` (String) fsType is the filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified. TODO: how do we prevent errors in the filesystem from compromising the machine
+- `fs_type` (String) fsType is the filesystem type to mount.Must be a filesystem type supported by the host operating system.Ex. 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified.TODO: how do we prevent errors in the filesystem from compromising the machine
- `lun` (Number) lun is Optional: FC target lun number
-- `read_only` (Boolean) readOnly is Optional: Defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.
+- `read_only` (Boolean) readOnly is Optional: Defaults to false (read/write). ReadOnly here will forcethe ReadOnly setting in VolumeMounts.
- `target_ww_ns` (List of String) targetWWNs is Optional: FC target worldwide names (WWNs)
-- `wwids` (List of String) wwids Optional: FC volume world wide identifiers (wwids) Either wwids or combination of targetWWNs and lun must be set, but not both simultaneously.
+- `wwids` (List of String) wwids Optional: FC volume world wide identifiers (wwids)Either wwids or combination of targetWWNs and lun must be set, but not both simultaneously.
@@ -2457,17 +2457,17 @@ Required:
Optional:
-- `fs_type` (String) fsType is the filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. 'ext4', 'xfs', 'ntfs'. The default filesystem depends on FlexVolume script.
+- `fs_type` (String) fsType is the filesystem type to mount.Must be a filesystem type supported by the host operating system.Ex. 'ext4', 'xfs', 'ntfs'. The default filesystem depends on FlexVolume script.
- `options` (Map of String) options is Optional: this field holds extra command options if any.
-- `read_only` (Boolean) readOnly is Optional: defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.
-- `secret_ref` (Attributes) secretRef is Optional: secretRef is reference to the secret object containing sensitive information to pass to the plugin scripts. This may be empty if no secret object is specified. If the secret object contains more than one secret, all secrets are passed to the plugin scripts. (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--flex_volume--secret_ref))
+- `read_only` (Boolean) readOnly is Optional: defaults to false (read/write). ReadOnly here will forcethe ReadOnly setting in VolumeMounts.
+- `secret_ref` (Attributes) secretRef is Optional: secretRef is reference to the secret object containingsensitive information to pass to the plugin scripts. This may beempty if no secret object is specified. If the secret objectcontains more than one secret, all secrets are passed to the pluginscripts. (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--flex_volume--secret_ref))
### Nested Schema for `spec.integration.template.spec.volumes.flex_volume.secret_ref`
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
@@ -2476,7 +2476,7 @@ Optional:
Optional:
-- `dataset_name` (String) datasetName is Name of the dataset stored as metadata -> name on the dataset for Flocker should be considered as deprecated
+- `dataset_name` (String) datasetName is Name of the dataset stored as metadata -> name on the dataset for Flockershould be considered as deprecated
- `dataset_uuid` (String) datasetUUID is the UUID of the dataset. This is unique identifier of a Flocker dataset
@@ -2485,13 +2485,13 @@ Optional:
Required:
-- `pd_name` (String) pdName is unique name of the PD resource in GCE. Used to identify the disk in GCE. More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk
+- `pd_name` (String) pdName is unique name of the PD resource in GCE. Used to identify the disk in GCE.More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk
Optional:
-- `fs_type` (String) fsType is filesystem type of the volume that you want to mount. Tip: Ensure that the filesystem type is supported by the host operating system. Examples: 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified. More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk TODO: how do we prevent errors in the filesystem from compromising the machine
-- `partition` (Number) partition is the partition in the volume that you want to mount. If omitted, the default is to mount by volume name. Examples: For volume /dev/sda1, you specify the partition as '1'. Similarly, the volume partition for /dev/sda is '0' (or you can leave the property empty). More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk
-- `read_only` (Boolean) readOnly here will force the ReadOnly setting in VolumeMounts. Defaults to false. More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk
+- `fs_type` (String) fsType is filesystem type of the volume that you want to mount.Tip: Ensure that the filesystem type is supported by the host operating system.Examples: 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified.More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdiskTODO: how do we prevent errors in the filesystem from compromising the machine
+- `partition` (Number) partition is the partition in the volume that you want to mount.If omitted, the default is to mount by volume name.Examples: For volume /dev/sda1, you specify the partition as '1'.Similarly, the volume partition for /dev/sda is '0' (or you can leave the property empty).More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk
+- `read_only` (Boolean) readOnly here will force the ReadOnly setting in VolumeMounts.Defaults to false.More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk
@@ -2503,7 +2503,7 @@ Required:
Optional:
-- `directory` (String) directory is the target directory name. Must not contain or start with '..'. If '.' is supplied, the volume directory will be the git repository. Otherwise, if specified, the volume will contain the git repository in the subdirectory with the given name.
+- `directory` (String) directory is the target directory name.Must not contain or start with '..'. If '.' is supplied, the volume directory will be thegit repository. Otherwise, if specified, the volume will contain the git repository inthe subdirectory with the given name.
- `revision` (String) revision is the commit hash for the specified revision.
@@ -2512,12 +2512,12 @@ Optional:
Required:
-- `endpoints` (String) endpoints is the endpoint name that details Glusterfs topology. More info: https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod
-- `path` (String) path is the Glusterfs volume path. More info: https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod
+- `endpoints` (String) endpoints is the endpoint name that details Glusterfs topology.More info: https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod
+- `path` (String) path is the Glusterfs volume path.More info: https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod
Optional:
-- `read_only` (Boolean) readOnly here will force the Glusterfs volume to be mounted with read-only permissions. Defaults to false. More info: https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod
+- `read_only` (Boolean) readOnly here will force the Glusterfs volume to be mounted with read-only permissions.Defaults to false.More info: https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod
@@ -2525,11 +2525,11 @@ Optional:
Required:
-- `path` (String) path of the directory on the host. If the path is a symlink, it will follow the link to the real path. More info: https://kubernetes.io/docs/concepts/storage/volumes#hostpath
+- `path` (String) path of the directory on the host.If the path is a symlink, it will follow the link to the real path.More info: https://kubernetes.io/docs/concepts/storage/volumes#hostpath
Optional:
-- `type` (String) type for HostPath Volume Defaults to '' More info: https://kubernetes.io/docs/concepts/storage/volumes#hostpath
+- `type` (String) type for HostPath VolumeDefaults to ''More info: https://kubernetes.io/docs/concepts/storage/volumes#hostpath
@@ -2539,17 +2539,17 @@ Required:
- `iqn` (String) iqn is the target iSCSI Qualified Name.
- `lun` (Number) lun represents iSCSI Target Lun number.
-- `target_portal` (String) targetPortal is iSCSI Target Portal. The Portal is either an IP or ip_addr:port if the port is other than default (typically TCP ports 860 and 3260).
+- `target_portal` (String) targetPortal is iSCSI Target Portal. The Portal is either an IP or ip_addr:port if the portis other than default (typically TCP ports 860 and 3260).
Optional:
- `chap_auth_discovery` (Boolean) chapAuthDiscovery defines whether support iSCSI Discovery CHAP authentication
- `chap_auth_session` (Boolean) chapAuthSession defines whether support iSCSI Session CHAP authentication
-- `fs_type` (String) fsType is the filesystem type of the volume that you want to mount. Tip: Ensure that the filesystem type is supported by the host operating system. Examples: 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified. More info: https://kubernetes.io/docs/concepts/storage/volumes#iscsi TODO: how do we prevent errors in the filesystem from compromising the machine
-- `initiator_name` (String) initiatorName is the custom iSCSI Initiator Name. If initiatorName is specified with iscsiInterface simultaneously, new iSCSI interface : will be created for the connection.
-- `iscsi_interface` (String) iscsiInterface is the interface Name that uses an iSCSI transport. Defaults to 'default' (tcp).
-- `portals` (List of String) portals is the iSCSI Target Portal List. The portal is either an IP or ip_addr:port if the port is other than default (typically TCP ports 860 and 3260).
-- `read_only` (Boolean) readOnly here will force the ReadOnly setting in VolumeMounts. Defaults to false.
+- `fs_type` (String) fsType is the filesystem type of the volume that you want to mount.Tip: Ensure that the filesystem type is supported by the host operating system.Examples: 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified.More info: https://kubernetes.io/docs/concepts/storage/volumes#iscsiTODO: how do we prevent errors in the filesystem from compromising the machine
+- `initiator_name` (String) initiatorName is the custom iSCSI Initiator Name.If initiatorName is specified with iscsiInterface simultaneously, new iSCSI interface: will be created for the connection.
+- `iscsi_interface` (String) iscsiInterface is the interface Name that uses an iSCSI transport.Defaults to 'default' (tcp).
+- `portals` (List of String) portals is the iSCSI Target Portal List. The portal is either an IP or ip_addr:port if the portis other than default (typically TCP ports 860 and 3260).
+- `read_only` (Boolean) readOnly here will force the ReadOnly setting in VolumeMounts.Defaults to false.
- `secret_ref` (Attributes) secretRef is the CHAP Secret for iSCSI target and initiator authentication (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--iscsi--secret_ref))
@@ -2557,7 +2557,7 @@ Optional:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
@@ -2566,12 +2566,12 @@ Optional:
Required:
-- `path` (String) path that is exported by the NFS server. More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs
-- `server` (String) server is the hostname or IP address of the NFS server. More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs
+- `path` (String) path that is exported by the NFS server.More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs
+- `server` (String) server is the hostname or IP address of the NFS server.More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs
Optional:
-- `read_only` (Boolean) readOnly here will force the NFS export to be mounted with read-only permissions. Defaults to false. More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs
+- `read_only` (Boolean) readOnly here will force the NFS export to be mounted with read-only permissions.Defaults to false.More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs
@@ -2579,11 +2579,11 @@ Optional:
Required:
-- `claim_name` (String) claimName is the name of a PersistentVolumeClaim in the same namespace as the pod using this volume. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims
+- `claim_name` (String) claimName is the name of a PersistentVolumeClaim in the same namespace as the pod using this volume.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims
Optional:
-- `read_only` (Boolean) readOnly Will force the ReadOnly setting in VolumeMounts. Default false.
+- `read_only` (Boolean) readOnly Will force the ReadOnly setting in VolumeMounts.Default false.
@@ -2595,7 +2595,7 @@ Required:
Optional:
-- `fs_type` (String) fsType is the filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified.
+- `fs_type` (String) fsType is the filesystem type to mount.Must be a filesystem type supported by the host operating system.Ex. 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified.
@@ -2607,8 +2607,8 @@ Required:
Optional:
-- `fs_type` (String) fSType represents the filesystem type to mount Must be a filesystem type supported by the host operating system. Ex. 'ext4', 'xfs'. Implicitly inferred to be 'ext4' if unspecified.
-- `read_only` (Boolean) readOnly defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.
+- `fs_type` (String) fSType represents the filesystem type to mountMust be a filesystem type supported by the host operating system.Ex. 'ext4', 'xfs'. Implicitly inferred to be 'ext4' if unspecified.
+- `read_only` (Boolean) readOnly defaults to false (read/write). ReadOnly here will forcethe ReadOnly setting in VolumeMounts.
@@ -2616,7 +2616,7 @@ Optional:
Optional:
-- `default_mode` (Number) defaultMode are the mode bits used to set permissions on created files by default. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. Directories within the path are not affected by this setting. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
+- `default_mode` (Number) defaultMode are the mode bits used to set permissions on created files by default.Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511.YAML accepts both octal and decimal values, JSON requires decimal values for mode bits.Directories within the path are not affected by this setting.This might be in conflict with other options that affect the filemode, like fsGroup, and the result can be other mode bits set.
- `sources` (Attributes List) sources is the list of volume projections (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--projected--sources))
@@ -2624,7 +2624,7 @@ Optional:
Optional:
-- `cluster_trust_bundle` (Attributes) ClusterTrustBundle allows a pod to access the '.spec.trustBundle' field of ClusterTrustBundle objects in an auto-updating file. Alpha, gated by the ClusterTrustBundleProjection feature gate. ClusterTrustBundle objects can either be selected by name, or by the combination of signer name and a label selector. Kubelet performs aggressive normalization of the PEM contents written into the pod filesystem. Esoteric PEM features such as inter-block comments and block headers are stripped. Certificates are deduplicated. The ordering of certificates within the file is arbitrary, and Kubelet may change the order over time. (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--projected--sources--cluster_trust_bundle))
+- `cluster_trust_bundle` (Attributes) ClusterTrustBundle allows a pod to access the '.spec.trustBundle' fieldof ClusterTrustBundle objects in an auto-updating file.Alpha, gated by the ClusterTrustBundleProjection feature gate.ClusterTrustBundle objects can either be selected by name, or by thecombination of signer name and a label selector.Kubelet performs aggressive normalization of the PEM contents writteninto the pod filesystem. Esoteric PEM features such as inter-blockcomments and block headers are stripped. Certificates are deduplicated.The ordering of certificates within the file is arbitrary, and Kubeletmay change the order over time. (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--projected--sources--cluster_trust_bundle))
- `config_map` (Attributes) configMap information about the configMap data to project (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--projected--sources--config_map))
- `downward_api` (Attributes) downwardAPI information about the downwardAPI data to project (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--projected--sources--downward_api))
- `secret` (Attributes) secret information about the secret data to project (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--projected--sources--secret))
@@ -2639,10 +2639,10 @@ Required:
Optional:
-- `label_selector` (Attributes) Select all ClusterTrustBundles that match this label selector. Only has effect if signerName is set. Mutually-exclusive with name. If unset, interpreted as 'match nothing'. If set but empty, interpreted as 'match everything'. (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--projected--sources--cluster_trust_bundle--label_selector))
-- `name` (String) Select a single ClusterTrustBundle by object name. Mutually-exclusive with signerName and labelSelector.
-- `optional` (Boolean) If true, don't block pod startup if the referenced ClusterTrustBundle(s) aren't available. If using name, then the named ClusterTrustBundle is allowed not to exist. If using signerName, then the combination of signerName and labelSelector is allowed to match zero ClusterTrustBundles.
-- `signer_name` (String) Select all ClusterTrustBundles that match this signer name. Mutually-exclusive with name. The contents of all selected ClusterTrustBundles will be unified and deduplicated.
+- `label_selector` (Attributes) Select all ClusterTrustBundles that match this label selector. Only haseffect if signerName is set. Mutually-exclusive with name. If unset,interpreted as 'match nothing'. If set but empty, interpreted as 'matcheverything'. (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--projected--sources--cluster_trust_bundle--label_selector))
+- `name` (String) Select a single ClusterTrustBundle by object name. Mutually-exclusivewith signerName and labelSelector.
+- `optional` (Boolean) If true, don't block pod startup if the referenced ClusterTrustBundle(s)aren't available. If using name, then the named ClusterTrustBundle isallowed not to exist. If using signerName, then the combination ofsignerName and labelSelector is allowed to match zeroClusterTrustBundles.
+- `signer_name` (String) Select all ClusterTrustBundles that match this signer name.Mutually-exclusive with name. The contents of all selectedClusterTrustBundles will be unified and deduplicated.
### Nested Schema for `spec.integration.template.spec.volumes.projected.sources.cluster_trust_bundle.label_selector`
@@ -2650,7 +2650,7 @@ Optional:
Optional:
- `match_expressions` (Attributes List) matchExpressions is a list of label selector requirements. The requirements are ANDed. (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--projected--sources--cluster_trust_bundle--label_selector--match_expressions))
-- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is 'key', the operator is 'In', and the values array contains only 'value'. The requirements are ANDed.
+- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.
### Nested Schema for `spec.integration.template.spec.volumes.projected.sources.cluster_trust_bundle.label_selector.match_expressions`
@@ -2658,11 +2658,11 @@ Optional:
Required:
- `key` (String) key is the label key that the selector applies to.
-- `operator` (String) operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist.
+- `operator` (String) operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.
Optional:
-- `values` (List of String) values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch.
+- `values` (List of String) values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.
@@ -2672,8 +2672,8 @@ Optional:
Optional:
-- `items` (Attributes List) items if unspecified, each key-value pair in the Data field of the referenced ConfigMap will be projected into the volume as a file whose name is the key and content is the value. If specified, the listed keys will be projected into the specified paths, and unlisted keys will not be present. If a key is specified which is not present in the ConfigMap, the volume setup will error unless it is marked optional. Paths must be relative and may not contain the '..' path or start with '..'. (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--projected--sources--config_map--items))
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `items` (Attributes List) items if unspecified, each key-value pair in the Data field of the referencedConfigMap will be projected into the volume as a file whose name is thekey and content is the value. If specified, the listed keys will beprojected into the specified paths, and unlisted keys will not bepresent. If a key is specified which is not present in the ConfigMap,the volume setup will error unless it is marked optional. Paths must berelative and may not contain the '..' path or start with '..'. (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--projected--sources--config_map--items))
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
- `optional` (Boolean) optional specify whether the ConfigMap or its keys must be defined
@@ -2682,11 +2682,11 @@ Optional:
Required:
- `key` (String) key is the key to project.
-- `path` (String) path is the relative path of the file to map the key to. May not be an absolute path. May not contain the path element '..'. May not start with the string '..'.
+- `path` (String) path is the relative path of the file to map the key to.May not be an absolute path.May not contain the path element '..'.May not start with the string '..'.
Optional:
-- `mode` (Number) mode is Optional: mode bits used to set permissions on this file. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. If not specified, the volume defaultMode will be used. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
+- `mode` (Number) mode is Optional: mode bits used to set permissions on this file.Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511.YAML accepts both octal and decimal values, JSON requires decimal values for mode bits.If not specified, the volume defaultMode will be used.This might be in conflict with other options that affect the filemode, like fsGroup, and the result can be other mode bits set.
@@ -2707,8 +2707,8 @@ Required:
Optional:
- `field_ref` (Attributes) Required: Selects a field of the pod: only annotations, labels, name and namespace are supported. (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--projected--sources--downward_api--items--field_ref))
-- `mode` (Number) Optional: mode bits used to set permissions on this file, must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. If not specified, the volume defaultMode will be used. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
-- `resource_field_ref` (Attributes) Selects a resource of the container: only resources limits and requests (limits.cpu, limits.memory, requests.cpu and requests.memory) are currently supported. (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--projected--sources--downward_api--items--resource_field_ref))
+- `mode` (Number) Optional: mode bits used to set permissions on this file, must be an octal valuebetween 0000 and 0777 or a decimal value between 0 and 511.YAML accepts both octal and decimal values, JSON requires decimal values for mode bits.If not specified, the volume defaultMode will be used.This might be in conflict with other options that affect the filemode, like fsGroup, and the result can be other mode bits set.
+- `resource_field_ref` (Attributes) Selects a resource of the container: only resources limits and requests(limits.cpu, limits.memory, requests.cpu and requests.memory) are currently supported. (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--projected--sources--downward_api--items--resource_field_ref))
### Nested Schema for `spec.integration.template.spec.volumes.projected.sources.downward_api.items.field_ref`
@@ -2742,8 +2742,8 @@ Optional:
Optional:
-- `items` (Attributes List) items if unspecified, each key-value pair in the Data field of the referenced Secret will be projected into the volume as a file whose name is the key and content is the value. If specified, the listed keys will be projected into the specified paths, and unlisted keys will not be present. If a key is specified which is not present in the Secret, the volume setup will error unless it is marked optional. Paths must be relative and may not contain the '..' path or start with '..'. (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--projected--sources--secret--items))
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `items` (Attributes List) items if unspecified, each key-value pair in the Data field of the referencedSecret will be projected into the volume as a file whose name is thekey and content is the value. If specified, the listed keys will beprojected into the specified paths, and unlisted keys will not bepresent. If a key is specified which is not present in the Secret,the volume setup will error unless it is marked optional. Paths must berelative and may not contain the '..' path or start with '..'. (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--projected--sources--secret--items))
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
- `optional` (Boolean) optional field specify whether the Secret or its key must be defined
@@ -2752,11 +2752,11 @@ Optional:
Required:
- `key` (String) key is the key to project.
-- `path` (String) path is the relative path of the file to map the key to. May not be an absolute path. May not contain the path element '..'. May not start with the string '..'.
+- `path` (String) path is the relative path of the file to map the key to.May not be an absolute path.May not contain the path element '..'.May not start with the string '..'.
Optional:
-- `mode` (Number) mode is Optional: mode bits used to set permissions on this file. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. If not specified, the volume defaultMode will be used. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
+- `mode` (Number) mode is Optional: mode bits used to set permissions on this file.Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511.YAML accepts both octal and decimal values, JSON requires decimal values for mode bits.If not specified, the volume defaultMode will be used.This might be in conflict with other options that affect the filemode, like fsGroup, and the result can be other mode bits set.
@@ -2765,12 +2765,12 @@ Optional:
Required:
-- `path` (String) path is the path relative to the mount point of the file to project the token into.
+- `path` (String) path is the path relative to the mount point of the file to project thetoken into.
Optional:
-- `audience` (String) audience is the intended audience of the token. A recipient of a token must identify itself with an identifier specified in the audience of the token, and otherwise should reject the token. The audience defaults to the identifier of the apiserver.
-- `expiration_seconds` (Number) expirationSeconds is the requested duration of validity of the service account token. As the token approaches expiration, the kubelet volume plugin will proactively rotate the service account token. The kubelet will start trying to rotate the token if the token is older than 80 percent of its time to live or if the token is older than 24 hours.Defaults to 1 hour and must be at least 10 minutes.
+- `audience` (String) audience is the intended audience of the token. A recipient of a tokenmust identify itself with an identifier specified in the audience of thetoken, and otherwise should reject the token. The audience defaults to theidentifier of the apiserver.
+- `expiration_seconds` (Number) expirationSeconds is the requested duration of validity of the serviceaccount token. As the token approaches expiration, the kubelet volumeplugin will proactively rotate the service account token. The kubelet willstart trying to rotate the token if the token is older than 80 percent ofits time to live or if the token is older than 24 hours.Defaults to 1 hourand must be at least 10 minutes.
@@ -2780,15 +2780,15 @@ Optional:
Required:
-- `registry` (String) registry represents a single or multiple Quobyte Registry services specified as a string as host:port pair (multiple entries are separated with commas) which acts as the central registry for volumes
+- `registry` (String) registry represents a single or multiple Quobyte Registry servicesspecified as a string as host:port pair (multiple entries are separated with commas)which acts as the central registry for volumes
- `volume` (String) volume is a string that references an already created Quobyte volume by name.
Optional:
-- `group` (String) group to map volume access to Default is no group
-- `read_only` (Boolean) readOnly here will force the Quobyte volume to be mounted with read-only permissions. Defaults to false.
-- `tenant` (String) tenant owning the given Quobyte volume in the Backend Used with dynamically provisioned Quobyte volumes, value is set by the plugin
-- `user` (String) user to map volume access to Defaults to serivceaccount user
+- `group` (String) group to map volume access toDefault is no group
+- `read_only` (Boolean) readOnly here will force the Quobyte volume to be mounted with read-only permissions.Defaults to false.
+- `tenant` (String) tenant owning the given Quobyte volume in the BackendUsed with dynamically provisioned Quobyte volumes, value is set by the plugin
+- `user` (String) user to map volume access toDefaults to serivceaccount user
@@ -2796,24 +2796,24 @@ Optional:
Required:
-- `image` (String) image is the rados image name. More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
-- `monitors` (List of String) monitors is a collection of Ceph monitors. More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
+- `image` (String) image is the rados image name.More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
+- `monitors` (List of String) monitors is a collection of Ceph monitors.More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
Optional:
-- `fs_type` (String) fsType is the filesystem type of the volume that you want to mount. Tip: Ensure that the filesystem type is supported by the host operating system. Examples: 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified. More info: https://kubernetes.io/docs/concepts/storage/volumes#rbd TODO: how do we prevent errors in the filesystem from compromising the machine
-- `keyring` (String) keyring is the path to key ring for RBDUser. Default is /etc/ceph/keyring. More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
-- `pool` (String) pool is the rados pool name. Default is rbd. More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
-- `read_only` (Boolean) readOnly here will force the ReadOnly setting in VolumeMounts. Defaults to false. More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
-- `secret_ref` (Attributes) secretRef is name of the authentication secret for RBDUser. If provided overrides keyring. Default is nil. More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--rbd--secret_ref))
-- `user` (String) user is the rados user name. Default is admin. More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
+- `fs_type` (String) fsType is the filesystem type of the volume that you want to mount.Tip: Ensure that the filesystem type is supported by the host operating system.Examples: 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified.More info: https://kubernetes.io/docs/concepts/storage/volumes#rbdTODO: how do we prevent errors in the filesystem from compromising the machine
+- `keyring` (String) keyring is the path to key ring for RBDUser.Default is /etc/ceph/keyring.More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
+- `pool` (String) pool is the rados pool name.Default is rbd.More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
+- `read_only` (Boolean) readOnly here will force the ReadOnly setting in VolumeMounts.Defaults to false.More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
+- `secret_ref` (Attributes) secretRef is name of the authentication secret for RBDUser. If providedoverrides keyring.Default is nil.More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--rbd--secret_ref))
+- `user` (String) user is the rados user name.Default is admin.More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
### Nested Schema for `spec.integration.template.spec.volumes.rbd.secret_ref`
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
@@ -2823,25 +2823,25 @@ Optional:
Required:
- `gateway` (String) gateway is the host address of the ScaleIO API Gateway.
-- `secret_ref` (Attributes) secretRef references to the secret for ScaleIO user and other sensitive information. If this is not provided, Login operation will fail. (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--scale_io--secret_ref))
+- `secret_ref` (Attributes) secretRef references to the secret for ScaleIO user and othersensitive information. If this is not provided, Login operation will fail. (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--scale_io--secret_ref))
- `system` (String) system is the name of the storage system as configured in ScaleIO.
Optional:
-- `fs_type` (String) fsType is the filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. 'ext4', 'xfs', 'ntfs'. Default is 'xfs'.
+- `fs_type` (String) fsType is the filesystem type to mount.Must be a filesystem type supported by the host operating system.Ex. 'ext4', 'xfs', 'ntfs'.Default is 'xfs'.
- `protection_domain` (String) protectionDomain is the name of the ScaleIO Protection Domain for the configured storage.
-- `read_only` (Boolean) readOnly Defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.
+- `read_only` (Boolean) readOnly Defaults to false (read/write). ReadOnly here will forcethe ReadOnly setting in VolumeMounts.
- `ssl_enabled` (Boolean) sslEnabled Flag enable/disable SSL communication with Gateway, default false
-- `storage_mode` (String) storageMode indicates whether the storage for a volume should be ThickProvisioned or ThinProvisioned. Default is ThinProvisioned.
+- `storage_mode` (String) storageMode indicates whether the storage for a volume should be ThickProvisioned or ThinProvisioned.Default is ThinProvisioned.
- `storage_pool` (String) storagePool is the ScaleIO Storage Pool associated with the protection domain.
-- `volume_name` (String) volumeName is the name of a volume already created in the ScaleIO system that is associated with this volume source.
+- `volume_name` (String) volumeName is the name of a volume already created in the ScaleIO systemthat is associated with this volume source.
### Nested Schema for `spec.integration.template.spec.volumes.scale_io.secret_ref`
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
@@ -2850,10 +2850,10 @@ Optional:
Optional:
-- `default_mode` (Number) defaultMode is Optional: mode bits used to set permissions on created files by default. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. Defaults to 0644. Directories within the path are not affected by this setting. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
-- `items` (Attributes List) items If unspecified, each key-value pair in the Data field of the referenced Secret will be projected into the volume as a file whose name is the key and content is the value. If specified, the listed keys will be projected into the specified paths, and unlisted keys will not be present. If a key is specified which is not present in the Secret, the volume setup will error unless it is marked optional. Paths must be relative and may not contain the '..' path or start with '..'. (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--secret--items))
+- `default_mode` (Number) defaultMode is Optional: mode bits used to set permissions on created files by default.Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511.YAML accepts both octal and decimal values, JSON requires decimal valuesfor mode bits. Defaults to 0644.Directories within the path are not affected by this setting.This might be in conflict with other options that affect the filemode, like fsGroup, and the result can be other mode bits set.
+- `items` (Attributes List) items If unspecified, each key-value pair in the Data field of the referencedSecret will be projected into the volume as a file whose name is thekey and content is the value. If specified, the listed keys will beprojected into the specified paths, and unlisted keys will not bepresent. If a key is specified which is not present in the Secret,the volume setup will error unless it is marked optional. Paths must berelative and may not contain the '..' path or start with '..'. (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--secret--items))
- `optional` (Boolean) optional field specify whether the Secret or its keys must be defined
-- `secret_name` (String) secretName is the name of the secret in the pod's namespace to use. More info: https://kubernetes.io/docs/concepts/storage/volumes#secret
+- `secret_name` (String) secretName is the name of the secret in the pod's namespace to use.More info: https://kubernetes.io/docs/concepts/storage/volumes#secret
### Nested Schema for `spec.integration.template.spec.volumes.secret.items`
@@ -2861,11 +2861,11 @@ Optional:
Required:
- `key` (String) key is the key to project.
-- `path` (String) path is the relative path of the file to map the key to. May not be an absolute path. May not contain the path element '..'. May not start with the string '..'.
+- `path` (String) path is the relative path of the file to map the key to.May not be an absolute path.May not contain the path element '..'.May not start with the string '..'.
Optional:
-- `mode` (Number) mode is Optional: mode bits used to set permissions on this file. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. If not specified, the volume defaultMode will be used. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
+- `mode` (Number) mode is Optional: mode bits used to set permissions on this file.Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511.YAML accepts both octal and decimal values, JSON requires decimal values for mode bits.If not specified, the volume defaultMode will be used.This might be in conflict with other options that affect the filemode, like fsGroup, and the result can be other mode bits set.
@@ -2874,18 +2874,18 @@ Optional:
Optional:
-- `fs_type` (String) fsType is the filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified.
-- `read_only` (Boolean) readOnly defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.
-- `secret_ref` (Attributes) secretRef specifies the secret to use for obtaining the StorageOS API credentials. If not specified, default values will be attempted. (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--storageos--secret_ref))
-- `volume_name` (String) volumeName is the human-readable name of the StorageOS volume. Volume names are only unique within a namespace.
-- `volume_namespace` (String) volumeNamespace specifies the scope of the volume within StorageOS. If no namespace is specified then the Pod's namespace will be used. This allows the Kubernetes name scoping to be mirrored within StorageOS for tighter integration. Set VolumeName to any name to override the default behaviour. Set to 'default' if you are not using namespaces within StorageOS. Namespaces that do not pre-exist within StorageOS will be created.
+- `fs_type` (String) fsType is the filesystem type to mount.Must be a filesystem type supported by the host operating system.Ex. 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified.
+- `read_only` (Boolean) readOnly defaults to false (read/write). ReadOnly here will forcethe ReadOnly setting in VolumeMounts.
+- `secret_ref` (Attributes) secretRef specifies the secret to use for obtaining the StorageOS APIcredentials. If not specified, default values will be attempted. (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--storageos--secret_ref))
+- `volume_name` (String) volumeName is the human-readable name of the StorageOS volume. Volumenames are only unique within a namespace.
+- `volume_namespace` (String) volumeNamespace specifies the scope of the volume within StorageOS. If nonamespace is specified then the Pod's namespace will be used. This allows theKubernetes name scoping to be mirrored within StorageOS for tighter integration.Set VolumeName to any name to override the default behaviour.Set to 'default' if you are not using namespaces within StorageOS.Namespaces that do not pre-exist within StorageOS will be created.
### Nested Schema for `spec.integration.template.spec.volumes.storageos.secret_ref`
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
@@ -2898,7 +2898,7 @@ Required:
Optional:
-- `fs_type` (String) fsType is filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified.
+- `fs_type` (String) fsType is filesystem type to mount.Must be a filesystem type supported by the host operating system.Ex. 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified.
- `storage_policy_id` (String) storagePolicyID is the storage Policy Based Management (SPBM) profile ID associated with the StoragePolicyName.
- `storage_policy_name` (String) storagePolicyName is the storage Policy Based Management (SPBM) profile name.
@@ -2943,7 +2943,7 @@ Optional:
- `prometheus` (Attributes) The configuration of Prometheus trait (see [below for nested schema](#nestedatt--spec--integration--traits--prometheus))
- `pull_secret` (Attributes) The configuration of Pull Secret trait (see [below for nested schema](#nestedatt--spec--integration--traits--pull_secret))
- `quarkus` (Attributes) The configuration of Quarkus trait (see [below for nested schema](#nestedatt--spec--integration--traits--quarkus))
-- `registry` (Attributes) The configuration of Registry trait Deprecated: use jvm trait or read documentation. (see [below for nested schema](#nestedatt--spec--integration--traits--registry))
+- `registry` (Attributes) The configuration of Registry trait (support removed since version 2.5.0).Deprecated: use jvm trait or read documentation. (see [below for nested schema](#nestedatt--spec--integration--traits--registry))
- `route` (Attributes) The configuration of Route trait (see [below for nested schema](#nestedatt--spec--integration--traits--route))
- `security_context` (Attributes) The configuration of Security Context trait (see [below for nested schema](#nestedatt--spec--integration--traits--security_context))
- `service` (Attributes) The configuration of Service trait (see [below for nested schema](#nestedatt--spec--integration--traits--service))
@@ -2958,13 +2958,13 @@ Optional:
Optional:
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
- `node_affinity_labels` (List of String) Defines a set of nodes the integration pod(s) are eligible to be scheduled on, based on labels on the node.
- `pod_affinity` (Boolean) Always co-locates multiple replicas of the integration in the same node (default 'false').
-- `pod_affinity_labels` (List of String) Defines a set of pods (namely those matching the label selector, relative to the given namespace) that the integration pod(s) should be co-located with.
+- `pod_affinity_labels` (List of String) Defines a set of pods (namely those matching the label selector, relative to the given namespace) that theintegration pod(s) should be co-located with.
- `pod_anti_affinity` (Boolean) Never co-locates multiple replicas of the integration in the same node (default 'false').
-- `pod_anti_affinity_labels` (List of String) Defines a set of pods (namely those matching the label selector, relative to the given namespace) that the integration pod(s) should not be co-located with.
+- `pod_anti_affinity_labels` (List of String) Defines a set of pods (namely those matching the label selector, relative to the given namespace) that theintegration pod(s) should not be co-located with.
@@ -2973,27 +2973,27 @@ Optional:
Optional:
- `annotations` (Map of String) When using 'pod' strategy, annotation to use for the builder pod.
-- `base_image` (String) Specify a base image. In order to have the application working properly it must be a container image which has a Java JDK installed and ready to use on path (ie '/usr/bin/java').
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `base_image` (String) Specify a base image. In order to have the application working properly it must be a container image which has a Java JDKinstalled and ready to use on path (ie '/usr/bin/java').
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Deprecated: no longer in use.
- `incremental_image_build` (Boolean) Use the incremental image build option, to reuse existing containers (default 'true')
-- `limit_cpu` (String) When using 'pod' strategy, the maximum amount of CPU required by the pod builder. Deprecated: use TasksRequestCPU instead with task name 'builder'.
-- `limit_memory` (String) When using 'pod' strategy, the maximum amount of memory required by the pod builder. Deprecated: use TasksRequestCPU instead with task name 'builder'.
-- `maven_profiles` (List of String) A list of references pointing to configmaps/secrets that contains a maven profile. This configmap/secret is a resource of the IntegrationKit created, therefore it needs to be present in the namespace where the operator is going to create the IntegrationKit. The content of the maven profile is expected to be a text containing a valid maven profile starting with '' and ending with '' that will be integrated as an inline profile in the POM. Syntax: [configmap|secret]:name[/key], where name represents the resource name, key optionally represents the resource key to be filtered (default key value = profile.xml).
+- `limit_cpu` (String) When using 'pod' strategy, the maximum amount of CPU required by the pod builder.Deprecated: use TasksRequestCPU instead with task name 'builder'.
+- `limit_memory` (String) When using 'pod' strategy, the maximum amount of memory required by the pod builder.Deprecated: use TasksRequestCPU instead with task name 'builder'.
+- `maven_profiles` (List of String) A list of references pointing to configmaps/secrets that contains a maven profile.This configmap/secret is a resource of the IntegrationKit created, therefore it needs to be present in the namespace where the operator is going to create the IntegrationKit.The content of the maven profile is expected to be a text containing a valid maven profile starting with '' and ending with '' that will be integrated as an inline profile in the POM.Syntax: [configmap|secret]:name[/key], where name represents the resource name, key optionally represents the resource key to be filtered (default key value = profile.xml).
- `node_selector` (Map of String) Defines a set of nodes the builder pod is eligible to be scheduled on, based on labels on the node.
- `order_strategy` (String) The build order strategy to use, either 'dependencies', 'fifo' or 'sequential' (default is the platform default)
- `platforms` (List of String) The list of manifest platforms to use to build a container image (default 'linux/amd64').
- `properties` (List of String) A list of properties to be provided to the build task
-- `request_cpu` (String) When using 'pod' strategy, the minimum amount of CPU required by the pod builder. Deprecated: use TasksRequestCPU instead with task name 'builder'.
-- `request_memory` (String) When using 'pod' strategy, the minimum amount of memory required by the pod builder. Deprecated: use TasksRequestCPU instead with task name 'builder'.
+- `request_cpu` (String) When using 'pod' strategy, the minimum amount of CPU required by the pod builder.Deprecated: use TasksRequestCPU instead with task name 'builder'.
+- `request_memory` (String) When using 'pod' strategy, the minimum amount of memory required by the pod builder.Deprecated: use TasksRequestCPU instead with task name 'builder'.
- `strategy` (String) The strategy to use, either 'pod' or 'routine' (default 'routine')
- `tasks` (List of String) A list of tasks to be executed (available only when using 'pod' strategy) with format ';;'.
-- `tasks_filter` (String) A list of tasks sorted by the order of execution in a csv format, ie, ',,...'. Mind that you must include also the operator tasks ('builder', 'quarkus-native', 'package', 'jib', 's2i') if you need to execute them. Useful only with 'pod' strategy.
+- `tasks_filter` (String) A list of tasks sorted by the order of execution in a csv format, ie, ',,...'.Mind that you must include also the operator tasks ('builder', 'quarkus-native', 'package', 'jib', 's2i')if you need to execute them. Useful only with 'pod' strategy.
- `tasks_limit_cpu` (List of String) A list of limit cpu configuration for the specific task with format ':'.
- `tasks_limit_memory` (List of String) A list of limit memory configuration for the specific task with format ':'.
- `tasks_request_cpu` (List of String) A list of request cpu configuration for the specific task with format ':'.
- `tasks_request_memory` (List of String) A list of request memory configuration for the specific task with format ':'.
-- `verbose` (Boolean) Enable verbose logging on build components that support it (e.g. Kaniko build pod). Deprecated no longer in use
+- `verbose` (Boolean) Enable verbose logging on build components that support it (e.g. Kaniko build pod).Deprecated no longer in use
@@ -3001,10 +3001,10 @@ Optional:
Optional:
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Deprecated: no longer in use.
- `properties` (List of String) A list of properties to be provided to the Integration runtime
-- `runtime_version` (String) The camel-k-runtime version to use for the integration. It overrides the default version set in the Integration Platform. You can use a fixed version (for example '3.2.3') or a semantic version (for example '3.x') which will try to resolve to the best matching Catalog existing on the cluster.
+- `runtime_version` (String) The camel-k-runtime version to use for the integration. It overrides the default version set in the Integration Platform.You can use a fixed version (for example '3.2.3') or a semantic version (for example '3.x') which will try to resolveto the best matching Catalog existing on the cluster.
@@ -3016,10 +3016,10 @@ Optional:
- `auto` (Boolean) To automatically enable the trait
- `capabilities_add` (List of String) Security Context Capabilities Add configuration (default none).
- `capabilities_drop` (List of String) Security Context Capabilities Drop configuration (default ALL).
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Deprecated: no longer in use.
- `expose` (Boolean) Can be used to enable/disable exposure via kubernetes Service.
-- `image` (String) The main container image to use for the Integration. When using this parameter the operator will create a synthetic IntegrationKit which won't be able to execute traits requiring CamelCatalog. If the container image you're using is coming from an IntegrationKit, use instead Integration '.spec.integrationKit' parameter. If you're moving the Integration across environments, you will also need to create an 'external' IntegrationKit.
+- `image` (String) The main container image to use for the Integration. When using this parameter the operator will create a synthetic IntegrationKit whichwon't be able to execute traits requiring CamelCatalog. If the container image you're using is coming from an IntegrationKit, use insteadIntegration '.spec.integrationKit' parameter. If you're moving the Integration across environments, you will also need to create an 'external' IntegrationKit.
- `image_pull_policy` (String) The pull policy: Always|Never|IfNotPresent
- `limit_cpu` (String) The maximum amount of CPU to be provided (default 500 millicores).
- `limit_memory` (String) The maximum amount of memory to be provided (default 512 Mi).
@@ -3040,16 +3040,16 @@ Optional:
Optional:
-- `active_deadline_seconds` (Number) Specifies the duration in seconds, relative to the start time, that the job may be continuously active before it is considered to be failed. It defaults to 60s.
-- `auto` (Boolean) Automatically deploy the integration as CronJob when all routes are either starting from a periodic consumer (only 'cron', 'timer' and 'quartz' are supported) or a passive consumer (e.g. 'direct' is a passive consumer). It's required that all periodic consumers have the same period, and it can be expressed as cron schedule (e.g. '1m' can be expressed as '0/1 * * * *', while '35m' or '50s' cannot).
-- `backoff_limit` (Number) Specifies the number of retries before marking the job failed. It defaults to 2.
-- `components` (String) A comma separated list of the Camel components that need to be customized in order for them to work when the schedule is triggered externally by Kubernetes. A specific customizer is activated for each specified component. E.g. for the 'timer' component, the 'cron-timer' customizer is activated (it's present in the 'org.apache.camel.k:camel-k-cron' library). Supported components are currently: 'cron', 'timer' and 'quartz'.
-- `concurrency_policy` (String) Specifies how to treat concurrent executions of a Job. Valid values are: - 'Allow': allows CronJobs to run concurrently; - 'Forbid' (default): forbids concurrent runs, skipping next run if previous run hasn't finished yet; - 'Replace': cancels currently running job and replaces it with a new one
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `active_deadline_seconds` (Number) Specifies the duration in seconds, relative to the start time, that the jobmay be continuously active before it is considered to be failed.It defaults to 60s.
+- `auto` (Boolean) Automatically deploy the integration as CronJob when all routes areeither starting from a periodic consumer (only 'cron', 'timer' and 'quartz' are supported) or a passive consumer (e.g. 'direct' is a passive consumer).It's required that all periodic consumers have the same period, and it can be expressed as cron schedule (e.g. '1m' can be expressed as '0/1 * * * *',while '35m' or '50s' cannot).
+- `backoff_limit` (Number) Specifies the number of retries before marking the job failed.It defaults to 2.
+- `components` (String) A comma separated list of the Camel components that need to be customized in order for them to work when the schedule is triggered externally by Kubernetes.A specific customizer is activated for each specified component. E.g. for the 'timer' component, the 'cron-timer' customizer isactivated (it's present in the 'org.apache.camel.k:camel-k-cron' library).Supported components are currently: 'cron', 'timer' and 'quartz'.
+- `concurrency_policy` (String) Specifies how to treat concurrent executions of a Job.Valid values are:- 'Allow': allows CronJobs to run concurrently;- 'Forbid' (default): forbids concurrent runs, skipping next run if previous run hasn't finished yet;- 'Replace': cancels currently running job and replaces it with a new one
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
-- `fallback` (Boolean) Use the default Camel implementation of the 'cron' endpoint ('quartz') instead of trying to materialize the integration as Kubernetes CronJob.
-- `schedule` (String) The CronJob schedule for the whole integration. If multiple routes are declared, they must have the same schedule for this mechanism to work correctly.
-- `starting_deadline_seconds` (Number) Optional deadline in seconds for starting the job if it misses scheduled time for any reason. Missed jobs executions will be counted as failed ones.
+- `fallback` (Boolean) Use the default Camel implementation of the 'cron' endpoint ('quartz') instead of trying to materialize the integrationas Kubernetes CronJob.
+- `schedule` (String) The CronJob schedule for the whole integration. If multiple routes are declared, they must have the same schedule for thismechanism to work correctly.
+- `starting_deadline_seconds` (Number) Optional deadline in seconds for starting the job if it misses scheduledtime for any reason. Missed jobs executions will be counted as failed ones.
- `time_zone` (String) The timezone that the CronJob will run on
@@ -3058,7 +3058,7 @@ Optional:
Optional:
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Deprecated: no longer in use.
@@ -3067,10 +3067,10 @@ Optional:
Optional:
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Deprecated: no longer in use.
- `kind` (String) Allows to explicitly select the desired deployment kind between 'deployment', 'cron-job' or 'knative-service' when creating the resources for running the integration.
-- `use_ssa` (Boolean) Use server-side apply to update the owned resources (default 'true'). Note that it automatically falls back to client-side patching, if SSA is not available, e.g., on old Kubernetes clusters.
+- `use_ssa` (Boolean) Use server-side apply to update the owned resources (default 'true').Note that it automatically falls back to client-side patching, if SSA is not available, e.g., on old Kubernetes clusters.
@@ -3078,11 +3078,11 @@ Optional:
Optional:
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Deprecated: no longer in use.
-- `progress_deadline_seconds` (Number) The maximum time in seconds for the deployment to make progress before it is considered to be failed. It defaults to '60s'.
-- `rolling_update_max_surge` (String) The maximum number of pods that can be scheduled above the desired number of pods. Value can be an absolute number (ex: 5) or a percentage of desired pods (ex: 10%). This can not be 0 if MaxUnavailable is 0. Absolute number is calculated from percentage by rounding up. Defaults to '25%'.
-- `rolling_update_max_unavailable` (String) The maximum number of pods that can be unavailable during the update. Value can be an absolute number (ex: 5) or a percentage of desired pods (ex: 10%). Absolute number is calculated from percentage by rounding down. This can not be 0 if MaxSurge is 0. Defaults to '25%'.
+- `progress_deadline_seconds` (Number) The maximum time in seconds for the deployment to make progress before itis considered to be failed. It defaults to '60s'.
+- `rolling_update_max_surge` (String) The maximum number of pods that can be scheduled above the desired number ofpods.Value can be an absolute number (ex: 5) or a percentage of desired pods (ex: 10%).This can not be 0 if MaxUnavailable is 0.Absolute number is calculated from percentage by rounding up.Defaults to '25%'.
+- `rolling_update_max_unavailable` (String) The maximum number of pods that can be unavailable during the update.Value can be an absolute number (ex: 5) or a percentage of desired pods (ex: 10%).Absolute number is calculated from percentage by rounding down.This can not be 0 if MaxSurge is 0.Defaults to '25%'.
- `strategy` (String) The deployment strategy to use to replace existing pods with new ones.
@@ -3091,11 +3091,11 @@ Optional:
Optional:
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `container_meta` (Boolean) Enables injection of 'NAMESPACE' and 'POD_NAME' environment variables (default 'true')
- `enabled` (Boolean) Deprecated: no longer in use.
- `http_proxy` (Boolean) Propagates the 'HTTP_PROXY', 'HTTPS_PROXY' and 'NO_PROXY' environment variables (default 'true')
-- `vars` (List of String) A list of environment variables to be added to the integration container. The syntax is KEY=VALUE, e.g., 'MY_VAR='my value''. These take precedence over the previously defined environment variables.
+- `vars` (List of String) A list of environment variables to be added to the integration container.The syntax is KEY=VALUE, e.g., 'MY_VAR='my value''.These take precedence over the previously defined environment variables.
@@ -3103,7 +3103,7 @@ Optional:
Optional:
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Deprecated: no longer in use.
- `ref` (String) The error handler ref name provided or found in application properties
@@ -3113,8 +3113,8 @@ Optional:
Optional:
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
-- `discovery_cache` (String) Discovery client cache to be used, either 'disabled', 'disk' or 'memory' (default 'memory'). Deprecated: to be removed from trait configuration.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
+- `discovery_cache` (String) Discovery client cache to be used, either 'disabled', 'disk' or 'memory' (default 'memory').Deprecated: to be removed from trait configuration.
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
@@ -3123,7 +3123,7 @@ Optional:
Optional:
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
- `liveness_failure_threshold` (Number) Minimum consecutive failures for the liveness probe to be considered failed after having succeeded.
- `liveness_initial_delay` (Number) Number of seconds after the container has started before the liveness probe is initiated.
@@ -3156,13 +3156,13 @@ Optional:
Optional:
-- `annotations` (Map of String) The annotations added to the ingress. This can be used to set controller specific annotations, e.g., when using the NGINX Ingress controller: See https://github.com/kubernetes/ingress-nginx/blob/main/docs/user-guide/nginx-configuration/annotations.md
+- `annotations` (Map of String) The annotations added to the ingress.This can be used to set controller specific annotations, e.g., when using the NGINX Ingress controller:See https://github.com/kubernetes/ingress-nginx/blob/main/docs/user-guide/nginx-configuration/annotations.md
- `auto` (Boolean) To automatically add an ingress whenever the integration uses an HTTP endpoint consumer.
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
- `host` (String) To configure the host exposed by the ingress.
- `path` (String) To configure the path exposed by the ingress (default '/').
-- `path_type` (String) To configure the path type exposed by the ingress. One of 'Exact', 'Prefix', 'ImplementationSpecific' (default to 'Prefix').
+- `path_type` (String) To configure the path type exposed by the ingress.One of 'Exact', 'Prefix', 'ImplementationSpecific' (default to 'Prefix').
- `tls_hosts` (List of String) To configure tls hosts
- `tls_secret_name` (String) To configure tls secret name
@@ -3173,7 +3173,7 @@ Optional:
Optional:
- `allow` (String) Configures a (comma-separated) list of CIDR subnets that should not be intercepted by the Istio proxy ('10.0.0.0/8,172.16.0.0/12,192.168.0.0/16' by default).
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
- `inject` (Boolean) Forces the value for labels 'sidecar.istio.io/inject'. By default the label is set to 'true' on deployment and not set on Knative Service.
@@ -3183,14 +3183,14 @@ Optional:
Optional:
-- `ca_cert` (String) The PEM encoded CA certification file path, used to verify client certificates, applicable when 'protocol' is 'https' and 'use-ssl-client-authentication' is 'true' (default '/var/run/secrets/kubernetes.io/serviceaccount/service-ca.crt' for OpenShift).
-- `client_principal` (List of String) The principal(s) which must be given in a client certificate to allow access to the Jolokia endpoint, applicable when 'protocol' is 'https' and 'use-ssl-client-authentication' is 'true' (default 'clientPrincipal=cn=system:master-proxy', 'cn=hawtio-online.hawtio.svc' and 'cn=fuse-console.fuse.svc' for OpenShift).
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `ca_cert` (String) The PEM encoded CA certification file path, used to verify client certificates,applicable when 'protocol' is 'https' and 'use-ssl-client-authentication' is 'true'(default '/var/run/secrets/kubernetes.io/serviceaccount/service-ca.crt' for OpenShift).
+- `client_principal` (List of String) The principal(s) which must be given in a client certificate to allow access to the Jolokia endpoint,applicable when 'protocol' is 'https' and 'use-ssl-client-authentication' is 'true'(default 'clientPrincipal=cn=system:master-proxy', 'cn=hawtio-online.hawtio.svc' and 'cn=fuse-console.fuse.svc' for OpenShift).
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `discovery_enabled` (Boolean) Listen for multicast requests (default 'false')
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
-- `extended_client_check` (Boolean) Mandate the client certificate contains a client flag in the extended key usage section, applicable when 'protocol' is 'https' and 'use-ssl-client-authentication' is 'true' (default 'true' for OpenShift).
-- `host` (String) The Host address to which the Jolokia agent should bind to. If ''*'' or ''0.0.0.0'' is given, the servers binds to every network interface (default ''*'').
-- `options` (List of String) A list of additional Jolokia options as defined in https://jolokia.org/reference/html/agents.html#agent-jvm-config[JVM agent configuration options]
+- `extended_client_check` (Boolean) Mandate the client certificate contains a client flag in the extended key usage section,applicable when 'protocol' is 'https' and 'use-ssl-client-authentication' is 'true'(default 'true' for OpenShift).
+- `host` (String) The Host address to which the Jolokia agent should bind to. If ''*'' or ''0.0.0.0'' is given,the servers binds to every network interface (default ''*'').
+- `options` (List of String) A list of additional Jolokia options as definedin https://jolokia.org/reference/html/agents.html#agent-jvm-config[JVM agent configuration options]
- `password` (String) The password used for authentication, applicable when the 'user' option is set.
- `port` (Number) The Jolokia endpoint port (default '8778').
- `protocol` (String) The protocol to use, either 'http' or 'https' (default 'https' for OpenShift)
@@ -3204,14 +3204,14 @@ Optional:
Optional:
- `classpath` (String) Additional JVM classpath (use 'Linux' classpath separator)
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `debug` (Boolean) Activates remote debugging, so that a debugger can be attached to the JVM, e.g., using port-forwarding
- `debug_address` (String) Transport address at which to listen for the newly launched JVM (default '*:5005')
- `debug_suspend` (Boolean) Suspends the target JVM immediately before the main class is loaded
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
- `jar` (String) The Jar dependency which will run the application. Leave it empty for managed Integrations.
- `options` (List of String) A list of JVM options
-- `print_command` (Boolean) Prints the command used the start the JVM in the container logs (default 'true') Deprecated: no longer in use.
+- `print_command` (Boolean) Prints the command used the start the JVM in the container logs (default 'true')Deprecated: no longer in use.
@@ -3220,7 +3220,7 @@ Optional:
Optional:
- `auto` (Boolean) Automatically inject all referenced Kamelets and their default configuration (enabled by default)
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
- `list` (String) Comma separated list of Kamelet names to load into the current integration
- `mount_point` (String) The directory where the application mounts and reads Kamelet spec (default '/etc/camel/kamelets')
@@ -3240,20 +3240,20 @@ Required:
Optional:
- `auto` (Boolean) Enable automatic discovery of all trait properties.
-- `channel_sinks` (List of String) List of channels used as destination of integration routes. Can contain simple channel names or full Camel URIs.
-- `channel_sources` (List of String) List of channels used as source of integration routes. Can contain simple channel names or full Camel URIs.
+- `channel_sinks` (List of String) List of channels used as destination of integration routes.Can contain simple channel names or full Camel URIs.
+- `channel_sources` (List of String) List of channels used as source of integration routes.Can contain simple channel names or full Camel URIs.
- `config` (String) Can be used to inject a Knative complete configuration in JSON format.
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
-- `endpoint_sinks` (List of String) List of endpoints used as destination of integration routes. Can contain simple endpoint names or full Camel URIs.
+- `endpoint_sinks` (List of String) List of endpoints used as destination of integration routes.Can contain simple endpoint names or full Camel URIs.
- `endpoint_sources` (List of String) List of channels used as source of integration routes.
-- `event_sinks` (List of String) List of event types that the integration will produce. Can contain simple event types or full Camel URIs (to use a specific broker).
-- `event_sources` (List of String) List of event types that the integration will be subscribed to. Can contain simple event types or full Camel URIs (to use a specific broker different from 'default').
-- `filter_event_type` (Boolean) Enables the default filtering for the Knative trigger using the event type If this is true, the created Knative trigger uses the event type as a filter on the event stream when no other filter criteria is given. (default: true)
-- `filter_source_channels` (Boolean) Enables filtering on events based on the header 'ce-knativehistory'. Since this header has been removed in newer versions of Knative, filtering is disabled by default.
-- `filters` (List of String) Sets filter attributes on the event stream (such as event type, source, subject and so on). A list of key-value pairs that represent filter attributes and its values. The syntax is KEY=VALUE, e.g., 'source='my.source''. Filter attributes get set on the Knative trigger that is being created as part of this integration.
-- `namespace_label` (Boolean) Enables the camel-k-operator to set the 'bindings.knative.dev/include=true' label to the namespace As Knative requires this label to perform injection of K_SINK URL into the service. If this is false, the integration pod may start and fail, read the SinkBinding Knative documentation. (default: true)
-- `sink_binding` (Boolean) Allows binding the integration to a sink via a Knative SinkBinding resource. This can be used when the integration targets a single sink. It's enabled by default when the integration targets a single sink (except when the integration is owned by a Knative source).
+- `event_sinks` (List of String) List of event types that the integration will produce.Can contain simple event types or full Camel URIs (to use a specific broker).
+- `event_sources` (List of String) List of event types that the integration will be subscribed to.Can contain simple event types or full Camel URIs (to use a specific broker different from 'default').
+- `filter_event_type` (Boolean) Enables the default filtering for the Knative trigger using the event typeIf this is true, the created Knative trigger uses the event type as a filter on the event stream when no other filter criteria is given. (default: true)
+- `filter_source_channels` (Boolean) Enables filtering on events based on the header 'ce-knativehistory'. Since this header has been removed in newer versions ofKnative, filtering is disabled by default.
+- `filters` (List of String) Sets filter attributes on the event stream (such as event type, source, subject and so on).A list of key-value pairs that represent filter attributes and its values.The syntax is KEY=VALUE, e.g., 'source='my.source''.Filter attributes get set on the Knative trigger that is being created as part of this integration.
+- `namespace_label` (Boolean) Enables the camel-k-operator to set the 'bindings.knative.dev/include=true' label to the namespaceAs Knative requires this label to perform injection of K_SINK URL into the service.If this is false, the integration pod may start and fail, read the SinkBinding Knative documentation. (default: true)
+- `sink_binding` (Boolean) Allows binding the integration to a sink via a Knative SinkBinding resource.This can be used when the integration targets a single sink.It's enabled by default when the integration targets a single sink(except when the integration is owned by a Knative source).
@@ -3261,18 +3261,18 @@ Optional:
Optional:
-- `annotations` (Map of String) The annotations added to route. This can be used to set knative service specific annotations CLI usage example: -t 'knative-service.annotations.'haproxy.router.openshift.io/balance'=true'
-- `auto` (Boolean) Automatically deploy the integration as Knative service when all conditions hold: * Integration is using the Knative profile * All routes are either starting from an HTTP based consumer or a passive consumer (e.g. 'direct' is a passive consumer)
-- `autoscaling_metric` (String) Configures the Knative autoscaling metric property (e.g. to set 'concurrency' based or 'cpu' based autoscaling). Refer to the Knative documentation for more information.
-- `autoscaling_target` (Number) Sets the allowed concurrency level or CPU percentage (depending on the autoscaling metric) for each Pod. Refer to the Knative documentation for more information.
-- `class` (String) Configures the Knative autoscaling class property (e.g. to set 'hpa.autoscaling.knative.dev' or 'kpa.autoscaling.knative.dev' autoscaling). Refer to the Knative documentation for more information.
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `annotations` (Map of String) The annotations added to route.This can be used to set knative service specific annotationsCLI usage example: -t 'knative-service.annotations.'haproxy.router.openshift.io/balance'=true'
+- `auto` (Boolean) Automatically deploy the integration as Knative service when all conditions hold:* Integration is using the Knative profile* All routes are either starting from an HTTP based consumer or a passive consumer (e.g. 'direct' is a passive consumer)
+- `autoscaling_metric` (String) Configures the Knative autoscaling metric property (e.g. to set 'concurrency' based or 'cpu' based autoscaling).Refer to the Knative documentation for more information.
+- `autoscaling_target` (Number) Sets the allowed concurrency level or CPU percentage (depending on the autoscaling metric) for each Pod.Refer to the Knative documentation for more information.
+- `class` (String) Configures the Knative autoscaling class property (e.g. to set 'hpa.autoscaling.knative.dev' or 'kpa.autoscaling.knative.dev' autoscaling).Refer to the Knative documentation for more information.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
-- `max_scale` (Number) An upper bound for the number of Pods that can be running in parallel for the integration. Knative has its own cap value that depends on the installation. Refer to the Knative documentation for more information.
-- `min_scale` (Number) The minimum number of Pods that should be running at any time for the integration. It's **zero** by default, meaning that the integration is scaled down to zero when not used for a configured amount of time. Refer to the Knative documentation for more information.
-- `rollout_duration` (String) Enables to gradually shift traffic to the latest Revision and sets the rollout duration. It's disabled by default and must be expressed as a Golang 'time.Duration' string representation, rounded to a second precision.
-- `timeout_seconds` (Number) The maximum duration in seconds that the request instance is allowed to respond to a request. This field propagates to the integration pod's terminationGracePeriodSeconds Refer to the Knative documentation for more information.
-- `visibility` (String) Setting 'cluster-local', Knative service becomes a private service. Specifically, this option applies the 'networking.knative.dev/visibility' label to Knative service. Refer to the Knative documentation for more information.
+- `max_scale` (Number) An upper bound for the number of Pods that can be running in parallel for the integration.Knative has its own cap value that depends on the installation.Refer to the Knative documentation for more information.
+- `min_scale` (Number) The minimum number of Pods that should be running at any time for the integration. It's **zero** by default, meaning thatthe integration is scaled down to zero when not used for a configured amount of time.Refer to the Knative documentation for more information.
+- `rollout_duration` (String) Enables to gradually shift traffic to the latest Revision and sets the rollout duration.It's disabled by default and must be expressed as a Golang 'time.Duration' string representation,rounded to a second precision.
+- `timeout_seconds` (Number) The maximum duration in seconds that the request instance is allowed to respond to a request.This field propagates to the integration pod's terminationGracePeriodSecondsRefer to the Knative documentation for more information.
+- `visibility` (String) Setting 'cluster-local', Knative service becomes a private service.Specifically, this option applies the 'networking.knative.dev/visibility' label to Knative service.Refer to the Knative documentation for more information.
@@ -3281,7 +3281,7 @@ Optional:
Optional:
- `color` (Boolean) Colorize the log output
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
- `format` (String) Logs message format
- `json` (Boolean) Output the logs in JSON
@@ -3302,13 +3302,13 @@ Required:
Optional:
-- `configs` (List of String) A list of configuration pointing to configmap/secret. The configuration are expected to be UTF-8 resources as they are processed by runtime Camel Context and tried to be parsed as property files. They are also made available on the classpath in order to ease their usage directly from the Route. Syntax: [configmap|secret]:name[/key], where name represents the resource name and key optionally represents the resource key to be filtered
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configs` (List of String) A list of configuration pointing to configmap/secret.The configuration are expected to be UTF-8 resources as they are processed by runtime Camel Context and tried to be parsed as property files.They are also made available on the classpath in order to ease their usage directly from the Route.Syntax: [configmap|secret]:name[/key], where name represents the resource name and key optionally represents the resource key to be filtered
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `empty_dirs` (List of String) A list of EmptyDir volumes to be mounted. Syntax: [name:/container/path]
- `enabled` (Boolean) Deprecated: no longer in use.
-- `hot_reload` (Boolean) Enable 'hot reload' when a secret/configmap mounted is edited (default 'false'). The configmap/secret must be marked with 'camel.apache.org/integration' label to be taken in account. The resource will be watched for any kind change, also for changes in metadata.
-- `resources` (List of String) A list of resources (text or binary content) pointing to configmap/secret. The resources are expected to be any resource type (text or binary content). The destination path can be either a default location or any path specified by the user. Syntax: [configmap|secret]:name[/key][@path], where name represents the resource name, key optionally represents the resource key to be filtered and path represents the destination path
-- `scan_kamelets_implicit_label_secrets` (Boolean) Deprecated: include your properties in an explicit property file backed by a secret. Let the operator to scan for secret labeled with 'camel.apache.org/kamelet' and 'camel.apache.org/kamelet.configuration'. These secrets are mounted to the application and treated as plain properties file with their key/value list (ie .spec.data['camel.my-property'] = my-value) (default 'true').
+- `hot_reload` (Boolean) Enable 'hot reload' when a secret/configmap mounted is edited (default 'false'). The configmap/secret must bemarked with 'camel.apache.org/integration' label to be taken in account. The resource will be watched for any kind change, also forchanges in metadata.
+- `resources` (List of String) A list of resources (text or binary content) pointing to configmap/secret.The resources are expected to be any resource type (text or binary content).The destination path can be either a default location or any path specified by the user.Syntax: [configmap|secret]:name[/key][@path], where name represents the resource name, key optionally represents the resource key to be filtered and path represents the destination path
+- `scan_kamelets_implicit_label_secrets` (Boolean) Deprecated: include your properties in an explicit property file backed by a secret.Let the operator to scan for secret labeled with 'camel.apache.org/kamelet' and 'camel.apache.org/kamelet.configuration'.These secrets are mounted to the application and treated as plain properties file with their key/value list(ie .spec.data['camel.my-property'] = my-value) (default 'true').
- `volumes` (List of String) A list of Persistent Volume Claims to be mounted. Syntax: [pvcname:/container/path]
@@ -3317,8 +3317,8 @@ Optional:
Optional:
-- `configmaps` (List of String) The configmaps holding the spec of the OpenAPI
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configmaps` (List of String) The configmaps holding the spec of the OpenAPI (compatible with > 3.0 spec only).
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Deprecated: no longer in use.
@@ -3327,7 +3327,7 @@ Optional:
Optional:
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
- `target_annotations` (List of String) The set of annotations to be transferred
- `target_labels` (List of String) The set of labels to be transferred
@@ -3338,10 +3338,10 @@ Optional:
Optional:
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
-- `max_unavailable` (String) The number of pods for the Integration that can be unavailable after an eviction. It can be either an absolute number or a percentage (default '1' if 'min-available' is also not set). Only one of 'max-unavailable' and 'min-available' can be specified.
-- `min_available` (String) The number of pods for the Integration that must still be available after an eviction. It can be either an absolute number or a percentage. Only one of 'min-available' and 'max-unavailable' can be specified.
+- `max_unavailable` (String) The number of pods for the Integration that can be unavailable after an eviction.It can be either an absolute number or a percentage (default '1' if 'min-available' is also not set).Only one of 'max-unavailable' and 'min-available' can be specified.
+- `min_available` (String) The number of pods for the Integration that must still be available after an eviction.It can be either an absolute number or a percentage.Only one of 'min-available' and 'max-unavailable' can be specified.
@@ -3349,11 +3349,11 @@ Optional:
Optional:
-- `auto` (Boolean) To automatically detect from the environment if a default platform can be created (it will be created on OpenShift or when a registry address is set). Deprecated: Platform is auto generated by the operator install procedure - maintained for backward compatibility
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
-- `create_default` (Boolean) To create a default (empty) platform when the platform is missing. Deprecated: Platform is auto generated by the operator install procedure - maintained for backward compatibility
+- `auto` (Boolean) To automatically detect from the environment if a default platform can be created (it will be created on OpenShift or when a registry address is set).Deprecated: Platform is auto generated by the operator install procedure - maintained for backward compatibility
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
+- `create_default` (Boolean) To create a default (empty) platform when the platform is missing.Deprecated: Platform is auto generated by the operator install procedure - maintained for backward compatibility
- `enabled` (Boolean) Deprecated: no longer in use.
-- `global` (Boolean) Indicates if the platform should be created globally in the case of global operator (default true). Deprecated: Platform is auto generated by the operator install procedure - maintained for backward compatibility
+- `global` (Boolean) Indicates if the platform should be created globally in the case of global operator (default true).Deprecated: Platform is auto generated by the operator install procedure - maintained for backward compatibility
@@ -3361,7 +3361,7 @@ Optional:
Optional:
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
@@ -3370,7 +3370,7 @@ Optional:
Optional:
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
- `pod_monitor` (Boolean) Whether a 'PodMonitor' resource is created (default 'true').
- `pod_monitor_labels` (List of String) The 'PodMonitor' resource labels, applicable when 'pod-monitor' is 'true'.
@@ -3382,7 +3382,7 @@ Optional:
Optional:
- `auto` (Boolean) Automatically configures the platform registry secret on the pod if it is of type 'kubernetes.io/dockerconfigjson'.
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
- `image_puller_delegation` (Boolean) When using a global operator with a shared platform, this enables delegation of the 'system:image-puller' cluster role on the operator namespace to the integration service account.
- `secret_name` (String) The pull secret name to set on the Pod. If left empty this is automatically taken from the 'IntegrationPlatform' registry configuration.
@@ -3393,12 +3393,12 @@ Optional:
Optional:
-- `build_mode` (List of String) The Quarkus mode to run: either 'jvm' or 'native' (default 'jvm'). In case both 'jvm' and 'native' are specified, two 'IntegrationKit' resources are created, with the 'native' kit having precedence over the 'jvm' one once ready.
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `build_mode` (List of String) The Quarkus mode to run: either 'jvm' or 'native' (default 'jvm').In case both 'jvm' and 'native' are specified, two 'IntegrationKit' resources are created,with the 'native' kit having precedence over the 'jvm' one once ready.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Deprecated: no longer in use.
- `native_base_image` (String) The base image to use when running a native build (default 'quay.io/quarkus/quarkus-micro-image:2.0')
- `native_builder_image` (String) The image containing the tooling required for a native build (by default it will use the one provided in the runtime catalog)
-- `package_types` (List of String) The Quarkus package types, 'fast-jar' or 'native' (default 'fast-jar'). In case both 'fast-jar' and 'native' are specified, two 'IntegrationKit' resources are created, with the native kit having precedence over the 'fast-jar' one once ready. The order influences the resolution of the current kit for the integration. The kit corresponding to the first package type will be assigned to the integration in case no existing kit that matches the integration exists. Deprecated: use 'build-mode' instead.
+- `package_types` (List of String) The Quarkus package types, 'fast-jar' or 'native' (default 'fast-jar').In case both 'fast-jar' and 'native' are specified, two 'IntegrationKit' resources are created,with the native kit having precedence over the 'fast-jar' one once ready.The order influences the resolution of the current kit for the integration.The kit corresponding to the first package type will be assigned to theintegration in case no existing kit that matches the integration exists.Deprecated: use 'build-mode' instead.
@@ -3406,7 +3406,7 @@ Optional:
Optional:
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
@@ -3415,20 +3415,20 @@ Optional:
Optional:
-- `annotations` (Map of String) The annotations added to route. This can be used to set route specific annotations For annotations options see https://docs.openshift.com/container-platform/3.11/architecture/networking/routes.html#route-specific-annotations CLI usage example: -t 'route.annotations.'haproxy.router.openshift.io/balance'=true'
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `annotations` (Map of String) The annotations added to route.This can be used to set route specific annotationsFor annotations options see https://docs.openshift.com/container-platform/3.11/architecture/networking/routes.html#route-specific-annotationsCLI usage example: -t 'route.annotations.'haproxy.router.openshift.io/balance'=true'
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
- `host` (String) To configure the host exposed by the route.
-- `tls_ca_certificate` (String) The TLS CA certificate contents. Refer to the OpenShift route documentation for additional information.
-- `tls_ca_certificate_secret` (String) The secret name and key reference to the TLS CA certificate. The format is 'secret-name[/key-name]', the value represents the secret name, if there is only one key in the secret it will be read, otherwise you can set a key name separated with a '/'. Refer to the OpenShift route documentation for additional information.
-- `tls_certificate` (String) The TLS certificate contents. Refer to the OpenShift route documentation for additional information.
-- `tls_certificate_secret` (String) The secret name and key reference to the TLS certificate. The format is 'secret-name[/key-name]', the value represents the secret name, if there is only one key in the secret it will be read, otherwise you can set a key name separated with a '/'. Refer to the OpenShift route documentation for additional information.
-- `tls_destination_ca_certificate` (String) The destination CA certificate provides the contents of the ca certificate of the final destination. When using reencrypt termination this file should be provided in order to have routers use it for health checks on the secure connection. If this field is not specified, the router may provide its own destination CA and perform hostname validation using the short service name (service.namespace.svc), which allows infrastructure generated certificates to automatically verify. Refer to the OpenShift route documentation for additional information.
-- `tls_destination_ca_certificate_secret` (String) The secret name and key reference to the destination CA certificate. The format is 'secret-name[/key-name]', the value represents the secret name, if there is only one key in the secret it will be read, otherwise you can set a key name separated with a '/'. Refer to the OpenShift route documentation for additional information.
-- `tls_insecure_edge_termination_policy` (String) To configure how to deal with insecure traffic, e.g. 'Allow', 'Disable' or 'Redirect' traffic. Refer to the OpenShift route documentation for additional information.
-- `tls_key` (String) The TLS certificate key contents. Refer to the OpenShift route documentation for additional information.
-- `tls_key_secret` (String) The secret name and key reference to the TLS certificate key. The format is 'secret-name[/key-name]', the value represents the secret name, if there is only one key in the secret it will be read, otherwise you can set a key name separated with a '/'. Refer to the OpenShift route documentation for additional information.
-- `tls_termination` (String) The TLS termination type, like 'edge', 'passthrough' or 'reencrypt'. Refer to the OpenShift route documentation for additional information.
+- `tls_ca_certificate` (String) The TLS CA certificate contents.Refer to the OpenShift route documentation for additional information.
+- `tls_ca_certificate_secret` (String) The secret name and key reference to the TLS CA certificate. The format is 'secret-name[/key-name]', the value represents the secret name, if there is only one key in the secret it will be read, otherwise you can set a key name separated with a '/'.Refer to the OpenShift route documentation for additional information.
+- `tls_certificate` (String) The TLS certificate contents.Refer to the OpenShift route documentation for additional information.
+- `tls_certificate_secret` (String) The secret name and key reference to the TLS certificate. The format is 'secret-name[/key-name]', the value represents the secret name, if there is only one key in the secret it will be read, otherwise you can set a key name separated with a '/'.Refer to the OpenShift route documentation for additional information.
+- `tls_destination_ca_certificate` (String) The destination CA certificate provides the contents of the ca certificate of the final destination. When using reencrypttermination this file should be provided in order to have routers use it for health checks on the secure connection.If this field is not specified, the router may provide its own destination CA and perform hostname validation usingthe short service name (service.namespace.svc), which allows infrastructure generated certificates to automaticallyverify.Refer to the OpenShift route documentation for additional information.
+- `tls_destination_ca_certificate_secret` (String) The secret name and key reference to the destination CA certificate. The format is 'secret-name[/key-name]', the value represents the secret name, if there is only one key in the secret it will be read, otherwise you can set a key name separated with a '/'.Refer to the OpenShift route documentation for additional information.
+- `tls_insecure_edge_termination_policy` (String) To configure how to deal with insecure traffic, e.g. 'Allow', 'Disable' or 'Redirect' traffic.Refer to the OpenShift route documentation for additional information.
+- `tls_key` (String) The TLS certificate key contents.Refer to the OpenShift route documentation for additional information.
+- `tls_key_secret` (String) The secret name and key reference to the TLS certificate key. The format is 'secret-name[/key-name]', the value represents the secret name, if there is only one key in the secret it will be read, otherwise you can set a key name separated with a '/'.Refer to the OpenShift route documentation for additional information.
+- `tls_termination` (String) The TLS termination type, like 'edge', 'passthrough' or 'reencrypt'.Refer to the OpenShift route documentation for additional information.
@@ -3436,7 +3436,7 @@ Optional:
Optional:
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Deprecated: no longer in use.
- `run_as_non_root` (Boolean) Security Context RunAsNonRoot configuration (default false).
- `run_as_user` (Number) Security Context RunAsUser configuration (default none): this value is automatically retrieved in Openshift clusters when not explicitly set.
@@ -3449,9 +3449,9 @@ Optional:
Optional:
- `auto` (Boolean) To automatically detect from the code if a Service needs to be created.
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
-- `node_port` (Boolean) Enable Service to be exposed as NodePort (default 'false'). Deprecated: Use service type instead.
+- `node_port` (Boolean) Enable Service to be exposed as NodePort (default 'false').Deprecated: Use service type instead.
- `type` (String) The type of service to be used, either 'ClusterIP', 'NodePort' or 'LoadBalancer'.
@@ -3460,7 +3460,7 @@ Optional:
Optional:
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
- `services` (List of String) List of Services in the form [[apigroup/]version:]kind:[namespace/]name
@@ -3486,7 +3486,7 @@ Required:
Optional:
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
- `taints` (List of String) The list of taints to tolerate, in the form 'Key[=Value]:Effect[:Seconds]'
@@ -3509,7 +3509,7 @@ Optional:
- `data_types` (Attributes) DataTypes defines the data type of the data produced/consumed by the endpoint and references a given data type specification. (see [below for nested schema](#nestedatt--spec--sink--data_types))
- `properties` (Map of String) Properties are a key value representation of endpoint properties
- `ref` (Attributes) Ref can be used to declare a Kubernetes resource as source/sink endpoint (see [below for nested schema](#nestedatt--spec--sink--ref))
-- `types` (Attributes) Types defines the data type of the data produced/consumed by the endpoint and references a given data type specification. Deprecated: In favor of using DataTypes (see [below for nested schema](#nestedatt--spec--sink--types))
+- `types` (Attributes) Types defines the data type of the data produced/consumed by the endpoint and references a given data type specification.Deprecated: In favor of using DataTypes (see [below for nested schema](#nestedatt--spec--sink--types))
- `uri` (String) URI can be used to specify the (Camel) endpoint explicitly
@@ -3527,12 +3527,12 @@ Optional:
Optional:
- `api_version` (String) API version of the referent.
-- `field_path` (String) If referring to a piece of an object instead of an entire object, this string should contain a valid JSON/Go field access statement, such as desiredState.manifest.containers[2]. For example, if the object reference is to a container within a pod, this would take on a value like: 'spec.containers{name}' (where 'name' refers to the name of the container that triggered the event) or if no container name is specified 'spec.containers[2]' (container with index 2 in this pod). This syntax is chosen only to have some well-defined way of referencing a part of an object. TODO: this design is not final and this field is subject to change in the future.
-- `kind` (String) Kind of the referent. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-- `namespace` (String) Namespace of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/
-- `resource_version` (String) Specific resourceVersion to which this reference is made, if any. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
-- `uid` (String) UID of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids
+- `field_path` (String) If referring to a piece of an object instead of an entire object, this stringshould contain a valid JSON/Go field access statement, such as desiredState.manifest.containers[2].For example, if the object reference is to a container within a pod, this would take on a value like:'spec.containers{name}' (where 'name' refers to the name of the container that triggeredthe event) or if no container name is specified 'spec.containers[2]' (container withindex 2 in this pod). This syntax is chosen only to have some well-defined way ofreferencing a part of an object.TODO: this design is not final and this field is subject to change in the future.
+- `kind` (String) Kind of the referent.More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+- `namespace` (String) Namespace of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/
+- `resource_version` (String) Specific resourceVersion to which this reference is made, if any.More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
+- `uid` (String) UID of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids
@@ -3550,7 +3550,7 @@ Optional:
- `description` (String)
- `dollarschema` (String) JSONSchemaURL represents a schema url.
-- `example` (Map of String) JSON represents any valid JSON value. These types are supported: bool, int64, float64, string, []interface{}, map[string]interface{} and nil.
+- `example` (Map of String) JSON represents any valid JSON value.These types are supported: bool, int64, float64, string, []interface{}, map[string]interface{} and nil.
- `external_docs` (Attributes) ExternalDocumentation allows referencing an external resource for extended documentation. (see [below for nested schema](#nestedatt--spec--sink--types--schema--external_docs))
- `id` (String)
- `properties` (Attributes) (see [below for nested schema](#nestedatt--spec--sink--types--schema--properties))
@@ -3576,10 +3576,10 @@ Optional:
- `deprecated` (Boolean)
- `description` (String)
- `enum` (List of String)
-- `example` (Map of String) JSON represents any valid JSON value. These types are supported: bool, int64, float64, string, []interface{}, map[string]interface{} and nil.
+- `example` (Map of String) JSON represents any valid JSON value.These types are supported: bool, int64, float64, string, []interface{}, map[string]interface{} and nil.
- `exclusive_maximum` (Boolean)
- `exclusive_minimum` (Boolean)
-- `format` (String) format is an OpenAPI v3 format string. Unknown formats are ignored. The following formats are validated: - bsonobjectid: a bson object ID, i.e. a 24 characters hex string - uri: an URI as parsed by Golang net/url.ParseRequestURI - email: an email address as parsed by Golang net/mail.ParseAddress - hostname: a valid representation for an Internet host name, as defined by RFC 1034, section 3.1 [RFC1034]. - ipv4: an IPv4 IP as parsed by Golang net.ParseIP - ipv6: an IPv6 IP as parsed by Golang net.ParseIP - cidr: a CIDR as parsed by Golang net.ParseCIDR - mac: a MAC address as parsed by Golang net.ParseMAC - uuid: an UUID that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?[0-9a-f]{4}-?[0-9a-f]{4}-?[0-9a-f]{12}$ - uuid3: an UUID3 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?3[0-9a-f]{3}-?[0-9a-f]{4}-?[0-9a-f]{12}$ - uuid4: an UUID4 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?4[0-9a-f]{3}-?[89ab][0-9a-f]{3}-?[0-9a-f]{12}$ - uuid5: an UUID5 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?5[0-9a-f]{3}-?[89ab][0-9a-f]{3}-?[0-9a-f]{12}$ - isbn: an ISBN10 or ISBN13 number string like '0321751043' or '978-0321751041' - isbn10: an ISBN10 number string like '0321751043' - isbn13: an ISBN13 number string like '978-0321751041' - creditcard: a credit card number defined by the regex ^(?:4[0-9]{12}(?:[0-9]{3})?|5[1-5][0-9]{14}|6(?:011|5[0-9][0-9])[0-9]{12}|3[47][0-9]{13}|3(?:0[0-5]|[68][0-9])[0-9]{11}|(?:2131|1800|35d{3})d{11})$ with any non digit characters mixed in - ssn: a U.S. social security number following the regex ^d{3}[- ]?d{2}[- ]?d{4}$ - hexcolor: an hexadecimal color code like '#FFFFFF' following the regex ^#?([0-9a-fA-F]{3}|[0-9a-fA-F]{6})$ - rgbcolor: an RGB color code like rgb like 'rgb(255,255,255)' - byte: base64 encoded binary data - password: any kind of string - date: a date string like '2006-01-02' as defined by full-date in RFC3339 - duration: a duration string like '22 ns' as parsed by Golang time.ParseDuration or compatible with Scala duration format - datetime: a date time string like '2014-12-15T19:30:20.000Z' as defined by date-time in RFC3339.
+- `format` (String) format is an OpenAPI v3 format string. Unknown formats are ignored. The following formats are validated:- bsonobjectid: a bson object ID, i.e. a 24 characters hex string- uri: an URI as parsed by Golang net/url.ParseRequestURI- email: an email address as parsed by Golang net/mail.ParseAddress- hostname: a valid representation for an Internet host name, as defined by RFC 1034, section 3.1 [RFC1034].- ipv4: an IPv4 IP as parsed by Golang net.ParseIP- ipv6: an IPv6 IP as parsed by Golang net.ParseIP- cidr: a CIDR as parsed by Golang net.ParseCIDR- mac: a MAC address as parsed by Golang net.ParseMAC- uuid: an UUID that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?[0-9a-f]{4}-?[0-9a-f]{4}-?[0-9a-f]{12}$- uuid3: an UUID3 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?3[0-9a-f]{3}-?[0-9a-f]{4}-?[0-9a-f]{12}$- uuid4: an UUID4 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?4[0-9a-f]{3}-?[89ab][0-9a-f]{3}-?[0-9a-f]{12}$- uuid5: an UUID5 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?5[0-9a-f]{3}-?[89ab][0-9a-f]{3}-?[0-9a-f]{12}$- isbn: an ISBN10 or ISBN13 number string like '0321751043' or '978-0321751041'- isbn10: an ISBN10 number string like '0321751043'- isbn13: an ISBN13 number string like '978-0321751041'- creditcard: a credit card number defined by the regex ^(?:4[0-9]{12}(?:[0-9]{3})?|5[1-5][0-9]{14}|6(?:011|5[0-9][0-9])[0-9]{12}|3[47][0-9]{13}|3(?:0[0-5]|[68][0-9])[0-9]{11}|(?:2131|1800|35d{3})d{11})$ with any non digit characters mixed in- ssn: a U.S. social security number following the regex ^d{3}[- ]?d{2}[- ]?d{4}$- hexcolor: an hexadecimal color code like '#FFFFFF' following the regex ^#?([0-9a-fA-F]{3}|[0-9a-fA-F]{6})$- rgbcolor: an RGB color code like rgb like 'rgb(255,255,255)'- byte: base64 encoded binary data- password: any kind of string- date: a date string like '2006-01-02' as defined by full-date in RFC3339- duration: a duration string like '22 ns' as parsed by Golang time.ParseDuration or compatible with Scala duration format- datetime: a date time string like '2014-12-15T19:30:20.000Z' as defined by date-time in RFC3339.
- `id` (String)
- `max_items` (Number)
- `max_length` (Number)
@@ -3609,7 +3609,7 @@ Optional:
- `data_types` (Attributes) DataTypes defines the data type of the data produced/consumed by the endpoint and references a given data type specification. (see [below for nested schema](#nestedatt--spec--source--data_types))
- `properties` (Map of String) Properties are a key value representation of endpoint properties
- `ref` (Attributes) Ref can be used to declare a Kubernetes resource as source/sink endpoint (see [below for nested schema](#nestedatt--spec--source--ref))
-- `types` (Attributes) Types defines the data type of the data produced/consumed by the endpoint and references a given data type specification. Deprecated: In favor of using DataTypes (see [below for nested schema](#nestedatt--spec--source--types))
+- `types` (Attributes) Types defines the data type of the data produced/consumed by the endpoint and references a given data type specification.Deprecated: In favor of using DataTypes (see [below for nested schema](#nestedatt--spec--source--types))
- `uri` (String) URI can be used to specify the (Camel) endpoint explicitly
@@ -3627,12 +3627,12 @@ Optional:
Optional:
- `api_version` (String) API version of the referent.
-- `field_path` (String) If referring to a piece of an object instead of an entire object, this string should contain a valid JSON/Go field access statement, such as desiredState.manifest.containers[2]. For example, if the object reference is to a container within a pod, this would take on a value like: 'spec.containers{name}' (where 'name' refers to the name of the container that triggered the event) or if no container name is specified 'spec.containers[2]' (container with index 2 in this pod). This syntax is chosen only to have some well-defined way of referencing a part of an object. TODO: this design is not final and this field is subject to change in the future.
-- `kind` (String) Kind of the referent. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-- `namespace` (String) Namespace of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/
-- `resource_version` (String) Specific resourceVersion to which this reference is made, if any. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
-- `uid` (String) UID of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids
+- `field_path` (String) If referring to a piece of an object instead of an entire object, this stringshould contain a valid JSON/Go field access statement, such as desiredState.manifest.containers[2].For example, if the object reference is to a container within a pod, this would take on a value like:'spec.containers{name}' (where 'name' refers to the name of the container that triggeredthe event) or if no container name is specified 'spec.containers[2]' (container withindex 2 in this pod). This syntax is chosen only to have some well-defined way ofreferencing a part of an object.TODO: this design is not final and this field is subject to change in the future.
+- `kind` (String) Kind of the referent.More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+- `namespace` (String) Namespace of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/
+- `resource_version` (String) Specific resourceVersion to which this reference is made, if any.More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
+- `uid` (String) UID of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids
@@ -3650,7 +3650,7 @@ Optional:
- `description` (String)
- `dollarschema` (String) JSONSchemaURL represents a schema url.
-- `example` (Map of String) JSON represents any valid JSON value. These types are supported: bool, int64, float64, string, []interface{}, map[string]interface{} and nil.
+- `example` (Map of String) JSON represents any valid JSON value.These types are supported: bool, int64, float64, string, []interface{}, map[string]interface{} and nil.
- `external_docs` (Attributes) ExternalDocumentation allows referencing an external resource for extended documentation. (see [below for nested schema](#nestedatt--spec--source--types--schema--external_docs))
- `id` (String)
- `properties` (Attributes) (see [below for nested schema](#nestedatt--spec--source--types--schema--properties))
@@ -3676,10 +3676,10 @@ Optional:
- `deprecated` (Boolean)
- `description` (String)
- `enum` (List of String)
-- `example` (Map of String) JSON represents any valid JSON value. These types are supported: bool, int64, float64, string, []interface{}, map[string]interface{} and nil.
+- `example` (Map of String) JSON represents any valid JSON value.These types are supported: bool, int64, float64, string, []interface{}, map[string]interface{} and nil.
- `exclusive_maximum` (Boolean)
- `exclusive_minimum` (Boolean)
-- `format` (String) format is an OpenAPI v3 format string. Unknown formats are ignored. The following formats are validated: - bsonobjectid: a bson object ID, i.e. a 24 characters hex string - uri: an URI as parsed by Golang net/url.ParseRequestURI - email: an email address as parsed by Golang net/mail.ParseAddress - hostname: a valid representation for an Internet host name, as defined by RFC 1034, section 3.1 [RFC1034]. - ipv4: an IPv4 IP as parsed by Golang net.ParseIP - ipv6: an IPv6 IP as parsed by Golang net.ParseIP - cidr: a CIDR as parsed by Golang net.ParseCIDR - mac: a MAC address as parsed by Golang net.ParseMAC - uuid: an UUID that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?[0-9a-f]{4}-?[0-9a-f]{4}-?[0-9a-f]{12}$ - uuid3: an UUID3 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?3[0-9a-f]{3}-?[0-9a-f]{4}-?[0-9a-f]{12}$ - uuid4: an UUID4 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?4[0-9a-f]{3}-?[89ab][0-9a-f]{3}-?[0-9a-f]{12}$ - uuid5: an UUID5 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?5[0-9a-f]{3}-?[89ab][0-9a-f]{3}-?[0-9a-f]{12}$ - isbn: an ISBN10 or ISBN13 number string like '0321751043' or '978-0321751041' - isbn10: an ISBN10 number string like '0321751043' - isbn13: an ISBN13 number string like '978-0321751041' - creditcard: a credit card number defined by the regex ^(?:4[0-9]{12}(?:[0-9]{3})?|5[1-5][0-9]{14}|6(?:011|5[0-9][0-9])[0-9]{12}|3[47][0-9]{13}|3(?:0[0-5]|[68][0-9])[0-9]{11}|(?:2131|1800|35d{3})d{11})$ with any non digit characters mixed in - ssn: a U.S. social security number following the regex ^d{3}[- ]?d{2}[- ]?d{4}$ - hexcolor: an hexadecimal color code like '#FFFFFF' following the regex ^#?([0-9a-fA-F]{3}|[0-9a-fA-F]{6})$ - rgbcolor: an RGB color code like rgb like 'rgb(255,255,255)' - byte: base64 encoded binary data - password: any kind of string - date: a date string like '2006-01-02' as defined by full-date in RFC3339 - duration: a duration string like '22 ns' as parsed by Golang time.ParseDuration or compatible with Scala duration format - datetime: a date time string like '2014-12-15T19:30:20.000Z' as defined by date-time in RFC3339.
+- `format` (String) format is an OpenAPI v3 format string. Unknown formats are ignored. The following formats are validated:- bsonobjectid: a bson object ID, i.e. a 24 characters hex string- uri: an URI as parsed by Golang net/url.ParseRequestURI- email: an email address as parsed by Golang net/mail.ParseAddress- hostname: a valid representation for an Internet host name, as defined by RFC 1034, section 3.1 [RFC1034].- ipv4: an IPv4 IP as parsed by Golang net.ParseIP- ipv6: an IPv6 IP as parsed by Golang net.ParseIP- cidr: a CIDR as parsed by Golang net.ParseCIDR- mac: a MAC address as parsed by Golang net.ParseMAC- uuid: an UUID that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?[0-9a-f]{4}-?[0-9a-f]{4}-?[0-9a-f]{12}$- uuid3: an UUID3 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?3[0-9a-f]{3}-?[0-9a-f]{4}-?[0-9a-f]{12}$- uuid4: an UUID4 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?4[0-9a-f]{3}-?[89ab][0-9a-f]{3}-?[0-9a-f]{12}$- uuid5: an UUID5 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?5[0-9a-f]{3}-?[89ab][0-9a-f]{3}-?[0-9a-f]{12}$- isbn: an ISBN10 or ISBN13 number string like '0321751043' or '978-0321751041'- isbn10: an ISBN10 number string like '0321751043'- isbn13: an ISBN13 number string like '978-0321751041'- creditcard: a credit card number defined by the regex ^(?:4[0-9]{12}(?:[0-9]{3})?|5[1-5][0-9]{14}|6(?:011|5[0-9][0-9])[0-9]{12}|3[47][0-9]{13}|3(?:0[0-5]|[68][0-9])[0-9]{11}|(?:2131|1800|35d{3})d{11})$ with any non digit characters mixed in- ssn: a U.S. social security number following the regex ^d{3}[- ]?d{2}[- ]?d{4}$- hexcolor: an hexadecimal color code like '#FFFFFF' following the regex ^#?([0-9a-fA-F]{3}|[0-9a-fA-F]{6})$- rgbcolor: an RGB color code like rgb like 'rgb(255,255,255)'- byte: base64 encoded binary data- password: any kind of string- date: a date string like '2006-01-02' as defined by full-date in RFC3339- duration: a duration string like '22 ns' as parsed by Golang time.ParseDuration or compatible with Scala duration format- datetime: a date time string like '2014-12-15T19:30:20.000Z' as defined by date-time in RFC3339.
- `id` (String)
- `max_items` (Number)
- `max_length` (Number)
@@ -3709,7 +3709,7 @@ Optional:
- `data_types` (Attributes) DataTypes defines the data type of the data produced/consumed by the endpoint and references a given data type specification. (see [below for nested schema](#nestedatt--spec--steps--data_types))
- `properties` (Map of String) Properties are a key value representation of endpoint properties
- `ref` (Attributes) Ref can be used to declare a Kubernetes resource as source/sink endpoint (see [below for nested schema](#nestedatt--spec--steps--ref))
-- `types` (Attributes) Types defines the data type of the data produced/consumed by the endpoint and references a given data type specification. Deprecated: In favor of using DataTypes (see [below for nested schema](#nestedatt--spec--steps--types))
+- `types` (Attributes) Types defines the data type of the data produced/consumed by the endpoint and references a given data type specification.Deprecated: In favor of using DataTypes (see [below for nested schema](#nestedatt--spec--steps--types))
- `uri` (String) URI can be used to specify the (Camel) endpoint explicitly
@@ -3727,12 +3727,12 @@ Optional:
Optional:
- `api_version` (String) API version of the referent.
-- `field_path` (String) If referring to a piece of an object instead of an entire object, this string should contain a valid JSON/Go field access statement, such as desiredState.manifest.containers[2]. For example, if the object reference is to a container within a pod, this would take on a value like: 'spec.containers{name}' (where 'name' refers to the name of the container that triggered the event) or if no container name is specified 'spec.containers[2]' (container with index 2 in this pod). This syntax is chosen only to have some well-defined way of referencing a part of an object. TODO: this design is not final and this field is subject to change in the future.
-- `kind` (String) Kind of the referent. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-- `namespace` (String) Namespace of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/
-- `resource_version` (String) Specific resourceVersion to which this reference is made, if any. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
-- `uid` (String) UID of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids
+- `field_path` (String) If referring to a piece of an object instead of an entire object, this stringshould contain a valid JSON/Go field access statement, such as desiredState.manifest.containers[2].For example, if the object reference is to a container within a pod, this would take on a value like:'spec.containers{name}' (where 'name' refers to the name of the container that triggeredthe event) or if no container name is specified 'spec.containers[2]' (container withindex 2 in this pod). This syntax is chosen only to have some well-defined way ofreferencing a part of an object.TODO: this design is not final and this field is subject to change in the future.
+- `kind` (String) Kind of the referent.More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+- `namespace` (String) Namespace of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/
+- `resource_version` (String) Specific resourceVersion to which this reference is made, if any.More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
+- `uid` (String) UID of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids
@@ -3750,7 +3750,7 @@ Optional:
- `description` (String)
- `dollarschema` (String) JSONSchemaURL represents a schema url.
-- `example` (Map of String) JSON represents any valid JSON value. These types are supported: bool, int64, float64, string, []interface{}, map[string]interface{} and nil.
+- `example` (Map of String) JSON represents any valid JSON value.These types are supported: bool, int64, float64, string, []interface{}, map[string]interface{} and nil.
- `external_docs` (Attributes) ExternalDocumentation allows referencing an external resource for extended documentation. (see [below for nested schema](#nestedatt--spec--steps--types--schema--external_docs))
- `id` (String)
- `properties` (Attributes) (see [below for nested schema](#nestedatt--spec--steps--types--schema--properties))
@@ -3776,10 +3776,10 @@ Optional:
- `deprecated` (Boolean)
- `description` (String)
- `enum` (List of String)
-- `example` (Map of String) JSON represents any valid JSON value. These types are supported: bool, int64, float64, string, []interface{}, map[string]interface{} and nil.
+- `example` (Map of String) JSON represents any valid JSON value.These types are supported: bool, int64, float64, string, []interface{}, map[string]interface{} and nil.
- `exclusive_maximum` (Boolean)
- `exclusive_minimum` (Boolean)
-- `format` (String) format is an OpenAPI v3 format string. Unknown formats are ignored. The following formats are validated: - bsonobjectid: a bson object ID, i.e. a 24 characters hex string - uri: an URI as parsed by Golang net/url.ParseRequestURI - email: an email address as parsed by Golang net/mail.ParseAddress - hostname: a valid representation for an Internet host name, as defined by RFC 1034, section 3.1 [RFC1034]. - ipv4: an IPv4 IP as parsed by Golang net.ParseIP - ipv6: an IPv6 IP as parsed by Golang net.ParseIP - cidr: a CIDR as parsed by Golang net.ParseCIDR - mac: a MAC address as parsed by Golang net.ParseMAC - uuid: an UUID that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?[0-9a-f]{4}-?[0-9a-f]{4}-?[0-9a-f]{12}$ - uuid3: an UUID3 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?3[0-9a-f]{3}-?[0-9a-f]{4}-?[0-9a-f]{12}$ - uuid4: an UUID4 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?4[0-9a-f]{3}-?[89ab][0-9a-f]{3}-?[0-9a-f]{12}$ - uuid5: an UUID5 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?5[0-9a-f]{3}-?[89ab][0-9a-f]{3}-?[0-9a-f]{12}$ - isbn: an ISBN10 or ISBN13 number string like '0321751043' or '978-0321751041' - isbn10: an ISBN10 number string like '0321751043' - isbn13: an ISBN13 number string like '978-0321751041' - creditcard: a credit card number defined by the regex ^(?:4[0-9]{12}(?:[0-9]{3})?|5[1-5][0-9]{14}|6(?:011|5[0-9][0-9])[0-9]{12}|3[47][0-9]{13}|3(?:0[0-5]|[68][0-9])[0-9]{11}|(?:2131|1800|35d{3})d{11})$ with any non digit characters mixed in - ssn: a U.S. social security number following the regex ^d{3}[- ]?d{2}[- ]?d{4}$ - hexcolor: an hexadecimal color code like '#FFFFFF' following the regex ^#?([0-9a-fA-F]{3}|[0-9a-fA-F]{6})$ - rgbcolor: an RGB color code like rgb like 'rgb(255,255,255)' - byte: base64 encoded binary data - password: any kind of string - date: a date string like '2006-01-02' as defined by full-date in RFC3339 - duration: a duration string like '22 ns' as parsed by Golang time.ParseDuration or compatible with Scala duration format - datetime: a date time string like '2014-12-15T19:30:20.000Z' as defined by date-time in RFC3339.
+- `format` (String) format is an OpenAPI v3 format string. Unknown formats are ignored. The following formats are validated:- bsonobjectid: a bson object ID, i.e. a 24 characters hex string- uri: an URI as parsed by Golang net/url.ParseRequestURI- email: an email address as parsed by Golang net/mail.ParseAddress- hostname: a valid representation for an Internet host name, as defined by RFC 1034, section 3.1 [RFC1034].- ipv4: an IPv4 IP as parsed by Golang net.ParseIP- ipv6: an IPv6 IP as parsed by Golang net.ParseIP- cidr: a CIDR as parsed by Golang net.ParseCIDR- mac: a MAC address as parsed by Golang net.ParseMAC- uuid: an UUID that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?[0-9a-f]{4}-?[0-9a-f]{4}-?[0-9a-f]{12}$- uuid3: an UUID3 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?3[0-9a-f]{3}-?[0-9a-f]{4}-?[0-9a-f]{12}$- uuid4: an UUID4 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?4[0-9a-f]{3}-?[89ab][0-9a-f]{3}-?[0-9a-f]{12}$- uuid5: an UUID5 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?5[0-9a-f]{3}-?[89ab][0-9a-f]{3}-?[0-9a-f]{12}$- isbn: an ISBN10 or ISBN13 number string like '0321751043' or '978-0321751041'- isbn10: an ISBN10 number string like '0321751043'- isbn13: an ISBN13 number string like '978-0321751041'- creditcard: a credit card number defined by the regex ^(?:4[0-9]{12}(?:[0-9]{3})?|5[1-5][0-9]{14}|6(?:011|5[0-9][0-9])[0-9]{12}|3[47][0-9]{13}|3(?:0[0-5]|[68][0-9])[0-9]{11}|(?:2131|1800|35d{3})d{11})$ with any non digit characters mixed in- ssn: a U.S. social security number following the regex ^d{3}[- ]?d{2}[- ]?d{4}$- hexcolor: an hexadecimal color code like '#FFFFFF' following the regex ^#?([0-9a-fA-F]{3}|[0-9a-fA-F]{6})$- rgbcolor: an RGB color code like rgb like 'rgb(255,255,255)'- byte: base64 encoded binary data- password: any kind of string- date: a date string like '2006-01-02' as defined by full-date in RFC3339- duration: a duration string like '22 ns' as parsed by Golang time.ParseDuration or compatible with Scala duration format- datetime: a date time string like '2014-12-15T19:30:20.000Z' as defined by date-time in RFC3339.
- `id` (String)
- `max_items` (Number)
- `max_length` (Number)
diff --git a/docs/data-sources/camel_apache_org_kamelet_v1_manifest.md b/docs/data-sources/camel_apache_org_kamelet_v1_manifest.md
index b020a699a..4e36e6205 100644
--- a/docs/data-sources/camel_apache_org_kamelet_v1_manifest.md
+++ b/docs/data-sources/camel_apache_org_kamelet_v1_manifest.md
@@ -60,7 +60,7 @@ Optional:
- `dependencies` (List of String) Camel dependencies needed by the Kamelet
- `sources` (Attributes List) sources in any Camel DSL supported (see [below for nested schema](#nestedatt--spec--sources))
- `template` (Map of String) the main source in YAML DSL
-- `types` (Attributes) data specification types for the events consumed/produced by the Kamelet Deprecated: In favor of using DataTypes (see [below for nested schema](#nestedatt--spec--types))
+- `types` (Attributes) data specification types for the events consumed/produced by the KameletDeprecated: In favor of using DataTypes (see [below for nested schema](#nestedatt--spec--types))
### Nested Schema for `spec.data_types`
@@ -115,7 +115,7 @@ Optional:
- `description` (String)
- `dollarschema` (String) JSONSchemaURL represents a schema url.
-- `example` (Map of String) JSON represents any valid JSON value. These types are supported: bool, int64, float64, string, []interface{}, map[string]interface{} and nil.
+- `example` (Map of String) JSON represents any valid JSON value.These types are supported: bool, int64, float64, string, []interface{}, map[string]interface{} and nil.
- `external_docs` (Attributes) ExternalDocumentation allows referencing an external resource for extended documentation. (see [below for nested schema](#nestedatt--spec--data_types--types--schema--external_docs))
- `id` (String)
- `properties` (Attributes) (see [below for nested schema](#nestedatt--spec--data_types--types--schema--properties))
@@ -141,10 +141,10 @@ Optional:
- `deprecated` (Boolean)
- `description` (String)
- `enum` (List of String)
-- `example` (Map of String) JSON represents any valid JSON value. These types are supported: bool, int64, float64, string, []interface{}, map[string]interface{} and nil.
+- `example` (Map of String) JSON represents any valid JSON value.These types are supported: bool, int64, float64, string, []interface{}, map[string]interface{} and nil.
- `exclusive_maximum` (Boolean)
- `exclusive_minimum` (Boolean)
-- `format` (String) format is an OpenAPI v3 format string. Unknown formats are ignored. The following formats are validated: - bsonobjectid: a bson object ID, i.e. a 24 characters hex string - uri: an URI as parsed by Golang net/url.ParseRequestURI - email: an email address as parsed by Golang net/mail.ParseAddress - hostname: a valid representation for an Internet host name, as defined by RFC 1034, section 3.1 [RFC1034]. - ipv4: an IPv4 IP as parsed by Golang net.ParseIP - ipv6: an IPv6 IP as parsed by Golang net.ParseIP - cidr: a CIDR as parsed by Golang net.ParseCIDR - mac: a MAC address as parsed by Golang net.ParseMAC - uuid: an UUID that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?[0-9a-f]{4}-?[0-9a-f]{4}-?[0-9a-f]{12}$ - uuid3: an UUID3 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?3[0-9a-f]{3}-?[0-9a-f]{4}-?[0-9a-f]{12}$ - uuid4: an UUID4 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?4[0-9a-f]{3}-?[89ab][0-9a-f]{3}-?[0-9a-f]{12}$ - uuid5: an UUID5 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?5[0-9a-f]{3}-?[89ab][0-9a-f]{3}-?[0-9a-f]{12}$ - isbn: an ISBN10 or ISBN13 number string like '0321751043' or '978-0321751041' - isbn10: an ISBN10 number string like '0321751043' - isbn13: an ISBN13 number string like '978-0321751041' - creditcard: a credit card number defined by the regex ^(?:4[0-9]{12}(?:[0-9]{3})?|5[1-5][0-9]{14}|6(?:011|5[0-9][0-9])[0-9]{12}|3[47][0-9]{13}|3(?:0[0-5]|[68][0-9])[0-9]{11}|(?:2131|1800|35d{3})d{11})$ with any non digit characters mixed in - ssn: a U.S. social security number following the regex ^d{3}[- ]?d{2}[- ]?d{4}$ - hexcolor: an hexadecimal color code like '#FFFFFF' following the regex ^#?([0-9a-fA-F]{3}|[0-9a-fA-F]{6})$ - rgbcolor: an RGB color code like rgb like 'rgb(255,255,255)' - byte: base64 encoded binary data - password: any kind of string - date: a date string like '2006-01-02' as defined by full-date in RFC3339 - duration: a duration string like '22 ns' as parsed by Golang time.ParseDuration or compatible with Scala duration format - datetime: a date time string like '2014-12-15T19:30:20.000Z' as defined by date-time in RFC3339.
+- `format` (String) format is an OpenAPI v3 format string. Unknown formats are ignored. The following formats are validated:- bsonobjectid: a bson object ID, i.e. a 24 characters hex string- uri: an URI as parsed by Golang net/url.ParseRequestURI- email: an email address as parsed by Golang net/mail.ParseAddress- hostname: a valid representation for an Internet host name, as defined by RFC 1034, section 3.1 [RFC1034].- ipv4: an IPv4 IP as parsed by Golang net.ParseIP- ipv6: an IPv6 IP as parsed by Golang net.ParseIP- cidr: a CIDR as parsed by Golang net.ParseCIDR- mac: a MAC address as parsed by Golang net.ParseMAC- uuid: an UUID that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?[0-9a-f]{4}-?[0-9a-f]{4}-?[0-9a-f]{12}$- uuid3: an UUID3 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?3[0-9a-f]{3}-?[0-9a-f]{4}-?[0-9a-f]{12}$- uuid4: an UUID4 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?4[0-9a-f]{3}-?[89ab][0-9a-f]{3}-?[0-9a-f]{12}$- uuid5: an UUID5 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?5[0-9a-f]{3}-?[89ab][0-9a-f]{3}-?[0-9a-f]{12}$- isbn: an ISBN10 or ISBN13 number string like '0321751043' or '978-0321751041'- isbn10: an ISBN10 number string like '0321751043'- isbn13: an ISBN13 number string like '978-0321751041'- creditcard: a credit card number defined by the regex ^(?:4[0-9]{12}(?:[0-9]{3})?|5[1-5][0-9]{14}|6(?:011|5[0-9][0-9])[0-9]{12}|3[47][0-9]{13}|3(?:0[0-5]|[68][0-9])[0-9]{11}|(?:2131|1800|35d{3})d{11})$ with any non digit characters mixed in- ssn: a U.S. social security number following the regex ^d{3}[- ]?d{2}[- ]?d{4}$- hexcolor: an hexadecimal color code like '#FFFFFF' following the regex ^#?([0-9a-fA-F]{3}|[0-9a-fA-F]{6})$- rgbcolor: an RGB color code like rgb like 'rgb(255,255,255)'- byte: base64 encoded binary data- password: any kind of string- date: a date string like '2006-01-02' as defined by full-date in RFC3339- duration: a duration string like '22 ns' as parsed by Golang time.ParseDuration or compatible with Scala duration format- datetime: a date time string like '2014-12-15T19:30:20.000Z' as defined by date-time in RFC3339.
- `id` (String)
- `max_items` (Number)
- `max_length` (Number)
@@ -173,7 +173,7 @@ Optional:
- `description` (String)
- `dollarschema` (String) JSONSchemaURL represents a schema url.
-- `example` (Map of String) JSON represents any valid JSON value. These types are supported: bool, int64, float64, string, []interface{}, map[string]interface{} and nil.
+- `example` (Map of String) JSON represents any valid JSON value.These types are supported: bool, int64, float64, string, []interface{}, map[string]interface{} and nil.
- `external_docs` (Attributes) ExternalDocumentation allows referencing an external resource for extended documentation. (see [below for nested schema](#nestedatt--spec--definition--external_docs))
- `id` (String)
- `properties` (Attributes) (see [below for nested schema](#nestedatt--spec--definition--properties))
@@ -199,10 +199,10 @@ Optional:
- `deprecated` (Boolean)
- `description` (String)
- `enum` (List of String)
-- `example` (Map of String) JSON represents any valid JSON value. These types are supported: bool, int64, float64, string, []interface{}, map[string]interface{} and nil.
+- `example` (Map of String) JSON represents any valid JSON value.These types are supported: bool, int64, float64, string, []interface{}, map[string]interface{} and nil.
- `exclusive_maximum` (Boolean)
- `exclusive_minimum` (Boolean)
-- `format` (String) format is an OpenAPI v3 format string. Unknown formats are ignored. The following formats are validated: - bsonobjectid: a bson object ID, i.e. a 24 characters hex string - uri: an URI as parsed by Golang net/url.ParseRequestURI - email: an email address as parsed by Golang net/mail.ParseAddress - hostname: a valid representation for an Internet host name, as defined by RFC 1034, section 3.1 [RFC1034]. - ipv4: an IPv4 IP as parsed by Golang net.ParseIP - ipv6: an IPv6 IP as parsed by Golang net.ParseIP - cidr: a CIDR as parsed by Golang net.ParseCIDR - mac: a MAC address as parsed by Golang net.ParseMAC - uuid: an UUID that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?[0-9a-f]{4}-?[0-9a-f]{4}-?[0-9a-f]{12}$ - uuid3: an UUID3 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?3[0-9a-f]{3}-?[0-9a-f]{4}-?[0-9a-f]{12}$ - uuid4: an UUID4 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?4[0-9a-f]{3}-?[89ab][0-9a-f]{3}-?[0-9a-f]{12}$ - uuid5: an UUID5 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?5[0-9a-f]{3}-?[89ab][0-9a-f]{3}-?[0-9a-f]{12}$ - isbn: an ISBN10 or ISBN13 number string like '0321751043' or '978-0321751041' - isbn10: an ISBN10 number string like '0321751043' - isbn13: an ISBN13 number string like '978-0321751041' - creditcard: a credit card number defined by the regex ^(?:4[0-9]{12}(?:[0-9]{3})?|5[1-5][0-9]{14}|6(?:011|5[0-9][0-9])[0-9]{12}|3[47][0-9]{13}|3(?:0[0-5]|[68][0-9])[0-9]{11}|(?:2131|1800|35d{3})d{11})$ with any non digit characters mixed in - ssn: a U.S. social security number following the regex ^d{3}[- ]?d{2}[- ]?d{4}$ - hexcolor: an hexadecimal color code like '#FFFFFF' following the regex ^#?([0-9a-fA-F]{3}|[0-9a-fA-F]{6})$ - rgbcolor: an RGB color code like rgb like 'rgb(255,255,255)' - byte: base64 encoded binary data - password: any kind of string - date: a date string like '2006-01-02' as defined by full-date in RFC3339 - duration: a duration string like '22 ns' as parsed by Golang time.ParseDuration or compatible with Scala duration format - datetime: a date time string like '2014-12-15T19:30:20.000Z' as defined by date-time in RFC3339.
+- `format` (String) format is an OpenAPI v3 format string. Unknown formats are ignored. The following formats are validated:- bsonobjectid: a bson object ID, i.e. a 24 characters hex string- uri: an URI as parsed by Golang net/url.ParseRequestURI- email: an email address as parsed by Golang net/mail.ParseAddress- hostname: a valid representation for an Internet host name, as defined by RFC 1034, section 3.1 [RFC1034].- ipv4: an IPv4 IP as parsed by Golang net.ParseIP- ipv6: an IPv6 IP as parsed by Golang net.ParseIP- cidr: a CIDR as parsed by Golang net.ParseCIDR- mac: a MAC address as parsed by Golang net.ParseMAC- uuid: an UUID that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?[0-9a-f]{4}-?[0-9a-f]{4}-?[0-9a-f]{12}$- uuid3: an UUID3 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?3[0-9a-f]{3}-?[0-9a-f]{4}-?[0-9a-f]{12}$- uuid4: an UUID4 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?4[0-9a-f]{3}-?[89ab][0-9a-f]{3}-?[0-9a-f]{12}$- uuid5: an UUID5 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?5[0-9a-f]{3}-?[89ab][0-9a-f]{3}-?[0-9a-f]{12}$- isbn: an ISBN10 or ISBN13 number string like '0321751043' or '978-0321751041'- isbn10: an ISBN10 number string like '0321751043'- isbn13: an ISBN13 number string like '978-0321751041'- creditcard: a credit card number defined by the regex ^(?:4[0-9]{12}(?:[0-9]{3})?|5[1-5][0-9]{14}|6(?:011|5[0-9][0-9])[0-9]{12}|3[47][0-9]{13}|3(?:0[0-5]|[68][0-9])[0-9]{11}|(?:2131|1800|35d{3})d{11})$ with any non digit characters mixed in- ssn: a U.S. social security number following the regex ^d{3}[- ]?d{2}[- ]?d{4}$- hexcolor: an hexadecimal color code like '#FFFFFF' following the regex ^#?([0-9a-fA-F]{3}|[0-9a-fA-F]{6})$- rgbcolor: an RGB color code like rgb like 'rgb(255,255,255)'- byte: base64 encoded binary data- password: any kind of string- date: a date string like '2006-01-02' as defined by full-date in RFC3339- duration: a duration string like '22 ns' as parsed by Golang time.ParseDuration or compatible with Scala duration format- datetime: a date time string like '2014-12-15T19:30:20.000Z' as defined by date-time in RFC3339.
- `id` (String)
- `max_items` (Number)
- `max_length` (Number)
@@ -233,9 +233,9 @@ Optional:
- `content_ref` (String) the confimap reference holding the source content
- `content_type` (String) the content type (tipically text or binary)
- `from_kamelet` (Boolean) True if the spec is generated from a Kamelet
-- `interceptors` (List of String) Interceptors are optional identifiers the org.apache.camel.k.RoutesLoader uses to pre/post process sources
+- `interceptors` (List of String) Interceptors are optional identifiers the org.apache.camel.k.RoutesLoaderuses to pre/post process sources
- `language` (String) specify which is the language (Camel DSL) used to interpret this source code
-- `loader` (String) Loader is an optional id of the org.apache.camel.k.RoutesLoader that will interpret this source at runtime
+- `loader` (String) Loader is an optional id of the org.apache.camel.k.RoutesLoader that willinterpret this source at runtime
- `name` (String) the name of the specification
- `path` (String) the path where the file is stored
- `property_names` (List of String) List of property names defined in the source (e.g. if type is 'template')
@@ -258,7 +258,7 @@ Optional:
- `description` (String)
- `dollarschema` (String) JSONSchemaURL represents a schema url.
-- `example` (Map of String) JSON represents any valid JSON value. These types are supported: bool, int64, float64, string, []interface{}, map[string]interface{} and nil.
+- `example` (Map of String) JSON represents any valid JSON value.These types are supported: bool, int64, float64, string, []interface{}, map[string]interface{} and nil.
- `external_docs` (Attributes) ExternalDocumentation allows referencing an external resource for extended documentation. (see [below for nested schema](#nestedatt--spec--types--schema--external_docs))
- `id` (String)
- `properties` (Attributes) (see [below for nested schema](#nestedatt--spec--types--schema--properties))
@@ -284,10 +284,10 @@ Optional:
- `deprecated` (Boolean)
- `description` (String)
- `enum` (List of String)
-- `example` (Map of String) JSON represents any valid JSON value. These types are supported: bool, int64, float64, string, []interface{}, map[string]interface{} and nil.
+- `example` (Map of String) JSON represents any valid JSON value.These types are supported: bool, int64, float64, string, []interface{}, map[string]interface{} and nil.
- `exclusive_maximum` (Boolean)
- `exclusive_minimum` (Boolean)
-- `format` (String) format is an OpenAPI v3 format string. Unknown formats are ignored. The following formats are validated: - bsonobjectid: a bson object ID, i.e. a 24 characters hex string - uri: an URI as parsed by Golang net/url.ParseRequestURI - email: an email address as parsed by Golang net/mail.ParseAddress - hostname: a valid representation for an Internet host name, as defined by RFC 1034, section 3.1 [RFC1034]. - ipv4: an IPv4 IP as parsed by Golang net.ParseIP - ipv6: an IPv6 IP as parsed by Golang net.ParseIP - cidr: a CIDR as parsed by Golang net.ParseCIDR - mac: a MAC address as parsed by Golang net.ParseMAC - uuid: an UUID that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?[0-9a-f]{4}-?[0-9a-f]{4}-?[0-9a-f]{12}$ - uuid3: an UUID3 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?3[0-9a-f]{3}-?[0-9a-f]{4}-?[0-9a-f]{12}$ - uuid4: an UUID4 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?4[0-9a-f]{3}-?[89ab][0-9a-f]{3}-?[0-9a-f]{12}$ - uuid5: an UUID5 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?5[0-9a-f]{3}-?[89ab][0-9a-f]{3}-?[0-9a-f]{12}$ - isbn: an ISBN10 or ISBN13 number string like '0321751043' or '978-0321751041' - isbn10: an ISBN10 number string like '0321751043' - isbn13: an ISBN13 number string like '978-0321751041' - creditcard: a credit card number defined by the regex ^(?:4[0-9]{12}(?:[0-9]{3})?|5[1-5][0-9]{14}|6(?:011|5[0-9][0-9])[0-9]{12}|3[47][0-9]{13}|3(?:0[0-5]|[68][0-9])[0-9]{11}|(?:2131|1800|35d{3})d{11})$ with any non digit characters mixed in - ssn: a U.S. social security number following the regex ^d{3}[- ]?d{2}[- ]?d{4}$ - hexcolor: an hexadecimal color code like '#FFFFFF' following the regex ^#?([0-9a-fA-F]{3}|[0-9a-fA-F]{6})$ - rgbcolor: an RGB color code like rgb like 'rgb(255,255,255)' - byte: base64 encoded binary data - password: any kind of string - date: a date string like '2006-01-02' as defined by full-date in RFC3339 - duration: a duration string like '22 ns' as parsed by Golang time.ParseDuration or compatible with Scala duration format - datetime: a date time string like '2014-12-15T19:30:20.000Z' as defined by date-time in RFC3339.
+- `format` (String) format is an OpenAPI v3 format string. Unknown formats are ignored. The following formats are validated:- bsonobjectid: a bson object ID, i.e. a 24 characters hex string- uri: an URI as parsed by Golang net/url.ParseRequestURI- email: an email address as parsed by Golang net/mail.ParseAddress- hostname: a valid representation for an Internet host name, as defined by RFC 1034, section 3.1 [RFC1034].- ipv4: an IPv4 IP as parsed by Golang net.ParseIP- ipv6: an IPv6 IP as parsed by Golang net.ParseIP- cidr: a CIDR as parsed by Golang net.ParseCIDR- mac: a MAC address as parsed by Golang net.ParseMAC- uuid: an UUID that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?[0-9a-f]{4}-?[0-9a-f]{4}-?[0-9a-f]{12}$- uuid3: an UUID3 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?3[0-9a-f]{3}-?[0-9a-f]{4}-?[0-9a-f]{12}$- uuid4: an UUID4 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?4[0-9a-f]{3}-?[89ab][0-9a-f]{3}-?[0-9a-f]{12}$- uuid5: an UUID5 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?5[0-9a-f]{3}-?[89ab][0-9a-f]{3}-?[0-9a-f]{12}$- isbn: an ISBN10 or ISBN13 number string like '0321751043' or '978-0321751041'- isbn10: an ISBN10 number string like '0321751043'- isbn13: an ISBN13 number string like '978-0321751041'- creditcard: a credit card number defined by the regex ^(?:4[0-9]{12}(?:[0-9]{3})?|5[1-5][0-9]{14}|6(?:011|5[0-9][0-9])[0-9]{12}|3[47][0-9]{13}|3(?:0[0-5]|[68][0-9])[0-9]{11}|(?:2131|1800|35d{3})d{11})$ with any non digit characters mixed in- ssn: a U.S. social security number following the regex ^d{3}[- ]?d{2}[- ]?d{4}$- hexcolor: an hexadecimal color code like '#FFFFFF' following the regex ^#?([0-9a-fA-F]{3}|[0-9a-fA-F]{6})$- rgbcolor: an RGB color code like rgb like 'rgb(255,255,255)'- byte: base64 encoded binary data- password: any kind of string- date: a date string like '2006-01-02' as defined by full-date in RFC3339- duration: a duration string like '22 ns' as parsed by Golang time.ParseDuration or compatible with Scala duration format- datetime: a date time string like '2014-12-15T19:30:20.000Z' as defined by date-time in RFC3339.
- `id` (String)
- `max_items` (Number)
- `max_length` (Number)
diff --git a/docs/data-sources/camel_apache_org_kamelet_v1alpha1_manifest.md b/docs/data-sources/camel_apache_org_kamelet_v1alpha1_manifest.md
index 44f208959..2efce0753 100644
--- a/docs/data-sources/camel_apache_org_kamelet_v1alpha1_manifest.md
+++ b/docs/data-sources/camel_apache_org_kamelet_v1alpha1_manifest.md
@@ -60,7 +60,7 @@ Optional:
- `dependencies` (List of String) Camel dependencies needed by the Kamelet
- `sources` (Attributes List) sources in any Camel DSL supported (see [below for nested schema](#nestedatt--spec--sources))
- `template` (Map of String) the main source in YAML DSL
-- `types` (Attributes) data specification types for the events consumed/produced by the Kamelet Deprecated: In favor of using DataTypes (see [below for nested schema](#nestedatt--spec--types))
+- `types` (Attributes) data specification types for the events consumed/produced by the KameletDeprecated: In favor of using DataTypes (see [below for nested schema](#nestedatt--spec--types))
### Nested Schema for `spec.data_types`
@@ -115,7 +115,7 @@ Optional:
- `description` (String)
- `dollarschema` (String) JSONSchemaURL represents a schema url.
-- `example` (Map of String) JSON represents any valid JSON value. These types are supported: bool, int64, float64, string, []interface{}, map[string]interface{} and nil.
+- `example` (Map of String) JSON represents any valid JSON value.These types are supported: bool, int64, float64, string, []interface{}, map[string]interface{} and nil.
- `external_docs` (Attributes) ExternalDocumentation allows referencing an external resource for extended documentation. (see [below for nested schema](#nestedatt--spec--data_types--types--schema--external_docs))
- `id` (String)
- `properties` (Attributes) (see [below for nested schema](#nestedatt--spec--data_types--types--schema--properties))
@@ -141,10 +141,10 @@ Optional:
- `deprecated` (Boolean)
- `description` (String)
- `enum` (List of String)
-- `example` (Map of String) JSON represents any valid JSON value. These types are supported: bool, int64, float64, string, []interface{}, map[string]interface{} and nil.
+- `example` (Map of String) JSON represents any valid JSON value.These types are supported: bool, int64, float64, string, []interface{}, map[string]interface{} and nil.
- `exclusive_maximum` (Boolean)
- `exclusive_minimum` (Boolean)
-- `format` (String) format is an OpenAPI v3 format string. Unknown formats are ignored. The following formats are validated: - bsonobjectid: a bson object ID, i.e. a 24 characters hex string - uri: an URI as parsed by Golang net/url.ParseRequestURI - email: an email address as parsed by Golang net/mail.ParseAddress - hostname: a valid representation for an Internet host name, as defined by RFC 1034, section 3.1 [RFC1034]. - ipv4: an IPv4 IP as parsed by Golang net.ParseIP - ipv6: an IPv6 IP as parsed by Golang net.ParseIP - cidr: a CIDR as parsed by Golang net.ParseCIDR - mac: a MAC address as parsed by Golang net.ParseMAC - uuid: an UUID that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?[0-9a-f]{4}-?[0-9a-f]{4}-?[0-9a-f]{12}$ - uuid3: an UUID3 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?3[0-9a-f]{3}-?[0-9a-f]{4}-?[0-9a-f]{12}$ - uuid4: an UUID4 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?4[0-9a-f]{3}-?[89ab][0-9a-f]{3}-?[0-9a-f]{12}$ - uuid5: an UUID5 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?5[0-9a-f]{3}-?[89ab][0-9a-f]{3}-?[0-9a-f]{12}$ - isbn: an ISBN10 or ISBN13 number string like '0321751043' or '978-0321751041' - isbn10: an ISBN10 number string like '0321751043' - isbn13: an ISBN13 number string like '978-0321751041' - creditcard: a credit card number defined by the regex ^(?:4[0-9]{12}(?:[0-9]{3})?|5[1-5][0-9]{14}|6(?:011|5[0-9][0-9])[0-9]{12}|3[47][0-9]{13}|3(?:0[0-5]|[68][0-9])[0-9]{11}|(?:2131|1800|35d{3})d{11})$ with any non digit characters mixed in - ssn: a U.S. social security number following the regex ^d{3}[- ]?d{2}[- ]?d{4}$ - hexcolor: an hexadecimal color code like '#FFFFFF' following the regex ^#?([0-9a-fA-F]{3}|[0-9a-fA-F]{6})$ - rgbcolor: an RGB color code like rgb like 'rgb(255,255,255)' - byte: base64 encoded binary data - password: any kind of string - date: a date string like '2006-01-02' as defined by full-date in RFC3339 - duration: a duration string like '22 ns' as parsed by Golang time.ParseDuration or compatible with Scala duration format - datetime: a date time string like '2014-12-15T19:30:20.000Z' as defined by date-time in RFC3339.
+- `format` (String) format is an OpenAPI v3 format string. Unknown formats are ignored. The following formats are validated:- bsonobjectid: a bson object ID, i.e. a 24 characters hex string- uri: an URI as parsed by Golang net/url.ParseRequestURI- email: an email address as parsed by Golang net/mail.ParseAddress- hostname: a valid representation for an Internet host name, as defined by RFC 1034, section 3.1 [RFC1034].- ipv4: an IPv4 IP as parsed by Golang net.ParseIP- ipv6: an IPv6 IP as parsed by Golang net.ParseIP- cidr: a CIDR as parsed by Golang net.ParseCIDR- mac: a MAC address as parsed by Golang net.ParseMAC- uuid: an UUID that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?[0-9a-f]{4}-?[0-9a-f]{4}-?[0-9a-f]{12}$- uuid3: an UUID3 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?3[0-9a-f]{3}-?[0-9a-f]{4}-?[0-9a-f]{12}$- uuid4: an UUID4 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?4[0-9a-f]{3}-?[89ab][0-9a-f]{3}-?[0-9a-f]{12}$- uuid5: an UUID5 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?5[0-9a-f]{3}-?[89ab][0-9a-f]{3}-?[0-9a-f]{12}$- isbn: an ISBN10 or ISBN13 number string like '0321751043' or '978-0321751041'- isbn10: an ISBN10 number string like '0321751043'- isbn13: an ISBN13 number string like '978-0321751041'- creditcard: a credit card number defined by the regex ^(?:4[0-9]{12}(?:[0-9]{3})?|5[1-5][0-9]{14}|6(?:011|5[0-9][0-9])[0-9]{12}|3[47][0-9]{13}|3(?:0[0-5]|[68][0-9])[0-9]{11}|(?:2131|1800|35d{3})d{11})$ with any non digit characters mixed in- ssn: a U.S. social security number following the regex ^d{3}[- ]?d{2}[- ]?d{4}$- hexcolor: an hexadecimal color code like '#FFFFFF' following the regex ^#?([0-9a-fA-F]{3}|[0-9a-fA-F]{6})$- rgbcolor: an RGB color code like rgb like 'rgb(255,255,255)'- byte: base64 encoded binary data- password: any kind of string- date: a date string like '2006-01-02' as defined by full-date in RFC3339- duration: a duration string like '22 ns' as parsed by Golang time.ParseDuration or compatible with Scala duration format- datetime: a date time string like '2014-12-15T19:30:20.000Z' as defined by date-time in RFC3339.
- `id` (String)
- `max_items` (Number)
- `max_length` (Number)
@@ -173,7 +173,7 @@ Optional:
- `description` (String)
- `dollarschema` (String) JSONSchemaURL represents a schema url.
-- `example` (Map of String) JSON represents any valid JSON value. These types are supported: bool, int64, float64, string, []interface{}, map[string]interface{} and nil.
+- `example` (Map of String) JSON represents any valid JSON value.These types are supported: bool, int64, float64, string, []interface{}, map[string]interface{} and nil.
- `external_docs` (Attributes) ExternalDocumentation allows referencing an external resource for extended documentation. (see [below for nested schema](#nestedatt--spec--definition--external_docs))
- `id` (String)
- `properties` (Attributes) (see [below for nested schema](#nestedatt--spec--definition--properties))
@@ -199,10 +199,10 @@ Optional:
- `deprecated` (Boolean)
- `description` (String)
- `enum` (List of String)
-- `example` (Map of String) JSON represents any valid JSON value. These types are supported: bool, int64, float64, string, []interface{}, map[string]interface{} and nil.
+- `example` (Map of String) JSON represents any valid JSON value.These types are supported: bool, int64, float64, string, []interface{}, map[string]interface{} and nil.
- `exclusive_maximum` (Boolean)
- `exclusive_minimum` (Boolean)
-- `format` (String) format is an OpenAPI v3 format string. Unknown formats are ignored. The following formats are validated: - bsonobjectid: a bson object ID, i.e. a 24 characters hex string - uri: an URI as parsed by Golang net/url.ParseRequestURI - email: an email address as parsed by Golang net/mail.ParseAddress - hostname: a valid representation for an Internet host name, as defined by RFC 1034, section 3.1 [RFC1034]. - ipv4: an IPv4 IP as parsed by Golang net.ParseIP - ipv6: an IPv6 IP as parsed by Golang net.ParseIP - cidr: a CIDR as parsed by Golang net.ParseCIDR - mac: a MAC address as parsed by Golang net.ParseMAC - uuid: an UUID that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?[0-9a-f]{4}-?[0-9a-f]{4}-?[0-9a-f]{12}$ - uuid3: an UUID3 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?3[0-9a-f]{3}-?[0-9a-f]{4}-?[0-9a-f]{12}$ - uuid4: an UUID4 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?4[0-9a-f]{3}-?[89ab][0-9a-f]{3}-?[0-9a-f]{12}$ - uuid5: an UUID5 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?5[0-9a-f]{3}-?[89ab][0-9a-f]{3}-?[0-9a-f]{12}$ - isbn: an ISBN10 or ISBN13 number string like '0321751043' or '978-0321751041' - isbn10: an ISBN10 number string like '0321751043' - isbn13: an ISBN13 number string like '978-0321751041' - creditcard: a credit card number defined by the regex ^(?:4[0-9]{12}(?:[0-9]{3})?|5[1-5][0-9]{14}|6(?:011|5[0-9][0-9])[0-9]{12}|3[47][0-9]{13}|3(?:0[0-5]|[68][0-9])[0-9]{11}|(?:2131|1800|35d{3})d{11})$ with any non digit characters mixed in - ssn: a U.S. social security number following the regex ^d{3}[- ]?d{2}[- ]?d{4}$ - hexcolor: an hexadecimal color code like '#FFFFFF' following the regex ^#?([0-9a-fA-F]{3}|[0-9a-fA-F]{6})$ - rgbcolor: an RGB color code like rgb like 'rgb(255,255,255)' - byte: base64 encoded binary data - password: any kind of string - date: a date string like '2006-01-02' as defined by full-date in RFC3339 - duration: a duration string like '22 ns' as parsed by Golang time.ParseDuration or compatible with Scala duration format - datetime: a date time string like '2014-12-15T19:30:20.000Z' as defined by date-time in RFC3339.
+- `format` (String) format is an OpenAPI v3 format string. Unknown formats are ignored. The following formats are validated:- bsonobjectid: a bson object ID, i.e. a 24 characters hex string- uri: an URI as parsed by Golang net/url.ParseRequestURI- email: an email address as parsed by Golang net/mail.ParseAddress- hostname: a valid representation for an Internet host name, as defined by RFC 1034, section 3.1 [RFC1034].- ipv4: an IPv4 IP as parsed by Golang net.ParseIP- ipv6: an IPv6 IP as parsed by Golang net.ParseIP- cidr: a CIDR as parsed by Golang net.ParseCIDR- mac: a MAC address as parsed by Golang net.ParseMAC- uuid: an UUID that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?[0-9a-f]{4}-?[0-9a-f]{4}-?[0-9a-f]{12}$- uuid3: an UUID3 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?3[0-9a-f]{3}-?[0-9a-f]{4}-?[0-9a-f]{12}$- uuid4: an UUID4 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?4[0-9a-f]{3}-?[89ab][0-9a-f]{3}-?[0-9a-f]{12}$- uuid5: an UUID5 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?5[0-9a-f]{3}-?[89ab][0-9a-f]{3}-?[0-9a-f]{12}$- isbn: an ISBN10 or ISBN13 number string like '0321751043' or '978-0321751041'- isbn10: an ISBN10 number string like '0321751043'- isbn13: an ISBN13 number string like '978-0321751041'- creditcard: a credit card number defined by the regex ^(?:4[0-9]{12}(?:[0-9]{3})?|5[1-5][0-9]{14}|6(?:011|5[0-9][0-9])[0-9]{12}|3[47][0-9]{13}|3(?:0[0-5]|[68][0-9])[0-9]{11}|(?:2131|1800|35d{3})d{11})$ with any non digit characters mixed in- ssn: a U.S. social security number following the regex ^d{3}[- ]?d{2}[- ]?d{4}$- hexcolor: an hexadecimal color code like '#FFFFFF' following the regex ^#?([0-9a-fA-F]{3}|[0-9a-fA-F]{6})$- rgbcolor: an RGB color code like rgb like 'rgb(255,255,255)'- byte: base64 encoded binary data- password: any kind of string- date: a date string like '2006-01-02' as defined by full-date in RFC3339- duration: a duration string like '22 ns' as parsed by Golang time.ParseDuration or compatible with Scala duration format- datetime: a date time string like '2014-12-15T19:30:20.000Z' as defined by date-time in RFC3339.
- `id` (String)
- `max_items` (Number)
- `max_length` (Number)
@@ -233,9 +233,9 @@ Optional:
- `content_ref` (String) the confimap reference holding the source content
- `content_type` (String) the content type (tipically text or binary)
- `from_kamelet` (Boolean) True if the spec is generated from a Kamelet
-- `interceptors` (List of String) Interceptors are optional identifiers the org.apache.camel.k.RoutesLoader uses to pre/post process sources
+- `interceptors` (List of String) Interceptors are optional identifiers the org.apache.camel.k.RoutesLoaderuses to pre/post process sources
- `language` (String) specify which is the language (Camel DSL) used to interpret this source code
-- `loader` (String) Loader is an optional id of the org.apache.camel.k.RoutesLoader that will interpret this source at runtime
+- `loader` (String) Loader is an optional id of the org.apache.camel.k.RoutesLoader that willinterpret this source at runtime
- `name` (String) the name of the specification
- `path` (String) the path where the file is stored
- `property_names` (List of String) List of property names defined in the source (e.g. if type is 'template')
@@ -258,7 +258,7 @@ Optional:
- `description` (String)
- `dollarschema` (String) JSONSchemaURL represents a schema url.
-- `example` (Map of String) JSON represents any valid JSON value. These types are supported: bool, int64, float64, string, []interface{}, map[string]interface{} and nil.
+- `example` (Map of String) JSON represents any valid JSON value.These types are supported: bool, int64, float64, string, []interface{}, map[string]interface{} and nil.
- `external_docs` (Attributes) ExternalDocumentation allows referencing an external resource for extended documentation. (see [below for nested schema](#nestedatt--spec--types--schema--external_docs))
- `id` (String)
- `properties` (Attributes) (see [below for nested schema](#nestedatt--spec--types--schema--properties))
@@ -284,10 +284,10 @@ Optional:
- `deprecated` (Boolean)
- `description` (String)
- `enum` (List of String)
-- `example` (Map of String) JSON represents any valid JSON value. These types are supported: bool, int64, float64, string, []interface{}, map[string]interface{} and nil.
+- `example` (Map of String) JSON represents any valid JSON value.These types are supported: bool, int64, float64, string, []interface{}, map[string]interface{} and nil.
- `exclusive_maximum` (Boolean)
- `exclusive_minimum` (Boolean)
-- `format` (String) format is an OpenAPI v3 format string. Unknown formats are ignored. The following formats are validated: - bsonobjectid: a bson object ID, i.e. a 24 characters hex string - uri: an URI as parsed by Golang net/url.ParseRequestURI - email: an email address as parsed by Golang net/mail.ParseAddress - hostname: a valid representation for an Internet host name, as defined by RFC 1034, section 3.1 [RFC1034]. - ipv4: an IPv4 IP as parsed by Golang net.ParseIP - ipv6: an IPv6 IP as parsed by Golang net.ParseIP - cidr: a CIDR as parsed by Golang net.ParseCIDR - mac: a MAC address as parsed by Golang net.ParseMAC - uuid: an UUID that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?[0-9a-f]{4}-?[0-9a-f]{4}-?[0-9a-f]{12}$ - uuid3: an UUID3 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?3[0-9a-f]{3}-?[0-9a-f]{4}-?[0-9a-f]{12}$ - uuid4: an UUID4 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?4[0-9a-f]{3}-?[89ab][0-9a-f]{3}-?[0-9a-f]{12}$ - uuid5: an UUID5 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?5[0-9a-f]{3}-?[89ab][0-9a-f]{3}-?[0-9a-f]{12}$ - isbn: an ISBN10 or ISBN13 number string like '0321751043' or '978-0321751041' - isbn10: an ISBN10 number string like '0321751043' - isbn13: an ISBN13 number string like '978-0321751041' - creditcard: a credit card number defined by the regex ^(?:4[0-9]{12}(?:[0-9]{3})?|5[1-5][0-9]{14}|6(?:011|5[0-9][0-9])[0-9]{12}|3[47][0-9]{13}|3(?:0[0-5]|[68][0-9])[0-9]{11}|(?:2131|1800|35d{3})d{11})$ with any non digit characters mixed in - ssn: a U.S. social security number following the regex ^d{3}[- ]?d{2}[- ]?d{4}$ - hexcolor: an hexadecimal color code like '#FFFFFF' following the regex ^#?([0-9a-fA-F]{3}|[0-9a-fA-F]{6})$ - rgbcolor: an RGB color code like rgb like 'rgb(255,255,255)' - byte: base64 encoded binary data - password: any kind of string - date: a date string like '2006-01-02' as defined by full-date in RFC3339 - duration: a duration string like '22 ns' as parsed by Golang time.ParseDuration or compatible with Scala duration format - datetime: a date time string like '2014-12-15T19:30:20.000Z' as defined by date-time in RFC3339.
+- `format` (String) format is an OpenAPI v3 format string. Unknown formats are ignored. The following formats are validated:- bsonobjectid: a bson object ID, i.e. a 24 characters hex string- uri: an URI as parsed by Golang net/url.ParseRequestURI- email: an email address as parsed by Golang net/mail.ParseAddress- hostname: a valid representation for an Internet host name, as defined by RFC 1034, section 3.1 [RFC1034].- ipv4: an IPv4 IP as parsed by Golang net.ParseIP- ipv6: an IPv6 IP as parsed by Golang net.ParseIP- cidr: a CIDR as parsed by Golang net.ParseCIDR- mac: a MAC address as parsed by Golang net.ParseMAC- uuid: an UUID that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?[0-9a-f]{4}-?[0-9a-f]{4}-?[0-9a-f]{12}$- uuid3: an UUID3 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?3[0-9a-f]{3}-?[0-9a-f]{4}-?[0-9a-f]{12}$- uuid4: an UUID4 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?4[0-9a-f]{3}-?[89ab][0-9a-f]{3}-?[0-9a-f]{12}$- uuid5: an UUID5 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?5[0-9a-f]{3}-?[89ab][0-9a-f]{3}-?[0-9a-f]{12}$- isbn: an ISBN10 or ISBN13 number string like '0321751043' or '978-0321751041'- isbn10: an ISBN10 number string like '0321751043'- isbn13: an ISBN13 number string like '978-0321751041'- creditcard: a credit card number defined by the regex ^(?:4[0-9]{12}(?:[0-9]{3})?|5[1-5][0-9]{14}|6(?:011|5[0-9][0-9])[0-9]{12}|3[47][0-9]{13}|3(?:0[0-5]|[68][0-9])[0-9]{11}|(?:2131|1800|35d{3})d{11})$ with any non digit characters mixed in- ssn: a U.S. social security number following the regex ^d{3}[- ]?d{2}[- ]?d{4}$- hexcolor: an hexadecimal color code like '#FFFFFF' following the regex ^#?([0-9a-fA-F]{3}|[0-9a-fA-F]{6})$- rgbcolor: an RGB color code like rgb like 'rgb(255,255,255)'- byte: base64 encoded binary data- password: any kind of string- date: a date string like '2006-01-02' as defined by full-date in RFC3339- duration: a duration string like '22 ns' as parsed by Golang time.ParseDuration or compatible with Scala duration format- datetime: a date time string like '2014-12-15T19:30:20.000Z' as defined by date-time in RFC3339.
- `id` (String)
- `max_items` (Number)
- `max_length` (Number)
diff --git a/docs/data-sources/camel_apache_org_pipe_v1_manifest.md b/docs/data-sources/camel_apache_org_pipe_v1_manifest.md
index 5017849a3..081d3308c 100644
--- a/docs/data-sources/camel_apache_org_pipe_v1_manifest.md
+++ b/docs/data-sources/camel_apache_org_pipe_v1_manifest.md
@@ -56,7 +56,7 @@ Optional:
Optional:
- `error_handler` (Map of String) ErrorHandler is an optional handler called upon an error occurring in the integration
-- `integration` (Attributes) Integration is an optional integration used to specify custom parameters Deprecated don't use this. Use trait annotations if you need to change any cluster configuration. (see [below for nested schema](#nestedatt--spec--integration))
+- `integration` (Attributes) Integration is an optional integration used to specify custom parametersDeprecated don't use this. Use trait annotations if you need to change any cluster configuration. (see [below for nested schema](#nestedatt--spec--integration))
- `replicas` (Number) Replicas is the number of desired replicas for the Pipe
- `service_account_name` (String) Custom SA to use for the Pipe
- `sink` (Attributes) Sink is the destination of the integration defined by this Pipe (see [below for nested schema](#nestedatt--spec--sink))
@@ -68,7 +68,7 @@ Optional:
Optional:
-- `configuration` (Attributes List) Deprecated: Use camel trait (camel.properties) to manage properties Use mount trait (mount.configs) to manage configs Use mount trait (mount.resources) to manage resources Use mount trait (mount.volumes) to manage volumes (see [below for nested schema](#nestedatt--spec--integration--configuration))
+- `configuration` (Attributes List) Deprecated:Use camel trait (camel.properties) to manage propertiesUse mount trait (mount.configs) to manage configsUse mount trait (mount.resources) to manage resourcesUse mount trait (mount.volumes) to manage volumes (see [below for nested schema](#nestedatt--spec--integration--configuration))
- `dependencies` (List of String) the list of Camel or Maven dependencies required by the Integration
- `flows` (List of Map of String) a source in YAML DSL language which contain the routes to run
- `integration_kit` (Attributes) the reference of the 'IntegrationKit' which is used for this Integration (see [below for nested schema](#nestedatt--spec--integration--integration_kit))
@@ -95,12 +95,12 @@ Required:
Optional:
- `api_version` (String) API version of the referent.
-- `field_path` (String) If referring to a piece of an object instead of an entire object, this string should contain a valid JSON/Go field access statement, such as desiredState.manifest.containers[2]. For example, if the object reference is to a container within a pod, this would take on a value like: 'spec.containers{name}' (where 'name' refers to the name of the container that triggered the event) or if no container name is specified 'spec.containers[2]' (container with index 2 in this pod). This syntax is chosen only to have some well-defined way of referencing a part of an object. TODO: this design is not final and this field is subject to change in the future.
-- `kind` (String) Kind of the referent. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-- `namespace` (String) Namespace of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/
-- `resource_version` (String) Specific resourceVersion to which this reference is made, if any. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
-- `uid` (String) UID of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids
+- `field_path` (String) If referring to a piece of an object instead of an entire object, this stringshould contain a valid JSON/Go field access statement, such as desiredState.manifest.containers[2].For example, if the object reference is to a container within a pod, this would take on a value like:'spec.containers{name}' (where 'name' refers to the name of the container that triggeredthe event) or if no container name is specified 'spec.containers[2]' (container withindex 2 in this pod). This syntax is chosen only to have some well-defined way ofreferencing a part of an object.TODO: this design is not final and this field is subject to change in the future.
+- `kind` (String) Kind of the referent.More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+- `namespace` (String) Namespace of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/
+- `resource_version` (String) Specific resourceVersion to which this reference is made, if any.More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
+- `uid` (String) UID of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids
@@ -114,9 +114,9 @@ Optional:
- `content_ref` (String) the confimap reference holding the source content
- `content_type` (String) the content type (tipically text or binary)
- `from_kamelet` (Boolean) True if the spec is generated from a Kamelet
-- `interceptors` (List of String) Interceptors are optional identifiers the org.apache.camel.k.RoutesLoader uses to pre/post process sources
+- `interceptors` (List of String) Interceptors are optional identifiers the org.apache.camel.k.RoutesLoaderuses to pre/post process sources
- `language` (String) specify which is the language (Camel DSL) used to interpret this source code
-- `loader` (String) Loader is an optional id of the org.apache.camel.k.RoutesLoader that will interpret this source at runtime
+- `loader` (String) Loader is an optional id of the org.apache.camel.k.RoutesLoader that willinterpret this source at runtime
- `name` (String) the name of the specification
- `path` (String) the path where the file is stored
- `property_names` (List of String) List of property names defined in the source (e.g. if type is 'template')
@@ -157,33 +157,33 @@ Optional:
Required:
-- `name` (String) Name of the container specified as a DNS_LABEL. Each container in a pod must have a unique name (DNS_LABEL). Cannot be updated.
+- `name` (String) Name of the container specified as a DNS_LABEL.Each container in a pod must have a unique name (DNS_LABEL).Cannot be updated.
Optional:
-- `args` (List of String) Arguments to the entrypoint. The container image's CMD is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container's environment. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. '$$(VAR_NAME)' will produce the string literal '$(VAR_NAME)'. Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
-- `command` (List of String) Entrypoint array. Not executed within a shell. The container image's ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container's environment. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. '$$(VAR_NAME)' will produce the string literal '$(VAR_NAME)'. Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
-- `env` (Attributes List) List of environment variables to set in the container. Cannot be updated. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--env))
-- `env_from` (Attributes List) List of sources to populate environment variables in the container. The keys defined within a source must be a C_IDENTIFIER. All invalid keys will be reported as an event when the container is starting. When a key exists in multiple sources, the value associated with the last source will take precedence. Values defined by an Env with a duplicate key will take precedence. Cannot be updated. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--env_from))
-- `image` (String) Container image name. More info: https://kubernetes.io/docs/concepts/containers/images This field is optional to allow higher level config management to default or override container images in workload controllers like Deployments and StatefulSets.
-- `image_pull_policy` (String) Image pull policy. One of Always, Never, IfNotPresent. Defaults to Always if :latest tag is specified, or IfNotPresent otherwise. Cannot be updated. More info: https://kubernetes.io/docs/concepts/containers/images#updating-images
-- `lifecycle` (Attributes) Actions that the management system should take in response to container lifecycle events. Cannot be updated. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--lifecycle))
-- `liveness_probe` (Attributes) Periodic probe of container liveness. Container will be restarted if the probe fails. Cannot be updated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--liveness_probe))
-- `ports` (Attributes List) List of ports to expose from the container. Not specifying a port here DOES NOT prevent that port from being exposed. Any port which is listening on the default '0.0.0.0' address inside a container will be accessible from the network. Modifying this array with strategic merge patch may corrupt the data. For more information See https://github.com/kubernetes/kubernetes/issues/108255. Cannot be updated. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--ports))
-- `readiness_probe` (Attributes) Periodic probe of container service readiness. Container will be removed from service endpoints if the probe fails. Cannot be updated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--readiness_probe))
+- `args` (List of String) Arguments to the entrypoint.The container image's CMD is used if this is not provided.Variable references $(VAR_NAME) are expanded using the container's environment. If a variablecannot be resolved, the reference in the input string will be unchanged. Double $$ are reducedto a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. '$$(VAR_NAME)' willproduce the string literal '$(VAR_NAME)'. Escaped references will never be expanded, regardlessof whether the variable exists or not. Cannot be updated.More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
+- `command` (List of String) Entrypoint array. Not executed within a shell.The container image's ENTRYPOINT is used if this is not provided.Variable references $(VAR_NAME) are expanded using the container's environment. If a variablecannot be resolved, the reference in the input string will be unchanged. Double $$ are reducedto a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. '$$(VAR_NAME)' willproduce the string literal '$(VAR_NAME)'. Escaped references will never be expanded, regardlessof whether the variable exists or not. Cannot be updated.More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
+- `env` (Attributes List) List of environment variables to set in the container.Cannot be updated. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--env))
+- `env_from` (Attributes List) List of sources to populate environment variables in the container.The keys defined within a source must be a C_IDENTIFIER. All invalid keyswill be reported as an event when the container is starting. When a key exists in multiplesources, the value associated with the last source will take precedence.Values defined by an Env with a duplicate key will take precedence.Cannot be updated. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--env_from))
+- `image` (String) Container image name.More info: https://kubernetes.io/docs/concepts/containers/imagesThis field is optional to allow higher level config management to default or overridecontainer images in workload controllers like Deployments and StatefulSets.
+- `image_pull_policy` (String) Image pull policy.One of Always, Never, IfNotPresent.Defaults to Always if :latest tag is specified, or IfNotPresent otherwise.Cannot be updated.More info: https://kubernetes.io/docs/concepts/containers/images#updating-images
+- `lifecycle` (Attributes) Actions that the management system should take in response to container lifecycle events.Cannot be updated. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--lifecycle))
+- `liveness_probe` (Attributes) Periodic probe of container liveness.Container will be restarted if the probe fails.Cannot be updated.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--liveness_probe))
+- `ports` (Attributes List) List of ports to expose from the container. Not specifying a port hereDOES NOT prevent that port from being exposed. Any port which islistening on the default '0.0.0.0' address inside a container will beaccessible from the network.Modifying this array with strategic merge patch may corrupt the data.For more information See https://github.com/kubernetes/kubernetes/issues/108255.Cannot be updated. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--ports))
+- `readiness_probe` (Attributes) Periodic probe of container service readiness.Container will be removed from service endpoints if the probe fails.Cannot be updated.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--readiness_probe))
- `resize_policy` (Attributes List) Resources resize policy for the container. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--resize_policy))
-- `resources` (Attributes) Compute Resources required by this container. Cannot be updated. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/ (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--resources))
-- `restart_policy` (String) RestartPolicy defines the restart behavior of individual containers in a pod. This field may only be set for init containers, and the only allowed value is 'Always'. For non-init containers or when this field is not specified, the restart behavior is defined by the Pod's restart policy and the container type. Setting the RestartPolicy as 'Always' for the init container will have the following effect: this init container will be continually restarted on exit until all regular containers have terminated. Once all regular containers have completed, all init containers with restartPolicy 'Always' will be shut down. This lifecycle differs from normal init containers and is often referred to as a 'sidecar' container. Although this init container still starts in the init container sequence, it does not wait for the container to complete before proceeding to the next init container. Instead, the next init container starts immediately after this init container is started, or after any startupProbe has successfully completed.
-- `security_context` (Attributes) SecurityContext defines the security options the container should be run with. If set, the fields of SecurityContext override the equivalent fields of PodSecurityContext. More info: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--security_context))
-- `startup_probe` (Attributes) StartupProbe indicates that the Pod has successfully initialized. If specified, no other probes are executed until this completes successfully. If this probe fails, the Pod will be restarted, just as if the livenessProbe failed. This can be used to provide different probe parameters at the beginning of a Pod's lifecycle, when it might take a long time to load data or warm a cache, than during steady-state operation. This cannot be updated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--startup_probe))
-- `stdin` (Boolean) Whether this container should allocate a buffer for stdin in the container runtime. If this is not set, reads from stdin in the container will always result in EOF. Default is false.
-- `stdin_once` (Boolean) Whether the container runtime should close the stdin channel after it has been opened by a single attach. When stdin is true the stdin stream will remain open across multiple attach sessions. If stdinOnce is set to true, stdin is opened on container start, is empty until the first client attaches to stdin, and then remains open and accepts data until the client disconnects, at which time stdin is closed and remains closed until the container is restarted. If this flag is false, a container processes that reads from stdin will never receive an EOF. Default is false
-- `termination_message_path` (String) Optional: Path at which the file to which the container's termination message will be written is mounted into the container's filesystem. Message written is intended to be brief final status, such as an assertion failure message. Will be truncated by the node if greater than 4096 bytes. The total message length across all containers will be limited to 12kb. Defaults to /dev/termination-log. Cannot be updated.
-- `termination_message_policy` (String) Indicate how the termination message should be populated. File will use the contents of terminationMessagePath to populate the container status message on both success and failure. FallbackToLogsOnError will use the last chunk of container log output if the termination message file is empty and the container exited with an error. The log output is limited to 2048 bytes or 80 lines, whichever is smaller. Defaults to File. Cannot be updated.
-- `tty` (Boolean) Whether this container should allocate a TTY for itself, also requires 'stdin' to be true. Default is false.
+- `resources` (Attributes) Compute Resources required by this container.Cannot be updated.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/ (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--resources))
+- `restart_policy` (String) RestartPolicy defines the restart behavior of individual containers in a pod.This field may only be set for init containers, and the only allowed value is 'Always'.For non-init containers or when this field is not specified,the restart behavior is defined by the Pod's restart policy and the container type.Setting the RestartPolicy as 'Always' for the init container will have the following effect:this init container will be continually restarted onexit until all regular containers have terminated. Once all regularcontainers have completed, all init containers with restartPolicy 'Always'will be shut down. This lifecycle differs from normal init containers andis often referred to as a 'sidecar' container. Although this initcontainer still starts in the init container sequence, it does not waitfor the container to complete before proceeding to the next initcontainer. Instead, the next init container starts immediately after thisinit container is started, or after any startupProbe has successfullycompleted.
+- `security_context` (Attributes) SecurityContext defines the security options the container should be run with.If set, the fields of SecurityContext override the equivalent fields of PodSecurityContext.More info: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--security_context))
+- `startup_probe` (Attributes) StartupProbe indicates that the Pod has successfully initialized.If specified, no other probes are executed until this completes successfully.If this probe fails, the Pod will be restarted, just as if the livenessProbe failed.This can be used to provide different probe parameters at the beginning of a Pod's lifecycle,when it might take a long time to load data or warm a cache, than during steady-state operation.This cannot be updated.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--startup_probe))
+- `stdin` (Boolean) Whether this container should allocate a buffer for stdin in the container runtime. If thisis not set, reads from stdin in the container will always result in EOF.Default is false.
+- `stdin_once` (Boolean) Whether the container runtime should close the stdin channel after it has been opened bya single attach. When stdin is true the stdin stream will remain open across multiple attachsessions. If stdinOnce is set to true, stdin is opened on container start, is empty until thefirst client attaches to stdin, and then remains open and accepts data until the client disconnects,at which time stdin is closed and remains closed until the container is restarted. If thisflag is false, a container processes that reads from stdin will never receive an EOF.Default is false
+- `termination_message_path` (String) Optional: Path at which the file to which the container's termination messagewill be written is mounted into the container's filesystem.Message written is intended to be brief final status, such as an assertion failure message.Will be truncated by the node if greater than 4096 bytes. The total message length acrossall containers will be limited to 12kb.Defaults to /dev/termination-log.Cannot be updated.
+- `termination_message_policy` (String) Indicate how the termination message should be populated. File will use the contents ofterminationMessagePath to populate the container status message on both success and failure.FallbackToLogsOnError will use the last chunk of container log output if the terminationmessage file is empty and the container exited with an error.The log output is limited to 2048 bytes or 80 lines, whichever is smaller.Defaults to File.Cannot be updated.
+- `tty` (Boolean) Whether this container should allocate a TTY for itself, also requires 'stdin' to be true.Default is false.
- `volume_devices` (Attributes List) volumeDevices is the list of block devices to be used by the container. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--volume_devices))
-- `volume_mounts` (Attributes List) Pod volumes to mount into the container's filesystem. Cannot be updated. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--volume_mounts))
-- `working_dir` (String) Container's working directory. If not specified, the container runtime's default will be used, which might be configured in the container image. Cannot be updated.
+- `volume_mounts` (Attributes List) Pod volumes to mount into the container's filesystem.Cannot be updated. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--volume_mounts))
+- `working_dir` (String) Container's working directory.If not specified, the container runtime's default will be used, whichmight be configured in the container image.Cannot be updated.
### Nested Schema for `spec.integration.template.spec.containers.env`
@@ -194,7 +194,7 @@ Required:
Optional:
-- `value` (String) Variable references $(VAR_NAME) are expanded using the previously defined environment variables in the container and any service environment variables. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. '$$(VAR_NAME)' will produce the string literal '$(VAR_NAME)'. Escaped references will never be expanded, regardless of whether the variable exists or not. Defaults to ''.
+- `value` (String) Variable references $(VAR_NAME) are expandedusing the previously defined environment variables in the container andany service environment variables. If a variable cannot be resolved,the reference in the input string will be unchanged. Double $$ are reducedto a single $, which allows for escaping the $(VAR_NAME) syntax: i.e.'$$(VAR_NAME)' will produce the string literal '$(VAR_NAME)'.Escaped references will never be expanded, regardless of whether the variableexists or not.Defaults to ''.
- `value_from` (Attributes) Source for the environment variable's value. Cannot be used if value is not empty. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--env--value_from))
@@ -203,8 +203,8 @@ Optional:
Optional:
- `config_map_key_ref` (Attributes) Selects a key of a ConfigMap. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--env--value_from--config_map_key_ref))
-- `field_ref` (Attributes) Selects a field of the pod: supports metadata.name, metadata.namespace, 'metadata.labels['']', 'metadata.annotations['']', spec.nodeName, spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--env--value_from--field_ref))
-- `resource_field_ref` (Attributes) Selects a resource of the container: only resources limits and requests (limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu, requests.memory and requests.ephemeral-storage) are currently supported. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--env--value_from--resource_field_ref))
+- `field_ref` (Attributes) Selects a field of the pod: supports metadata.name, metadata.namespace, 'metadata.labels['']', 'metadata.annotations['']',spec.nodeName, spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--env--value_from--field_ref))
+- `resource_field_ref` (Attributes) Selects a resource of the container: only resources limits and requests(limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu, requests.memory and requests.ephemeral-storage) are currently supported. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--env--value_from--resource_field_ref))
- `secret_key_ref` (Attributes) Selects a key of a secret in the pod's namespace (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--env--value_from--secret_key_ref))
@@ -216,7 +216,7 @@ Required:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
@@ -254,7 +254,7 @@ Required:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
- `optional` (Boolean) Specify whether the Secret or its key must be defined
@@ -274,7 +274,7 @@ Optional:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
- `optional` (Boolean) Specify whether the ConfigMap must be defined
@@ -283,7 +283,7 @@ Optional:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
- `optional` (Boolean) Specify whether the Secret must be defined
@@ -293,8 +293,8 @@ Optional:
Optional:
-- `post_start` (Attributes) PostStart is called immediately after a container is created. If the handler fails, the container is terminated and restarted according to its restart policy. Other management of the container blocks until the hook completes. More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--lifecycle--post_start))
-- `pre_stop` (Attributes) PreStop is called immediately before a container is terminated due to an API request or management event such as liveness/startup probe failure, preemption, resource contention, etc. The handler is not called if the container crashes or exits. The Pod's termination grace period countdown begins before the PreStop hook is executed. Regardless of the outcome of the handler, the container will eventually terminate within the Pod's termination grace period (unless delayed by finalizers). Other management of the container blocks until the hook completes or until the termination grace period is reached. More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--lifecycle--pre_stop))
+- `post_start` (Attributes) PostStart is called immediately after a container is created. If the handler fails,the container is terminated and restarted according to its restart policy.Other management of the container blocks until the hook completes.More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--lifecycle--post_start))
+- `pre_stop` (Attributes) PreStop is called immediately before a container is terminated due to anAPI request or management event such as liveness/startup probe failure,preemption, resource contention, etc. The handler is not called if thecontainer crashes or exits. The Pod's termination grace period countdown begins before thePreStop hook is executed. Regardless of the outcome of the handler, thecontainer will eventually terminate within the Pod's termination graceperiod (unless delayed by finalizers). Other management of the container blocks until the hook completesor until the termination grace period is reached.More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--lifecycle--pre_stop))
### Nested Schema for `spec.integration.template.spec.containers.lifecycle.post_start`
@@ -304,14 +304,14 @@ Optional:
- `exec` (Attributes) Exec specifies the action to take. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--lifecycle--post_start--exec))
- `http_get` (Attributes) HTTPGet specifies the http request to perform. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--lifecycle--post_start--http_get))
- `sleep` (Attributes) Sleep represents the duration that the container should sleep before being terminated. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--lifecycle--post_start--sleep))
-- `tcp_socket` (Attributes) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and kept for the backward compatibility. There are no validation of this field and lifecycle hooks will fail in runtime when tcp handler is specified. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--lifecycle--post_start--tcp_socket))
+- `tcp_socket` (Attributes) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and keptfor the backward compatibility. There are no validation of this field andlifecycle hooks will fail in runtime when tcp handler is specified. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--lifecycle--post_start--tcp_socket))
### Nested Schema for `spec.integration.template.spec.containers.lifecycle.post_start.exec`
Optional:
-- `command` (List of String) Command is the command line to execute inside the container, the working directory for the command is root ('/') in the container's filesystem. The command is simply exec'd, it is not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
+- `command` (List of String) Command is the command line to execute inside the container, the working directory for thecommand is root ('/') in the container's filesystem. The command is simply exec'd, it isnot run inside a shell, so traditional shell instructions ('|', etc) won't work. To usea shell, you need to explicitly call out to that shell.Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
@@ -319,21 +319,21 @@ Optional:
Required:
-- `port` (String) Name or number of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
+- `port` (String) Name or number of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
Optional:
-- `host` (String) Host name to connect to, defaults to the pod IP. You probably want to set 'Host' in httpHeaders instead.
+- `host` (String) Host name to connect to, defaults to the pod IP. You probably want to set'Host' in httpHeaders instead.
- `http_headers` (Attributes List) Custom headers to set in the request. HTTP allows repeated headers. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--lifecycle--post_start--http_get--http_headers))
- `path` (String) Path to access on the HTTP server.
-- `scheme` (String) Scheme to use for connecting to the host. Defaults to HTTP.
+- `scheme` (String) Scheme to use for connecting to the host.Defaults to HTTP.
### Nested Schema for `spec.integration.template.spec.containers.lifecycle.post_start.http_get.http_headers`
Required:
-- `name` (String) The header field name. This will be canonicalized upon output, so case-variant names will be understood as the same header.
+- `name` (String) The header field name.This will be canonicalized upon output, so case-variant names will be understood as the same header.
- `value` (String) The header field value
@@ -351,7 +351,7 @@ Required:
Required:
-- `port` (String) Number or name of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
+- `port` (String) Number or name of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
Optional:
@@ -367,14 +367,14 @@ Optional:
- `exec` (Attributes) Exec specifies the action to take. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--lifecycle--pre_stop--exec))
- `http_get` (Attributes) HTTPGet specifies the http request to perform. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--lifecycle--pre_stop--http_get))
- `sleep` (Attributes) Sleep represents the duration that the container should sleep before being terminated. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--lifecycle--pre_stop--sleep))
-- `tcp_socket` (Attributes) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and kept for the backward compatibility. There are no validation of this field and lifecycle hooks will fail in runtime when tcp handler is specified. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--lifecycle--pre_stop--tcp_socket))
+- `tcp_socket` (Attributes) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and keptfor the backward compatibility. There are no validation of this field andlifecycle hooks will fail in runtime when tcp handler is specified. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--lifecycle--pre_stop--tcp_socket))
### Nested Schema for `spec.integration.template.spec.containers.lifecycle.pre_stop.exec`
Optional:
-- `command` (List of String) Command is the command line to execute inside the container, the working directory for the command is root ('/') in the container's filesystem. The command is simply exec'd, it is not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
+- `command` (List of String) Command is the command line to execute inside the container, the working directory for thecommand is root ('/') in the container's filesystem. The command is simply exec'd, it isnot run inside a shell, so traditional shell instructions ('|', etc) won't work. To usea shell, you need to explicitly call out to that shell.Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
@@ -382,21 +382,21 @@ Optional:
Required:
-- `port` (String) Name or number of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
+- `port` (String) Name or number of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
Optional:
-- `host` (String) Host name to connect to, defaults to the pod IP. You probably want to set 'Host' in httpHeaders instead.
+- `host` (String) Host name to connect to, defaults to the pod IP. You probably want to set'Host' in httpHeaders instead.
- `http_headers` (Attributes List) Custom headers to set in the request. HTTP allows repeated headers. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--lifecycle--pre_stop--http_get--http_headers))
- `path` (String) Path to access on the HTTP server.
-- `scheme` (String) Scheme to use for connecting to the host. Defaults to HTTP.
+- `scheme` (String) Scheme to use for connecting to the host.Defaults to HTTP.
### Nested Schema for `spec.integration.template.spec.containers.lifecycle.pre_stop.http_get.http_headers`
Required:
-- `name` (String) The header field name. This will be canonicalized upon output, so case-variant names will be understood as the same header.
+- `name` (String) The header field name.This will be canonicalized upon output, so case-variant names will be understood as the same header.
- `value` (String) The header field value
@@ -414,7 +414,7 @@ Required:
Required:
-- `port` (String) Number or name of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
+- `port` (String) Number or name of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
Optional:
@@ -429,22 +429,22 @@ Optional:
Optional:
- `exec` (Attributes) Exec specifies the action to take. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--liveness_probe--exec))
-- `failure_threshold` (Number) Minimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1.
+- `failure_threshold` (Number) Minimum consecutive failures for the probe to be considered failed after having succeeded.Defaults to 3. Minimum value is 1.
- `grpc` (Attributes) GRPC specifies an action involving a GRPC port. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--liveness_probe--grpc))
- `http_get` (Attributes) HTTPGet specifies the http request to perform. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--liveness_probe--http_get))
-- `initial_delay_seconds` (Number) Number of seconds after the container has started before liveness probes are initiated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-- `period_seconds` (Number) How often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1.
-- `success_threshold` (Number) Minimum consecutive successes for the probe to be considered successful after having failed. Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
+- `initial_delay_seconds` (Number) Number of seconds after the container has started before liveness probes are initiated.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
+- `period_seconds` (Number) How often (in seconds) to perform the probe.Default to 10 seconds. Minimum value is 1.
+- `success_threshold` (Number) Minimum consecutive successes for the probe to be considered successful after having failed.Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
- `tcp_socket` (Attributes) TCPSocket specifies an action involving a TCP port. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--liveness_probe--tcp_socket))
-- `termination_grace_period_seconds` (Number) Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
-- `timeout_seconds` (Number) Number of seconds after which the probe times out. Defaults to 1 second. Minimum value is 1. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
+- `termination_grace_period_seconds` (Number) Optional duration in seconds the pod needs to terminate gracefully upon probe failure.The grace period is the duration in seconds after the processes running in the pod are senta termination signal and the time when the processes are forcibly halted with a kill signal.Set this value longer than the expected cleanup time for your process.If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, thisvalue overrides the value provided by the pod spec.Value must be non-negative integer. The value zero indicates stop immediately viathe kill signal (no opportunity to shut down).This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate.Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
+- `timeout_seconds` (Number) Number of seconds after which the probe times out.Defaults to 1 second. Minimum value is 1.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
### Nested Schema for `spec.integration.template.spec.containers.liveness_probe.exec`
Optional:
-- `command` (List of String) Command is the command line to execute inside the container, the working directory for the command is root ('/') in the container's filesystem. The command is simply exec'd, it is not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
+- `command` (List of String) Command is the command line to execute inside the container, the working directory for thecommand is root ('/') in the container's filesystem. The command is simply exec'd, it isnot run inside a shell, so traditional shell instructions ('|', etc) won't work. To usea shell, you need to explicitly call out to that shell.Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
@@ -456,7 +456,7 @@ Required:
Optional:
-- `service` (String) Service is the name of the service to place in the gRPC HealthCheckRequest (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md). If this is not specified, the default behavior is defined by gRPC.
+- `service` (String) Service is the name of the service to place in the gRPC HealthCheckRequest(see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).If this is not specified, the default behavior is defined by gRPC.
@@ -464,21 +464,21 @@ Optional:
Required:
-- `port` (String) Name or number of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
+- `port` (String) Name or number of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
Optional:
-- `host` (String) Host name to connect to, defaults to the pod IP. You probably want to set 'Host' in httpHeaders instead.
+- `host` (String) Host name to connect to, defaults to the pod IP. You probably want to set'Host' in httpHeaders instead.
- `http_headers` (Attributes List) Custom headers to set in the request. HTTP allows repeated headers. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--liveness_probe--http_get--http_headers))
- `path` (String) Path to access on the HTTP server.
-- `scheme` (String) Scheme to use for connecting to the host. Defaults to HTTP.
+- `scheme` (String) Scheme to use for connecting to the host.Defaults to HTTP.
### Nested Schema for `spec.integration.template.spec.containers.liveness_probe.http_get.http_headers`
Required:
-- `name` (String) The header field name. This will be canonicalized upon output, so case-variant names will be understood as the same header.
+- `name` (String) The header field name.This will be canonicalized upon output, so case-variant names will be understood as the same header.
- `value` (String) The header field value
@@ -488,7 +488,7 @@ Required:
Required:
-- `port` (String) Number or name of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
+- `port` (String) Number or name of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
Optional:
@@ -501,14 +501,14 @@ Optional:
Required:
-- `container_port` (Number) Number of port to expose on the pod's IP address. This must be a valid port number, 0 < x < 65536.
+- `container_port` (Number) Number of port to expose on the pod's IP address.This must be a valid port number, 0 < x < 65536.
Optional:
- `host_ip` (String) What host IP to bind the external port to.
-- `host_port` (Number) Number of port to expose on the host. If specified, this must be a valid port number, 0 < x < 65536. If HostNetwork is specified, this must match ContainerPort. Most containers do not need this.
-- `name` (String) If specified, this must be an IANA_SVC_NAME and unique within the pod. Each named port in a pod must have a unique name. Name for the port that can be referred to by services.
-- `protocol` (String) Protocol for port. Must be UDP, TCP, or SCTP. Defaults to 'TCP'.
+- `host_port` (Number) Number of port to expose on the host.If specified, this must be a valid port number, 0 < x < 65536.If HostNetwork is specified, this must match ContainerPort.Most containers do not need this.
+- `name` (String) If specified, this must be an IANA_SVC_NAME and unique within the pod. Eachnamed port in a pod must have a unique name. Name for the port that can bereferred to by services.
+- `protocol` (String) Protocol for port. Must be UDP, TCP, or SCTP.Defaults to 'TCP'.
@@ -517,22 +517,22 @@ Optional:
Optional:
- `exec` (Attributes) Exec specifies the action to take. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--readiness_probe--exec))
-- `failure_threshold` (Number) Minimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1.
+- `failure_threshold` (Number) Minimum consecutive failures for the probe to be considered failed after having succeeded.Defaults to 3. Minimum value is 1.
- `grpc` (Attributes) GRPC specifies an action involving a GRPC port. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--readiness_probe--grpc))
- `http_get` (Attributes) HTTPGet specifies the http request to perform. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--readiness_probe--http_get))
-- `initial_delay_seconds` (Number) Number of seconds after the container has started before liveness probes are initiated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-- `period_seconds` (Number) How often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1.
-- `success_threshold` (Number) Minimum consecutive successes for the probe to be considered successful after having failed. Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
+- `initial_delay_seconds` (Number) Number of seconds after the container has started before liveness probes are initiated.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
+- `period_seconds` (Number) How often (in seconds) to perform the probe.Default to 10 seconds. Minimum value is 1.
+- `success_threshold` (Number) Minimum consecutive successes for the probe to be considered successful after having failed.Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
- `tcp_socket` (Attributes) TCPSocket specifies an action involving a TCP port. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--readiness_probe--tcp_socket))
-- `termination_grace_period_seconds` (Number) Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
-- `timeout_seconds` (Number) Number of seconds after which the probe times out. Defaults to 1 second. Minimum value is 1. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
+- `termination_grace_period_seconds` (Number) Optional duration in seconds the pod needs to terminate gracefully upon probe failure.The grace period is the duration in seconds after the processes running in the pod are senta termination signal and the time when the processes are forcibly halted with a kill signal.Set this value longer than the expected cleanup time for your process.If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, thisvalue overrides the value provided by the pod spec.Value must be non-negative integer. The value zero indicates stop immediately viathe kill signal (no opportunity to shut down).This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate.Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
+- `timeout_seconds` (Number) Number of seconds after which the probe times out.Defaults to 1 second. Minimum value is 1.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
### Nested Schema for `spec.integration.template.spec.containers.readiness_probe.exec`
Optional:
-- `command` (List of String) Command is the command line to execute inside the container, the working directory for the command is root ('/') in the container's filesystem. The command is simply exec'd, it is not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
+- `command` (List of String) Command is the command line to execute inside the container, the working directory for thecommand is root ('/') in the container's filesystem. The command is simply exec'd, it isnot run inside a shell, so traditional shell instructions ('|', etc) won't work. To usea shell, you need to explicitly call out to that shell.Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
@@ -544,7 +544,7 @@ Required:
Optional:
-- `service` (String) Service is the name of the service to place in the gRPC HealthCheckRequest (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md). If this is not specified, the default behavior is defined by gRPC.
+- `service` (String) Service is the name of the service to place in the gRPC HealthCheckRequest(see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).If this is not specified, the default behavior is defined by gRPC.
@@ -552,21 +552,21 @@ Optional:
Required:
-- `port` (String) Name or number of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
+- `port` (String) Name or number of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
Optional:
-- `host` (String) Host name to connect to, defaults to the pod IP. You probably want to set 'Host' in httpHeaders instead.
+- `host` (String) Host name to connect to, defaults to the pod IP. You probably want to set'Host' in httpHeaders instead.
- `http_headers` (Attributes List) Custom headers to set in the request. HTTP allows repeated headers. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--readiness_probe--http_get--http_headers))
- `path` (String) Path to access on the HTTP server.
-- `scheme` (String) Scheme to use for connecting to the host. Defaults to HTTP.
+- `scheme` (String) Scheme to use for connecting to the host.Defaults to HTTP.
### Nested Schema for `spec.integration.template.spec.containers.readiness_probe.http_get.http_headers`
Required:
-- `name` (String) The header field name. This will be canonicalized upon output, so case-variant names will be understood as the same header.
+- `name` (String) The header field name.This will be canonicalized upon output, so case-variant names will be understood as the same header.
- `value` (String) The header field value
@@ -576,7 +576,7 @@ Required:
Required:
-- `port` (String) Number or name of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
+- `port` (String) Number or name of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
Optional:
@@ -589,8 +589,8 @@ Optional:
Required:
-- `resource_name` (String) Name of the resource to which this resource resize policy applies. Supported values: cpu, memory.
-- `restart_policy` (String) Restart policy to apply when specified resource is resized. If not specified, it defaults to NotRequired.
+- `resource_name` (String) Name of the resource to which this resource resize policy applies.Supported values: cpu, memory.
+- `restart_policy` (String) Restart policy to apply when specified resource is resized.If not specified, it defaults to NotRequired.
@@ -598,16 +598,16 @@ Required:
Optional:
-- `claims` (Attributes List) Claims lists the names of resources, defined in spec.resourceClaims, that are used by this container. This is an alpha field and requires enabling the DynamicResourceAllocation feature gate. This field is immutable. It can only be set for containers. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--resources--claims))
-- `limits` (Map of String) Limits describes the maximum amount of compute resources allowed. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-- `requests` (Map of String) Requests describes the minimum amount of compute resources required. If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, otherwise to an implementation-defined value. Requests cannot exceed Limits. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
+- `claims` (Attributes List) Claims lists the names of resources, defined in spec.resourceClaims,that are used by this container.This is an alpha field and requires enabling theDynamicResourceAllocation feature gate.This field is immutable. It can only be set for containers. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--resources--claims))
+- `limits` (Map of String) Limits describes the maximum amount of compute resources allowed.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
+- `requests` (Map of String) Requests describes the minimum amount of compute resources required.If Requests is omitted for a container, it defaults to Limits if that is explicitly specified,otherwise to an implementation-defined value. Requests cannot exceed Limits.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
### Nested Schema for `spec.integration.template.spec.containers.resources.claims`
Required:
-- `name` (String) Name must match the name of one entry in pod.spec.resourceClaims of the Pod where this field is used. It makes that resource available inside a container.
+- `name` (String) Name must match the name of one entry in pod.spec.resourceClaims ofthe Pod where this field is used. It makes that resource availableinside a container.
@@ -616,17 +616,17 @@ Required:
Optional:
-- `allow_privilege_escalation` (Boolean) AllowPrivilegeEscalation controls whether a process can gain more privileges than its parent process. This bool directly controls if the no_new_privs flag will be set on the container process. AllowPrivilegeEscalation is true always when the container is: 1) run as Privileged 2) has CAP_SYS_ADMIN Note that this field cannot be set when spec.os.name is windows.
-- `capabilities` (Attributes) The capabilities to add/drop when running containers. Defaults to the default set of capabilities granted by the container runtime. Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--security_context--capabilities))
-- `privileged` (Boolean) Run container in privileged mode. Processes in privileged containers are essentially equivalent to root on the host. Defaults to false. Note that this field cannot be set when spec.os.name is windows.
-- `proc_mount` (String) procMount denotes the type of proc mount to use for the containers. The default is DefaultProcMount which uses the container runtime defaults for readonly paths and masked paths. This requires the ProcMountType feature flag to be enabled. Note that this field cannot be set when spec.os.name is windows.
-- `read_only_root_filesystem` (Boolean) Whether this container has a read-only root filesystem. Default is false. Note that this field cannot be set when spec.os.name is windows.
-- `run_as_group` (Number) The GID to run the entrypoint of the container process. Uses runtime default if unset. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence. Note that this field cannot be set when spec.os.name is windows.
-- `run_as_non_root` (Boolean) Indicates that the container must run as a non-root user. If true, the Kubelet will validate the image at runtime to ensure that it does not run as UID 0 (root) and fail to start the container if it does. If unset or false, no such validation will be performed. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
-- `run_as_user` (Number) The UID to run the entrypoint of the container process. Defaults to user specified in image metadata if unspecified. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence. Note that this field cannot be set when spec.os.name is windows.
-- `se_linux_options` (Attributes) The SELinux context to be applied to the container. If unspecified, the container runtime will allocate a random SELinux context for each container. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence. Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--security_context--se_linux_options))
-- `seccomp_profile` (Attributes) The seccomp options to use by this container. If seccomp options are provided at both the pod & container level, the container options override the pod options. Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--security_context--seccomp_profile))
-- `windows_options` (Attributes) The Windows specific settings applied to all containers. If unspecified, the options from the PodSecurityContext will be used. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence. Note that this field cannot be set when spec.os.name is linux. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--security_context--windows_options))
+- `allow_privilege_escalation` (Boolean) AllowPrivilegeEscalation controls whether a process can gain moreprivileges than its parent process. This bool directly controls ifthe no_new_privs flag will be set on the container process.AllowPrivilegeEscalation is true always when the container is:1) run as Privileged2) has CAP_SYS_ADMINNote that this field cannot be set when spec.os.name is windows.
+- `capabilities` (Attributes) The capabilities to add/drop when running containers.Defaults to the default set of capabilities granted by the container runtime.Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--security_context--capabilities))
+- `privileged` (Boolean) Run container in privileged mode.Processes in privileged containers are essentially equivalent to root on the host.Defaults to false.Note that this field cannot be set when spec.os.name is windows.
+- `proc_mount` (String) procMount denotes the type of proc mount to use for the containers.The default is DefaultProcMount which uses the container runtime defaults forreadonly paths and masked paths.This requires the ProcMountType feature flag to be enabled.Note that this field cannot be set when spec.os.name is windows.
+- `read_only_root_filesystem` (Boolean) Whether this container has a read-only root filesystem.Default is false.Note that this field cannot be set when spec.os.name is windows.
+- `run_as_group` (Number) The GID to run the entrypoint of the container process.Uses runtime default if unset.May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.Note that this field cannot be set when spec.os.name is windows.
+- `run_as_non_root` (Boolean) Indicates that the container must run as a non-root user.If true, the Kubelet will validate the image at runtime to ensure that itdoes not run as UID 0 (root) and fail to start the container if it does.If unset or false, no such validation will be performed.May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.
+- `run_as_user` (Number) The UID to run the entrypoint of the container process.Defaults to user specified in image metadata if unspecified.May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.Note that this field cannot be set when spec.os.name is windows.
+- `se_linux_options` (Attributes) The SELinux context to be applied to the container.If unspecified, the container runtime will allocate a random SELinux context for eachcontainer. May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--security_context--se_linux_options))
+- `seccomp_profile` (Attributes) The seccomp options to use by this container. If seccomp options areprovided at both the pod & container level, the container optionsoverride the pod options.Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--security_context--seccomp_profile))
+- `windows_options` (Attributes) The Windows specific settings applied to all containers.If unspecified, the options from the PodSecurityContext will be used.If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.Note that this field cannot be set when spec.os.name is linux. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--security_context--windows_options))
### Nested Schema for `spec.integration.template.spec.containers.security_context.capabilities`
@@ -653,11 +653,11 @@ Optional:
Required:
-- `type` (String) type indicates which kind of seccomp profile will be applied. Valid options are: Localhost - a profile defined in a file on the node should be used. RuntimeDefault - the container runtime default profile should be used. Unconfined - no profile should be applied.
+- `type` (String) type indicates which kind of seccomp profile will be applied.Valid options are:Localhost - a profile defined in a file on the node should be used.RuntimeDefault - the container runtime default profile should be used.Unconfined - no profile should be applied.
Optional:
-- `localhost_profile` (String) localhostProfile indicates a profile defined in a file on the node should be used. The profile must be preconfigured on the node to work. Must be a descending path, relative to the kubelet's configured seccomp profile location. Must be set if type is 'Localhost'. Must NOT be set for any other type.
+- `localhost_profile` (String) localhostProfile indicates a profile defined in a file on the node should be used.The profile must be preconfigured on the node to work.Must be a descending path, relative to the kubelet's configured seccomp profile location.Must be set if type is 'Localhost'. Must NOT be set for any other type.
@@ -665,10 +665,10 @@ Optional:
Optional:
-- `gmsa_credential_spec` (String) GMSACredentialSpec is where the GMSA admission webhook (https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of the GMSA credential spec named by the GMSACredentialSpecName field.
+- `gmsa_credential_spec` (String) GMSACredentialSpec is where the GMSA admission webhook(https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of theGMSA credential spec named by the GMSACredentialSpecName field.
- `gmsa_credential_spec_name` (String) GMSACredentialSpecName is the name of the GMSA credential spec to use.
-- `host_process` (Boolean) HostProcess determines if a container should be run as a 'Host Process' container. All of a Pod's containers must have the same effective HostProcess value (it is not allowed to have a mix of HostProcess containers and non-HostProcess containers). In addition, if HostProcess is true then HostNetwork must also be set to true.
-- `run_as_user_name` (String) The UserName in Windows to run the entrypoint of the container process. Defaults to the user specified in image metadata if unspecified. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
+- `host_process` (Boolean) HostProcess determines if a container should be run as a 'Host Process' container.All of a Pod's containers must have the same effective HostProcess value(it is not allowed to have a mix of HostProcess containers and non-HostProcess containers).In addition, if HostProcess is true then HostNetwork must also be set to true.
+- `run_as_user_name` (String) The UserName in Windows to run the entrypoint of the container process.Defaults to the user specified in image metadata if unspecified.May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.
@@ -678,22 +678,22 @@ Optional:
Optional:
- `exec` (Attributes) Exec specifies the action to take. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--startup_probe--exec))
-- `failure_threshold` (Number) Minimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1.
+- `failure_threshold` (Number) Minimum consecutive failures for the probe to be considered failed after having succeeded.Defaults to 3. Minimum value is 1.
- `grpc` (Attributes) GRPC specifies an action involving a GRPC port. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--startup_probe--grpc))
- `http_get` (Attributes) HTTPGet specifies the http request to perform. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--startup_probe--http_get))
-- `initial_delay_seconds` (Number) Number of seconds after the container has started before liveness probes are initiated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-- `period_seconds` (Number) How often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1.
-- `success_threshold` (Number) Minimum consecutive successes for the probe to be considered successful after having failed. Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
+- `initial_delay_seconds` (Number) Number of seconds after the container has started before liveness probes are initiated.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
+- `period_seconds` (Number) How often (in seconds) to perform the probe.Default to 10 seconds. Minimum value is 1.
+- `success_threshold` (Number) Minimum consecutive successes for the probe to be considered successful after having failed.Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
- `tcp_socket` (Attributes) TCPSocket specifies an action involving a TCP port. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--startup_probe--tcp_socket))
-- `termination_grace_period_seconds` (Number) Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
-- `timeout_seconds` (Number) Number of seconds after which the probe times out. Defaults to 1 second. Minimum value is 1. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
+- `termination_grace_period_seconds` (Number) Optional duration in seconds the pod needs to terminate gracefully upon probe failure.The grace period is the duration in seconds after the processes running in the pod are senta termination signal and the time when the processes are forcibly halted with a kill signal.Set this value longer than the expected cleanup time for your process.If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, thisvalue overrides the value provided by the pod spec.Value must be non-negative integer. The value zero indicates stop immediately viathe kill signal (no opportunity to shut down).This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate.Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
+- `timeout_seconds` (Number) Number of seconds after which the probe times out.Defaults to 1 second. Minimum value is 1.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
### Nested Schema for `spec.integration.template.spec.containers.startup_probe.exec`
Optional:
-- `command` (List of String) Command is the command line to execute inside the container, the working directory for the command is root ('/') in the container's filesystem. The command is simply exec'd, it is not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
+- `command` (List of String) Command is the command line to execute inside the container, the working directory for thecommand is root ('/') in the container's filesystem. The command is simply exec'd, it isnot run inside a shell, so traditional shell instructions ('|', etc) won't work. To usea shell, you need to explicitly call out to that shell.Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
@@ -705,7 +705,7 @@ Required:
Optional:
-- `service` (String) Service is the name of the service to place in the gRPC HealthCheckRequest (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md). If this is not specified, the default behavior is defined by gRPC.
+- `service` (String) Service is the name of the service to place in the gRPC HealthCheckRequest(see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).If this is not specified, the default behavior is defined by gRPC.
@@ -713,21 +713,21 @@ Optional:
Required:
-- `port` (String) Name or number of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
+- `port` (String) Name or number of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
Optional:
-- `host` (String) Host name to connect to, defaults to the pod IP. You probably want to set 'Host' in httpHeaders instead.
+- `host` (String) Host name to connect to, defaults to the pod IP. You probably want to set'Host' in httpHeaders instead.
- `http_headers` (Attributes List) Custom headers to set in the request. HTTP allows repeated headers. (see [below for nested schema](#nestedatt--spec--integration--template--spec--containers--startup_probe--http_get--http_headers))
- `path` (String) Path to access on the HTTP server.
-- `scheme` (String) Scheme to use for connecting to the host. Defaults to HTTP.
+- `scheme` (String) Scheme to use for connecting to the host.Defaults to HTTP.
### Nested Schema for `spec.integration.template.spec.containers.startup_probe.http_get.http_headers`
Required:
-- `name` (String) The header field name. This will be canonicalized upon output, so case-variant names will be understood as the same header.
+- `name` (String) The header field name.This will be canonicalized upon output, so case-variant names will be understood as the same header.
- `value` (String) The header field value
@@ -737,7 +737,7 @@ Required:
Required:
-- `port` (String) Number or name of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
+- `port` (String) Number or name of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
Optional:
@@ -759,15 +759,15 @@ Required:
Required:
-- `mount_path` (String) Path within the container at which the volume should be mounted. Must not contain ':'.
+- `mount_path` (String) Path within the container at which the volume should be mounted. Mustnot contain ':'.
- `name` (String) This must match the Name of a Volume.
Optional:
-- `mount_propagation` (String) mountPropagation determines how mounts are propagated from the host to container and the other way around. When not set, MountPropagationNone is used. This field is beta in 1.10.
-- `read_only` (Boolean) Mounted read-only if true, read-write otherwise (false or unspecified). Defaults to false.
-- `sub_path` (String) Path within the volume from which the container's volume should be mounted. Defaults to '' (volume's root).
-- `sub_path_expr` (String) Expanded path within the volume from which the container's volume should be mounted. Behaves similarly to SubPath but environment variable references $(VAR_NAME) are expanded using the container's environment. Defaults to '' (volume's root). SubPathExpr and SubPath are mutually exclusive.
+- `mount_propagation` (String) mountPropagation determines how mounts are propagated from the hostto container and the other way around.When not set, MountPropagationNone is used.This field is beta in 1.10.
+- `read_only` (Boolean) Mounted read-only if true, read-write otherwise (false or unspecified).Defaults to false.
+- `sub_path` (String) Path within the volume from which the container's volume should be mounted.Defaults to '' (volume's root).
+- `sub_path_expr` (String) Expanded path within the volume from which the container's volume should be mounted.Behaves similarly to SubPath but environment variable references $(VAR_NAME) are expanded using the container's environment.Defaults to '' (volume's root).SubPathExpr and SubPath are mutually exclusive.
@@ -776,34 +776,34 @@ Optional:
Required:
-- `name` (String) Name of the ephemeral container specified as a DNS_LABEL. This name must be unique among all containers, init containers and ephemeral containers.
+- `name` (String) Name of the ephemeral container specified as a DNS_LABEL.This name must be unique among all containers, init containers and ephemeral containers.
Optional:
-- `args` (List of String) Arguments to the entrypoint. The image's CMD is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container's environment. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. '$$(VAR_NAME)' will produce the string literal '$(VAR_NAME)'. Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
-- `command` (List of String) Entrypoint array. Not executed within a shell. The image's ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container's environment. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. '$$(VAR_NAME)' will produce the string literal '$(VAR_NAME)'. Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
-- `env` (Attributes List) List of environment variables to set in the container. Cannot be updated. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--env))
-- `env_from` (Attributes List) List of sources to populate environment variables in the container. The keys defined within a source must be a C_IDENTIFIER. All invalid keys will be reported as an event when the container is starting. When a key exists in multiple sources, the value associated with the last source will take precedence. Values defined by an Env with a duplicate key will take precedence. Cannot be updated. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--env_from))
-- `image` (String) Container image name. More info: https://kubernetes.io/docs/concepts/containers/images
-- `image_pull_policy` (String) Image pull policy. One of Always, Never, IfNotPresent. Defaults to Always if :latest tag is specified, or IfNotPresent otherwise. Cannot be updated. More info: https://kubernetes.io/docs/concepts/containers/images#updating-images
+- `args` (List of String) Arguments to the entrypoint.The image's CMD is used if this is not provided.Variable references $(VAR_NAME) are expanded using the container's environment. If a variablecannot be resolved, the reference in the input string will be unchanged. Double $$ are reducedto a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. '$$(VAR_NAME)' willproduce the string literal '$(VAR_NAME)'. Escaped references will never be expanded, regardlessof whether the variable exists or not. Cannot be updated.More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
+- `command` (List of String) Entrypoint array. Not executed within a shell.The image's ENTRYPOINT is used if this is not provided.Variable references $(VAR_NAME) are expanded using the container's environment. If a variablecannot be resolved, the reference in the input string will be unchanged. Double $$ are reducedto a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. '$$(VAR_NAME)' willproduce the string literal '$(VAR_NAME)'. Escaped references will never be expanded, regardlessof whether the variable exists or not. Cannot be updated.More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
+- `env` (Attributes List) List of environment variables to set in the container.Cannot be updated. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--env))
+- `env_from` (Attributes List) List of sources to populate environment variables in the container.The keys defined within a source must be a C_IDENTIFIER. All invalid keyswill be reported as an event when the container is starting. When a key exists in multiplesources, the value associated with the last source will take precedence.Values defined by an Env with a duplicate key will take precedence.Cannot be updated. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--env_from))
+- `image` (String) Container image name.More info: https://kubernetes.io/docs/concepts/containers/images
+- `image_pull_policy` (String) Image pull policy.One of Always, Never, IfNotPresent.Defaults to Always if :latest tag is specified, or IfNotPresent otherwise.Cannot be updated.More info: https://kubernetes.io/docs/concepts/containers/images#updating-images
- `lifecycle` (Attributes) Lifecycle is not allowed for ephemeral containers. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--lifecycle))
- `liveness_probe` (Attributes) Probes are not allowed for ephemeral containers. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--liveness_probe))
- `ports` (Attributes List) Ports are not allowed for ephemeral containers. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--ports))
- `readiness_probe` (Attributes) Probes are not allowed for ephemeral containers. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--readiness_probe))
- `resize_policy` (Attributes List) Resources resize policy for the container. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--resize_policy))
-- `resources` (Attributes) Resources are not allowed for ephemeral containers. Ephemeral containers use spare resources already allocated to the pod. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--resources))
-- `restart_policy` (String) Restart policy for the container to manage the restart behavior of each container within a pod. This may only be set for init containers. You cannot set this field on ephemeral containers.
-- `security_context` (Attributes) Optional: SecurityContext defines the security options the ephemeral container should be run with. If set, the fields of SecurityContext override the equivalent fields of PodSecurityContext. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--security_context))
+- `resources` (Attributes) Resources are not allowed for ephemeral containers. Ephemeral containers use spare resourcesalready allocated to the pod. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--resources))
+- `restart_policy` (String) Restart policy for the container to manage the restart behavior of eachcontainer within a pod.This may only be set for init containers. You cannot set this field onephemeral containers.
+- `security_context` (Attributes) Optional: SecurityContext defines the security options the ephemeral container should be run with.If set, the fields of SecurityContext override the equivalent fields of PodSecurityContext. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--security_context))
- `startup_probe` (Attributes) Probes are not allowed for ephemeral containers. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--startup_probe))
-- `stdin` (Boolean) Whether this container should allocate a buffer for stdin in the container runtime. If this is not set, reads from stdin in the container will always result in EOF. Default is false.
-- `stdin_once` (Boolean) Whether the container runtime should close the stdin channel after it has been opened by a single attach. When stdin is true the stdin stream will remain open across multiple attach sessions. If stdinOnce is set to true, stdin is opened on container start, is empty until the first client attaches to stdin, and then remains open and accepts data until the client disconnects, at which time stdin is closed and remains closed until the container is restarted. If this flag is false, a container processes that reads from stdin will never receive an EOF. Default is false
-- `target_container_name` (String) If set, the name of the container from PodSpec that this ephemeral container targets. The ephemeral container will be run in the namespaces (IPC, PID, etc) of this container. If not set then the ephemeral container uses the namespaces configured in the Pod spec. The container runtime must implement support for this feature. If the runtime does not support namespace targeting then the result of setting this field is undefined.
-- `termination_message_path` (String) Optional: Path at which the file to which the container's termination message will be written is mounted into the container's filesystem. Message written is intended to be brief final status, such as an assertion failure message. Will be truncated by the node if greater than 4096 bytes. The total message length across all containers will be limited to 12kb. Defaults to /dev/termination-log. Cannot be updated.
-- `termination_message_policy` (String) Indicate how the termination message should be populated. File will use the contents of terminationMessagePath to populate the container status message on both success and failure. FallbackToLogsOnError will use the last chunk of container log output if the termination message file is empty and the container exited with an error. The log output is limited to 2048 bytes or 80 lines, whichever is smaller. Defaults to File. Cannot be updated.
-- `tty` (Boolean) Whether this container should allocate a TTY for itself, also requires 'stdin' to be true. Default is false.
+- `stdin` (Boolean) Whether this container should allocate a buffer for stdin in the container runtime. If thisis not set, reads from stdin in the container will always result in EOF.Default is false.
+- `stdin_once` (Boolean) Whether the container runtime should close the stdin channel after it has been opened bya single attach. When stdin is true the stdin stream will remain open across multiple attachsessions. If stdinOnce is set to true, stdin is opened on container start, is empty until thefirst client attaches to stdin, and then remains open and accepts data until the client disconnects,at which time stdin is closed and remains closed until the container is restarted. If thisflag is false, a container processes that reads from stdin will never receive an EOF.Default is false
+- `target_container_name` (String) If set, the name of the container from PodSpec that this ephemeral container targets.The ephemeral container will be run in the namespaces (IPC, PID, etc) of this container.If not set then the ephemeral container uses the namespaces configured in the Pod spec.The container runtime must implement support for this feature. If the runtime does notsupport namespace targeting then the result of setting this field is undefined.
+- `termination_message_path` (String) Optional: Path at which the file to which the container's termination messagewill be written is mounted into the container's filesystem.Message written is intended to be brief final status, such as an assertion failure message.Will be truncated by the node if greater than 4096 bytes. The total message length acrossall containers will be limited to 12kb.Defaults to /dev/termination-log.Cannot be updated.
+- `termination_message_policy` (String) Indicate how the termination message should be populated. File will use the contents ofterminationMessagePath to populate the container status message on both success and failure.FallbackToLogsOnError will use the last chunk of container log output if the terminationmessage file is empty and the container exited with an error.The log output is limited to 2048 bytes or 80 lines, whichever is smaller.Defaults to File.Cannot be updated.
+- `tty` (Boolean) Whether this container should allocate a TTY for itself, also requires 'stdin' to be true.Default is false.
- `volume_devices` (Attributes List) volumeDevices is the list of block devices to be used by the container. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--volume_devices))
-- `volume_mounts` (Attributes List) Pod volumes to mount into the container's filesystem. Subpath mounts are not allowed for ephemeral containers. Cannot be updated. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--volume_mounts))
-- `working_dir` (String) Container's working directory. If not specified, the container runtime's default will be used, which might be configured in the container image. Cannot be updated.
+- `volume_mounts` (Attributes List) Pod volumes to mount into the container's filesystem. Subpath mounts are not allowed for ephemeral containers.Cannot be updated. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--volume_mounts))
+- `working_dir` (String) Container's working directory.If not specified, the container runtime's default will be used, whichmight be configured in the container image.Cannot be updated.
### Nested Schema for `spec.integration.template.spec.ephemeral_containers.env`
@@ -814,7 +814,7 @@ Required:
Optional:
-- `value` (String) Variable references $(VAR_NAME) are expanded using the previously defined environment variables in the container and any service environment variables. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. '$$(VAR_NAME)' will produce the string literal '$(VAR_NAME)'. Escaped references will never be expanded, regardless of whether the variable exists or not. Defaults to ''.
+- `value` (String) Variable references $(VAR_NAME) are expandedusing the previously defined environment variables in the container andany service environment variables. If a variable cannot be resolved,the reference in the input string will be unchanged. Double $$ are reducedto a single $, which allows for escaping the $(VAR_NAME) syntax: i.e.'$$(VAR_NAME)' will produce the string literal '$(VAR_NAME)'.Escaped references will never be expanded, regardless of whether the variableexists or not.Defaults to ''.
- `value_from` (Attributes) Source for the environment variable's value. Cannot be used if value is not empty. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--env--value_from))
@@ -823,8 +823,8 @@ Optional:
Optional:
- `config_map_key_ref` (Attributes) Selects a key of a ConfigMap. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--env--value_from--config_map_key_ref))
-- `field_ref` (Attributes) Selects a field of the pod: supports metadata.name, metadata.namespace, 'metadata.labels['']', 'metadata.annotations['']', spec.nodeName, spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--env--value_from--field_ref))
-- `resource_field_ref` (Attributes) Selects a resource of the container: only resources limits and requests (limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu, requests.memory and requests.ephemeral-storage) are currently supported. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--env--value_from--resource_field_ref))
+- `field_ref` (Attributes) Selects a field of the pod: supports metadata.name, metadata.namespace, 'metadata.labels['']', 'metadata.annotations['']',spec.nodeName, spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--env--value_from--field_ref))
+- `resource_field_ref` (Attributes) Selects a resource of the container: only resources limits and requests(limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu, requests.memory and requests.ephemeral-storage) are currently supported. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--env--value_from--resource_field_ref))
- `secret_key_ref` (Attributes) Selects a key of a secret in the pod's namespace (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--env--value_from--secret_key_ref))
@@ -836,7 +836,7 @@ Required:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
@@ -874,7 +874,7 @@ Required:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
- `optional` (Boolean) Specify whether the Secret or its key must be defined
@@ -894,7 +894,7 @@ Optional:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
- `optional` (Boolean) Specify whether the ConfigMap must be defined
@@ -903,7 +903,7 @@ Optional:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
- `optional` (Boolean) Specify whether the Secret must be defined
@@ -913,8 +913,8 @@ Optional:
Optional:
-- `post_start` (Attributes) PostStart is called immediately after a container is created. If the handler fails, the container is terminated and restarted according to its restart policy. Other management of the container blocks until the hook completes. More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--lifecycle--post_start))
-- `pre_stop` (Attributes) PreStop is called immediately before a container is terminated due to an API request or management event such as liveness/startup probe failure, preemption, resource contention, etc. The handler is not called if the container crashes or exits. The Pod's termination grace period countdown begins before the PreStop hook is executed. Regardless of the outcome of the handler, the container will eventually terminate within the Pod's termination grace period (unless delayed by finalizers). Other management of the container blocks until the hook completes or until the termination grace period is reached. More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--lifecycle--pre_stop))
+- `post_start` (Attributes) PostStart is called immediately after a container is created. If the handler fails,the container is terminated and restarted according to its restart policy.Other management of the container blocks until the hook completes.More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--lifecycle--post_start))
+- `pre_stop` (Attributes) PreStop is called immediately before a container is terminated due to anAPI request or management event such as liveness/startup probe failure,preemption, resource contention, etc. The handler is not called if thecontainer crashes or exits. The Pod's termination grace period countdown begins before thePreStop hook is executed. Regardless of the outcome of the handler, thecontainer will eventually terminate within the Pod's termination graceperiod (unless delayed by finalizers). Other management of the container blocks until the hook completesor until the termination grace period is reached.More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--lifecycle--pre_stop))
### Nested Schema for `spec.integration.template.spec.ephemeral_containers.lifecycle.post_start`
@@ -924,14 +924,14 @@ Optional:
- `exec` (Attributes) Exec specifies the action to take. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--lifecycle--post_start--exec))
- `http_get` (Attributes) HTTPGet specifies the http request to perform. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--lifecycle--post_start--http_get))
- `sleep` (Attributes) Sleep represents the duration that the container should sleep before being terminated. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--lifecycle--post_start--sleep))
-- `tcp_socket` (Attributes) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and kept for the backward compatibility. There are no validation of this field and lifecycle hooks will fail in runtime when tcp handler is specified. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--lifecycle--post_start--tcp_socket))
+- `tcp_socket` (Attributes) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and keptfor the backward compatibility. There are no validation of this field andlifecycle hooks will fail in runtime when tcp handler is specified. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--lifecycle--post_start--tcp_socket))
### Nested Schema for `spec.integration.template.spec.ephemeral_containers.lifecycle.post_start.exec`
Optional:
-- `command` (List of String) Command is the command line to execute inside the container, the working directory for the command is root ('/') in the container's filesystem. The command is simply exec'd, it is not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
+- `command` (List of String) Command is the command line to execute inside the container, the working directory for thecommand is root ('/') in the container's filesystem. The command is simply exec'd, it isnot run inside a shell, so traditional shell instructions ('|', etc) won't work. To usea shell, you need to explicitly call out to that shell.Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
@@ -939,21 +939,21 @@ Optional:
Required:
-- `port` (String) Name or number of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
+- `port` (String) Name or number of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
Optional:
-- `host` (String) Host name to connect to, defaults to the pod IP. You probably want to set 'Host' in httpHeaders instead.
+- `host` (String) Host name to connect to, defaults to the pod IP. You probably want to set'Host' in httpHeaders instead.
- `http_headers` (Attributes List) Custom headers to set in the request. HTTP allows repeated headers. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--lifecycle--post_start--http_get--http_headers))
- `path` (String) Path to access on the HTTP server.
-- `scheme` (String) Scheme to use for connecting to the host. Defaults to HTTP.
+- `scheme` (String) Scheme to use for connecting to the host.Defaults to HTTP.
### Nested Schema for `spec.integration.template.spec.ephemeral_containers.lifecycle.post_start.http_get.http_headers`
Required:
-- `name` (String) The header field name. This will be canonicalized upon output, so case-variant names will be understood as the same header.
+- `name` (String) The header field name.This will be canonicalized upon output, so case-variant names will be understood as the same header.
- `value` (String) The header field value
@@ -971,7 +971,7 @@ Required:
Required:
-- `port` (String) Number or name of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
+- `port` (String) Number or name of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
Optional:
@@ -987,14 +987,14 @@ Optional:
- `exec` (Attributes) Exec specifies the action to take. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--lifecycle--pre_stop--exec))
- `http_get` (Attributes) HTTPGet specifies the http request to perform. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--lifecycle--pre_stop--http_get))
- `sleep` (Attributes) Sleep represents the duration that the container should sleep before being terminated. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--lifecycle--pre_stop--sleep))
-- `tcp_socket` (Attributes) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and kept for the backward compatibility. There are no validation of this field and lifecycle hooks will fail in runtime when tcp handler is specified. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--lifecycle--pre_stop--tcp_socket))
+- `tcp_socket` (Attributes) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and keptfor the backward compatibility. There are no validation of this field andlifecycle hooks will fail in runtime when tcp handler is specified. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--lifecycle--pre_stop--tcp_socket))
### Nested Schema for `spec.integration.template.spec.ephemeral_containers.lifecycle.pre_stop.exec`
Optional:
-- `command` (List of String) Command is the command line to execute inside the container, the working directory for the command is root ('/') in the container's filesystem. The command is simply exec'd, it is not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
+- `command` (List of String) Command is the command line to execute inside the container, the working directory for thecommand is root ('/') in the container's filesystem. The command is simply exec'd, it isnot run inside a shell, so traditional shell instructions ('|', etc) won't work. To usea shell, you need to explicitly call out to that shell.Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
@@ -1002,21 +1002,21 @@ Optional:
Required:
-- `port` (String) Name or number of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
+- `port` (String) Name or number of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
Optional:
-- `host` (String) Host name to connect to, defaults to the pod IP. You probably want to set 'Host' in httpHeaders instead.
+- `host` (String) Host name to connect to, defaults to the pod IP. You probably want to set'Host' in httpHeaders instead.
- `http_headers` (Attributes List) Custom headers to set in the request. HTTP allows repeated headers. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--lifecycle--pre_stop--http_get--http_headers))
- `path` (String) Path to access on the HTTP server.
-- `scheme` (String) Scheme to use for connecting to the host. Defaults to HTTP.
+- `scheme` (String) Scheme to use for connecting to the host.Defaults to HTTP.
### Nested Schema for `spec.integration.template.spec.ephemeral_containers.lifecycle.pre_stop.http_get.http_headers`
Required:
-- `name` (String) The header field name. This will be canonicalized upon output, so case-variant names will be understood as the same header.
+- `name` (String) The header field name.This will be canonicalized upon output, so case-variant names will be understood as the same header.
- `value` (String) The header field value
@@ -1034,7 +1034,7 @@ Required:
Required:
-- `port` (String) Number or name of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
+- `port` (String) Number or name of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
Optional:
@@ -1049,22 +1049,22 @@ Optional:
Optional:
- `exec` (Attributes) Exec specifies the action to take. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--liveness_probe--exec))
-- `failure_threshold` (Number) Minimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1.
+- `failure_threshold` (Number) Minimum consecutive failures for the probe to be considered failed after having succeeded.Defaults to 3. Minimum value is 1.
- `grpc` (Attributes) GRPC specifies an action involving a GRPC port. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--liveness_probe--grpc))
- `http_get` (Attributes) HTTPGet specifies the http request to perform. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--liveness_probe--http_get))
-- `initial_delay_seconds` (Number) Number of seconds after the container has started before liveness probes are initiated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-- `period_seconds` (Number) How often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1.
-- `success_threshold` (Number) Minimum consecutive successes for the probe to be considered successful after having failed. Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
+- `initial_delay_seconds` (Number) Number of seconds after the container has started before liveness probes are initiated.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
+- `period_seconds` (Number) How often (in seconds) to perform the probe.Default to 10 seconds. Minimum value is 1.
+- `success_threshold` (Number) Minimum consecutive successes for the probe to be considered successful after having failed.Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
- `tcp_socket` (Attributes) TCPSocket specifies an action involving a TCP port. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--liveness_probe--tcp_socket))
-- `termination_grace_period_seconds` (Number) Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
-- `timeout_seconds` (Number) Number of seconds after which the probe times out. Defaults to 1 second. Minimum value is 1. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
+- `termination_grace_period_seconds` (Number) Optional duration in seconds the pod needs to terminate gracefully upon probe failure.The grace period is the duration in seconds after the processes running in the pod are senta termination signal and the time when the processes are forcibly halted with a kill signal.Set this value longer than the expected cleanup time for your process.If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, thisvalue overrides the value provided by the pod spec.Value must be non-negative integer. The value zero indicates stop immediately viathe kill signal (no opportunity to shut down).This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate.Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
+- `timeout_seconds` (Number) Number of seconds after which the probe times out.Defaults to 1 second. Minimum value is 1.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
### Nested Schema for `spec.integration.template.spec.ephemeral_containers.liveness_probe.exec`
Optional:
-- `command` (List of String) Command is the command line to execute inside the container, the working directory for the command is root ('/') in the container's filesystem. The command is simply exec'd, it is not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
+- `command` (List of String) Command is the command line to execute inside the container, the working directory for thecommand is root ('/') in the container's filesystem. The command is simply exec'd, it isnot run inside a shell, so traditional shell instructions ('|', etc) won't work. To usea shell, you need to explicitly call out to that shell.Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
@@ -1076,7 +1076,7 @@ Required:
Optional:
-- `service` (String) Service is the name of the service to place in the gRPC HealthCheckRequest (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md). If this is not specified, the default behavior is defined by gRPC.
+- `service` (String) Service is the name of the service to place in the gRPC HealthCheckRequest(see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).If this is not specified, the default behavior is defined by gRPC.
@@ -1084,21 +1084,21 @@ Optional:
Required:
-- `port` (String) Name or number of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
+- `port` (String) Name or number of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
Optional:
-- `host` (String) Host name to connect to, defaults to the pod IP. You probably want to set 'Host' in httpHeaders instead.
+- `host` (String) Host name to connect to, defaults to the pod IP. You probably want to set'Host' in httpHeaders instead.
- `http_headers` (Attributes List) Custom headers to set in the request. HTTP allows repeated headers. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--liveness_probe--http_get--http_headers))
- `path` (String) Path to access on the HTTP server.
-- `scheme` (String) Scheme to use for connecting to the host. Defaults to HTTP.
+- `scheme` (String) Scheme to use for connecting to the host.Defaults to HTTP.
### Nested Schema for `spec.integration.template.spec.ephemeral_containers.liveness_probe.http_get.http_headers`
Required:
-- `name` (String) The header field name. This will be canonicalized upon output, so case-variant names will be understood as the same header.
+- `name` (String) The header field name.This will be canonicalized upon output, so case-variant names will be understood as the same header.
- `value` (String) The header field value
@@ -1108,7 +1108,7 @@ Required:
Required:
-- `port` (String) Number or name of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
+- `port` (String) Number or name of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
Optional:
@@ -1121,14 +1121,14 @@ Optional:
Required:
-- `container_port` (Number) Number of port to expose on the pod's IP address. This must be a valid port number, 0 < x < 65536.
+- `container_port` (Number) Number of port to expose on the pod's IP address.This must be a valid port number, 0 < x < 65536.
Optional:
- `host_ip` (String) What host IP to bind the external port to.
-- `host_port` (Number) Number of port to expose on the host. If specified, this must be a valid port number, 0 < x < 65536. If HostNetwork is specified, this must match ContainerPort. Most containers do not need this.
-- `name` (String) If specified, this must be an IANA_SVC_NAME and unique within the pod. Each named port in a pod must have a unique name. Name for the port that can be referred to by services.
-- `protocol` (String) Protocol for port. Must be UDP, TCP, or SCTP. Defaults to 'TCP'.
+- `host_port` (Number) Number of port to expose on the host.If specified, this must be a valid port number, 0 < x < 65536.If HostNetwork is specified, this must match ContainerPort.Most containers do not need this.
+- `name` (String) If specified, this must be an IANA_SVC_NAME and unique within the pod. Eachnamed port in a pod must have a unique name. Name for the port that can bereferred to by services.
+- `protocol` (String) Protocol for port. Must be UDP, TCP, or SCTP.Defaults to 'TCP'.
@@ -1137,22 +1137,22 @@ Optional:
Optional:
- `exec` (Attributes) Exec specifies the action to take. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--readiness_probe--exec))
-- `failure_threshold` (Number) Minimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1.
+- `failure_threshold` (Number) Minimum consecutive failures for the probe to be considered failed after having succeeded.Defaults to 3. Minimum value is 1.
- `grpc` (Attributes) GRPC specifies an action involving a GRPC port. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--readiness_probe--grpc))
- `http_get` (Attributes) HTTPGet specifies the http request to perform. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--readiness_probe--http_get))
-- `initial_delay_seconds` (Number) Number of seconds after the container has started before liveness probes are initiated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-- `period_seconds` (Number) How often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1.
-- `success_threshold` (Number) Minimum consecutive successes for the probe to be considered successful after having failed. Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
+- `initial_delay_seconds` (Number) Number of seconds after the container has started before liveness probes are initiated.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
+- `period_seconds` (Number) How often (in seconds) to perform the probe.Default to 10 seconds. Minimum value is 1.
+- `success_threshold` (Number) Minimum consecutive successes for the probe to be considered successful after having failed.Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
- `tcp_socket` (Attributes) TCPSocket specifies an action involving a TCP port. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--readiness_probe--tcp_socket))
-- `termination_grace_period_seconds` (Number) Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
-- `timeout_seconds` (Number) Number of seconds after which the probe times out. Defaults to 1 second. Minimum value is 1. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
+- `termination_grace_period_seconds` (Number) Optional duration in seconds the pod needs to terminate gracefully upon probe failure.The grace period is the duration in seconds after the processes running in the pod are senta termination signal and the time when the processes are forcibly halted with a kill signal.Set this value longer than the expected cleanup time for your process.If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, thisvalue overrides the value provided by the pod spec.Value must be non-negative integer. The value zero indicates stop immediately viathe kill signal (no opportunity to shut down).This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate.Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
+- `timeout_seconds` (Number) Number of seconds after which the probe times out.Defaults to 1 second. Minimum value is 1.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
### Nested Schema for `spec.integration.template.spec.ephemeral_containers.readiness_probe.exec`
Optional:
-- `command` (List of String) Command is the command line to execute inside the container, the working directory for the command is root ('/') in the container's filesystem. The command is simply exec'd, it is not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
+- `command` (List of String) Command is the command line to execute inside the container, the working directory for thecommand is root ('/') in the container's filesystem. The command is simply exec'd, it isnot run inside a shell, so traditional shell instructions ('|', etc) won't work. To usea shell, you need to explicitly call out to that shell.Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
@@ -1164,7 +1164,7 @@ Required:
Optional:
-- `service` (String) Service is the name of the service to place in the gRPC HealthCheckRequest (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md). If this is not specified, the default behavior is defined by gRPC.
+- `service` (String) Service is the name of the service to place in the gRPC HealthCheckRequest(see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).If this is not specified, the default behavior is defined by gRPC.
@@ -1172,21 +1172,21 @@ Optional:
Required:
-- `port` (String) Name or number of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
+- `port` (String) Name or number of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
Optional:
-- `host` (String) Host name to connect to, defaults to the pod IP. You probably want to set 'Host' in httpHeaders instead.
+- `host` (String) Host name to connect to, defaults to the pod IP. You probably want to set'Host' in httpHeaders instead.
- `http_headers` (Attributes List) Custom headers to set in the request. HTTP allows repeated headers. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--readiness_probe--http_get--http_headers))
- `path` (String) Path to access on the HTTP server.
-- `scheme` (String) Scheme to use for connecting to the host. Defaults to HTTP.
+- `scheme` (String) Scheme to use for connecting to the host.Defaults to HTTP.
### Nested Schema for `spec.integration.template.spec.ephemeral_containers.readiness_probe.http_get.http_headers`
Required:
-- `name` (String) The header field name. This will be canonicalized upon output, so case-variant names will be understood as the same header.
+- `name` (String) The header field name.This will be canonicalized upon output, so case-variant names will be understood as the same header.
- `value` (String) The header field value
@@ -1196,7 +1196,7 @@ Required:
Required:
-- `port` (String) Number or name of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
+- `port` (String) Number or name of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
Optional:
@@ -1209,8 +1209,8 @@ Optional:
Required:
-- `resource_name` (String) Name of the resource to which this resource resize policy applies. Supported values: cpu, memory.
-- `restart_policy` (String) Restart policy to apply when specified resource is resized. If not specified, it defaults to NotRequired.
+- `resource_name` (String) Name of the resource to which this resource resize policy applies.Supported values: cpu, memory.
+- `restart_policy` (String) Restart policy to apply when specified resource is resized.If not specified, it defaults to NotRequired.
@@ -1218,16 +1218,16 @@ Required:
Optional:
-- `claims` (Attributes List) Claims lists the names of resources, defined in spec.resourceClaims, that are used by this container. This is an alpha field and requires enabling the DynamicResourceAllocation feature gate. This field is immutable. It can only be set for containers. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--resources--claims))
-- `limits` (Map of String) Limits describes the maximum amount of compute resources allowed. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-- `requests` (Map of String) Requests describes the minimum amount of compute resources required. If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, otherwise to an implementation-defined value. Requests cannot exceed Limits. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
+- `claims` (Attributes List) Claims lists the names of resources, defined in spec.resourceClaims,that are used by this container.This is an alpha field and requires enabling theDynamicResourceAllocation feature gate.This field is immutable. It can only be set for containers. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--resources--claims))
+- `limits` (Map of String) Limits describes the maximum amount of compute resources allowed.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
+- `requests` (Map of String) Requests describes the minimum amount of compute resources required.If Requests is omitted for a container, it defaults to Limits if that is explicitly specified,otherwise to an implementation-defined value. Requests cannot exceed Limits.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
### Nested Schema for `spec.integration.template.spec.ephemeral_containers.resources.claims`
Required:
-- `name` (String) Name must match the name of one entry in pod.spec.resourceClaims of the Pod where this field is used. It makes that resource available inside a container.
+- `name` (String) Name must match the name of one entry in pod.spec.resourceClaims ofthe Pod where this field is used. It makes that resource availableinside a container.
@@ -1236,17 +1236,17 @@ Required:
Optional:
-- `allow_privilege_escalation` (Boolean) AllowPrivilegeEscalation controls whether a process can gain more privileges than its parent process. This bool directly controls if the no_new_privs flag will be set on the container process. AllowPrivilegeEscalation is true always when the container is: 1) run as Privileged 2) has CAP_SYS_ADMIN Note that this field cannot be set when spec.os.name is windows.
-- `capabilities` (Attributes) The capabilities to add/drop when running containers. Defaults to the default set of capabilities granted by the container runtime. Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--security_context--capabilities))
-- `privileged` (Boolean) Run container in privileged mode. Processes in privileged containers are essentially equivalent to root on the host. Defaults to false. Note that this field cannot be set when spec.os.name is windows.
-- `proc_mount` (String) procMount denotes the type of proc mount to use for the containers. The default is DefaultProcMount which uses the container runtime defaults for readonly paths and masked paths. This requires the ProcMountType feature flag to be enabled. Note that this field cannot be set when spec.os.name is windows.
-- `read_only_root_filesystem` (Boolean) Whether this container has a read-only root filesystem. Default is false. Note that this field cannot be set when spec.os.name is windows.
-- `run_as_group` (Number) The GID to run the entrypoint of the container process. Uses runtime default if unset. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence. Note that this field cannot be set when spec.os.name is windows.
-- `run_as_non_root` (Boolean) Indicates that the container must run as a non-root user. If true, the Kubelet will validate the image at runtime to ensure that it does not run as UID 0 (root) and fail to start the container if it does. If unset or false, no such validation will be performed. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
-- `run_as_user` (Number) The UID to run the entrypoint of the container process. Defaults to user specified in image metadata if unspecified. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence. Note that this field cannot be set when spec.os.name is windows.
-- `se_linux_options` (Attributes) The SELinux context to be applied to the container. If unspecified, the container runtime will allocate a random SELinux context for each container. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence. Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--security_context--se_linux_options))
-- `seccomp_profile` (Attributes) The seccomp options to use by this container. If seccomp options are provided at both the pod & container level, the container options override the pod options. Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--security_context--seccomp_profile))
-- `windows_options` (Attributes) The Windows specific settings applied to all containers. If unspecified, the options from the PodSecurityContext will be used. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence. Note that this field cannot be set when spec.os.name is linux. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--security_context--windows_options))
+- `allow_privilege_escalation` (Boolean) AllowPrivilegeEscalation controls whether a process can gain moreprivileges than its parent process. This bool directly controls ifthe no_new_privs flag will be set on the container process.AllowPrivilegeEscalation is true always when the container is:1) run as Privileged2) has CAP_SYS_ADMINNote that this field cannot be set when spec.os.name is windows.
+- `capabilities` (Attributes) The capabilities to add/drop when running containers.Defaults to the default set of capabilities granted by the container runtime.Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--security_context--capabilities))
+- `privileged` (Boolean) Run container in privileged mode.Processes in privileged containers are essentially equivalent to root on the host.Defaults to false.Note that this field cannot be set when spec.os.name is windows.
+- `proc_mount` (String) procMount denotes the type of proc mount to use for the containers.The default is DefaultProcMount which uses the container runtime defaults forreadonly paths and masked paths.This requires the ProcMountType feature flag to be enabled.Note that this field cannot be set when spec.os.name is windows.
+- `read_only_root_filesystem` (Boolean) Whether this container has a read-only root filesystem.Default is false.Note that this field cannot be set when spec.os.name is windows.
+- `run_as_group` (Number) The GID to run the entrypoint of the container process.Uses runtime default if unset.May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.Note that this field cannot be set when spec.os.name is windows.
+- `run_as_non_root` (Boolean) Indicates that the container must run as a non-root user.If true, the Kubelet will validate the image at runtime to ensure that itdoes not run as UID 0 (root) and fail to start the container if it does.If unset or false, no such validation will be performed.May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.
+- `run_as_user` (Number) The UID to run the entrypoint of the container process.Defaults to user specified in image metadata if unspecified.May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.Note that this field cannot be set when spec.os.name is windows.
+- `se_linux_options` (Attributes) The SELinux context to be applied to the container.If unspecified, the container runtime will allocate a random SELinux context for eachcontainer. May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--security_context--se_linux_options))
+- `seccomp_profile` (Attributes) The seccomp options to use by this container. If seccomp options areprovided at both the pod & container level, the container optionsoverride the pod options.Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--security_context--seccomp_profile))
+- `windows_options` (Attributes) The Windows specific settings applied to all containers.If unspecified, the options from the PodSecurityContext will be used.If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.Note that this field cannot be set when spec.os.name is linux. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--security_context--windows_options))
### Nested Schema for `spec.integration.template.spec.ephemeral_containers.security_context.capabilities`
@@ -1273,11 +1273,11 @@ Optional:
Required:
-- `type` (String) type indicates which kind of seccomp profile will be applied. Valid options are: Localhost - a profile defined in a file on the node should be used. RuntimeDefault - the container runtime default profile should be used. Unconfined - no profile should be applied.
+- `type` (String) type indicates which kind of seccomp profile will be applied.Valid options are:Localhost - a profile defined in a file on the node should be used.RuntimeDefault - the container runtime default profile should be used.Unconfined - no profile should be applied.
Optional:
-- `localhost_profile` (String) localhostProfile indicates a profile defined in a file on the node should be used. The profile must be preconfigured on the node to work. Must be a descending path, relative to the kubelet's configured seccomp profile location. Must be set if type is 'Localhost'. Must NOT be set for any other type.
+- `localhost_profile` (String) localhostProfile indicates a profile defined in a file on the node should be used.The profile must be preconfigured on the node to work.Must be a descending path, relative to the kubelet's configured seccomp profile location.Must be set if type is 'Localhost'. Must NOT be set for any other type.
@@ -1285,10 +1285,10 @@ Optional:
Optional:
-- `gmsa_credential_spec` (String) GMSACredentialSpec is where the GMSA admission webhook (https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of the GMSA credential spec named by the GMSACredentialSpecName field.
+- `gmsa_credential_spec` (String) GMSACredentialSpec is where the GMSA admission webhook(https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of theGMSA credential spec named by the GMSACredentialSpecName field.
- `gmsa_credential_spec_name` (String) GMSACredentialSpecName is the name of the GMSA credential spec to use.
-- `host_process` (Boolean) HostProcess determines if a container should be run as a 'Host Process' container. All of a Pod's containers must have the same effective HostProcess value (it is not allowed to have a mix of HostProcess containers and non-HostProcess containers). In addition, if HostProcess is true then HostNetwork must also be set to true.
-- `run_as_user_name` (String) The UserName in Windows to run the entrypoint of the container process. Defaults to the user specified in image metadata if unspecified. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
+- `host_process` (Boolean) HostProcess determines if a container should be run as a 'Host Process' container.All of a Pod's containers must have the same effective HostProcess value(it is not allowed to have a mix of HostProcess containers and non-HostProcess containers).In addition, if HostProcess is true then HostNetwork must also be set to true.
+- `run_as_user_name` (String) The UserName in Windows to run the entrypoint of the container process.Defaults to the user specified in image metadata if unspecified.May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.
@@ -1298,22 +1298,22 @@ Optional:
Optional:
- `exec` (Attributes) Exec specifies the action to take. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--startup_probe--exec))
-- `failure_threshold` (Number) Minimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1.
+- `failure_threshold` (Number) Minimum consecutive failures for the probe to be considered failed after having succeeded.Defaults to 3. Minimum value is 1.
- `grpc` (Attributes) GRPC specifies an action involving a GRPC port. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--startup_probe--grpc))
- `http_get` (Attributes) HTTPGet specifies the http request to perform. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--startup_probe--http_get))
-- `initial_delay_seconds` (Number) Number of seconds after the container has started before liveness probes are initiated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-- `period_seconds` (Number) How often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1.
-- `success_threshold` (Number) Minimum consecutive successes for the probe to be considered successful after having failed. Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
+- `initial_delay_seconds` (Number) Number of seconds after the container has started before liveness probes are initiated.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
+- `period_seconds` (Number) How often (in seconds) to perform the probe.Default to 10 seconds. Minimum value is 1.
+- `success_threshold` (Number) Minimum consecutive successes for the probe to be considered successful after having failed.Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
- `tcp_socket` (Attributes) TCPSocket specifies an action involving a TCP port. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--startup_probe--tcp_socket))
-- `termination_grace_period_seconds` (Number) Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
-- `timeout_seconds` (Number) Number of seconds after which the probe times out. Defaults to 1 second. Minimum value is 1. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
+- `termination_grace_period_seconds` (Number) Optional duration in seconds the pod needs to terminate gracefully upon probe failure.The grace period is the duration in seconds after the processes running in the pod are senta termination signal and the time when the processes are forcibly halted with a kill signal.Set this value longer than the expected cleanup time for your process.If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, thisvalue overrides the value provided by the pod spec.Value must be non-negative integer. The value zero indicates stop immediately viathe kill signal (no opportunity to shut down).This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate.Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
+- `timeout_seconds` (Number) Number of seconds after which the probe times out.Defaults to 1 second. Minimum value is 1.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
### Nested Schema for `spec.integration.template.spec.ephemeral_containers.startup_probe.exec`
Optional:
-- `command` (List of String) Command is the command line to execute inside the container, the working directory for the command is root ('/') in the container's filesystem. The command is simply exec'd, it is not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
+- `command` (List of String) Command is the command line to execute inside the container, the working directory for thecommand is root ('/') in the container's filesystem. The command is simply exec'd, it isnot run inside a shell, so traditional shell instructions ('|', etc) won't work. To usea shell, you need to explicitly call out to that shell.Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
@@ -1325,7 +1325,7 @@ Required:
Optional:
-- `service` (String) Service is the name of the service to place in the gRPC HealthCheckRequest (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md). If this is not specified, the default behavior is defined by gRPC.
+- `service` (String) Service is the name of the service to place in the gRPC HealthCheckRequest(see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).If this is not specified, the default behavior is defined by gRPC.
@@ -1333,21 +1333,21 @@ Optional:
Required:
-- `port` (String) Name or number of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
+- `port` (String) Name or number of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
Optional:
-- `host` (String) Host name to connect to, defaults to the pod IP. You probably want to set 'Host' in httpHeaders instead.
+- `host` (String) Host name to connect to, defaults to the pod IP. You probably want to set'Host' in httpHeaders instead.
- `http_headers` (Attributes List) Custom headers to set in the request. HTTP allows repeated headers. (see [below for nested schema](#nestedatt--spec--integration--template--spec--ephemeral_containers--startup_probe--http_get--http_headers))
- `path` (String) Path to access on the HTTP server.
-- `scheme` (String) Scheme to use for connecting to the host. Defaults to HTTP.
+- `scheme` (String) Scheme to use for connecting to the host.Defaults to HTTP.
### Nested Schema for `spec.integration.template.spec.ephemeral_containers.startup_probe.http_get.http_headers`
Required:
-- `name` (String) The header field name. This will be canonicalized upon output, so case-variant names will be understood as the same header.
+- `name` (String) The header field name.This will be canonicalized upon output, so case-variant names will be understood as the same header.
- `value` (String) The header field value
@@ -1357,7 +1357,7 @@ Required:
Required:
-- `port` (String) Number or name of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
+- `port` (String) Number or name of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
Optional:
@@ -1379,15 +1379,15 @@ Required:
Required:
-- `mount_path` (String) Path within the container at which the volume should be mounted. Must not contain ':'.
+- `mount_path` (String) Path within the container at which the volume should be mounted. Mustnot contain ':'.
- `name` (String) This must match the Name of a Volume.
Optional:
-- `mount_propagation` (String) mountPropagation determines how mounts are propagated from the host to container and the other way around. When not set, MountPropagationNone is used. This field is beta in 1.10.
-- `read_only` (Boolean) Mounted read-only if true, read-write otherwise (false or unspecified). Defaults to false.
-- `sub_path` (String) Path within the volume from which the container's volume should be mounted. Defaults to '' (volume's root).
-- `sub_path_expr` (String) Expanded path within the volume from which the container's volume should be mounted. Behaves similarly to SubPath but environment variable references $(VAR_NAME) are expanded using the container's environment. Defaults to '' (volume's root). SubPathExpr and SubPath are mutually exclusive.
+- `mount_propagation` (String) mountPropagation determines how mounts are propagated from the hostto container and the other way around.When not set, MountPropagationNone is used.This field is beta in 1.10.
+- `read_only` (Boolean) Mounted read-only if true, read-write otherwise (false or unspecified).Defaults to false.
+- `sub_path` (String) Path within the volume from which the container's volume should be mounted.Defaults to '' (volume's root).
+- `sub_path_expr` (String) Expanded path within the volume from which the container's volume should be mounted.Behaves similarly to SubPath but environment variable references $(VAR_NAME) are expanded using the container's environment.Defaults to '' (volume's root).SubPathExpr and SubPath are mutually exclusive.
@@ -1396,33 +1396,33 @@ Optional:
Required:
-- `name` (String) Name of the container specified as a DNS_LABEL. Each container in a pod must have a unique name (DNS_LABEL). Cannot be updated.
+- `name` (String) Name of the container specified as a DNS_LABEL.Each container in a pod must have a unique name (DNS_LABEL).Cannot be updated.
Optional:
-- `args` (List of String) Arguments to the entrypoint. The container image's CMD is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container's environment. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. '$$(VAR_NAME)' will produce the string literal '$(VAR_NAME)'. Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
-- `command` (List of String) Entrypoint array. Not executed within a shell. The container image's ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container's environment. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. '$$(VAR_NAME)' will produce the string literal '$(VAR_NAME)'. Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
-- `env` (Attributes List) List of environment variables to set in the container. Cannot be updated. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--env))
-- `env_from` (Attributes List) List of sources to populate environment variables in the container. The keys defined within a source must be a C_IDENTIFIER. All invalid keys will be reported as an event when the container is starting. When a key exists in multiple sources, the value associated with the last source will take precedence. Values defined by an Env with a duplicate key will take precedence. Cannot be updated. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--env_from))
-- `image` (String) Container image name. More info: https://kubernetes.io/docs/concepts/containers/images This field is optional to allow higher level config management to default or override container images in workload controllers like Deployments and StatefulSets.
-- `image_pull_policy` (String) Image pull policy. One of Always, Never, IfNotPresent. Defaults to Always if :latest tag is specified, or IfNotPresent otherwise. Cannot be updated. More info: https://kubernetes.io/docs/concepts/containers/images#updating-images
-- `lifecycle` (Attributes) Actions that the management system should take in response to container lifecycle events. Cannot be updated. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--lifecycle))
-- `liveness_probe` (Attributes) Periodic probe of container liveness. Container will be restarted if the probe fails. Cannot be updated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--liveness_probe))
-- `ports` (Attributes List) List of ports to expose from the container. Not specifying a port here DOES NOT prevent that port from being exposed. Any port which is listening on the default '0.0.0.0' address inside a container will be accessible from the network. Modifying this array with strategic merge patch may corrupt the data. For more information See https://github.com/kubernetes/kubernetes/issues/108255. Cannot be updated. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--ports))
-- `readiness_probe` (Attributes) Periodic probe of container service readiness. Container will be removed from service endpoints if the probe fails. Cannot be updated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--readiness_probe))
+- `args` (List of String) Arguments to the entrypoint.The container image's CMD is used if this is not provided.Variable references $(VAR_NAME) are expanded using the container's environment. If a variablecannot be resolved, the reference in the input string will be unchanged. Double $$ are reducedto a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. '$$(VAR_NAME)' willproduce the string literal '$(VAR_NAME)'. Escaped references will never be expanded, regardlessof whether the variable exists or not. Cannot be updated.More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
+- `command` (List of String) Entrypoint array. Not executed within a shell.The container image's ENTRYPOINT is used if this is not provided.Variable references $(VAR_NAME) are expanded using the container's environment. If a variablecannot be resolved, the reference in the input string will be unchanged. Double $$ are reducedto a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. '$$(VAR_NAME)' willproduce the string literal '$(VAR_NAME)'. Escaped references will never be expanded, regardlessof whether the variable exists or not. Cannot be updated.More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
+- `env` (Attributes List) List of environment variables to set in the container.Cannot be updated. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--env))
+- `env_from` (Attributes List) List of sources to populate environment variables in the container.The keys defined within a source must be a C_IDENTIFIER. All invalid keyswill be reported as an event when the container is starting. When a key exists in multiplesources, the value associated with the last source will take precedence.Values defined by an Env with a duplicate key will take precedence.Cannot be updated. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--env_from))
+- `image` (String) Container image name.More info: https://kubernetes.io/docs/concepts/containers/imagesThis field is optional to allow higher level config management to default or overridecontainer images in workload controllers like Deployments and StatefulSets.
+- `image_pull_policy` (String) Image pull policy.One of Always, Never, IfNotPresent.Defaults to Always if :latest tag is specified, or IfNotPresent otherwise.Cannot be updated.More info: https://kubernetes.io/docs/concepts/containers/images#updating-images
+- `lifecycle` (Attributes) Actions that the management system should take in response to container lifecycle events.Cannot be updated. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--lifecycle))
+- `liveness_probe` (Attributes) Periodic probe of container liveness.Container will be restarted if the probe fails.Cannot be updated.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--liveness_probe))
+- `ports` (Attributes List) List of ports to expose from the container. Not specifying a port hereDOES NOT prevent that port from being exposed. Any port which islistening on the default '0.0.0.0' address inside a container will beaccessible from the network.Modifying this array with strategic merge patch may corrupt the data.For more information See https://github.com/kubernetes/kubernetes/issues/108255.Cannot be updated. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--ports))
+- `readiness_probe` (Attributes) Periodic probe of container service readiness.Container will be removed from service endpoints if the probe fails.Cannot be updated.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--readiness_probe))
- `resize_policy` (Attributes List) Resources resize policy for the container. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--resize_policy))
-- `resources` (Attributes) Compute Resources required by this container. Cannot be updated. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/ (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--resources))
-- `restart_policy` (String) RestartPolicy defines the restart behavior of individual containers in a pod. This field may only be set for init containers, and the only allowed value is 'Always'. For non-init containers or when this field is not specified, the restart behavior is defined by the Pod's restart policy and the container type. Setting the RestartPolicy as 'Always' for the init container will have the following effect: this init container will be continually restarted on exit until all regular containers have terminated. Once all regular containers have completed, all init containers with restartPolicy 'Always' will be shut down. This lifecycle differs from normal init containers and is often referred to as a 'sidecar' container. Although this init container still starts in the init container sequence, it does not wait for the container to complete before proceeding to the next init container. Instead, the next init container starts immediately after this init container is started, or after any startupProbe has successfully completed.
-- `security_context` (Attributes) SecurityContext defines the security options the container should be run with. If set, the fields of SecurityContext override the equivalent fields of PodSecurityContext. More info: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--security_context))
-- `startup_probe` (Attributes) StartupProbe indicates that the Pod has successfully initialized. If specified, no other probes are executed until this completes successfully. If this probe fails, the Pod will be restarted, just as if the livenessProbe failed. This can be used to provide different probe parameters at the beginning of a Pod's lifecycle, when it might take a long time to load data or warm a cache, than during steady-state operation. This cannot be updated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--startup_probe))
-- `stdin` (Boolean) Whether this container should allocate a buffer for stdin in the container runtime. If this is not set, reads from stdin in the container will always result in EOF. Default is false.
-- `stdin_once` (Boolean) Whether the container runtime should close the stdin channel after it has been opened by a single attach. When stdin is true the stdin stream will remain open across multiple attach sessions. If stdinOnce is set to true, stdin is opened on container start, is empty until the first client attaches to stdin, and then remains open and accepts data until the client disconnects, at which time stdin is closed and remains closed until the container is restarted. If this flag is false, a container processes that reads from stdin will never receive an EOF. Default is false
-- `termination_message_path` (String) Optional: Path at which the file to which the container's termination message will be written is mounted into the container's filesystem. Message written is intended to be brief final status, such as an assertion failure message. Will be truncated by the node if greater than 4096 bytes. The total message length across all containers will be limited to 12kb. Defaults to /dev/termination-log. Cannot be updated.
-- `termination_message_policy` (String) Indicate how the termination message should be populated. File will use the contents of terminationMessagePath to populate the container status message on both success and failure. FallbackToLogsOnError will use the last chunk of container log output if the termination message file is empty and the container exited with an error. The log output is limited to 2048 bytes or 80 lines, whichever is smaller. Defaults to File. Cannot be updated.
-- `tty` (Boolean) Whether this container should allocate a TTY for itself, also requires 'stdin' to be true. Default is false.
+- `resources` (Attributes) Compute Resources required by this container.Cannot be updated.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/ (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--resources))
+- `restart_policy` (String) RestartPolicy defines the restart behavior of individual containers in a pod.This field may only be set for init containers, and the only allowed value is 'Always'.For non-init containers or when this field is not specified,the restart behavior is defined by the Pod's restart policy and the container type.Setting the RestartPolicy as 'Always' for the init container will have the following effect:this init container will be continually restarted onexit until all regular containers have terminated. Once all regularcontainers have completed, all init containers with restartPolicy 'Always'will be shut down. This lifecycle differs from normal init containers andis often referred to as a 'sidecar' container. Although this initcontainer still starts in the init container sequence, it does not waitfor the container to complete before proceeding to the next initcontainer. Instead, the next init container starts immediately after thisinit container is started, or after any startupProbe has successfullycompleted.
+- `security_context` (Attributes) SecurityContext defines the security options the container should be run with.If set, the fields of SecurityContext override the equivalent fields of PodSecurityContext.More info: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--security_context))
+- `startup_probe` (Attributes) StartupProbe indicates that the Pod has successfully initialized.If specified, no other probes are executed until this completes successfully.If this probe fails, the Pod will be restarted, just as if the livenessProbe failed.This can be used to provide different probe parameters at the beginning of a Pod's lifecycle,when it might take a long time to load data or warm a cache, than during steady-state operation.This cannot be updated.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--startup_probe))
+- `stdin` (Boolean) Whether this container should allocate a buffer for stdin in the container runtime. If thisis not set, reads from stdin in the container will always result in EOF.Default is false.
+- `stdin_once` (Boolean) Whether the container runtime should close the stdin channel after it has been opened bya single attach. When stdin is true the stdin stream will remain open across multiple attachsessions. If stdinOnce is set to true, stdin is opened on container start, is empty until thefirst client attaches to stdin, and then remains open and accepts data until the client disconnects,at which time stdin is closed and remains closed until the container is restarted. If thisflag is false, a container processes that reads from stdin will never receive an EOF.Default is false
+- `termination_message_path` (String) Optional: Path at which the file to which the container's termination messagewill be written is mounted into the container's filesystem.Message written is intended to be brief final status, such as an assertion failure message.Will be truncated by the node if greater than 4096 bytes. The total message length acrossall containers will be limited to 12kb.Defaults to /dev/termination-log.Cannot be updated.
+- `termination_message_policy` (String) Indicate how the termination message should be populated. File will use the contents ofterminationMessagePath to populate the container status message on both success and failure.FallbackToLogsOnError will use the last chunk of container log output if the terminationmessage file is empty and the container exited with an error.The log output is limited to 2048 bytes or 80 lines, whichever is smaller.Defaults to File.Cannot be updated.
+- `tty` (Boolean) Whether this container should allocate a TTY for itself, also requires 'stdin' to be true.Default is false.
- `volume_devices` (Attributes List) volumeDevices is the list of block devices to be used by the container. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--volume_devices))
-- `volume_mounts` (Attributes List) Pod volumes to mount into the container's filesystem. Cannot be updated. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--volume_mounts))
-- `working_dir` (String) Container's working directory. If not specified, the container runtime's default will be used, which might be configured in the container image. Cannot be updated.
+- `volume_mounts` (Attributes List) Pod volumes to mount into the container's filesystem.Cannot be updated. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--volume_mounts))
+- `working_dir` (String) Container's working directory.If not specified, the container runtime's default will be used, whichmight be configured in the container image.Cannot be updated.
### Nested Schema for `spec.integration.template.spec.init_containers.env`
@@ -1433,7 +1433,7 @@ Required:
Optional:
-- `value` (String) Variable references $(VAR_NAME) are expanded using the previously defined environment variables in the container and any service environment variables. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. '$$(VAR_NAME)' will produce the string literal '$(VAR_NAME)'. Escaped references will never be expanded, regardless of whether the variable exists or not. Defaults to ''.
+- `value` (String) Variable references $(VAR_NAME) are expandedusing the previously defined environment variables in the container andany service environment variables. If a variable cannot be resolved,the reference in the input string will be unchanged. Double $$ are reducedto a single $, which allows for escaping the $(VAR_NAME) syntax: i.e.'$$(VAR_NAME)' will produce the string literal '$(VAR_NAME)'.Escaped references will never be expanded, regardless of whether the variableexists or not.Defaults to ''.
- `value_from` (Attributes) Source for the environment variable's value. Cannot be used if value is not empty. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--env--value_from))
@@ -1442,8 +1442,8 @@ Optional:
Optional:
- `config_map_key_ref` (Attributes) Selects a key of a ConfigMap. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--env--value_from--config_map_key_ref))
-- `field_ref` (Attributes) Selects a field of the pod: supports metadata.name, metadata.namespace, 'metadata.labels['']', 'metadata.annotations['']', spec.nodeName, spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--env--value_from--field_ref))
-- `resource_field_ref` (Attributes) Selects a resource of the container: only resources limits and requests (limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu, requests.memory and requests.ephemeral-storage) are currently supported. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--env--value_from--resource_field_ref))
+- `field_ref` (Attributes) Selects a field of the pod: supports metadata.name, metadata.namespace, 'metadata.labels['']', 'metadata.annotations['']',spec.nodeName, spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--env--value_from--field_ref))
+- `resource_field_ref` (Attributes) Selects a resource of the container: only resources limits and requests(limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu, requests.memory and requests.ephemeral-storage) are currently supported. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--env--value_from--resource_field_ref))
- `secret_key_ref` (Attributes) Selects a key of a secret in the pod's namespace (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--env--value_from--secret_key_ref))
@@ -1455,7 +1455,7 @@ Required:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
@@ -1493,7 +1493,7 @@ Required:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
- `optional` (Boolean) Specify whether the Secret or its key must be defined
@@ -1513,7 +1513,7 @@ Optional:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
- `optional` (Boolean) Specify whether the ConfigMap must be defined
@@ -1522,7 +1522,7 @@ Optional:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
- `optional` (Boolean) Specify whether the Secret must be defined
@@ -1532,8 +1532,8 @@ Optional:
Optional:
-- `post_start` (Attributes) PostStart is called immediately after a container is created. If the handler fails, the container is terminated and restarted according to its restart policy. Other management of the container blocks until the hook completes. More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--lifecycle--post_start))
-- `pre_stop` (Attributes) PreStop is called immediately before a container is terminated due to an API request or management event such as liveness/startup probe failure, preemption, resource contention, etc. The handler is not called if the container crashes or exits. The Pod's termination grace period countdown begins before the PreStop hook is executed. Regardless of the outcome of the handler, the container will eventually terminate within the Pod's termination grace period (unless delayed by finalizers). Other management of the container blocks until the hook completes or until the termination grace period is reached. More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--lifecycle--pre_stop))
+- `post_start` (Attributes) PostStart is called immediately after a container is created. If the handler fails,the container is terminated and restarted according to its restart policy.Other management of the container blocks until the hook completes.More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--lifecycle--post_start))
+- `pre_stop` (Attributes) PreStop is called immediately before a container is terminated due to anAPI request or management event such as liveness/startup probe failure,preemption, resource contention, etc. The handler is not called if thecontainer crashes or exits. The Pod's termination grace period countdown begins before thePreStop hook is executed. Regardless of the outcome of the handler, thecontainer will eventually terminate within the Pod's termination graceperiod (unless delayed by finalizers). Other management of the container blocks until the hook completesor until the termination grace period is reached.More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--lifecycle--pre_stop))
### Nested Schema for `spec.integration.template.spec.init_containers.lifecycle.post_start`
@@ -1543,14 +1543,14 @@ Optional:
- `exec` (Attributes) Exec specifies the action to take. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--lifecycle--post_start--exec))
- `http_get` (Attributes) HTTPGet specifies the http request to perform. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--lifecycle--post_start--http_get))
- `sleep` (Attributes) Sleep represents the duration that the container should sleep before being terminated. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--lifecycle--post_start--sleep))
-- `tcp_socket` (Attributes) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and kept for the backward compatibility. There are no validation of this field and lifecycle hooks will fail in runtime when tcp handler is specified. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--lifecycle--post_start--tcp_socket))
+- `tcp_socket` (Attributes) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and keptfor the backward compatibility. There are no validation of this field andlifecycle hooks will fail in runtime when tcp handler is specified. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--lifecycle--post_start--tcp_socket))
### Nested Schema for `spec.integration.template.spec.init_containers.lifecycle.post_start.exec`
Optional:
-- `command` (List of String) Command is the command line to execute inside the container, the working directory for the command is root ('/') in the container's filesystem. The command is simply exec'd, it is not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
+- `command` (List of String) Command is the command line to execute inside the container, the working directory for thecommand is root ('/') in the container's filesystem. The command is simply exec'd, it isnot run inside a shell, so traditional shell instructions ('|', etc) won't work. To usea shell, you need to explicitly call out to that shell.Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
@@ -1558,21 +1558,21 @@ Optional:
Required:
-- `port` (String) Name or number of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
+- `port` (String) Name or number of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
Optional:
-- `host` (String) Host name to connect to, defaults to the pod IP. You probably want to set 'Host' in httpHeaders instead.
+- `host` (String) Host name to connect to, defaults to the pod IP. You probably want to set'Host' in httpHeaders instead.
- `http_headers` (Attributes List) Custom headers to set in the request. HTTP allows repeated headers. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--lifecycle--post_start--http_get--http_headers))
- `path` (String) Path to access on the HTTP server.
-- `scheme` (String) Scheme to use for connecting to the host. Defaults to HTTP.
+- `scheme` (String) Scheme to use for connecting to the host.Defaults to HTTP.
### Nested Schema for `spec.integration.template.spec.init_containers.lifecycle.post_start.http_get.http_headers`
Required:
-- `name` (String) The header field name. This will be canonicalized upon output, so case-variant names will be understood as the same header.
+- `name` (String) The header field name.This will be canonicalized upon output, so case-variant names will be understood as the same header.
- `value` (String) The header field value
@@ -1590,7 +1590,7 @@ Required:
Required:
-- `port` (String) Number or name of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
+- `port` (String) Number or name of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
Optional:
@@ -1606,14 +1606,14 @@ Optional:
- `exec` (Attributes) Exec specifies the action to take. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--lifecycle--pre_stop--exec))
- `http_get` (Attributes) HTTPGet specifies the http request to perform. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--lifecycle--pre_stop--http_get))
- `sleep` (Attributes) Sleep represents the duration that the container should sleep before being terminated. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--lifecycle--pre_stop--sleep))
-- `tcp_socket` (Attributes) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and kept for the backward compatibility. There are no validation of this field and lifecycle hooks will fail in runtime when tcp handler is specified. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--lifecycle--pre_stop--tcp_socket))
+- `tcp_socket` (Attributes) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and keptfor the backward compatibility. There are no validation of this field andlifecycle hooks will fail in runtime when tcp handler is specified. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--lifecycle--pre_stop--tcp_socket))
### Nested Schema for `spec.integration.template.spec.init_containers.lifecycle.pre_stop.exec`
Optional:
-- `command` (List of String) Command is the command line to execute inside the container, the working directory for the command is root ('/') in the container's filesystem. The command is simply exec'd, it is not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
+- `command` (List of String) Command is the command line to execute inside the container, the working directory for thecommand is root ('/') in the container's filesystem. The command is simply exec'd, it isnot run inside a shell, so traditional shell instructions ('|', etc) won't work. To usea shell, you need to explicitly call out to that shell.Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
@@ -1621,21 +1621,21 @@ Optional:
Required:
-- `port` (String) Name or number of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
+- `port` (String) Name or number of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
Optional:
-- `host` (String) Host name to connect to, defaults to the pod IP. You probably want to set 'Host' in httpHeaders instead.
+- `host` (String) Host name to connect to, defaults to the pod IP. You probably want to set'Host' in httpHeaders instead.
- `http_headers` (Attributes List) Custom headers to set in the request. HTTP allows repeated headers. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--lifecycle--pre_stop--http_get--http_headers))
- `path` (String) Path to access on the HTTP server.
-- `scheme` (String) Scheme to use for connecting to the host. Defaults to HTTP.
+- `scheme` (String) Scheme to use for connecting to the host.Defaults to HTTP.
### Nested Schema for `spec.integration.template.spec.init_containers.lifecycle.pre_stop.http_get.http_headers`
Required:
-- `name` (String) The header field name. This will be canonicalized upon output, so case-variant names will be understood as the same header.
+- `name` (String) The header field name.This will be canonicalized upon output, so case-variant names will be understood as the same header.
- `value` (String) The header field value
@@ -1653,7 +1653,7 @@ Required:
Required:
-- `port` (String) Number or name of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
+- `port` (String) Number or name of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
Optional:
@@ -1668,22 +1668,22 @@ Optional:
Optional:
- `exec` (Attributes) Exec specifies the action to take. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--liveness_probe--exec))
-- `failure_threshold` (Number) Minimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1.
+- `failure_threshold` (Number) Minimum consecutive failures for the probe to be considered failed after having succeeded.Defaults to 3. Minimum value is 1.
- `grpc` (Attributes) GRPC specifies an action involving a GRPC port. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--liveness_probe--grpc))
- `http_get` (Attributes) HTTPGet specifies the http request to perform. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--liveness_probe--http_get))
-- `initial_delay_seconds` (Number) Number of seconds after the container has started before liveness probes are initiated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-- `period_seconds` (Number) How often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1.
-- `success_threshold` (Number) Minimum consecutive successes for the probe to be considered successful after having failed. Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
+- `initial_delay_seconds` (Number) Number of seconds after the container has started before liveness probes are initiated.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
+- `period_seconds` (Number) How often (in seconds) to perform the probe.Default to 10 seconds. Minimum value is 1.
+- `success_threshold` (Number) Minimum consecutive successes for the probe to be considered successful after having failed.Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
- `tcp_socket` (Attributes) TCPSocket specifies an action involving a TCP port. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--liveness_probe--tcp_socket))
-- `termination_grace_period_seconds` (Number) Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
-- `timeout_seconds` (Number) Number of seconds after which the probe times out. Defaults to 1 second. Minimum value is 1. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
+- `termination_grace_period_seconds` (Number) Optional duration in seconds the pod needs to terminate gracefully upon probe failure.The grace period is the duration in seconds after the processes running in the pod are senta termination signal and the time when the processes are forcibly halted with a kill signal.Set this value longer than the expected cleanup time for your process.If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, thisvalue overrides the value provided by the pod spec.Value must be non-negative integer. The value zero indicates stop immediately viathe kill signal (no opportunity to shut down).This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate.Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
+- `timeout_seconds` (Number) Number of seconds after which the probe times out.Defaults to 1 second. Minimum value is 1.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
### Nested Schema for `spec.integration.template.spec.init_containers.liveness_probe.exec`
Optional:
-- `command` (List of String) Command is the command line to execute inside the container, the working directory for the command is root ('/') in the container's filesystem. The command is simply exec'd, it is not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
+- `command` (List of String) Command is the command line to execute inside the container, the working directory for thecommand is root ('/') in the container's filesystem. The command is simply exec'd, it isnot run inside a shell, so traditional shell instructions ('|', etc) won't work. To usea shell, you need to explicitly call out to that shell.Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
@@ -1695,7 +1695,7 @@ Required:
Optional:
-- `service` (String) Service is the name of the service to place in the gRPC HealthCheckRequest (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md). If this is not specified, the default behavior is defined by gRPC.
+- `service` (String) Service is the name of the service to place in the gRPC HealthCheckRequest(see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).If this is not specified, the default behavior is defined by gRPC.
@@ -1703,21 +1703,21 @@ Optional:
Required:
-- `port` (String) Name or number of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
+- `port` (String) Name or number of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
Optional:
-- `host` (String) Host name to connect to, defaults to the pod IP. You probably want to set 'Host' in httpHeaders instead.
+- `host` (String) Host name to connect to, defaults to the pod IP. You probably want to set'Host' in httpHeaders instead.
- `http_headers` (Attributes List) Custom headers to set in the request. HTTP allows repeated headers. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--liveness_probe--http_get--http_headers))
- `path` (String) Path to access on the HTTP server.
-- `scheme` (String) Scheme to use for connecting to the host. Defaults to HTTP.
+- `scheme` (String) Scheme to use for connecting to the host.Defaults to HTTP.
### Nested Schema for `spec.integration.template.spec.init_containers.liveness_probe.http_get.http_headers`
Required:
-- `name` (String) The header field name. This will be canonicalized upon output, so case-variant names will be understood as the same header.
+- `name` (String) The header field name.This will be canonicalized upon output, so case-variant names will be understood as the same header.
- `value` (String) The header field value
@@ -1727,7 +1727,7 @@ Required:
Required:
-- `port` (String) Number or name of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
+- `port` (String) Number or name of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
Optional:
@@ -1740,14 +1740,14 @@ Optional:
Required:
-- `container_port` (Number) Number of port to expose on the pod's IP address. This must be a valid port number, 0 < x < 65536.
+- `container_port` (Number) Number of port to expose on the pod's IP address.This must be a valid port number, 0 < x < 65536.
Optional:
- `host_ip` (String) What host IP to bind the external port to.
-- `host_port` (Number) Number of port to expose on the host. If specified, this must be a valid port number, 0 < x < 65536. If HostNetwork is specified, this must match ContainerPort. Most containers do not need this.
-- `name` (String) If specified, this must be an IANA_SVC_NAME and unique within the pod. Each named port in a pod must have a unique name. Name for the port that can be referred to by services.
-- `protocol` (String) Protocol for port. Must be UDP, TCP, or SCTP. Defaults to 'TCP'.
+- `host_port` (Number) Number of port to expose on the host.If specified, this must be a valid port number, 0 < x < 65536.If HostNetwork is specified, this must match ContainerPort.Most containers do not need this.
+- `name` (String) If specified, this must be an IANA_SVC_NAME and unique within the pod. Eachnamed port in a pod must have a unique name. Name for the port that can bereferred to by services.
+- `protocol` (String) Protocol for port. Must be UDP, TCP, or SCTP.Defaults to 'TCP'.
@@ -1756,22 +1756,22 @@ Optional:
Optional:
- `exec` (Attributes) Exec specifies the action to take. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--readiness_probe--exec))
-- `failure_threshold` (Number) Minimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1.
+- `failure_threshold` (Number) Minimum consecutive failures for the probe to be considered failed after having succeeded.Defaults to 3. Minimum value is 1.
- `grpc` (Attributes) GRPC specifies an action involving a GRPC port. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--readiness_probe--grpc))
- `http_get` (Attributes) HTTPGet specifies the http request to perform. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--readiness_probe--http_get))
-- `initial_delay_seconds` (Number) Number of seconds after the container has started before liveness probes are initiated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-- `period_seconds` (Number) How often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1.
-- `success_threshold` (Number) Minimum consecutive successes for the probe to be considered successful after having failed. Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
+- `initial_delay_seconds` (Number) Number of seconds after the container has started before liveness probes are initiated.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
+- `period_seconds` (Number) How often (in seconds) to perform the probe.Default to 10 seconds. Minimum value is 1.
+- `success_threshold` (Number) Minimum consecutive successes for the probe to be considered successful after having failed.Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
- `tcp_socket` (Attributes) TCPSocket specifies an action involving a TCP port. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--readiness_probe--tcp_socket))
-- `termination_grace_period_seconds` (Number) Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
-- `timeout_seconds` (Number) Number of seconds after which the probe times out. Defaults to 1 second. Minimum value is 1. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
+- `termination_grace_period_seconds` (Number) Optional duration in seconds the pod needs to terminate gracefully upon probe failure.The grace period is the duration in seconds after the processes running in the pod are senta termination signal and the time when the processes are forcibly halted with a kill signal.Set this value longer than the expected cleanup time for your process.If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, thisvalue overrides the value provided by the pod spec.Value must be non-negative integer. The value zero indicates stop immediately viathe kill signal (no opportunity to shut down).This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate.Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
+- `timeout_seconds` (Number) Number of seconds after which the probe times out.Defaults to 1 second. Minimum value is 1.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
### Nested Schema for `spec.integration.template.spec.init_containers.readiness_probe.exec`
Optional:
-- `command` (List of String) Command is the command line to execute inside the container, the working directory for the command is root ('/') in the container's filesystem. The command is simply exec'd, it is not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
+- `command` (List of String) Command is the command line to execute inside the container, the working directory for thecommand is root ('/') in the container's filesystem. The command is simply exec'd, it isnot run inside a shell, so traditional shell instructions ('|', etc) won't work. To usea shell, you need to explicitly call out to that shell.Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
@@ -1783,7 +1783,7 @@ Required:
Optional:
-- `service` (String) Service is the name of the service to place in the gRPC HealthCheckRequest (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md). If this is not specified, the default behavior is defined by gRPC.
+- `service` (String) Service is the name of the service to place in the gRPC HealthCheckRequest(see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).If this is not specified, the default behavior is defined by gRPC.
@@ -1791,21 +1791,21 @@ Optional:
Required:
-- `port` (String) Name or number of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
+- `port` (String) Name or number of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
Optional:
-- `host` (String) Host name to connect to, defaults to the pod IP. You probably want to set 'Host' in httpHeaders instead.
+- `host` (String) Host name to connect to, defaults to the pod IP. You probably want to set'Host' in httpHeaders instead.
- `http_headers` (Attributes List) Custom headers to set in the request. HTTP allows repeated headers. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--readiness_probe--http_get--http_headers))
- `path` (String) Path to access on the HTTP server.
-- `scheme` (String) Scheme to use for connecting to the host. Defaults to HTTP.
+- `scheme` (String) Scheme to use for connecting to the host.Defaults to HTTP.
### Nested Schema for `spec.integration.template.spec.init_containers.readiness_probe.http_get.http_headers`
Required:
-- `name` (String) The header field name. This will be canonicalized upon output, so case-variant names will be understood as the same header.
+- `name` (String) The header field name.This will be canonicalized upon output, so case-variant names will be understood as the same header.
- `value` (String) The header field value
@@ -1815,7 +1815,7 @@ Required:
Required:
-- `port` (String) Number or name of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
+- `port` (String) Number or name of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
Optional:
@@ -1828,8 +1828,8 @@ Optional:
Required:
-- `resource_name` (String) Name of the resource to which this resource resize policy applies. Supported values: cpu, memory.
-- `restart_policy` (String) Restart policy to apply when specified resource is resized. If not specified, it defaults to NotRequired.
+- `resource_name` (String) Name of the resource to which this resource resize policy applies.Supported values: cpu, memory.
+- `restart_policy` (String) Restart policy to apply when specified resource is resized.If not specified, it defaults to NotRequired.
@@ -1837,16 +1837,16 @@ Required:
Optional:
-- `claims` (Attributes List) Claims lists the names of resources, defined in spec.resourceClaims, that are used by this container. This is an alpha field and requires enabling the DynamicResourceAllocation feature gate. This field is immutable. It can only be set for containers. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--resources--claims))
-- `limits` (Map of String) Limits describes the maximum amount of compute resources allowed. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-- `requests` (Map of String) Requests describes the minimum amount of compute resources required. If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, otherwise to an implementation-defined value. Requests cannot exceed Limits. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
+- `claims` (Attributes List) Claims lists the names of resources, defined in spec.resourceClaims,that are used by this container.This is an alpha field and requires enabling theDynamicResourceAllocation feature gate.This field is immutable. It can only be set for containers. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--resources--claims))
+- `limits` (Map of String) Limits describes the maximum amount of compute resources allowed.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
+- `requests` (Map of String) Requests describes the minimum amount of compute resources required.If Requests is omitted for a container, it defaults to Limits if that is explicitly specified,otherwise to an implementation-defined value. Requests cannot exceed Limits.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
### Nested Schema for `spec.integration.template.spec.init_containers.resources.claims`
Required:
-- `name` (String) Name must match the name of one entry in pod.spec.resourceClaims of the Pod where this field is used. It makes that resource available inside a container.
+- `name` (String) Name must match the name of one entry in pod.spec.resourceClaims ofthe Pod where this field is used. It makes that resource availableinside a container.
@@ -1855,17 +1855,17 @@ Required:
Optional:
-- `allow_privilege_escalation` (Boolean) AllowPrivilegeEscalation controls whether a process can gain more privileges than its parent process. This bool directly controls if the no_new_privs flag will be set on the container process. AllowPrivilegeEscalation is true always when the container is: 1) run as Privileged 2) has CAP_SYS_ADMIN Note that this field cannot be set when spec.os.name is windows.
-- `capabilities` (Attributes) The capabilities to add/drop when running containers. Defaults to the default set of capabilities granted by the container runtime. Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--security_context--capabilities))
-- `privileged` (Boolean) Run container in privileged mode. Processes in privileged containers are essentially equivalent to root on the host. Defaults to false. Note that this field cannot be set when spec.os.name is windows.
-- `proc_mount` (String) procMount denotes the type of proc mount to use for the containers. The default is DefaultProcMount which uses the container runtime defaults for readonly paths and masked paths. This requires the ProcMountType feature flag to be enabled. Note that this field cannot be set when spec.os.name is windows.
-- `read_only_root_filesystem` (Boolean) Whether this container has a read-only root filesystem. Default is false. Note that this field cannot be set when spec.os.name is windows.
-- `run_as_group` (Number) The GID to run the entrypoint of the container process. Uses runtime default if unset. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence. Note that this field cannot be set when spec.os.name is windows.
-- `run_as_non_root` (Boolean) Indicates that the container must run as a non-root user. If true, the Kubelet will validate the image at runtime to ensure that it does not run as UID 0 (root) and fail to start the container if it does. If unset or false, no such validation will be performed. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
-- `run_as_user` (Number) The UID to run the entrypoint of the container process. Defaults to user specified in image metadata if unspecified. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence. Note that this field cannot be set when spec.os.name is windows.
-- `se_linux_options` (Attributes) The SELinux context to be applied to the container. If unspecified, the container runtime will allocate a random SELinux context for each container. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence. Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--security_context--se_linux_options))
-- `seccomp_profile` (Attributes) The seccomp options to use by this container. If seccomp options are provided at both the pod & container level, the container options override the pod options. Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--security_context--seccomp_profile))
-- `windows_options` (Attributes) The Windows specific settings applied to all containers. If unspecified, the options from the PodSecurityContext will be used. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence. Note that this field cannot be set when spec.os.name is linux. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--security_context--windows_options))
+- `allow_privilege_escalation` (Boolean) AllowPrivilegeEscalation controls whether a process can gain moreprivileges than its parent process. This bool directly controls ifthe no_new_privs flag will be set on the container process.AllowPrivilegeEscalation is true always when the container is:1) run as Privileged2) has CAP_SYS_ADMINNote that this field cannot be set when spec.os.name is windows.
+- `capabilities` (Attributes) The capabilities to add/drop when running containers.Defaults to the default set of capabilities granted by the container runtime.Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--security_context--capabilities))
+- `privileged` (Boolean) Run container in privileged mode.Processes in privileged containers are essentially equivalent to root on the host.Defaults to false.Note that this field cannot be set when spec.os.name is windows.
+- `proc_mount` (String) procMount denotes the type of proc mount to use for the containers.The default is DefaultProcMount which uses the container runtime defaults forreadonly paths and masked paths.This requires the ProcMountType feature flag to be enabled.Note that this field cannot be set when spec.os.name is windows.
+- `read_only_root_filesystem` (Boolean) Whether this container has a read-only root filesystem.Default is false.Note that this field cannot be set when spec.os.name is windows.
+- `run_as_group` (Number) The GID to run the entrypoint of the container process.Uses runtime default if unset.May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.Note that this field cannot be set when spec.os.name is windows.
+- `run_as_non_root` (Boolean) Indicates that the container must run as a non-root user.If true, the Kubelet will validate the image at runtime to ensure that itdoes not run as UID 0 (root) and fail to start the container if it does.If unset or false, no such validation will be performed.May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.
+- `run_as_user` (Number) The UID to run the entrypoint of the container process.Defaults to user specified in image metadata if unspecified.May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.Note that this field cannot be set when spec.os.name is windows.
+- `se_linux_options` (Attributes) The SELinux context to be applied to the container.If unspecified, the container runtime will allocate a random SELinux context for eachcontainer. May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--security_context--se_linux_options))
+- `seccomp_profile` (Attributes) The seccomp options to use by this container. If seccomp options areprovided at both the pod & container level, the container optionsoverride the pod options.Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--security_context--seccomp_profile))
+- `windows_options` (Attributes) The Windows specific settings applied to all containers.If unspecified, the options from the PodSecurityContext will be used.If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.Note that this field cannot be set when spec.os.name is linux. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--security_context--windows_options))
### Nested Schema for `spec.integration.template.spec.init_containers.security_context.capabilities`
@@ -1892,11 +1892,11 @@ Optional:
Required:
-- `type` (String) type indicates which kind of seccomp profile will be applied. Valid options are: Localhost - a profile defined in a file on the node should be used. RuntimeDefault - the container runtime default profile should be used. Unconfined - no profile should be applied.
+- `type` (String) type indicates which kind of seccomp profile will be applied.Valid options are:Localhost - a profile defined in a file on the node should be used.RuntimeDefault - the container runtime default profile should be used.Unconfined - no profile should be applied.
Optional:
-- `localhost_profile` (String) localhostProfile indicates a profile defined in a file on the node should be used. The profile must be preconfigured on the node to work. Must be a descending path, relative to the kubelet's configured seccomp profile location. Must be set if type is 'Localhost'. Must NOT be set for any other type.
+- `localhost_profile` (String) localhostProfile indicates a profile defined in a file on the node should be used.The profile must be preconfigured on the node to work.Must be a descending path, relative to the kubelet's configured seccomp profile location.Must be set if type is 'Localhost'. Must NOT be set for any other type.
@@ -1904,10 +1904,10 @@ Optional:
Optional:
-- `gmsa_credential_spec` (String) GMSACredentialSpec is where the GMSA admission webhook (https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of the GMSA credential spec named by the GMSACredentialSpecName field.
+- `gmsa_credential_spec` (String) GMSACredentialSpec is where the GMSA admission webhook(https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of theGMSA credential spec named by the GMSACredentialSpecName field.
- `gmsa_credential_spec_name` (String) GMSACredentialSpecName is the name of the GMSA credential spec to use.
-- `host_process` (Boolean) HostProcess determines if a container should be run as a 'Host Process' container. All of a Pod's containers must have the same effective HostProcess value (it is not allowed to have a mix of HostProcess containers and non-HostProcess containers). In addition, if HostProcess is true then HostNetwork must also be set to true.
-- `run_as_user_name` (String) The UserName in Windows to run the entrypoint of the container process. Defaults to the user specified in image metadata if unspecified. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
+- `host_process` (Boolean) HostProcess determines if a container should be run as a 'Host Process' container.All of a Pod's containers must have the same effective HostProcess value(it is not allowed to have a mix of HostProcess containers and non-HostProcess containers).In addition, if HostProcess is true then HostNetwork must also be set to true.
+- `run_as_user_name` (String) The UserName in Windows to run the entrypoint of the container process.Defaults to the user specified in image metadata if unspecified.May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.
@@ -1917,22 +1917,22 @@ Optional:
Optional:
- `exec` (Attributes) Exec specifies the action to take. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--startup_probe--exec))
-- `failure_threshold` (Number) Minimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1.
+- `failure_threshold` (Number) Minimum consecutive failures for the probe to be considered failed after having succeeded.Defaults to 3. Minimum value is 1.
- `grpc` (Attributes) GRPC specifies an action involving a GRPC port. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--startup_probe--grpc))
- `http_get` (Attributes) HTTPGet specifies the http request to perform. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--startup_probe--http_get))
-- `initial_delay_seconds` (Number) Number of seconds after the container has started before liveness probes are initiated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-- `period_seconds` (Number) How often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1.
-- `success_threshold` (Number) Minimum consecutive successes for the probe to be considered successful after having failed. Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
+- `initial_delay_seconds` (Number) Number of seconds after the container has started before liveness probes are initiated.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
+- `period_seconds` (Number) How often (in seconds) to perform the probe.Default to 10 seconds. Minimum value is 1.
+- `success_threshold` (Number) Minimum consecutive successes for the probe to be considered successful after having failed.Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
- `tcp_socket` (Attributes) TCPSocket specifies an action involving a TCP port. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--startup_probe--tcp_socket))
-- `termination_grace_period_seconds` (Number) Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
-- `timeout_seconds` (Number) Number of seconds after which the probe times out. Defaults to 1 second. Minimum value is 1. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
+- `termination_grace_period_seconds` (Number) Optional duration in seconds the pod needs to terminate gracefully upon probe failure.The grace period is the duration in seconds after the processes running in the pod are senta termination signal and the time when the processes are forcibly halted with a kill signal.Set this value longer than the expected cleanup time for your process.If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, thisvalue overrides the value provided by the pod spec.Value must be non-negative integer. The value zero indicates stop immediately viathe kill signal (no opportunity to shut down).This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate.Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
+- `timeout_seconds` (Number) Number of seconds after which the probe times out.Defaults to 1 second. Minimum value is 1.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
### Nested Schema for `spec.integration.template.spec.init_containers.startup_probe.exec`
Optional:
-- `command` (List of String) Command is the command line to execute inside the container, the working directory for the command is root ('/') in the container's filesystem. The command is simply exec'd, it is not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
+- `command` (List of String) Command is the command line to execute inside the container, the working directory for thecommand is root ('/') in the container's filesystem. The command is simply exec'd, it isnot run inside a shell, so traditional shell instructions ('|', etc) won't work. To usea shell, you need to explicitly call out to that shell.Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
@@ -1944,7 +1944,7 @@ Required:
Optional:
-- `service` (String) Service is the name of the service to place in the gRPC HealthCheckRequest (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md). If this is not specified, the default behavior is defined by gRPC.
+- `service` (String) Service is the name of the service to place in the gRPC HealthCheckRequest(see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).If this is not specified, the default behavior is defined by gRPC.
@@ -1952,21 +1952,21 @@ Optional:
Required:
-- `port` (String) Name or number of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
+- `port` (String) Name or number of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
Optional:
-- `host` (String) Host name to connect to, defaults to the pod IP. You probably want to set 'Host' in httpHeaders instead.
+- `host` (String) Host name to connect to, defaults to the pod IP. You probably want to set'Host' in httpHeaders instead.
- `http_headers` (Attributes List) Custom headers to set in the request. HTTP allows repeated headers. (see [below for nested schema](#nestedatt--spec--integration--template--spec--init_containers--startup_probe--http_get--http_headers))
- `path` (String) Path to access on the HTTP server.
-- `scheme` (String) Scheme to use for connecting to the host. Defaults to HTTP.
+- `scheme` (String) Scheme to use for connecting to the host.Defaults to HTTP.
### Nested Schema for `spec.integration.template.spec.init_containers.startup_probe.http_get.http_headers`
Required:
-- `name` (String) The header field name. This will be canonicalized upon output, so case-variant names will be understood as the same header.
+- `name` (String) The header field name.This will be canonicalized upon output, so case-variant names will be understood as the same header.
- `value` (String) The header field value
@@ -1976,7 +1976,7 @@ Required:
Required:
-- `port` (String) Number or name of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
+- `port` (String) Number or name of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.
Optional:
@@ -1998,15 +1998,15 @@ Required:
Required:
-- `mount_path` (String) Path within the container at which the volume should be mounted. Must not contain ':'.
+- `mount_path` (String) Path within the container at which the volume should be mounted. Mustnot contain ':'.
- `name` (String) This must match the Name of a Volume.
Optional:
-- `mount_propagation` (String) mountPropagation determines how mounts are propagated from the host to container and the other way around. When not set, MountPropagationNone is used. This field is beta in 1.10.
-- `read_only` (Boolean) Mounted read-only if true, read-write otherwise (false or unspecified). Defaults to false.
-- `sub_path` (String) Path within the volume from which the container's volume should be mounted. Defaults to '' (volume's root).
-- `sub_path_expr` (String) Expanded path within the volume from which the container's volume should be mounted. Behaves similarly to SubPath but environment variable references $(VAR_NAME) are expanded using the container's environment. Defaults to '' (volume's root). SubPathExpr and SubPath are mutually exclusive.
+- `mount_propagation` (String) mountPropagation determines how mounts are propagated from the hostto container and the other way around.When not set, MountPropagationNone is used.This field is beta in 1.10.
+- `read_only` (Boolean) Mounted read-only if true, read-write otherwise (false or unspecified).Defaults to false.
+- `sub_path` (String) Path within the volume from which the container's volume should be mounted.Defaults to '' (volume's root).
+- `sub_path_expr` (String) Expanded path within the volume from which the container's volume should be mounted.Behaves similarly to SubPath but environment variable references $(VAR_NAME) are expanded using the container's environment.Defaults to '' (volume's root).SubPathExpr and SubPath are mutually exclusive.
@@ -2015,16 +2015,16 @@ Optional:
Optional:
-- `fs_group` (Number) A special supplemental group that applies to all containers in a pod. Some volume types allow the Kubelet to change the ownership of that volume to be owned by the pod: 1. The owning GID will be the FSGroup 2. The setgid bit is set (new files created in the volume will be owned by FSGroup) 3. The permission bits are OR'd with rw-rw---- If unset, the Kubelet will not modify the ownership and permissions of any volume. Note that this field cannot be set when spec.os.name is windows.
-- `fs_group_change_policy` (String) fsGroupChangePolicy defines behavior of changing ownership and permission of the volume before being exposed inside Pod. This field will only apply to volume types which support fsGroup based ownership(and permissions). It will have no effect on ephemeral volume types such as: secret, configmaps and emptydir. Valid values are 'OnRootMismatch' and 'Always'. If not specified, 'Always' is used. Note that this field cannot be set when spec.os.name is windows.
-- `run_as_group` (Number) The GID to run the entrypoint of the container process. Uses runtime default if unset. May also be set in SecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence for that container. Note that this field cannot be set when spec.os.name is windows.
-- `run_as_non_root` (Boolean) Indicates that the container must run as a non-root user. If true, the Kubelet will validate the image at runtime to ensure that it does not run as UID 0 (root) and fail to start the container if it does. If unset or false, no such validation will be performed. May also be set in SecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
-- `run_as_user` (Number) The UID to run the entrypoint of the container process. Defaults to user specified in image metadata if unspecified. May also be set in SecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence for that container. Note that this field cannot be set when spec.os.name is windows.
-- `se_linux_options` (Attributes) The SELinux context to be applied to all containers. If unspecified, the container runtime will allocate a random SELinux context for each container. May also be set in SecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence for that container. Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--integration--template--spec--security_context--se_linux_options))
-- `seccomp_profile` (Attributes) The seccomp options to use by the containers in this pod. Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--integration--template--spec--security_context--seccomp_profile))
-- `supplemental_groups` (List of String) A list of groups applied to the first process run in each container, in addition to the container's primary GID, the fsGroup (if specified), and group memberships defined in the container image for the uid of the container process. If unspecified, no additional groups are added to any container. Note that group memberships defined in the container image for the uid of the container process are still effective, even if they are not included in this list. Note that this field cannot be set when spec.os.name is windows.
-- `sysctls` (Attributes List) Sysctls hold a list of namespaced sysctls used for the pod. Pods with unsupported sysctls (by the container runtime) might fail to launch. Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--integration--template--spec--security_context--sysctls))
-- `windows_options` (Attributes) The Windows specific settings applied to all containers. If unspecified, the options within a container's SecurityContext will be used. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence. Note that this field cannot be set when spec.os.name is linux. (see [below for nested schema](#nestedatt--spec--integration--template--spec--security_context--windows_options))
+- `fs_group` (Number) A special supplemental group that applies to all containers in a pod.Some volume types allow the Kubelet to change the ownership of that volumeto be owned by the pod:1. The owning GID will be the FSGroup2. The setgid bit is set (new files created in the volume will be owned by FSGroup)3. The permission bits are OR'd with rw-rw----If unset, the Kubelet will not modify the ownership and permissions of any volume.Note that this field cannot be set when spec.os.name is windows.
+- `fs_group_change_policy` (String) fsGroupChangePolicy defines behavior of changing ownership and permission of the volumebefore being exposed inside Pod. This field will only apply tovolume types which support fsGroup based ownership(and permissions).It will have no effect on ephemeral volume types such as: secret, configmapsand emptydir.Valid values are 'OnRootMismatch' and 'Always'. If not specified, 'Always' is used.Note that this field cannot be set when spec.os.name is windows.
+- `run_as_group` (Number) The GID to run the entrypoint of the container process.Uses runtime default if unset.May also be set in SecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedencefor that container.Note that this field cannot be set when spec.os.name is windows.
+- `run_as_non_root` (Boolean) Indicates that the container must run as a non-root user.If true, the Kubelet will validate the image at runtime to ensure that itdoes not run as UID 0 (root) and fail to start the container if it does.If unset or false, no such validation will be performed.May also be set in SecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.
+- `run_as_user` (Number) The UID to run the entrypoint of the container process.Defaults to user specified in image metadata if unspecified.May also be set in SecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedencefor that container.Note that this field cannot be set when spec.os.name is windows.
+- `se_linux_options` (Attributes) The SELinux context to be applied to all containers.If unspecified, the container runtime will allocate a random SELinux context for eachcontainer. May also be set in SecurityContext. If set inboth SecurityContext and PodSecurityContext, the value specified in SecurityContexttakes precedence for that container.Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--integration--template--spec--security_context--se_linux_options))
+- `seccomp_profile` (Attributes) The seccomp options to use by the containers in this pod.Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--integration--template--spec--security_context--seccomp_profile))
+- `supplemental_groups` (List of String) A list of groups applied to the first process run in each container, in additionto the container's primary GID, the fsGroup (if specified), and group membershipsdefined in the container image for the uid of the container process. If unspecified,no additional groups are added to any container. Note that group membershipsdefined in the container image for the uid of the container process are still effective,even if they are not included in this list.Note that this field cannot be set when spec.os.name is windows.
+- `sysctls` (Attributes List) Sysctls hold a list of namespaced sysctls used for the pod. Pods with unsupportedsysctls (by the container runtime) might fail to launch.Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--integration--template--spec--security_context--sysctls))
+- `windows_options` (Attributes) The Windows specific settings applied to all containers.If unspecified, the options within a container's SecurityContext will be used.If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.Note that this field cannot be set when spec.os.name is linux. (see [below for nested schema](#nestedatt--spec--integration--template--spec--security_context--windows_options))
### Nested Schema for `spec.integration.template.spec.security_context.se_linux_options`
@@ -2042,11 +2042,11 @@ Optional:
Required:
-- `type` (String) type indicates which kind of seccomp profile will be applied. Valid options are: Localhost - a profile defined in a file on the node should be used. RuntimeDefault - the container runtime default profile should be used. Unconfined - no profile should be applied.
+- `type` (String) type indicates which kind of seccomp profile will be applied.Valid options are:Localhost - a profile defined in a file on the node should be used.RuntimeDefault - the container runtime default profile should be used.Unconfined - no profile should be applied.
Optional:
-- `localhost_profile` (String) localhostProfile indicates a profile defined in a file on the node should be used. The profile must be preconfigured on the node to work. Must be a descending path, relative to the kubelet's configured seccomp profile location. Must be set if type is 'Localhost'. Must NOT be set for any other type.
+- `localhost_profile` (String) localhostProfile indicates a profile defined in a file on the node should be used.The profile must be preconfigured on the node to work.Must be a descending path, relative to the kubelet's configured seccomp profile location.Must be set if type is 'Localhost'. Must NOT be set for any other type.
@@ -2063,10 +2063,10 @@ Required:
Optional:
-- `gmsa_credential_spec` (String) GMSACredentialSpec is where the GMSA admission webhook (https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of the GMSA credential spec named by the GMSACredentialSpecName field.
+- `gmsa_credential_spec` (String) GMSACredentialSpec is where the GMSA admission webhook(https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of theGMSA credential spec named by the GMSACredentialSpecName field.
- `gmsa_credential_spec_name` (String) GMSACredentialSpecName is the name of the GMSA credential spec to use.
-- `host_process` (Boolean) HostProcess determines if a container should be run as a 'Host Process' container. All of a Pod's containers must have the same effective HostProcess value (it is not allowed to have a mix of HostProcess containers and non-HostProcess containers). In addition, if HostProcess is true then HostNetwork must also be set to true.
-- `run_as_user_name` (String) The UserName in Windows to run the entrypoint of the container process. Defaults to the user specified in image metadata if unspecified. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
+- `host_process` (Boolean) HostProcess determines if a container should be run as a 'Host Process' container.All of a Pod's containers must have the same effective HostProcess value(it is not allowed to have a mix of HostProcess containers and non-HostProcess containers).In addition, if HostProcess is true then HostNetwork must also be set to true.
+- `run_as_user_name` (String) The UserName in Windows to run the entrypoint of the container process.Defaults to the user specified in image metadata if unspecified.May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.
@@ -2075,17 +2075,17 @@ Optional:
Required:
-- `max_skew` (Number) MaxSkew describes the degree to which pods may be unevenly distributed. When 'whenUnsatisfiable=DoNotSchedule', it is the maximum permitted difference between the number of matching pods in the target topology and the global minimum. The global minimum is the minimum number of matching pods in an eligible domain or zero if the number of eligible domains is less than MinDomains. For example, in a 3-zone cluster, MaxSkew is set to 1, and pods with the same labelSelector spread as 2/2/1: In this case, the global minimum is 1. | zone1 | zone2 | zone3 | | P P | P P | P | - if MaxSkew is 1, incoming pod can only be scheduled to zone3 to become 2/2/2; scheduling it onto zone1(zone2) would make the ActualSkew(3-1) on zone1(zone2) violate MaxSkew(1). - if MaxSkew is 2, incoming pod can be scheduled onto any zone. When 'whenUnsatisfiable=ScheduleAnyway', it is used to give higher precedence to topologies that satisfy it. It's a required field. Default value is 1 and 0 is not allowed.
-- `topology_key` (String) TopologyKey is the key of node labels. Nodes that have a label with this key and identical values are considered to be in the same topology. We consider each as a 'bucket', and try to put balanced number of pods into each bucket. We define a domain as a particular instance of a topology. Also, we define an eligible domain as a domain whose nodes meet the requirements of nodeAffinityPolicy and nodeTaintsPolicy. e.g. If TopologyKey is 'kubernetes.io/hostname', each Node is a domain of that topology. And, if TopologyKey is 'topology.kubernetes.io/zone', each zone is a domain of that topology. It's a required field.
-- `when_unsatisfiable` (String) WhenUnsatisfiable indicates how to deal with a pod if it doesn't satisfy the spread constraint. - DoNotSchedule (default) tells the scheduler not to schedule it. - ScheduleAnyway tells the scheduler to schedule the pod in any location, but giving higher precedence to topologies that would help reduce the skew. A constraint is considered 'Unsatisfiable' for an incoming pod if and only if every possible node assignment for that pod would violate 'MaxSkew' on some topology. For example, in a 3-zone cluster, MaxSkew is set to 1, and pods with the same labelSelector spread as 3/1/1: | zone1 | zone2 | zone3 | | P P P | P | P | If WhenUnsatisfiable is set to DoNotSchedule, incoming pod can only be scheduled to zone2(zone3) to become 3/2/1(3/1/2) as ActualSkew(2-1) on zone2(zone3) satisfies MaxSkew(1). In other words, the cluster can still be imbalanced, but scheduler won't make it *more* imbalanced. It's a required field.
+- `max_skew` (Number) MaxSkew describes the degree to which pods may be unevenly distributed.When 'whenUnsatisfiable=DoNotSchedule', it is the maximum permitted differencebetween the number of matching pods in the target topology and the global minimum.The global minimum is the minimum number of matching pods in an eligible domainor zero if the number of eligible domains is less than MinDomains.For example, in a 3-zone cluster, MaxSkew is set to 1, and pods with the samelabelSelector spread as 2/2/1:In this case, the global minimum is 1.| zone1 | zone2 | zone3 || P P | P P | P |- if MaxSkew is 1, incoming pod can only be scheduled to zone3 to become 2/2/2;scheduling it onto zone1(zone2) would make the ActualSkew(3-1) on zone1(zone2)violate MaxSkew(1).- if MaxSkew is 2, incoming pod can be scheduled onto any zone.When 'whenUnsatisfiable=ScheduleAnyway', it is used to give higher precedenceto topologies that satisfy it.It's a required field. Default value is 1 and 0 is not allowed.
+- `topology_key` (String) TopologyKey is the key of node labels. Nodes that have a label with this keyand identical values are considered to be in the same topology.We consider each as a 'bucket', and try to put balanced numberof pods into each bucket.We define a domain as a particular instance of a topology.Also, we define an eligible domain as a domain whose nodes meet the requirements ofnodeAffinityPolicy and nodeTaintsPolicy.e.g. If TopologyKey is 'kubernetes.io/hostname', each Node is a domain of that topology.And, if TopologyKey is 'topology.kubernetes.io/zone', each zone is a domain of that topology.It's a required field.
+- `when_unsatisfiable` (String) WhenUnsatisfiable indicates how to deal with a pod if it doesn't satisfythe spread constraint.- DoNotSchedule (default) tells the scheduler not to schedule it.- ScheduleAnyway tells the scheduler to schedule the pod in any location, but giving higher precedence to topologies that would help reduce the skew.A constraint is considered 'Unsatisfiable' for an incoming podif and only if every possible node assignment for that pod would violate'MaxSkew' on some topology.For example, in a 3-zone cluster, MaxSkew is set to 1, and pods with the samelabelSelector spread as 3/1/1:| zone1 | zone2 | zone3 || P P P | P | P |If WhenUnsatisfiable is set to DoNotSchedule, incoming pod can only be scheduledto zone2(zone3) to become 3/2/1(3/1/2) as ActualSkew(2-1) on zone2(zone3) satisfiesMaxSkew(1). In other words, the cluster can still be imbalanced, but schedulerwon't make it *more* imbalanced.It's a required field.
Optional:
-- `label_selector` (Attributes) LabelSelector is used to find matching pods. Pods that match this label selector are counted to determine the number of pods in their corresponding topology domain. (see [below for nested schema](#nestedatt--spec--integration--template--spec--topology_spread_constraints--label_selector))
-- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select the pods over which spreading will be calculated. The keys are used to lookup values from the incoming pod labels, those key-value labels are ANDed with labelSelector to select the group of existing pods over which spreading will be calculated for the incoming pod. The same key is forbidden to exist in both MatchLabelKeys and LabelSelector. MatchLabelKeys cannot be set when LabelSelector isn't set. Keys that don't exist in the incoming pod labels will be ignored. A null or empty list means only match against labelSelector. This is a beta field and requires the MatchLabelKeysInPodTopologySpread feature gate to be enabled (enabled by default).
-- `min_domains` (Number) MinDomains indicates a minimum number of eligible domains. When the number of eligible domains with matching topology keys is less than minDomains, Pod Topology Spread treats 'global minimum' as 0, and then the calculation of Skew is performed. And when the number of eligible domains with matching topology keys equals or greater than minDomains, this value has no effect on scheduling. As a result, when the number of eligible domains is less than minDomains, scheduler won't schedule more than maxSkew Pods to those domains. If value is nil, the constraint behaves as if MinDomains is equal to 1. Valid values are integers greater than 0. When value is not nil, WhenUnsatisfiable must be DoNotSchedule. For example, in a 3-zone cluster, MaxSkew is set to 2, MinDomains is set to 5 and pods with the same labelSelector spread as 2/2/2: | zone1 | zone2 | zone3 | | P P | P P | P P | The number of domains is less than 5(MinDomains), so 'global minimum' is treated as 0. In this situation, new pod with the same labelSelector cannot be scheduled, because computed skew will be 3(3 - 0) if new Pod is scheduled to any of the three zones, it will violate MaxSkew. This is a beta field and requires the MinDomainsInPodTopologySpread feature gate to be enabled (enabled by default).
-- `node_affinity_policy` (String) NodeAffinityPolicy indicates how we will treat Pod's nodeAffinity/nodeSelector when calculating pod topology spread skew. Options are: - Honor: only nodes matching nodeAffinity/nodeSelector are included in the calculations. - Ignore: nodeAffinity/nodeSelector are ignored. All nodes are included in the calculations. If this value is nil, the behavior is equivalent to the Honor policy. This is a beta-level feature default enabled by the NodeInclusionPolicyInPodTopologySpread feature flag.
-- `node_taints_policy` (String) NodeTaintsPolicy indicates how we will treat node taints when calculating pod topology spread skew. Options are: - Honor: nodes without taints, along with tainted nodes for which the incoming pod has a toleration, are included. - Ignore: node taints are ignored. All nodes are included. If this value is nil, the behavior is equivalent to the Ignore policy. This is a beta-level feature default enabled by the NodeInclusionPolicyInPodTopologySpread feature flag.
+- `label_selector` (Attributes) LabelSelector is used to find matching pods.Pods that match this label selector are counted to determine the number of podsin their corresponding topology domain. (see [below for nested schema](#nestedatt--spec--integration--template--spec--topology_spread_constraints--label_selector))
+- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select the pods over whichspreading will be calculated. The keys are used to lookup values from theincoming pod labels, those key-value labels are ANDed with labelSelectorto select the group of existing pods over which spreading will be calculatedfor the incoming pod. The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.MatchLabelKeys cannot be set when LabelSelector isn't set.Keys that don't exist in the incoming pod labels willbe ignored. A null or empty list means only match against labelSelector.This is a beta field and requires the MatchLabelKeysInPodTopologySpread feature gate to be enabled (enabled by default).
+- `min_domains` (Number) MinDomains indicates a minimum number of eligible domains.When the number of eligible domains with matching topology keys is less than minDomains,Pod Topology Spread treats 'global minimum' as 0, and then the calculation of Skew is performed.And when the number of eligible domains with matching topology keys equals or greater than minDomains,this value has no effect on scheduling.As a result, when the number of eligible domains is less than minDomains,scheduler won't schedule more than maxSkew Pods to those domains.If value is nil, the constraint behaves as if MinDomains is equal to 1.Valid values are integers greater than 0.When value is not nil, WhenUnsatisfiable must be DoNotSchedule.For example, in a 3-zone cluster, MaxSkew is set to 2, MinDomains is set to 5 and pods with the samelabelSelector spread as 2/2/2:| zone1 | zone2 | zone3 || P P | P P | P P |The number of domains is less than 5(MinDomains), so 'global minimum' is treated as 0.In this situation, new pod with the same labelSelector cannot be scheduled,because computed skew will be 3(3 - 0) if new Pod is scheduled to any of the three zones,it will violate MaxSkew.This is a beta field and requires the MinDomainsInPodTopologySpread feature gate to be enabled (enabled by default).
+- `node_affinity_policy` (String) NodeAffinityPolicy indicates how we will treat Pod's nodeAffinity/nodeSelectorwhen calculating pod topology spread skew. Options are:- Honor: only nodes matching nodeAffinity/nodeSelector are included in the calculations.- Ignore: nodeAffinity/nodeSelector are ignored. All nodes are included in the calculations.If this value is nil, the behavior is equivalent to the Honor policy.This is a beta-level feature default enabled by the NodeInclusionPolicyInPodTopologySpread feature flag.
+- `node_taints_policy` (String) NodeTaintsPolicy indicates how we will treat node taints when calculatingpod topology spread skew. Options are:- Honor: nodes without taints, along with tainted nodes for which the incoming podhas a toleration, are included.- Ignore: node taints are ignored. All nodes are included.If this value is nil, the behavior is equivalent to the Ignore policy.This is a beta-level feature default enabled by the NodeInclusionPolicyInPodTopologySpread feature flag.
### Nested Schema for `spec.integration.template.spec.topology_spread_constraints.label_selector`
@@ -2093,7 +2093,7 @@ Optional:
Optional:
- `match_expressions` (Attributes List) matchExpressions is a list of label selector requirements. The requirements are ANDed. (see [below for nested schema](#nestedatt--spec--integration--template--spec--topology_spread_constraints--label_selector--match_expressions))
-- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is 'key', the operator is 'In', and the values array contains only 'value'. The requirements are ANDed.
+- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.
### Nested Schema for `spec.integration.template.spec.topology_spread_constraints.label_selector.match_expressions`
@@ -2101,11 +2101,11 @@ Optional:
Required:
- `key` (String) key is the label key that the selector applies to.
-- `operator` (String) operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist.
+- `operator` (String) operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.
Optional:
-- `values` (List of String) values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch.
+- `values` (List of String) values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.
@@ -2115,37 +2115,37 @@ Optional:
Required:
-- `name` (String) name of the volume. Must be a DNS_LABEL and unique within the pod. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+- `name` (String) name of the volume.Must be a DNS_LABEL and unique within the pod.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Optional:
-- `aws_elastic_block_store` (Attributes) awsElasticBlockStore represents an AWS Disk resource that is attached to a kubelet's host machine and then exposed to the pod. More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--aws_elastic_block_store))
+- `aws_elastic_block_store` (Attributes) awsElasticBlockStore represents an AWS Disk resource that is attached to akubelet's host machine and then exposed to the pod.More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--aws_elastic_block_store))
- `azure_disk` (Attributes) azureDisk represents an Azure Data Disk mount on the host and bind mount to the pod. (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--azure_disk))
- `azure_file` (Attributes) azureFile represents an Azure File Service mount on the host and bind mount to the pod. (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--azure_file))
- `cephfs` (Attributes) cephFS represents a Ceph FS mount on the host that shares a pod's lifetime (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--cephfs))
-- `cinder` (Attributes) cinder represents a cinder volume attached and mounted on kubelets host machine. More info: https://examples.k8s.io/mysql-cinder-pd/README.md (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--cinder))
+- `cinder` (Attributes) cinder represents a cinder volume attached and mounted on kubelets host machine.More info: https://examples.k8s.io/mysql-cinder-pd/README.md (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--cinder))
- `config_map` (Attributes) configMap represents a configMap that should populate this volume (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--config_map))
- `csi` (Attributes) csi (Container Storage Interface) represents ephemeral storage that is handled by certain external CSI drivers (Beta feature). (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--csi))
- `downward_api` (Attributes) downwardAPI represents downward API about the pod that should populate this volume (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--downward_api))
-- `empty_dir` (Attributes) emptyDir represents a temporary directory that shares a pod's lifetime. More info: https://kubernetes.io/docs/concepts/storage/volumes#emptydir (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--empty_dir))
-- `ephemeral` (Attributes) ephemeral represents a volume that is handled by a cluster storage driver. The volume's lifecycle is tied to the pod that defines it - it will be created before the pod starts, and deleted when the pod is removed. Use this if: a) the volume is only needed while the pod runs, b) features of normal volumes like restoring from snapshot or capacity tracking are needed, c) the storage driver is specified through a storage class, and d) the storage driver supports dynamic volume provisioning through a PersistentVolumeClaim (see EphemeralVolumeSource for more information on the connection between this volume type and PersistentVolumeClaim). Use PersistentVolumeClaim or one of the vendor-specific APIs for volumes that persist for longer than the lifecycle of an individual pod. Use CSI for light-weight local ephemeral volumes if the CSI driver is meant to be used that way - see the documentation of the driver for more information. A pod can use both types of ephemeral volumes and persistent volumes at the same time. (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--ephemeral))
+- `empty_dir` (Attributes) emptyDir represents a temporary directory that shares a pod's lifetime.More info: https://kubernetes.io/docs/concepts/storage/volumes#emptydir (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--empty_dir))
+- `ephemeral` (Attributes) ephemeral represents a volume that is handled by a cluster storage driver.The volume's lifecycle is tied to the pod that defines it - it will be created before the pod starts,and deleted when the pod is removed.Use this if:a) the volume is only needed while the pod runs,b) features of normal volumes like restoring from snapshot or capacity tracking are needed,c) the storage driver is specified through a storage class, andd) the storage driver supports dynamic volume provisioning through a PersistentVolumeClaim (see EphemeralVolumeSource for more information on the connection between this volume type and PersistentVolumeClaim).Use PersistentVolumeClaim or one of the vendor-specificAPIs for volumes that persist for longer than the lifecycleof an individual pod.Use CSI for light-weight local ephemeral volumes if the CSI driver is meant tobe used that way - see the documentation of the driver formore information.A pod can use both types of ephemeral volumes andpersistent volumes at the same time. (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--ephemeral))
- `fc` (Attributes) fc represents a Fibre Channel resource that is attached to a kubelet's host machine and then exposed to the pod. (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--fc))
-- `flex_volume` (Attributes) flexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin. (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--flex_volume))
+- `flex_volume` (Attributes) flexVolume represents a generic volume resource that isprovisioned/attached using an exec based plugin. (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--flex_volume))
- `flocker` (Attributes) flocker represents a Flocker volume attached to a kubelet's host machine. This depends on the Flocker control service being running (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--flocker))
-- `gce_persistent_disk` (Attributes) gcePersistentDisk represents a GCE Disk resource that is attached to a kubelet's host machine and then exposed to the pod. More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--gce_persistent_disk))
-- `git_repo` (Attributes) gitRepo represents a git repository at a particular revision. DEPRECATED: GitRepo is deprecated. To provision a container with a git repo, mount an EmptyDir into an InitContainer that clones the repo using git, then mount the EmptyDir into the Pod's container. (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--git_repo))
-- `glusterfs` (Attributes) glusterfs represents a Glusterfs mount on the host that shares a pod's lifetime. More info: https://examples.k8s.io/volumes/glusterfs/README.md (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--glusterfs))
-- `host_path` (Attributes) hostPath represents a pre-existing file or directory on the host machine that is directly exposed to the container. This is generally used for system agents or other privileged things that are allowed to see the host machine. Most containers will NOT need this. More info: https://kubernetes.io/docs/concepts/storage/volumes#hostpath --- TODO(jonesdl) We need to restrict who can use host directory mounts and who can/can not mount host directories as read/write. (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--host_path))
-- `iscsi` (Attributes) iscsi represents an ISCSI Disk resource that is attached to a kubelet's host machine and then exposed to the pod. More info: https://examples.k8s.io/volumes/iscsi/README.md (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--iscsi))
-- `nfs` (Attributes) nfs represents an NFS mount on the host that shares a pod's lifetime More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--nfs))
-- `persistent_volume_claim` (Attributes) persistentVolumeClaimVolumeSource represents a reference to a PersistentVolumeClaim in the same namespace. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--persistent_volume_claim))
+- `gce_persistent_disk` (Attributes) gcePersistentDisk represents a GCE Disk resource that is attached to akubelet's host machine and then exposed to the pod.More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--gce_persistent_disk))
+- `git_repo` (Attributes) gitRepo represents a git repository at a particular revision.DEPRECATED: GitRepo is deprecated. To provision a container with a git repo, mount anEmptyDir into an InitContainer that clones the repo using git, then mount the EmptyDirinto the Pod's container. (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--git_repo))
+- `glusterfs` (Attributes) glusterfs represents a Glusterfs mount on the host that shares a pod's lifetime.More info: https://examples.k8s.io/volumes/glusterfs/README.md (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--glusterfs))
+- `host_path` (Attributes) hostPath represents a pre-existing file or directory on the hostmachine that is directly exposed to the container. This is generallyused for system agents or other privileged things that are allowedto see the host machine. Most containers will NOT need this.More info: https://kubernetes.io/docs/concepts/storage/volumes#hostpath---TODO(jonesdl) We need to restrict who can use host directory mounts and who can/can notmount host directories as read/write. (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--host_path))
+- `iscsi` (Attributes) iscsi represents an ISCSI Disk resource that is attached to akubelet's host machine and then exposed to the pod.More info: https://examples.k8s.io/volumes/iscsi/README.md (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--iscsi))
+- `nfs` (Attributes) nfs represents an NFS mount on the host that shares a pod's lifetimeMore info: https://kubernetes.io/docs/concepts/storage/volumes#nfs (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--nfs))
+- `persistent_volume_claim` (Attributes) persistentVolumeClaimVolumeSource represents a reference to aPersistentVolumeClaim in the same namespace.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--persistent_volume_claim))
- `photon_persistent_disk` (Attributes) photonPersistentDisk represents a PhotonController persistent disk attached and mounted on kubelets host machine (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--photon_persistent_disk))
- `portworx_volume` (Attributes) portworxVolume represents a portworx volume attached and mounted on kubelets host machine (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--portworx_volume))
- `projected` (Attributes) projected items for all in one resources secrets, configmaps, and downward API (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--projected))
- `quobyte` (Attributes) quobyte represents a Quobyte mount on the host that shares a pod's lifetime (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--quobyte))
-- `rbd` (Attributes) rbd represents a Rados Block Device mount on the host that shares a pod's lifetime. More info: https://examples.k8s.io/volumes/rbd/README.md (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--rbd))
+- `rbd` (Attributes) rbd represents a Rados Block Device mount on the host that shares a pod's lifetime.More info: https://examples.k8s.io/volumes/rbd/README.md (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--rbd))
- `scale_io` (Attributes) scaleIO represents a ScaleIO persistent volume attached and mounted on Kubernetes nodes. (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--scale_io))
-- `secret` (Attributes) secret represents a secret that should populate this volume. More info: https://kubernetes.io/docs/concepts/storage/volumes#secret (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--secret))
+- `secret` (Attributes) secret represents a secret that should populate this volume.More info: https://kubernetes.io/docs/concepts/storage/volumes#secret (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--secret))
- `storageos` (Attributes) storageOS represents a StorageOS volume attached and mounted on Kubernetes nodes. (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--storageos))
- `vsphere_volume` (Attributes) vsphereVolume represents a vSphere volume attached and mounted on kubelets host machine (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--vsphere_volume))
@@ -2154,13 +2154,13 @@ Optional:
Required:
-- `volume_id` (String) volumeID is unique ID of the persistent disk resource in AWS (Amazon EBS volume). More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore
+- `volume_id` (String) volumeID is unique ID of the persistent disk resource in AWS (Amazon EBS volume).More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore
Optional:
-- `fs_type` (String) fsType is the filesystem type of the volume that you want to mount. Tip: Ensure that the filesystem type is supported by the host operating system. Examples: 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified. More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore TODO: how do we prevent errors in the filesystem from compromising the machine
-- `partition` (Number) partition is the partition in the volume that you want to mount. If omitted, the default is to mount by volume name. Examples: For volume /dev/sda1, you specify the partition as '1'. Similarly, the volume partition for /dev/sda is '0' (or you can leave the property empty).
-- `read_only` (Boolean) readOnly value true will force the readOnly setting in VolumeMounts. More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore
+- `fs_type` (String) fsType is the filesystem type of the volume that you want to mount.Tip: Ensure that the filesystem type is supported by the host operating system.Examples: 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified.More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstoreTODO: how do we prevent errors in the filesystem from compromising the machine
+- `partition` (Number) partition is the partition in the volume that you want to mount.If omitted, the default is to mount by volume name.Examples: For volume /dev/sda1, you specify the partition as '1'.Similarly, the volume partition for /dev/sda is '0' (or you can leave the property empty).
+- `read_only` (Boolean) readOnly value true will force the readOnly setting in VolumeMounts.More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore
@@ -2174,9 +2174,9 @@ Required:
Optional:
- `caching_mode` (String) cachingMode is the Host Caching mode: None, Read Only, Read Write.
-- `fs_type` (String) fsType is Filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified.
+- `fs_type` (String) fsType is Filesystem type to mount.Must be a filesystem type supported by the host operating system.Ex. 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified.
- `kind` (String) kind expected values are Shared: multiple blob disks per storage account Dedicated: single blob disk per storage account Managed: azure managed data disk (only in managed availability set). defaults to shared
-- `read_only` (Boolean) readOnly Defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.
+- `read_only` (Boolean) readOnly Defaults to false (read/write). ReadOnly here will forcethe ReadOnly setting in VolumeMounts.
@@ -2189,7 +2189,7 @@ Required:
Optional:
-- `read_only` (Boolean) readOnly defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.
+- `read_only` (Boolean) readOnly defaults to false (read/write). ReadOnly here will forcethe ReadOnly setting in VolumeMounts.
@@ -2197,22 +2197,22 @@ Optional:
Required:
-- `monitors` (List of String) monitors is Required: Monitors is a collection of Ceph monitors More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it
+- `monitors` (List of String) monitors is Required: Monitors is a collection of Ceph monitorsMore info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it
Optional:
- `path` (String) path is Optional: Used as the mounted root, rather than the full Ceph tree, default is /
-- `read_only` (Boolean) readOnly is Optional: Defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts. More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it
-- `secret_file` (String) secretFile is Optional: SecretFile is the path to key ring for User, default is /etc/ceph/user.secret More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it
-- `secret_ref` (Attributes) secretRef is Optional: SecretRef is reference to the authentication secret for User, default is empty. More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--cephfs--secret_ref))
-- `user` (String) user is optional: User is the rados user name, default is admin More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it
+- `read_only` (Boolean) readOnly is Optional: Defaults to false (read/write). ReadOnly here will forcethe ReadOnly setting in VolumeMounts.More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it
+- `secret_file` (String) secretFile is Optional: SecretFile is the path to key ring for User, default is /etc/ceph/user.secretMore info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it
+- `secret_ref` (Attributes) secretRef is Optional: SecretRef is reference to the authentication secret for User, default is empty.More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--cephfs--secret_ref))
+- `user` (String) user is optional: User is the rados user name, default is adminMore info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it
### Nested Schema for `spec.integration.template.spec.volumes.cephfs.secret_ref`
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
@@ -2221,20 +2221,20 @@ Optional:
Required:
-- `volume_id` (String) volumeID used to identify the volume in cinder. More info: https://examples.k8s.io/mysql-cinder-pd/README.md
+- `volume_id` (String) volumeID used to identify the volume in cinder.More info: https://examples.k8s.io/mysql-cinder-pd/README.md
Optional:
-- `fs_type` (String) fsType is the filesystem type to mount. Must be a filesystem type supported by the host operating system. Examples: 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified. More info: https://examples.k8s.io/mysql-cinder-pd/README.md
-- `read_only` (Boolean) readOnly defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts. More info: https://examples.k8s.io/mysql-cinder-pd/README.md
-- `secret_ref` (Attributes) secretRef is optional: points to a secret object containing parameters used to connect to OpenStack. (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--cinder--secret_ref))
+- `fs_type` (String) fsType is the filesystem type to mount.Must be a filesystem type supported by the host operating system.Examples: 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified.More info: https://examples.k8s.io/mysql-cinder-pd/README.md
+- `read_only` (Boolean) readOnly defaults to false (read/write). ReadOnly here will forcethe ReadOnly setting in VolumeMounts.More info: https://examples.k8s.io/mysql-cinder-pd/README.md
+- `secret_ref` (Attributes) secretRef is optional: points to a secret object containing parameters used to connectto OpenStack. (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--cinder--secret_ref))
### Nested Schema for `spec.integration.template.spec.volumes.cinder.secret_ref`
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
@@ -2243,9 +2243,9 @@ Optional:
Optional:
-- `default_mode` (Number) defaultMode is optional: mode bits used to set permissions on created files by default. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. Defaults to 0644. Directories within the path are not affected by this setting. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
-- `items` (Attributes List) items if unspecified, each key-value pair in the Data field of the referenced ConfigMap will be projected into the volume as a file whose name is the key and content is the value. If specified, the listed keys will be projected into the specified paths, and unlisted keys will not be present. If a key is specified which is not present in the ConfigMap, the volume setup will error unless it is marked optional. Paths must be relative and may not contain the '..' path or start with '..'. (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--config_map--items))
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `default_mode` (Number) defaultMode is optional: mode bits used to set permissions on created files by default.Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511.YAML accepts both octal and decimal values, JSON requires decimal values for mode bits.Defaults to 0644.Directories within the path are not affected by this setting.This might be in conflict with other options that affect the filemode, like fsGroup, and the result can be other mode bits set.
+- `items` (Attributes List) items if unspecified, each key-value pair in the Data field of the referencedConfigMap will be projected into the volume as a file whose name is thekey and content is the value. If specified, the listed keys will beprojected into the specified paths, and unlisted keys will not bepresent. If a key is specified which is not present in the ConfigMap,the volume setup will error unless it is marked optional. Paths must berelative and may not contain the '..' path or start with '..'. (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--config_map--items))
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
- `optional` (Boolean) optional specify whether the ConfigMap or its keys must be defined
@@ -2254,11 +2254,11 @@ Optional:
Required:
- `key` (String) key is the key to project.
-- `path` (String) path is the relative path of the file to map the key to. May not be an absolute path. May not contain the path element '..'. May not start with the string '..'.
+- `path` (String) path is the relative path of the file to map the key to.May not be an absolute path.May not contain the path element '..'.May not start with the string '..'.
Optional:
-- `mode` (Number) mode is Optional: mode bits used to set permissions on this file. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. If not specified, the volume defaultMode will be used. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
+- `mode` (Number) mode is Optional: mode bits used to set permissions on this file.Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511.YAML accepts both octal and decimal values, JSON requires decimal values for mode bits.If not specified, the volume defaultMode will be used.This might be in conflict with other options that affect the filemode, like fsGroup, and the result can be other mode bits set.
@@ -2267,21 +2267,21 @@ Optional:
Required:
-- `driver` (String) driver is the name of the CSI driver that handles this volume. Consult with your admin for the correct name as registered in the cluster.
+- `driver` (String) driver is the name of the CSI driver that handles this volume.Consult with your admin for the correct name as registered in the cluster.
Optional:
-- `fs_type` (String) fsType to mount. Ex. 'ext4', 'xfs', 'ntfs'. If not provided, the empty value is passed to the associated CSI driver which will determine the default filesystem to apply.
-- `node_publish_secret_ref` (Attributes) nodePublishSecretRef is a reference to the secret object containing sensitive information to pass to the CSI driver to complete the CSI NodePublishVolume and NodeUnpublishVolume calls. This field is optional, and may be empty if no secret is required. If the secret object contains more than one secret, all secret references are passed. (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--csi--node_publish_secret_ref))
-- `read_only` (Boolean) readOnly specifies a read-only configuration for the volume. Defaults to false (read/write).
-- `volume_attributes` (Map of String) volumeAttributes stores driver-specific properties that are passed to the CSI driver. Consult your driver's documentation for supported values.
+- `fs_type` (String) fsType to mount. Ex. 'ext4', 'xfs', 'ntfs'.If not provided, the empty value is passed to the associated CSI driverwhich will determine the default filesystem to apply.
+- `node_publish_secret_ref` (Attributes) nodePublishSecretRef is a reference to the secret object containingsensitive information to pass to the CSI driver to complete the CSINodePublishVolume and NodeUnpublishVolume calls.This field is optional, and may be empty if no secret is required. If thesecret object contains more than one secret, all secret references are passed. (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--csi--node_publish_secret_ref))
+- `read_only` (Boolean) readOnly specifies a read-only configuration for the volume.Defaults to false (read/write).
+- `volume_attributes` (Map of String) volumeAttributes stores driver-specific properties that are passed to the CSIdriver. Consult your driver's documentation for supported values.
### Nested Schema for `spec.integration.template.spec.volumes.csi.node_publish_secret_ref`
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
@@ -2290,7 +2290,7 @@ Optional:
Optional:
-- `default_mode` (Number) Optional: mode bits to use on created files by default. Must be a Optional: mode bits used to set permissions on created files by default. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. Defaults to 0644. Directories within the path are not affected by this setting. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
+- `default_mode` (Number) Optional: mode bits to use on created files by default. Must be aOptional: mode bits used to set permissions on created files by default.Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511.YAML accepts both octal and decimal values, JSON requires decimal values for mode bits.Defaults to 0644.Directories within the path are not affected by this setting.This might be in conflict with other options that affect the filemode, like fsGroup, and the result can be other mode bits set.
- `items` (Attributes List) Items is a list of downward API volume file (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--downward_api--items))
@@ -2303,8 +2303,8 @@ Required:
Optional:
- `field_ref` (Attributes) Required: Selects a field of the pod: only annotations, labels, name and namespace are supported. (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--downward_api--items--field_ref))
-- `mode` (Number) Optional: mode bits used to set permissions on this file, must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. If not specified, the volume defaultMode will be used. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
-- `resource_field_ref` (Attributes) Selects a resource of the container: only resources limits and requests (limits.cpu, limits.memory, requests.cpu and requests.memory) are currently supported. (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--downward_api--items--resource_field_ref))
+- `mode` (Number) Optional: mode bits used to set permissions on this file, must be an octal valuebetween 0000 and 0777 or a decimal value between 0 and 511.YAML accepts both octal and decimal values, JSON requires decimal values for mode bits.If not specified, the volume defaultMode will be used.This might be in conflict with other options that affect the filemode, like fsGroup, and the result can be other mode bits set.
+- `resource_field_ref` (Attributes) Selects a resource of the container: only resources limits and requests(limits.cpu, limits.memory, requests.cpu and requests.memory) are currently supported. (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--downward_api--items--resource_field_ref))
### Nested Schema for `spec.integration.template.spec.volumes.downward_api.items.field_ref`
@@ -2338,8 +2338,8 @@ Optional:
Optional:
-- `medium` (String) medium represents what type of storage medium should back this directory. The default is '' which means to use the node's default medium. Must be an empty string (default) or Memory. More info: https://kubernetes.io/docs/concepts/storage/volumes#emptydir
-- `size_limit` (String) sizeLimit is the total amount of local storage required for this EmptyDir volume. The size limit is also applicable for memory medium. The maximum usage on memory medium EmptyDir would be the minimum value between the SizeLimit specified here and the sum of memory limits of all containers in a pod. The default is nil which means that the limit is undefined. More info: https://kubernetes.io/docs/concepts/storage/volumes#emptydir
+- `medium` (String) medium represents what type of storage medium should back this directory.The default is '' which means to use the node's default medium.Must be an empty string (default) or Memory.More info: https://kubernetes.io/docs/concepts/storage/volumes#emptydir
+- `size_limit` (String) sizeLimit is the total amount of local storage required for this EmptyDir volume.The size limit is also applicable for memory medium.The maximum usage on memory medium EmptyDir would be the minimum value betweenthe SizeLimit specified here and the sum of memory limits of all containers in a pod.The default is nil which means that the limit is undefined.More info: https://kubernetes.io/docs/concepts/storage/volumes#emptydir
@@ -2347,32 +2347,32 @@ Optional:
Optional:
-- `volume_claim_template` (Attributes) Will be used to create a stand-alone PVC to provision the volume. The pod in which this EphemeralVolumeSource is embedded will be the owner of the PVC, i.e. the PVC will be deleted together with the pod. The name of the PVC will be '-' where '' is the name from the 'PodSpec.Volumes' array entry. Pod validation will reject the pod if the concatenated name is not valid for a PVC (for example, too long). An existing PVC with that name that is not owned by the pod will *not* be used for the pod to avoid using an unrelated volume by mistake. Starting the pod is then blocked until the unrelated PVC is removed. If such a pre-created PVC is meant to be used by the pod, the PVC has to updated with an owner reference to the pod once the pod exists. Normally this should not be necessary, but it may be useful when manually reconstructing a broken cluster. This field is read-only and no changes will be made by Kubernetes to the PVC after it has been created. Required, must not be nil. (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--ephemeral--volume_claim_template))
+- `volume_claim_template` (Attributes) Will be used to create a stand-alone PVC to provision the volume.The pod in which this EphemeralVolumeSource is embedded will be theowner of the PVC, i.e. the PVC will be deleted together with thepod. The name of the PVC will be '-' where'' is the name from the 'PodSpec.Volumes' arrayentry. Pod validation will reject the pod if the concatenated nameis not valid for a PVC (for example, too long).An existing PVC with that name that is not owned by the podwill *not* be used for the pod to avoid using an unrelatedvolume by mistake. Starting the pod is then blocked untilthe unrelated PVC is removed. If such a pre-created PVC ismeant to be used by the pod, the PVC has to updated with anowner reference to the pod once the pod exists. Normallythis should not be necessary, but it may be useful whenmanually reconstructing a broken cluster.This field is read-only and no changes will be made by Kubernetesto the PVC after it has been created.Required, must not be nil. (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--ephemeral--volume_claim_template))
### Nested Schema for `spec.integration.template.spec.volumes.ephemeral.volume_claim_template`
Required:
-- `spec` (Attributes) The specification for the PersistentVolumeClaim. The entire content is copied unchanged into the PVC that gets created from this template. The same fields as in a PersistentVolumeClaim are also valid here. (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--ephemeral--volume_claim_template--spec))
+- `spec` (Attributes) The specification for the PersistentVolumeClaim. The entire content iscopied unchanged into the PVC that gets created from thistemplate. The same fields as in a PersistentVolumeClaimare also valid here. (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--ephemeral--volume_claim_template--spec))
Optional:
-- `metadata` (Map of String) May contain labels and annotations that will be copied into the PVC when creating it. No other fields are allowed and will be rejected during validation.
+- `metadata` (Map of String) May contain labels and annotations that will be copied into the PVCwhen creating it. No other fields are allowed and will be rejected duringvalidation.
### Nested Schema for `spec.integration.template.spec.volumes.ephemeral.volume_claim_template.spec`
Optional:
-- `access_modes` (List of String) accessModes contains the desired access modes the volume should have. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#access-modes-1
-- `data_source` (Attributes) dataSource field can be used to specify either: * An existing VolumeSnapshot object (snapshot.storage.k8s.io/VolumeSnapshot) * An existing PVC (PersistentVolumeClaim) If the provisioner or an external controller can support the specified data source, it will create a new volume based on the contents of the specified data source. When the AnyVolumeDataSource feature gate is enabled, dataSource contents will be copied to dataSourceRef, and dataSourceRef contents will be copied to dataSource when dataSourceRef.namespace is not specified. If the namespace is specified, then dataSourceRef will not be copied to dataSource. (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--ephemeral--volume_claim_template--spec--data_source))
-- `data_source_ref` (Attributes) dataSourceRef specifies the object from which to populate the volume with data, if a non-empty volume is desired. This may be any object from a non-empty API group (non core object) or a PersistentVolumeClaim object. When this field is specified, volume binding will only succeed if the type of the specified object matches some installed volume populator or dynamic provisioner. This field will replace the functionality of the dataSource field and as such if both fields are non-empty, they must have the same value. For backwards compatibility, when namespace isn't specified in dataSourceRef, both fields (dataSource and dataSourceRef) will be set to the same value automatically if one of them is empty and the other is non-empty. When namespace is specified in dataSourceRef, dataSource isn't set to the same value and must be empty. There are three important differences between dataSource and dataSourceRef: * While dataSource only allows two specific types of objects, dataSourceRef allows any non-core object, as well as PersistentVolumeClaim objects. * While dataSource ignores disallowed values (dropping them), dataSourceRef preserves all values, and generates an error if a disallowed value is specified. * While dataSource only allows local objects, dataSourceRef allows objects in any namespaces. (Beta) Using this field requires the AnyVolumeDataSource feature gate to be enabled. (Alpha) Using the namespace field of dataSourceRef requires the CrossNamespaceVolumeDataSource feature gate to be enabled. (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--ephemeral--volume_claim_template--spec--data_source_ref))
-- `resources` (Attributes) resources represents the minimum resources the volume should have. If RecoverVolumeExpansionFailure feature is enabled users are allowed to specify resource requirements that are lower than previous value but must still be higher than capacity recorded in the status field of the claim. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--ephemeral--volume_claim_template--spec--resources))
+- `access_modes` (List of String) accessModes contains the desired access modes the volume should have.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#access-modes-1
+- `data_source` (Attributes) dataSource field can be used to specify either:* An existing VolumeSnapshot object (snapshot.storage.k8s.io/VolumeSnapshot)* An existing PVC (PersistentVolumeClaim)If the provisioner or an external controller can support the specified data source,it will create a new volume based on the contents of the specified data source.When the AnyVolumeDataSource feature gate is enabled, dataSource contents will be copied to dataSourceRef,and dataSourceRef contents will be copied to dataSource when dataSourceRef.namespace is not specified.If the namespace is specified, then dataSourceRef will not be copied to dataSource. (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--ephemeral--volume_claim_template--spec--data_source))
+- `data_source_ref` (Attributes) dataSourceRef specifies the object from which to populate the volume with data, if a non-emptyvolume is desired. This may be any object from a non-empty API group (noncore object) or a PersistentVolumeClaim object.When this field is specified, volume binding will only succeed if the type ofthe specified object matches some installed volume populator or dynamicprovisioner.This field will replace the functionality of the dataSource field and as suchif both fields are non-empty, they must have the same value. For backwardscompatibility, when namespace isn't specified in dataSourceRef,both fields (dataSource and dataSourceRef) will be set to the samevalue automatically if one of them is empty and the other is non-empty.When namespace is specified in dataSourceRef,dataSource isn't set to the same value and must be empty.There are three important differences between dataSource and dataSourceRef:* While dataSource only allows two specific types of objects, dataSourceRef allows any non-core object, as well as PersistentVolumeClaim objects.* While dataSource ignores disallowed values (dropping them), dataSourceRef preserves all values, and generates an error if a disallowed value is specified.* While dataSource only allows local objects, dataSourceRef allows objects in any namespaces.(Beta) Using this field requires the AnyVolumeDataSource feature gate to be enabled.(Alpha) Using the namespace field of dataSourceRef requires the CrossNamespaceVolumeDataSource feature gate to be enabled. (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--ephemeral--volume_claim_template--spec--data_source_ref))
+- `resources` (Attributes) resources represents the minimum resources the volume should have.If RecoverVolumeExpansionFailure feature is enabled users are allowed to specify resource requirementsthat are lower than previous value but must still be higher than capacity recorded in thestatus field of the claim.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--ephemeral--volume_claim_template--spec--resources))
- `selector` (Attributes) selector is a label query over volumes to consider for binding. (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--ephemeral--volume_claim_template--spec--selector))
-- `storage_class_name` (String) storageClassName is the name of the StorageClass required by the claim. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#class-1
-- `volume_attributes_class_name` (String) volumeAttributesClassName may be used to set the VolumeAttributesClass used by this claim. If specified, the CSI driver will create or update the volume with the attributes defined in the corresponding VolumeAttributesClass. This has a different purpose than storageClassName, it can be changed after the claim is created. An empty string value means that no VolumeAttributesClass will be applied to the claim but it's not allowed to reset this field to empty string once it is set. If unspecified and the PersistentVolumeClaim is unbound, the default VolumeAttributesClass will be set by the persistentvolume controller if it exists. If the resource referred to by volumeAttributesClass does not exist, this PersistentVolumeClaim will be set to a Pending state, as reflected by the modifyVolumeStatus field, until such as a resource exists. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#volumeattributesclass (Alpha) Using this field requires the VolumeAttributesClass feature gate to be enabled.
-- `volume_mode` (String) volumeMode defines what type of volume is required by the claim. Value of Filesystem is implied when not included in claim spec.
+- `storage_class_name` (String) storageClassName is the name of the StorageClass required by the claim.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#class-1
+- `volume_attributes_class_name` (String) volumeAttributesClassName may be used to set the VolumeAttributesClass used by this claim.If specified, the CSI driver will create or update the volume with the attributes definedin the corresponding VolumeAttributesClass. This has a different purpose than storageClassName,it can be changed after the claim is created. An empty string value means that no VolumeAttributesClasswill be applied to the claim but it's not allowed to reset this field to empty string once it is set.If unspecified and the PersistentVolumeClaim is unbound, the default VolumeAttributesClasswill be set by the persistentvolume controller if it exists.If the resource referred to by volumeAttributesClass does not exist, this PersistentVolumeClaim will beset to a Pending state, as reflected by the modifyVolumeStatus field, until such as a resourceexists.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#volumeattributesclass(Alpha) Using this field requires the VolumeAttributesClass feature gate to be enabled.
+- `volume_mode` (String) volumeMode defines what type of volume is required by the claim.Value of Filesystem is implied when not included in claim spec.
- `volume_name` (String) volumeName is the binding reference to the PersistentVolume backing this claim.
@@ -2385,7 +2385,7 @@ Required:
Optional:
-- `api_group` (String) APIGroup is the group for the resource being referenced. If APIGroup is not specified, the specified Kind must be in the core API group. For any other third-party types, APIGroup is required.
+- `api_group` (String) APIGroup is the group for the resource being referenced.If APIGroup is not specified, the specified Kind must be in the core API group.For any other third-party types, APIGroup is required.
@@ -2398,8 +2398,8 @@ Required:
Optional:
-- `api_group` (String) APIGroup is the group for the resource being referenced. If APIGroup is not specified, the specified Kind must be in the core API group. For any other third-party types, APIGroup is required.
-- `namespace` (String) Namespace is the namespace of resource being referenced Note that when a namespace is specified, a gateway.networking.k8s.io/ReferenceGrant object is required in the referent namespace to allow that namespace's owner to accept the reference. See the ReferenceGrant documentation for details. (Alpha) This field requires the CrossNamespaceVolumeDataSource feature gate to be enabled.
+- `api_group` (String) APIGroup is the group for the resource being referenced.If APIGroup is not specified, the specified Kind must be in the core API group.For any other third-party types, APIGroup is required.
+- `namespace` (String) Namespace is the namespace of resource being referencedNote that when a namespace is specified, a gateway.networking.k8s.io/ReferenceGrant object is required in the referent namespace to allow that namespace's owner to accept the reference. See the ReferenceGrant documentation for details.(Alpha) This field requires the CrossNamespaceVolumeDataSource feature gate to be enabled.
@@ -2407,8 +2407,8 @@ Optional:
Optional:
-- `limits` (Map of String) Limits describes the maximum amount of compute resources allowed. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-- `requests` (Map of String) Requests describes the minimum amount of compute resources required. If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, otherwise to an implementation-defined value. Requests cannot exceed Limits. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
+- `limits` (Map of String) Limits describes the maximum amount of compute resources allowed.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
+- `requests` (Map of String) Requests describes the minimum amount of compute resources required.If Requests is omitted for a container, it defaults to Limits if that is explicitly specified,otherwise to an implementation-defined value. Requests cannot exceed Limits.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
@@ -2417,7 +2417,7 @@ Optional:
Optional:
- `match_expressions` (Attributes List) matchExpressions is a list of label selector requirements. The requirements are ANDed. (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--ephemeral--volume_claim_template--spec--selector--match_expressions))
-- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is 'key', the operator is 'In', and the values array contains only 'value'. The requirements are ANDed.
+- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.
### Nested Schema for `spec.integration.template.spec.volumes.ephemeral.volume_claim_template.spec.selector.match_expressions`
@@ -2425,11 +2425,11 @@ Optional:
Required:
- `key` (String) key is the label key that the selector applies to.
-- `operator` (String) operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist.
+- `operator` (String) operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.
Optional:
-- `values` (List of String) values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch.
+- `values` (List of String) values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.
@@ -2441,11 +2441,11 @@ Optional:
Optional:
-- `fs_type` (String) fsType is the filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified. TODO: how do we prevent errors in the filesystem from compromising the machine
+- `fs_type` (String) fsType is the filesystem type to mount.Must be a filesystem type supported by the host operating system.Ex. 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified.TODO: how do we prevent errors in the filesystem from compromising the machine
- `lun` (Number) lun is Optional: FC target lun number
-- `read_only` (Boolean) readOnly is Optional: Defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.
+- `read_only` (Boolean) readOnly is Optional: Defaults to false (read/write). ReadOnly here will forcethe ReadOnly setting in VolumeMounts.
- `target_ww_ns` (List of String) targetWWNs is Optional: FC target worldwide names (WWNs)
-- `wwids` (List of String) wwids Optional: FC volume world wide identifiers (wwids) Either wwids or combination of targetWWNs and lun must be set, but not both simultaneously.
+- `wwids` (List of String) wwids Optional: FC volume world wide identifiers (wwids)Either wwids or combination of targetWWNs and lun must be set, but not both simultaneously.
@@ -2457,17 +2457,17 @@ Required:
Optional:
-- `fs_type` (String) fsType is the filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. 'ext4', 'xfs', 'ntfs'. The default filesystem depends on FlexVolume script.
+- `fs_type` (String) fsType is the filesystem type to mount.Must be a filesystem type supported by the host operating system.Ex. 'ext4', 'xfs', 'ntfs'. The default filesystem depends on FlexVolume script.
- `options` (Map of String) options is Optional: this field holds extra command options if any.
-- `read_only` (Boolean) readOnly is Optional: defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.
-- `secret_ref` (Attributes) secretRef is Optional: secretRef is reference to the secret object containing sensitive information to pass to the plugin scripts. This may be empty if no secret object is specified. If the secret object contains more than one secret, all secrets are passed to the plugin scripts. (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--flex_volume--secret_ref))
+- `read_only` (Boolean) readOnly is Optional: defaults to false (read/write). ReadOnly here will forcethe ReadOnly setting in VolumeMounts.
+- `secret_ref` (Attributes) secretRef is Optional: secretRef is reference to the secret object containingsensitive information to pass to the plugin scripts. This may beempty if no secret object is specified. If the secret objectcontains more than one secret, all secrets are passed to the pluginscripts. (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--flex_volume--secret_ref))
### Nested Schema for `spec.integration.template.spec.volumes.flex_volume.secret_ref`
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
@@ -2476,7 +2476,7 @@ Optional:
Optional:
-- `dataset_name` (String) datasetName is Name of the dataset stored as metadata -> name on the dataset for Flocker should be considered as deprecated
+- `dataset_name` (String) datasetName is Name of the dataset stored as metadata -> name on the dataset for Flockershould be considered as deprecated
- `dataset_uuid` (String) datasetUUID is the UUID of the dataset. This is unique identifier of a Flocker dataset
@@ -2485,13 +2485,13 @@ Optional:
Required:
-- `pd_name` (String) pdName is unique name of the PD resource in GCE. Used to identify the disk in GCE. More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk
+- `pd_name` (String) pdName is unique name of the PD resource in GCE. Used to identify the disk in GCE.More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk
Optional:
-- `fs_type` (String) fsType is filesystem type of the volume that you want to mount. Tip: Ensure that the filesystem type is supported by the host operating system. Examples: 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified. More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk TODO: how do we prevent errors in the filesystem from compromising the machine
-- `partition` (Number) partition is the partition in the volume that you want to mount. If omitted, the default is to mount by volume name. Examples: For volume /dev/sda1, you specify the partition as '1'. Similarly, the volume partition for /dev/sda is '0' (or you can leave the property empty). More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk
-- `read_only` (Boolean) readOnly here will force the ReadOnly setting in VolumeMounts. Defaults to false. More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk
+- `fs_type` (String) fsType is filesystem type of the volume that you want to mount.Tip: Ensure that the filesystem type is supported by the host operating system.Examples: 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified.More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdiskTODO: how do we prevent errors in the filesystem from compromising the machine
+- `partition` (Number) partition is the partition in the volume that you want to mount.If omitted, the default is to mount by volume name.Examples: For volume /dev/sda1, you specify the partition as '1'.Similarly, the volume partition for /dev/sda is '0' (or you can leave the property empty).More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk
+- `read_only` (Boolean) readOnly here will force the ReadOnly setting in VolumeMounts.Defaults to false.More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk
@@ -2503,7 +2503,7 @@ Required:
Optional:
-- `directory` (String) directory is the target directory name. Must not contain or start with '..'. If '.' is supplied, the volume directory will be the git repository. Otherwise, if specified, the volume will contain the git repository in the subdirectory with the given name.
+- `directory` (String) directory is the target directory name.Must not contain or start with '..'. If '.' is supplied, the volume directory will be thegit repository. Otherwise, if specified, the volume will contain the git repository inthe subdirectory with the given name.
- `revision` (String) revision is the commit hash for the specified revision.
@@ -2512,12 +2512,12 @@ Optional:
Required:
-- `endpoints` (String) endpoints is the endpoint name that details Glusterfs topology. More info: https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod
-- `path` (String) path is the Glusterfs volume path. More info: https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod
+- `endpoints` (String) endpoints is the endpoint name that details Glusterfs topology.More info: https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod
+- `path` (String) path is the Glusterfs volume path.More info: https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod
Optional:
-- `read_only` (Boolean) readOnly here will force the Glusterfs volume to be mounted with read-only permissions. Defaults to false. More info: https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod
+- `read_only` (Boolean) readOnly here will force the Glusterfs volume to be mounted with read-only permissions.Defaults to false.More info: https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod
@@ -2525,11 +2525,11 @@ Optional:
Required:
-- `path` (String) path of the directory on the host. If the path is a symlink, it will follow the link to the real path. More info: https://kubernetes.io/docs/concepts/storage/volumes#hostpath
+- `path` (String) path of the directory on the host.If the path is a symlink, it will follow the link to the real path.More info: https://kubernetes.io/docs/concepts/storage/volumes#hostpath
Optional:
-- `type` (String) type for HostPath Volume Defaults to '' More info: https://kubernetes.io/docs/concepts/storage/volumes#hostpath
+- `type` (String) type for HostPath VolumeDefaults to ''More info: https://kubernetes.io/docs/concepts/storage/volumes#hostpath
@@ -2539,17 +2539,17 @@ Required:
- `iqn` (String) iqn is the target iSCSI Qualified Name.
- `lun` (Number) lun represents iSCSI Target Lun number.
-- `target_portal` (String) targetPortal is iSCSI Target Portal. The Portal is either an IP or ip_addr:port if the port is other than default (typically TCP ports 860 and 3260).
+- `target_portal` (String) targetPortal is iSCSI Target Portal. The Portal is either an IP or ip_addr:port if the portis other than default (typically TCP ports 860 and 3260).
Optional:
- `chap_auth_discovery` (Boolean) chapAuthDiscovery defines whether support iSCSI Discovery CHAP authentication
- `chap_auth_session` (Boolean) chapAuthSession defines whether support iSCSI Session CHAP authentication
-- `fs_type` (String) fsType is the filesystem type of the volume that you want to mount. Tip: Ensure that the filesystem type is supported by the host operating system. Examples: 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified. More info: https://kubernetes.io/docs/concepts/storage/volumes#iscsi TODO: how do we prevent errors in the filesystem from compromising the machine
-- `initiator_name` (String) initiatorName is the custom iSCSI Initiator Name. If initiatorName is specified with iscsiInterface simultaneously, new iSCSI interface : will be created for the connection.
-- `iscsi_interface` (String) iscsiInterface is the interface Name that uses an iSCSI transport. Defaults to 'default' (tcp).
-- `portals` (List of String) portals is the iSCSI Target Portal List. The portal is either an IP or ip_addr:port if the port is other than default (typically TCP ports 860 and 3260).
-- `read_only` (Boolean) readOnly here will force the ReadOnly setting in VolumeMounts. Defaults to false.
+- `fs_type` (String) fsType is the filesystem type of the volume that you want to mount.Tip: Ensure that the filesystem type is supported by the host operating system.Examples: 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified.More info: https://kubernetes.io/docs/concepts/storage/volumes#iscsiTODO: how do we prevent errors in the filesystem from compromising the machine
+- `initiator_name` (String) initiatorName is the custom iSCSI Initiator Name.If initiatorName is specified with iscsiInterface simultaneously, new iSCSI interface: will be created for the connection.
+- `iscsi_interface` (String) iscsiInterface is the interface Name that uses an iSCSI transport.Defaults to 'default' (tcp).
+- `portals` (List of String) portals is the iSCSI Target Portal List. The portal is either an IP or ip_addr:port if the portis other than default (typically TCP ports 860 and 3260).
+- `read_only` (Boolean) readOnly here will force the ReadOnly setting in VolumeMounts.Defaults to false.
- `secret_ref` (Attributes) secretRef is the CHAP Secret for iSCSI target and initiator authentication (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--iscsi--secret_ref))
@@ -2557,7 +2557,7 @@ Optional:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
@@ -2566,12 +2566,12 @@ Optional:
Required:
-- `path` (String) path that is exported by the NFS server. More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs
-- `server` (String) server is the hostname or IP address of the NFS server. More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs
+- `path` (String) path that is exported by the NFS server.More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs
+- `server` (String) server is the hostname or IP address of the NFS server.More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs
Optional:
-- `read_only` (Boolean) readOnly here will force the NFS export to be mounted with read-only permissions. Defaults to false. More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs
+- `read_only` (Boolean) readOnly here will force the NFS export to be mounted with read-only permissions.Defaults to false.More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs
@@ -2579,11 +2579,11 @@ Optional:
Required:
-- `claim_name` (String) claimName is the name of a PersistentVolumeClaim in the same namespace as the pod using this volume. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims
+- `claim_name` (String) claimName is the name of a PersistentVolumeClaim in the same namespace as the pod using this volume.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims
Optional:
-- `read_only` (Boolean) readOnly Will force the ReadOnly setting in VolumeMounts. Default false.
+- `read_only` (Boolean) readOnly Will force the ReadOnly setting in VolumeMounts.Default false.
@@ -2595,7 +2595,7 @@ Required:
Optional:
-- `fs_type` (String) fsType is the filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified.
+- `fs_type` (String) fsType is the filesystem type to mount.Must be a filesystem type supported by the host operating system.Ex. 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified.
@@ -2607,8 +2607,8 @@ Required:
Optional:
-- `fs_type` (String) fSType represents the filesystem type to mount Must be a filesystem type supported by the host operating system. Ex. 'ext4', 'xfs'. Implicitly inferred to be 'ext4' if unspecified.
-- `read_only` (Boolean) readOnly defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.
+- `fs_type` (String) fSType represents the filesystem type to mountMust be a filesystem type supported by the host operating system.Ex. 'ext4', 'xfs'. Implicitly inferred to be 'ext4' if unspecified.
+- `read_only` (Boolean) readOnly defaults to false (read/write). ReadOnly here will forcethe ReadOnly setting in VolumeMounts.
@@ -2616,7 +2616,7 @@ Optional:
Optional:
-- `default_mode` (Number) defaultMode are the mode bits used to set permissions on created files by default. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. Directories within the path are not affected by this setting. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
+- `default_mode` (Number) defaultMode are the mode bits used to set permissions on created files by default.Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511.YAML accepts both octal and decimal values, JSON requires decimal values for mode bits.Directories within the path are not affected by this setting.This might be in conflict with other options that affect the filemode, like fsGroup, and the result can be other mode bits set.
- `sources` (Attributes List) sources is the list of volume projections (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--projected--sources))
@@ -2624,7 +2624,7 @@ Optional:
Optional:
-- `cluster_trust_bundle` (Attributes) ClusterTrustBundle allows a pod to access the '.spec.trustBundle' field of ClusterTrustBundle objects in an auto-updating file. Alpha, gated by the ClusterTrustBundleProjection feature gate. ClusterTrustBundle objects can either be selected by name, or by the combination of signer name and a label selector. Kubelet performs aggressive normalization of the PEM contents written into the pod filesystem. Esoteric PEM features such as inter-block comments and block headers are stripped. Certificates are deduplicated. The ordering of certificates within the file is arbitrary, and Kubelet may change the order over time. (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--projected--sources--cluster_trust_bundle))
+- `cluster_trust_bundle` (Attributes) ClusterTrustBundle allows a pod to access the '.spec.trustBundle' fieldof ClusterTrustBundle objects in an auto-updating file.Alpha, gated by the ClusterTrustBundleProjection feature gate.ClusterTrustBundle objects can either be selected by name, or by thecombination of signer name and a label selector.Kubelet performs aggressive normalization of the PEM contents writteninto the pod filesystem. Esoteric PEM features such as inter-blockcomments and block headers are stripped. Certificates are deduplicated.The ordering of certificates within the file is arbitrary, and Kubeletmay change the order over time. (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--projected--sources--cluster_trust_bundle))
- `config_map` (Attributes) configMap information about the configMap data to project (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--projected--sources--config_map))
- `downward_api` (Attributes) downwardAPI information about the downwardAPI data to project (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--projected--sources--downward_api))
- `secret` (Attributes) secret information about the secret data to project (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--projected--sources--secret))
@@ -2639,10 +2639,10 @@ Required:
Optional:
-- `label_selector` (Attributes) Select all ClusterTrustBundles that match this label selector. Only has effect if signerName is set. Mutually-exclusive with name. If unset, interpreted as 'match nothing'. If set but empty, interpreted as 'match everything'. (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--projected--sources--cluster_trust_bundle--label_selector))
-- `name` (String) Select a single ClusterTrustBundle by object name. Mutually-exclusive with signerName and labelSelector.
-- `optional` (Boolean) If true, don't block pod startup if the referenced ClusterTrustBundle(s) aren't available. If using name, then the named ClusterTrustBundle is allowed not to exist. If using signerName, then the combination of signerName and labelSelector is allowed to match zero ClusterTrustBundles.
-- `signer_name` (String) Select all ClusterTrustBundles that match this signer name. Mutually-exclusive with name. The contents of all selected ClusterTrustBundles will be unified and deduplicated.
+- `label_selector` (Attributes) Select all ClusterTrustBundles that match this label selector. Only haseffect if signerName is set. Mutually-exclusive with name. If unset,interpreted as 'match nothing'. If set but empty, interpreted as 'matcheverything'. (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--projected--sources--cluster_trust_bundle--label_selector))
+- `name` (String) Select a single ClusterTrustBundle by object name. Mutually-exclusivewith signerName and labelSelector.
+- `optional` (Boolean) If true, don't block pod startup if the referenced ClusterTrustBundle(s)aren't available. If using name, then the named ClusterTrustBundle isallowed not to exist. If using signerName, then the combination ofsignerName and labelSelector is allowed to match zeroClusterTrustBundles.
+- `signer_name` (String) Select all ClusterTrustBundles that match this signer name.Mutually-exclusive with name. The contents of all selectedClusterTrustBundles will be unified and deduplicated.
### Nested Schema for `spec.integration.template.spec.volumes.projected.sources.cluster_trust_bundle.label_selector`
@@ -2650,7 +2650,7 @@ Optional:
Optional:
- `match_expressions` (Attributes List) matchExpressions is a list of label selector requirements. The requirements are ANDed. (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--projected--sources--cluster_trust_bundle--label_selector--match_expressions))
-- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is 'key', the operator is 'In', and the values array contains only 'value'. The requirements are ANDed.
+- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.
### Nested Schema for `spec.integration.template.spec.volumes.projected.sources.cluster_trust_bundle.label_selector.match_expressions`
@@ -2658,11 +2658,11 @@ Optional:
Required:
- `key` (String) key is the label key that the selector applies to.
-- `operator` (String) operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist.
+- `operator` (String) operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.
Optional:
-- `values` (List of String) values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch.
+- `values` (List of String) values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.
@@ -2672,8 +2672,8 @@ Optional:
Optional:
-- `items` (Attributes List) items if unspecified, each key-value pair in the Data field of the referenced ConfigMap will be projected into the volume as a file whose name is the key and content is the value. If specified, the listed keys will be projected into the specified paths, and unlisted keys will not be present. If a key is specified which is not present in the ConfigMap, the volume setup will error unless it is marked optional. Paths must be relative and may not contain the '..' path or start with '..'. (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--projected--sources--config_map--items))
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `items` (Attributes List) items if unspecified, each key-value pair in the Data field of the referencedConfigMap will be projected into the volume as a file whose name is thekey and content is the value. If specified, the listed keys will beprojected into the specified paths, and unlisted keys will not bepresent. If a key is specified which is not present in the ConfigMap,the volume setup will error unless it is marked optional. Paths must berelative and may not contain the '..' path or start with '..'. (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--projected--sources--config_map--items))
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
- `optional` (Boolean) optional specify whether the ConfigMap or its keys must be defined
@@ -2682,11 +2682,11 @@ Optional:
Required:
- `key` (String) key is the key to project.
-- `path` (String) path is the relative path of the file to map the key to. May not be an absolute path. May not contain the path element '..'. May not start with the string '..'.
+- `path` (String) path is the relative path of the file to map the key to.May not be an absolute path.May not contain the path element '..'.May not start with the string '..'.
Optional:
-- `mode` (Number) mode is Optional: mode bits used to set permissions on this file. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. If not specified, the volume defaultMode will be used. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
+- `mode` (Number) mode is Optional: mode bits used to set permissions on this file.Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511.YAML accepts both octal and decimal values, JSON requires decimal values for mode bits.If not specified, the volume defaultMode will be used.This might be in conflict with other options that affect the filemode, like fsGroup, and the result can be other mode bits set.
@@ -2707,8 +2707,8 @@ Required:
Optional:
- `field_ref` (Attributes) Required: Selects a field of the pod: only annotations, labels, name and namespace are supported. (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--projected--sources--downward_api--items--field_ref))
-- `mode` (Number) Optional: mode bits used to set permissions on this file, must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. If not specified, the volume defaultMode will be used. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
-- `resource_field_ref` (Attributes) Selects a resource of the container: only resources limits and requests (limits.cpu, limits.memory, requests.cpu and requests.memory) are currently supported. (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--projected--sources--downward_api--items--resource_field_ref))
+- `mode` (Number) Optional: mode bits used to set permissions on this file, must be an octal valuebetween 0000 and 0777 or a decimal value between 0 and 511.YAML accepts both octal and decimal values, JSON requires decimal values for mode bits.If not specified, the volume defaultMode will be used.This might be in conflict with other options that affect the filemode, like fsGroup, and the result can be other mode bits set.
+- `resource_field_ref` (Attributes) Selects a resource of the container: only resources limits and requests(limits.cpu, limits.memory, requests.cpu and requests.memory) are currently supported. (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--projected--sources--downward_api--items--resource_field_ref))
### Nested Schema for `spec.integration.template.spec.volumes.projected.sources.downward_api.items.field_ref`
@@ -2742,8 +2742,8 @@ Optional:
Optional:
-- `items` (Attributes List) items if unspecified, each key-value pair in the Data field of the referenced Secret will be projected into the volume as a file whose name is the key and content is the value. If specified, the listed keys will be projected into the specified paths, and unlisted keys will not be present. If a key is specified which is not present in the Secret, the volume setup will error unless it is marked optional. Paths must be relative and may not contain the '..' path or start with '..'. (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--projected--sources--secret--items))
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `items` (Attributes List) items if unspecified, each key-value pair in the Data field of the referencedSecret will be projected into the volume as a file whose name is thekey and content is the value. If specified, the listed keys will beprojected into the specified paths, and unlisted keys will not bepresent. If a key is specified which is not present in the Secret,the volume setup will error unless it is marked optional. Paths must berelative and may not contain the '..' path or start with '..'. (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--projected--sources--secret--items))
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
- `optional` (Boolean) optional field specify whether the Secret or its key must be defined
@@ -2752,11 +2752,11 @@ Optional:
Required:
- `key` (String) key is the key to project.
-- `path` (String) path is the relative path of the file to map the key to. May not be an absolute path. May not contain the path element '..'. May not start with the string '..'.
+- `path` (String) path is the relative path of the file to map the key to.May not be an absolute path.May not contain the path element '..'.May not start with the string '..'.
Optional:
-- `mode` (Number) mode is Optional: mode bits used to set permissions on this file. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. If not specified, the volume defaultMode will be used. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
+- `mode` (Number) mode is Optional: mode bits used to set permissions on this file.Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511.YAML accepts both octal and decimal values, JSON requires decimal values for mode bits.If not specified, the volume defaultMode will be used.This might be in conflict with other options that affect the filemode, like fsGroup, and the result can be other mode bits set.
@@ -2765,12 +2765,12 @@ Optional:
Required:
-- `path` (String) path is the path relative to the mount point of the file to project the token into.
+- `path` (String) path is the path relative to the mount point of the file to project thetoken into.
Optional:
-- `audience` (String) audience is the intended audience of the token. A recipient of a token must identify itself with an identifier specified in the audience of the token, and otherwise should reject the token. The audience defaults to the identifier of the apiserver.
-- `expiration_seconds` (Number) expirationSeconds is the requested duration of validity of the service account token. As the token approaches expiration, the kubelet volume plugin will proactively rotate the service account token. The kubelet will start trying to rotate the token if the token is older than 80 percent of its time to live or if the token is older than 24 hours.Defaults to 1 hour and must be at least 10 minutes.
+- `audience` (String) audience is the intended audience of the token. A recipient of a tokenmust identify itself with an identifier specified in the audience of thetoken, and otherwise should reject the token. The audience defaults to theidentifier of the apiserver.
+- `expiration_seconds` (Number) expirationSeconds is the requested duration of validity of the serviceaccount token. As the token approaches expiration, the kubelet volumeplugin will proactively rotate the service account token. The kubelet willstart trying to rotate the token if the token is older than 80 percent ofits time to live or if the token is older than 24 hours.Defaults to 1 hourand must be at least 10 minutes.
@@ -2780,15 +2780,15 @@ Optional:
Required:
-- `registry` (String) registry represents a single or multiple Quobyte Registry services specified as a string as host:port pair (multiple entries are separated with commas) which acts as the central registry for volumes
+- `registry` (String) registry represents a single or multiple Quobyte Registry servicesspecified as a string as host:port pair (multiple entries are separated with commas)which acts as the central registry for volumes
- `volume` (String) volume is a string that references an already created Quobyte volume by name.
Optional:
-- `group` (String) group to map volume access to Default is no group
-- `read_only` (Boolean) readOnly here will force the Quobyte volume to be mounted with read-only permissions. Defaults to false.
-- `tenant` (String) tenant owning the given Quobyte volume in the Backend Used with dynamically provisioned Quobyte volumes, value is set by the plugin
-- `user` (String) user to map volume access to Defaults to serivceaccount user
+- `group` (String) group to map volume access toDefault is no group
+- `read_only` (Boolean) readOnly here will force the Quobyte volume to be mounted with read-only permissions.Defaults to false.
+- `tenant` (String) tenant owning the given Quobyte volume in the BackendUsed with dynamically provisioned Quobyte volumes, value is set by the plugin
+- `user` (String) user to map volume access toDefaults to serivceaccount user
@@ -2796,24 +2796,24 @@ Optional:
Required:
-- `image` (String) image is the rados image name. More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
-- `monitors` (List of String) monitors is a collection of Ceph monitors. More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
+- `image` (String) image is the rados image name.More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
+- `monitors` (List of String) monitors is a collection of Ceph monitors.More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
Optional:
-- `fs_type` (String) fsType is the filesystem type of the volume that you want to mount. Tip: Ensure that the filesystem type is supported by the host operating system. Examples: 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified. More info: https://kubernetes.io/docs/concepts/storage/volumes#rbd TODO: how do we prevent errors in the filesystem from compromising the machine
-- `keyring` (String) keyring is the path to key ring for RBDUser. Default is /etc/ceph/keyring. More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
-- `pool` (String) pool is the rados pool name. Default is rbd. More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
-- `read_only` (Boolean) readOnly here will force the ReadOnly setting in VolumeMounts. Defaults to false. More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
-- `secret_ref` (Attributes) secretRef is name of the authentication secret for RBDUser. If provided overrides keyring. Default is nil. More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--rbd--secret_ref))
-- `user` (String) user is the rados user name. Default is admin. More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
+- `fs_type` (String) fsType is the filesystem type of the volume that you want to mount.Tip: Ensure that the filesystem type is supported by the host operating system.Examples: 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified.More info: https://kubernetes.io/docs/concepts/storage/volumes#rbdTODO: how do we prevent errors in the filesystem from compromising the machine
+- `keyring` (String) keyring is the path to key ring for RBDUser.Default is /etc/ceph/keyring.More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
+- `pool` (String) pool is the rados pool name.Default is rbd.More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
+- `read_only` (Boolean) readOnly here will force the ReadOnly setting in VolumeMounts.Defaults to false.More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
+- `secret_ref` (Attributes) secretRef is name of the authentication secret for RBDUser. If providedoverrides keyring.Default is nil.More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--rbd--secret_ref))
+- `user` (String) user is the rados user name.Default is admin.More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
### Nested Schema for `spec.integration.template.spec.volumes.rbd.secret_ref`
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
@@ -2823,25 +2823,25 @@ Optional:
Required:
- `gateway` (String) gateway is the host address of the ScaleIO API Gateway.
-- `secret_ref` (Attributes) secretRef references to the secret for ScaleIO user and other sensitive information. If this is not provided, Login operation will fail. (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--scale_io--secret_ref))
+- `secret_ref` (Attributes) secretRef references to the secret for ScaleIO user and othersensitive information. If this is not provided, Login operation will fail. (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--scale_io--secret_ref))
- `system` (String) system is the name of the storage system as configured in ScaleIO.
Optional:
-- `fs_type` (String) fsType is the filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. 'ext4', 'xfs', 'ntfs'. Default is 'xfs'.
+- `fs_type` (String) fsType is the filesystem type to mount.Must be a filesystem type supported by the host operating system.Ex. 'ext4', 'xfs', 'ntfs'.Default is 'xfs'.
- `protection_domain` (String) protectionDomain is the name of the ScaleIO Protection Domain for the configured storage.
-- `read_only` (Boolean) readOnly Defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.
+- `read_only` (Boolean) readOnly Defaults to false (read/write). ReadOnly here will forcethe ReadOnly setting in VolumeMounts.
- `ssl_enabled` (Boolean) sslEnabled Flag enable/disable SSL communication with Gateway, default false
-- `storage_mode` (String) storageMode indicates whether the storage for a volume should be ThickProvisioned or ThinProvisioned. Default is ThinProvisioned.
+- `storage_mode` (String) storageMode indicates whether the storage for a volume should be ThickProvisioned or ThinProvisioned.Default is ThinProvisioned.
- `storage_pool` (String) storagePool is the ScaleIO Storage Pool associated with the protection domain.
-- `volume_name` (String) volumeName is the name of a volume already created in the ScaleIO system that is associated with this volume source.
+- `volume_name` (String) volumeName is the name of a volume already created in the ScaleIO systemthat is associated with this volume source.
### Nested Schema for `spec.integration.template.spec.volumes.scale_io.secret_ref`
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
@@ -2850,10 +2850,10 @@ Optional:
Optional:
-- `default_mode` (Number) defaultMode is Optional: mode bits used to set permissions on created files by default. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. Defaults to 0644. Directories within the path are not affected by this setting. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
-- `items` (Attributes List) items If unspecified, each key-value pair in the Data field of the referenced Secret will be projected into the volume as a file whose name is the key and content is the value. If specified, the listed keys will be projected into the specified paths, and unlisted keys will not be present. If a key is specified which is not present in the Secret, the volume setup will error unless it is marked optional. Paths must be relative and may not contain the '..' path or start with '..'. (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--secret--items))
+- `default_mode` (Number) defaultMode is Optional: mode bits used to set permissions on created files by default.Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511.YAML accepts both octal and decimal values, JSON requires decimal valuesfor mode bits. Defaults to 0644.Directories within the path are not affected by this setting.This might be in conflict with other options that affect the filemode, like fsGroup, and the result can be other mode bits set.
+- `items` (Attributes List) items If unspecified, each key-value pair in the Data field of the referencedSecret will be projected into the volume as a file whose name is thekey and content is the value. If specified, the listed keys will beprojected into the specified paths, and unlisted keys will not bepresent. If a key is specified which is not present in the Secret,the volume setup will error unless it is marked optional. Paths must berelative and may not contain the '..' path or start with '..'. (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--secret--items))
- `optional` (Boolean) optional field specify whether the Secret or its keys must be defined
-- `secret_name` (String) secretName is the name of the secret in the pod's namespace to use. More info: https://kubernetes.io/docs/concepts/storage/volumes#secret
+- `secret_name` (String) secretName is the name of the secret in the pod's namespace to use.More info: https://kubernetes.io/docs/concepts/storage/volumes#secret
### Nested Schema for `spec.integration.template.spec.volumes.secret.items`
@@ -2861,11 +2861,11 @@ Optional:
Required:
- `key` (String) key is the key to project.
-- `path` (String) path is the relative path of the file to map the key to. May not be an absolute path. May not contain the path element '..'. May not start with the string '..'.
+- `path` (String) path is the relative path of the file to map the key to.May not be an absolute path.May not contain the path element '..'.May not start with the string '..'.
Optional:
-- `mode` (Number) mode is Optional: mode bits used to set permissions on this file. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. If not specified, the volume defaultMode will be used. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
+- `mode` (Number) mode is Optional: mode bits used to set permissions on this file.Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511.YAML accepts both octal and decimal values, JSON requires decimal values for mode bits.If not specified, the volume defaultMode will be used.This might be in conflict with other options that affect the filemode, like fsGroup, and the result can be other mode bits set.
@@ -2874,18 +2874,18 @@ Optional:
Optional:
-- `fs_type` (String) fsType is the filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified.
-- `read_only` (Boolean) readOnly defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.
-- `secret_ref` (Attributes) secretRef specifies the secret to use for obtaining the StorageOS API credentials. If not specified, default values will be attempted. (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--storageos--secret_ref))
-- `volume_name` (String) volumeName is the human-readable name of the StorageOS volume. Volume names are only unique within a namespace.
-- `volume_namespace` (String) volumeNamespace specifies the scope of the volume within StorageOS. If no namespace is specified then the Pod's namespace will be used. This allows the Kubernetes name scoping to be mirrored within StorageOS for tighter integration. Set VolumeName to any name to override the default behaviour. Set to 'default' if you are not using namespaces within StorageOS. Namespaces that do not pre-exist within StorageOS will be created.
+- `fs_type` (String) fsType is the filesystem type to mount.Must be a filesystem type supported by the host operating system.Ex. 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified.
+- `read_only` (Boolean) readOnly defaults to false (read/write). ReadOnly here will forcethe ReadOnly setting in VolumeMounts.
+- `secret_ref` (Attributes) secretRef specifies the secret to use for obtaining the StorageOS APIcredentials. If not specified, default values will be attempted. (see [below for nested schema](#nestedatt--spec--integration--template--spec--volumes--storageos--secret_ref))
+- `volume_name` (String) volumeName is the human-readable name of the StorageOS volume. Volumenames are only unique within a namespace.
+- `volume_namespace` (String) volumeNamespace specifies the scope of the volume within StorageOS. If nonamespace is specified then the Pod's namespace will be used. This allows theKubernetes name scoping to be mirrored within StorageOS for tighter integration.Set VolumeName to any name to override the default behaviour.Set to 'default' if you are not using namespaces within StorageOS.Namespaces that do not pre-exist within StorageOS will be created.
### Nested Schema for `spec.integration.template.spec.volumes.storageos.secret_ref`
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
@@ -2898,7 +2898,7 @@ Required:
Optional:
-- `fs_type` (String) fsType is filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified.
+- `fs_type` (String) fsType is filesystem type to mount.Must be a filesystem type supported by the host operating system.Ex. 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified.
- `storage_policy_id` (String) storagePolicyID is the storage Policy Based Management (SPBM) profile ID associated with the StoragePolicyName.
- `storage_policy_name` (String) storagePolicyName is the storage Policy Based Management (SPBM) profile name.
@@ -2943,7 +2943,7 @@ Optional:
- `prometheus` (Attributes) The configuration of Prometheus trait (see [below for nested schema](#nestedatt--spec--integration--traits--prometheus))
- `pull_secret` (Attributes) The configuration of Pull Secret trait (see [below for nested schema](#nestedatt--spec--integration--traits--pull_secret))
- `quarkus` (Attributes) The configuration of Quarkus trait (see [below for nested schema](#nestedatt--spec--integration--traits--quarkus))
-- `registry` (Attributes) The configuration of Registry trait Deprecated: use jvm trait or read documentation. (see [below for nested schema](#nestedatt--spec--integration--traits--registry))
+- `registry` (Attributes) The configuration of Registry trait (support removed since version 2.5.0).Deprecated: use jvm trait or read documentation. (see [below for nested schema](#nestedatt--spec--integration--traits--registry))
- `route` (Attributes) The configuration of Route trait (see [below for nested schema](#nestedatt--spec--integration--traits--route))
- `security_context` (Attributes) The configuration of Security Context trait (see [below for nested schema](#nestedatt--spec--integration--traits--security_context))
- `service` (Attributes) The configuration of Service trait (see [below for nested schema](#nestedatt--spec--integration--traits--service))
@@ -2958,13 +2958,13 @@ Optional:
Optional:
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
- `node_affinity_labels` (List of String) Defines a set of nodes the integration pod(s) are eligible to be scheduled on, based on labels on the node.
- `pod_affinity` (Boolean) Always co-locates multiple replicas of the integration in the same node (default 'false').
-- `pod_affinity_labels` (List of String) Defines a set of pods (namely those matching the label selector, relative to the given namespace) that the integration pod(s) should be co-located with.
+- `pod_affinity_labels` (List of String) Defines a set of pods (namely those matching the label selector, relative to the given namespace) that theintegration pod(s) should be co-located with.
- `pod_anti_affinity` (Boolean) Never co-locates multiple replicas of the integration in the same node (default 'false').
-- `pod_anti_affinity_labels` (List of String) Defines a set of pods (namely those matching the label selector, relative to the given namespace) that the integration pod(s) should not be co-located with.
+- `pod_anti_affinity_labels` (List of String) Defines a set of pods (namely those matching the label selector, relative to the given namespace) that theintegration pod(s) should not be co-located with.
@@ -2973,27 +2973,27 @@ Optional:
Optional:
- `annotations` (Map of String) When using 'pod' strategy, annotation to use for the builder pod.
-- `base_image` (String) Specify a base image. In order to have the application working properly it must be a container image which has a Java JDK installed and ready to use on path (ie '/usr/bin/java').
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `base_image` (String) Specify a base image. In order to have the application working properly it must be a container image which has a Java JDKinstalled and ready to use on path (ie '/usr/bin/java').
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Deprecated: no longer in use.
- `incremental_image_build` (Boolean) Use the incremental image build option, to reuse existing containers (default 'true')
-- `limit_cpu` (String) When using 'pod' strategy, the maximum amount of CPU required by the pod builder. Deprecated: use TasksRequestCPU instead with task name 'builder'.
-- `limit_memory` (String) When using 'pod' strategy, the maximum amount of memory required by the pod builder. Deprecated: use TasksRequestCPU instead with task name 'builder'.
-- `maven_profiles` (List of String) A list of references pointing to configmaps/secrets that contains a maven profile. This configmap/secret is a resource of the IntegrationKit created, therefore it needs to be present in the namespace where the operator is going to create the IntegrationKit. The content of the maven profile is expected to be a text containing a valid maven profile starting with '' and ending with '' that will be integrated as an inline profile in the POM. Syntax: [configmap|secret]:name[/key], where name represents the resource name, key optionally represents the resource key to be filtered (default key value = profile.xml).
+- `limit_cpu` (String) When using 'pod' strategy, the maximum amount of CPU required by the pod builder.Deprecated: use TasksRequestCPU instead with task name 'builder'.
+- `limit_memory` (String) When using 'pod' strategy, the maximum amount of memory required by the pod builder.Deprecated: use TasksRequestCPU instead with task name 'builder'.
+- `maven_profiles` (List of String) A list of references pointing to configmaps/secrets that contains a maven profile.This configmap/secret is a resource of the IntegrationKit created, therefore it needs to be present in the namespace where the operator is going to create the IntegrationKit.The content of the maven profile is expected to be a text containing a valid maven profile starting with '' and ending with '' that will be integrated as an inline profile in the POM.Syntax: [configmap|secret]:name[/key], where name represents the resource name, key optionally represents the resource key to be filtered (default key value = profile.xml).
- `node_selector` (Map of String) Defines a set of nodes the builder pod is eligible to be scheduled on, based on labels on the node.
- `order_strategy` (String) The build order strategy to use, either 'dependencies', 'fifo' or 'sequential' (default is the platform default)
- `platforms` (List of String) The list of manifest platforms to use to build a container image (default 'linux/amd64').
- `properties` (List of String) A list of properties to be provided to the build task
-- `request_cpu` (String) When using 'pod' strategy, the minimum amount of CPU required by the pod builder. Deprecated: use TasksRequestCPU instead with task name 'builder'.
-- `request_memory` (String) When using 'pod' strategy, the minimum amount of memory required by the pod builder. Deprecated: use TasksRequestCPU instead with task name 'builder'.
+- `request_cpu` (String) When using 'pod' strategy, the minimum amount of CPU required by the pod builder.Deprecated: use TasksRequestCPU instead with task name 'builder'.
+- `request_memory` (String) When using 'pod' strategy, the minimum amount of memory required by the pod builder.Deprecated: use TasksRequestCPU instead with task name 'builder'.
- `strategy` (String) The strategy to use, either 'pod' or 'routine' (default 'routine')
- `tasks` (List of String) A list of tasks to be executed (available only when using 'pod' strategy) with format ';;'.
-- `tasks_filter` (String) A list of tasks sorted by the order of execution in a csv format, ie, ',,...'. Mind that you must include also the operator tasks ('builder', 'quarkus-native', 'package', 'jib', 's2i') if you need to execute them. Useful only with 'pod' strategy.
+- `tasks_filter` (String) A list of tasks sorted by the order of execution in a csv format, ie, ',,...'.Mind that you must include also the operator tasks ('builder', 'quarkus-native', 'package', 'jib', 's2i')if you need to execute them. Useful only with 'pod' strategy.
- `tasks_limit_cpu` (List of String) A list of limit cpu configuration for the specific task with format ':'.
- `tasks_limit_memory` (List of String) A list of limit memory configuration for the specific task with format ':'.
- `tasks_request_cpu` (List of String) A list of request cpu configuration for the specific task with format ':'.
- `tasks_request_memory` (List of String) A list of request memory configuration for the specific task with format ':'.
-- `verbose` (Boolean) Enable verbose logging on build components that support it (e.g. Kaniko build pod). Deprecated no longer in use
+- `verbose` (Boolean) Enable verbose logging on build components that support it (e.g. Kaniko build pod).Deprecated no longer in use
@@ -3001,10 +3001,10 @@ Optional:
Optional:
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Deprecated: no longer in use.
- `properties` (List of String) A list of properties to be provided to the Integration runtime
-- `runtime_version` (String) The camel-k-runtime version to use for the integration. It overrides the default version set in the Integration Platform. You can use a fixed version (for example '3.2.3') or a semantic version (for example '3.x') which will try to resolve to the best matching Catalog existing on the cluster.
+- `runtime_version` (String) The camel-k-runtime version to use for the integration. It overrides the default version set in the Integration Platform.You can use a fixed version (for example '3.2.3') or a semantic version (for example '3.x') which will try to resolveto the best matching Catalog existing on the cluster.
@@ -3016,10 +3016,10 @@ Optional:
- `auto` (Boolean) To automatically enable the trait
- `capabilities_add` (List of String) Security Context Capabilities Add configuration (default none).
- `capabilities_drop` (List of String) Security Context Capabilities Drop configuration (default ALL).
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Deprecated: no longer in use.
- `expose` (Boolean) Can be used to enable/disable exposure via kubernetes Service.
-- `image` (String) The main container image to use for the Integration. When using this parameter the operator will create a synthetic IntegrationKit which won't be able to execute traits requiring CamelCatalog. If the container image you're using is coming from an IntegrationKit, use instead Integration '.spec.integrationKit' parameter. If you're moving the Integration across environments, you will also need to create an 'external' IntegrationKit.
+- `image` (String) The main container image to use for the Integration. When using this parameter the operator will create a synthetic IntegrationKit whichwon't be able to execute traits requiring CamelCatalog. If the container image you're using is coming from an IntegrationKit, use insteadIntegration '.spec.integrationKit' parameter. If you're moving the Integration across environments, you will also need to create an 'external' IntegrationKit.
- `image_pull_policy` (String) The pull policy: Always|Never|IfNotPresent
- `limit_cpu` (String) The maximum amount of CPU to be provided (default 500 millicores).
- `limit_memory` (String) The maximum amount of memory to be provided (default 512 Mi).
@@ -3040,16 +3040,16 @@ Optional:
Optional:
-- `active_deadline_seconds` (Number) Specifies the duration in seconds, relative to the start time, that the job may be continuously active before it is considered to be failed. It defaults to 60s.
-- `auto` (Boolean) Automatically deploy the integration as CronJob when all routes are either starting from a periodic consumer (only 'cron', 'timer' and 'quartz' are supported) or a passive consumer (e.g. 'direct' is a passive consumer). It's required that all periodic consumers have the same period, and it can be expressed as cron schedule (e.g. '1m' can be expressed as '0/1 * * * *', while '35m' or '50s' cannot).
-- `backoff_limit` (Number) Specifies the number of retries before marking the job failed. It defaults to 2.
-- `components` (String) A comma separated list of the Camel components that need to be customized in order for them to work when the schedule is triggered externally by Kubernetes. A specific customizer is activated for each specified component. E.g. for the 'timer' component, the 'cron-timer' customizer is activated (it's present in the 'org.apache.camel.k:camel-k-cron' library). Supported components are currently: 'cron', 'timer' and 'quartz'.
-- `concurrency_policy` (String) Specifies how to treat concurrent executions of a Job. Valid values are: - 'Allow': allows CronJobs to run concurrently; - 'Forbid' (default): forbids concurrent runs, skipping next run if previous run hasn't finished yet; - 'Replace': cancels currently running job and replaces it with a new one
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `active_deadline_seconds` (Number) Specifies the duration in seconds, relative to the start time, that the jobmay be continuously active before it is considered to be failed.It defaults to 60s.
+- `auto` (Boolean) Automatically deploy the integration as CronJob when all routes areeither starting from a periodic consumer (only 'cron', 'timer' and 'quartz' are supported) or a passive consumer (e.g. 'direct' is a passive consumer).It's required that all periodic consumers have the same period, and it can be expressed as cron schedule (e.g. '1m' can be expressed as '0/1 * * * *',while '35m' or '50s' cannot).
+- `backoff_limit` (Number) Specifies the number of retries before marking the job failed.It defaults to 2.
+- `components` (String) A comma separated list of the Camel components that need to be customized in order for them to work when the schedule is triggered externally by Kubernetes.A specific customizer is activated for each specified component. E.g. for the 'timer' component, the 'cron-timer' customizer isactivated (it's present in the 'org.apache.camel.k:camel-k-cron' library).Supported components are currently: 'cron', 'timer' and 'quartz'.
+- `concurrency_policy` (String) Specifies how to treat concurrent executions of a Job.Valid values are:- 'Allow': allows CronJobs to run concurrently;- 'Forbid' (default): forbids concurrent runs, skipping next run if previous run hasn't finished yet;- 'Replace': cancels currently running job and replaces it with a new one
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
-- `fallback` (Boolean) Use the default Camel implementation of the 'cron' endpoint ('quartz') instead of trying to materialize the integration as Kubernetes CronJob.
-- `schedule` (String) The CronJob schedule for the whole integration. If multiple routes are declared, they must have the same schedule for this mechanism to work correctly.
-- `starting_deadline_seconds` (Number) Optional deadline in seconds for starting the job if it misses scheduled time for any reason. Missed jobs executions will be counted as failed ones.
+- `fallback` (Boolean) Use the default Camel implementation of the 'cron' endpoint ('quartz') instead of trying to materialize the integrationas Kubernetes CronJob.
+- `schedule` (String) The CronJob schedule for the whole integration. If multiple routes are declared, they must have the same schedule for thismechanism to work correctly.
+- `starting_deadline_seconds` (Number) Optional deadline in seconds for starting the job if it misses scheduledtime for any reason. Missed jobs executions will be counted as failed ones.
- `time_zone` (String) The timezone that the CronJob will run on
@@ -3058,7 +3058,7 @@ Optional:
Optional:
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Deprecated: no longer in use.
@@ -3067,10 +3067,10 @@ Optional:
Optional:
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Deprecated: no longer in use.
- `kind` (String) Allows to explicitly select the desired deployment kind between 'deployment', 'cron-job' or 'knative-service' when creating the resources for running the integration.
-- `use_ssa` (Boolean) Use server-side apply to update the owned resources (default 'true'). Note that it automatically falls back to client-side patching, if SSA is not available, e.g., on old Kubernetes clusters.
+- `use_ssa` (Boolean) Use server-side apply to update the owned resources (default 'true').Note that it automatically falls back to client-side patching, if SSA is not available, e.g., on old Kubernetes clusters.
@@ -3078,11 +3078,11 @@ Optional:
Optional:
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Deprecated: no longer in use.
-- `progress_deadline_seconds` (Number) The maximum time in seconds for the deployment to make progress before it is considered to be failed. It defaults to '60s'.
-- `rolling_update_max_surge` (String) The maximum number of pods that can be scheduled above the desired number of pods. Value can be an absolute number (ex: 5) or a percentage of desired pods (ex: 10%). This can not be 0 if MaxUnavailable is 0. Absolute number is calculated from percentage by rounding up. Defaults to '25%'.
-- `rolling_update_max_unavailable` (String) The maximum number of pods that can be unavailable during the update. Value can be an absolute number (ex: 5) or a percentage of desired pods (ex: 10%). Absolute number is calculated from percentage by rounding down. This can not be 0 if MaxSurge is 0. Defaults to '25%'.
+- `progress_deadline_seconds` (Number) The maximum time in seconds for the deployment to make progress before itis considered to be failed. It defaults to '60s'.
+- `rolling_update_max_surge` (String) The maximum number of pods that can be scheduled above the desired number ofpods.Value can be an absolute number (ex: 5) or a percentage of desired pods (ex: 10%).This can not be 0 if MaxUnavailable is 0.Absolute number is calculated from percentage by rounding up.Defaults to '25%'.
+- `rolling_update_max_unavailable` (String) The maximum number of pods that can be unavailable during the update.Value can be an absolute number (ex: 5) or a percentage of desired pods (ex: 10%).Absolute number is calculated from percentage by rounding down.This can not be 0 if MaxSurge is 0.Defaults to '25%'.
- `strategy` (String) The deployment strategy to use to replace existing pods with new ones.
@@ -3091,11 +3091,11 @@ Optional:
Optional:
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `container_meta` (Boolean) Enables injection of 'NAMESPACE' and 'POD_NAME' environment variables (default 'true')
- `enabled` (Boolean) Deprecated: no longer in use.
- `http_proxy` (Boolean) Propagates the 'HTTP_PROXY', 'HTTPS_PROXY' and 'NO_PROXY' environment variables (default 'true')
-- `vars` (List of String) A list of environment variables to be added to the integration container. The syntax is KEY=VALUE, e.g., 'MY_VAR='my value''. These take precedence over the previously defined environment variables.
+- `vars` (List of String) A list of environment variables to be added to the integration container.The syntax is KEY=VALUE, e.g., 'MY_VAR='my value''.These take precedence over the previously defined environment variables.
@@ -3103,7 +3103,7 @@ Optional:
Optional:
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Deprecated: no longer in use.
- `ref` (String) The error handler ref name provided or found in application properties
@@ -3113,8 +3113,8 @@ Optional:
Optional:
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
-- `discovery_cache` (String) Discovery client cache to be used, either 'disabled', 'disk' or 'memory' (default 'memory'). Deprecated: to be removed from trait configuration.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
+- `discovery_cache` (String) Discovery client cache to be used, either 'disabled', 'disk' or 'memory' (default 'memory').Deprecated: to be removed from trait configuration.
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
@@ -3123,7 +3123,7 @@ Optional:
Optional:
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
- `liveness_failure_threshold` (Number) Minimum consecutive failures for the liveness probe to be considered failed after having succeeded.
- `liveness_initial_delay` (Number) Number of seconds after the container has started before the liveness probe is initiated.
@@ -3156,13 +3156,13 @@ Optional:
Optional:
-- `annotations` (Map of String) The annotations added to the ingress. This can be used to set controller specific annotations, e.g., when using the NGINX Ingress controller: See https://github.com/kubernetes/ingress-nginx/blob/main/docs/user-guide/nginx-configuration/annotations.md
+- `annotations` (Map of String) The annotations added to the ingress.This can be used to set controller specific annotations, e.g., when using the NGINX Ingress controller:See https://github.com/kubernetes/ingress-nginx/blob/main/docs/user-guide/nginx-configuration/annotations.md
- `auto` (Boolean) To automatically add an ingress whenever the integration uses an HTTP endpoint consumer.
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
- `host` (String) To configure the host exposed by the ingress.
- `path` (String) To configure the path exposed by the ingress (default '/').
-- `path_type` (String) To configure the path type exposed by the ingress. One of 'Exact', 'Prefix', 'ImplementationSpecific' (default to 'Prefix').
+- `path_type` (String) To configure the path type exposed by the ingress.One of 'Exact', 'Prefix', 'ImplementationSpecific' (default to 'Prefix').
- `tls_hosts` (List of String) To configure tls hosts
- `tls_secret_name` (String) To configure tls secret name
@@ -3173,7 +3173,7 @@ Optional:
Optional:
- `allow` (String) Configures a (comma-separated) list of CIDR subnets that should not be intercepted by the Istio proxy ('10.0.0.0/8,172.16.0.0/12,192.168.0.0/16' by default).
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
- `inject` (Boolean) Forces the value for labels 'sidecar.istio.io/inject'. By default the label is set to 'true' on deployment and not set on Knative Service.
@@ -3183,14 +3183,14 @@ Optional:
Optional:
-- `ca_cert` (String) The PEM encoded CA certification file path, used to verify client certificates, applicable when 'protocol' is 'https' and 'use-ssl-client-authentication' is 'true' (default '/var/run/secrets/kubernetes.io/serviceaccount/service-ca.crt' for OpenShift).
-- `client_principal` (List of String) The principal(s) which must be given in a client certificate to allow access to the Jolokia endpoint, applicable when 'protocol' is 'https' and 'use-ssl-client-authentication' is 'true' (default 'clientPrincipal=cn=system:master-proxy', 'cn=hawtio-online.hawtio.svc' and 'cn=fuse-console.fuse.svc' for OpenShift).
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `ca_cert` (String) The PEM encoded CA certification file path, used to verify client certificates,applicable when 'protocol' is 'https' and 'use-ssl-client-authentication' is 'true'(default '/var/run/secrets/kubernetes.io/serviceaccount/service-ca.crt' for OpenShift).
+- `client_principal` (List of String) The principal(s) which must be given in a client certificate to allow access to the Jolokia endpoint,applicable when 'protocol' is 'https' and 'use-ssl-client-authentication' is 'true'(default 'clientPrincipal=cn=system:master-proxy', 'cn=hawtio-online.hawtio.svc' and 'cn=fuse-console.fuse.svc' for OpenShift).
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `discovery_enabled` (Boolean) Listen for multicast requests (default 'false')
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
-- `extended_client_check` (Boolean) Mandate the client certificate contains a client flag in the extended key usage section, applicable when 'protocol' is 'https' and 'use-ssl-client-authentication' is 'true' (default 'true' for OpenShift).
-- `host` (String) The Host address to which the Jolokia agent should bind to. If ''*'' or ''0.0.0.0'' is given, the servers binds to every network interface (default ''*'').
-- `options` (List of String) A list of additional Jolokia options as defined in https://jolokia.org/reference/html/agents.html#agent-jvm-config[JVM agent configuration options]
+- `extended_client_check` (Boolean) Mandate the client certificate contains a client flag in the extended key usage section,applicable when 'protocol' is 'https' and 'use-ssl-client-authentication' is 'true'(default 'true' for OpenShift).
+- `host` (String) The Host address to which the Jolokia agent should bind to. If ''*'' or ''0.0.0.0'' is given,the servers binds to every network interface (default ''*'').
+- `options` (List of String) A list of additional Jolokia options as definedin https://jolokia.org/reference/html/agents.html#agent-jvm-config[JVM agent configuration options]
- `password` (String) The password used for authentication, applicable when the 'user' option is set.
- `port` (Number) The Jolokia endpoint port (default '8778').
- `protocol` (String) The protocol to use, either 'http' or 'https' (default 'https' for OpenShift)
@@ -3204,14 +3204,14 @@ Optional:
Optional:
- `classpath` (String) Additional JVM classpath (use 'Linux' classpath separator)
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `debug` (Boolean) Activates remote debugging, so that a debugger can be attached to the JVM, e.g., using port-forwarding
- `debug_address` (String) Transport address at which to listen for the newly launched JVM (default '*:5005')
- `debug_suspend` (Boolean) Suspends the target JVM immediately before the main class is loaded
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
- `jar` (String) The Jar dependency which will run the application. Leave it empty for managed Integrations.
- `options` (List of String) A list of JVM options
-- `print_command` (Boolean) Prints the command used the start the JVM in the container logs (default 'true') Deprecated: no longer in use.
+- `print_command` (Boolean) Prints the command used the start the JVM in the container logs (default 'true')Deprecated: no longer in use.
@@ -3220,7 +3220,7 @@ Optional:
Optional:
- `auto` (Boolean) Automatically inject all referenced Kamelets and their default configuration (enabled by default)
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
- `list` (String) Comma separated list of Kamelet names to load into the current integration
- `mount_point` (String) The directory where the application mounts and reads Kamelet spec (default '/etc/camel/kamelets')
@@ -3240,20 +3240,20 @@ Required:
Optional:
- `auto` (Boolean) Enable automatic discovery of all trait properties.
-- `channel_sinks` (List of String) List of channels used as destination of integration routes. Can contain simple channel names or full Camel URIs.
-- `channel_sources` (List of String) List of channels used as source of integration routes. Can contain simple channel names or full Camel URIs.
+- `channel_sinks` (List of String) List of channels used as destination of integration routes.Can contain simple channel names or full Camel URIs.
+- `channel_sources` (List of String) List of channels used as source of integration routes.Can contain simple channel names or full Camel URIs.
- `config` (String) Can be used to inject a Knative complete configuration in JSON format.
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
-- `endpoint_sinks` (List of String) List of endpoints used as destination of integration routes. Can contain simple endpoint names or full Camel URIs.
+- `endpoint_sinks` (List of String) List of endpoints used as destination of integration routes.Can contain simple endpoint names or full Camel URIs.
- `endpoint_sources` (List of String) List of channels used as source of integration routes.
-- `event_sinks` (List of String) List of event types that the integration will produce. Can contain simple event types or full Camel URIs (to use a specific broker).
-- `event_sources` (List of String) List of event types that the integration will be subscribed to. Can contain simple event types or full Camel URIs (to use a specific broker different from 'default').
-- `filter_event_type` (Boolean) Enables the default filtering for the Knative trigger using the event type If this is true, the created Knative trigger uses the event type as a filter on the event stream when no other filter criteria is given. (default: true)
-- `filter_source_channels` (Boolean) Enables filtering on events based on the header 'ce-knativehistory'. Since this header has been removed in newer versions of Knative, filtering is disabled by default.
-- `filters` (List of String) Sets filter attributes on the event stream (such as event type, source, subject and so on). A list of key-value pairs that represent filter attributes and its values. The syntax is KEY=VALUE, e.g., 'source='my.source''. Filter attributes get set on the Knative trigger that is being created as part of this integration.
-- `namespace_label` (Boolean) Enables the camel-k-operator to set the 'bindings.knative.dev/include=true' label to the namespace As Knative requires this label to perform injection of K_SINK URL into the service. If this is false, the integration pod may start and fail, read the SinkBinding Knative documentation. (default: true)
-- `sink_binding` (Boolean) Allows binding the integration to a sink via a Knative SinkBinding resource. This can be used when the integration targets a single sink. It's enabled by default when the integration targets a single sink (except when the integration is owned by a Knative source).
+- `event_sinks` (List of String) List of event types that the integration will produce.Can contain simple event types or full Camel URIs (to use a specific broker).
+- `event_sources` (List of String) List of event types that the integration will be subscribed to.Can contain simple event types or full Camel URIs (to use a specific broker different from 'default').
+- `filter_event_type` (Boolean) Enables the default filtering for the Knative trigger using the event typeIf this is true, the created Knative trigger uses the event type as a filter on the event stream when no other filter criteria is given. (default: true)
+- `filter_source_channels` (Boolean) Enables filtering on events based on the header 'ce-knativehistory'. Since this header has been removed in newer versions ofKnative, filtering is disabled by default.
+- `filters` (List of String) Sets filter attributes on the event stream (such as event type, source, subject and so on).A list of key-value pairs that represent filter attributes and its values.The syntax is KEY=VALUE, e.g., 'source='my.source''.Filter attributes get set on the Knative trigger that is being created as part of this integration.
+- `namespace_label` (Boolean) Enables the camel-k-operator to set the 'bindings.knative.dev/include=true' label to the namespaceAs Knative requires this label to perform injection of K_SINK URL into the service.If this is false, the integration pod may start and fail, read the SinkBinding Knative documentation. (default: true)
+- `sink_binding` (Boolean) Allows binding the integration to a sink via a Knative SinkBinding resource.This can be used when the integration targets a single sink.It's enabled by default when the integration targets a single sink(except when the integration is owned by a Knative source).
@@ -3261,18 +3261,18 @@ Optional:
Optional:
-- `annotations` (Map of String) The annotations added to route. This can be used to set knative service specific annotations CLI usage example: -t 'knative-service.annotations.'haproxy.router.openshift.io/balance'=true'
-- `auto` (Boolean) Automatically deploy the integration as Knative service when all conditions hold: * Integration is using the Knative profile * All routes are either starting from an HTTP based consumer or a passive consumer (e.g. 'direct' is a passive consumer)
-- `autoscaling_metric` (String) Configures the Knative autoscaling metric property (e.g. to set 'concurrency' based or 'cpu' based autoscaling). Refer to the Knative documentation for more information.
-- `autoscaling_target` (Number) Sets the allowed concurrency level or CPU percentage (depending on the autoscaling metric) for each Pod. Refer to the Knative documentation for more information.
-- `class` (String) Configures the Knative autoscaling class property (e.g. to set 'hpa.autoscaling.knative.dev' or 'kpa.autoscaling.knative.dev' autoscaling). Refer to the Knative documentation for more information.
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `annotations` (Map of String) The annotations added to route.This can be used to set knative service specific annotationsCLI usage example: -t 'knative-service.annotations.'haproxy.router.openshift.io/balance'=true'
+- `auto` (Boolean) Automatically deploy the integration as Knative service when all conditions hold:* Integration is using the Knative profile* All routes are either starting from an HTTP based consumer or a passive consumer (e.g. 'direct' is a passive consumer)
+- `autoscaling_metric` (String) Configures the Knative autoscaling metric property (e.g. to set 'concurrency' based or 'cpu' based autoscaling).Refer to the Knative documentation for more information.
+- `autoscaling_target` (Number) Sets the allowed concurrency level or CPU percentage (depending on the autoscaling metric) for each Pod.Refer to the Knative documentation for more information.
+- `class` (String) Configures the Knative autoscaling class property (e.g. to set 'hpa.autoscaling.knative.dev' or 'kpa.autoscaling.knative.dev' autoscaling).Refer to the Knative documentation for more information.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
-- `max_scale` (Number) An upper bound for the number of Pods that can be running in parallel for the integration. Knative has its own cap value that depends on the installation. Refer to the Knative documentation for more information.
-- `min_scale` (Number) The minimum number of Pods that should be running at any time for the integration. It's **zero** by default, meaning that the integration is scaled down to zero when not used for a configured amount of time. Refer to the Knative documentation for more information.
-- `rollout_duration` (String) Enables to gradually shift traffic to the latest Revision and sets the rollout duration. It's disabled by default and must be expressed as a Golang 'time.Duration' string representation, rounded to a second precision.
-- `timeout_seconds` (Number) The maximum duration in seconds that the request instance is allowed to respond to a request. This field propagates to the integration pod's terminationGracePeriodSeconds Refer to the Knative documentation for more information.
-- `visibility` (String) Setting 'cluster-local', Knative service becomes a private service. Specifically, this option applies the 'networking.knative.dev/visibility' label to Knative service. Refer to the Knative documentation for more information.
+- `max_scale` (Number) An upper bound for the number of Pods that can be running in parallel for the integration.Knative has its own cap value that depends on the installation.Refer to the Knative documentation for more information.
+- `min_scale` (Number) The minimum number of Pods that should be running at any time for the integration. It's **zero** by default, meaning thatthe integration is scaled down to zero when not used for a configured amount of time.Refer to the Knative documentation for more information.
+- `rollout_duration` (String) Enables to gradually shift traffic to the latest Revision and sets the rollout duration.It's disabled by default and must be expressed as a Golang 'time.Duration' string representation,rounded to a second precision.
+- `timeout_seconds` (Number) The maximum duration in seconds that the request instance is allowed to respond to a request.This field propagates to the integration pod's terminationGracePeriodSecondsRefer to the Knative documentation for more information.
+- `visibility` (String) Setting 'cluster-local', Knative service becomes a private service.Specifically, this option applies the 'networking.knative.dev/visibility' label to Knative service.Refer to the Knative documentation for more information.
@@ -3281,7 +3281,7 @@ Optional:
Optional:
- `color` (Boolean) Colorize the log output
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
- `format` (String) Logs message format
- `json` (Boolean) Output the logs in JSON
@@ -3302,13 +3302,13 @@ Required:
Optional:
-- `configs` (List of String) A list of configuration pointing to configmap/secret. The configuration are expected to be UTF-8 resources as they are processed by runtime Camel Context and tried to be parsed as property files. They are also made available on the classpath in order to ease their usage directly from the Route. Syntax: [configmap|secret]:name[/key], where name represents the resource name and key optionally represents the resource key to be filtered
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configs` (List of String) A list of configuration pointing to configmap/secret.The configuration are expected to be UTF-8 resources as they are processed by runtime Camel Context and tried to be parsed as property files.They are also made available on the classpath in order to ease their usage directly from the Route.Syntax: [configmap|secret]:name[/key], where name represents the resource name and key optionally represents the resource key to be filtered
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `empty_dirs` (List of String) A list of EmptyDir volumes to be mounted. Syntax: [name:/container/path]
- `enabled` (Boolean) Deprecated: no longer in use.
-- `hot_reload` (Boolean) Enable 'hot reload' when a secret/configmap mounted is edited (default 'false'). The configmap/secret must be marked with 'camel.apache.org/integration' label to be taken in account. The resource will be watched for any kind change, also for changes in metadata.
-- `resources` (List of String) A list of resources (text or binary content) pointing to configmap/secret. The resources are expected to be any resource type (text or binary content). The destination path can be either a default location or any path specified by the user. Syntax: [configmap|secret]:name[/key][@path], where name represents the resource name, key optionally represents the resource key to be filtered and path represents the destination path
-- `scan_kamelets_implicit_label_secrets` (Boolean) Deprecated: include your properties in an explicit property file backed by a secret. Let the operator to scan for secret labeled with 'camel.apache.org/kamelet' and 'camel.apache.org/kamelet.configuration'. These secrets are mounted to the application and treated as plain properties file with their key/value list (ie .spec.data['camel.my-property'] = my-value) (default 'true').
+- `hot_reload` (Boolean) Enable 'hot reload' when a secret/configmap mounted is edited (default 'false'). The configmap/secret must bemarked with 'camel.apache.org/integration' label to be taken in account. The resource will be watched for any kind change, also forchanges in metadata.
+- `resources` (List of String) A list of resources (text or binary content) pointing to configmap/secret.The resources are expected to be any resource type (text or binary content).The destination path can be either a default location or any path specified by the user.Syntax: [configmap|secret]:name[/key][@path], where name represents the resource name, key optionally represents the resource key to be filtered and path represents the destination path
+- `scan_kamelets_implicit_label_secrets` (Boolean) Deprecated: include your properties in an explicit property file backed by a secret.Let the operator to scan for secret labeled with 'camel.apache.org/kamelet' and 'camel.apache.org/kamelet.configuration'.These secrets are mounted to the application and treated as plain properties file with their key/value list(ie .spec.data['camel.my-property'] = my-value) (default 'true').
- `volumes` (List of String) A list of Persistent Volume Claims to be mounted. Syntax: [pvcname:/container/path]
@@ -3317,8 +3317,8 @@ Optional:
Optional:
-- `configmaps` (List of String) The configmaps holding the spec of the OpenAPI
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configmaps` (List of String) The configmaps holding the spec of the OpenAPI (compatible with > 3.0 spec only).
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Deprecated: no longer in use.
@@ -3327,7 +3327,7 @@ Optional:
Optional:
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
- `target_annotations` (List of String) The set of annotations to be transferred
- `target_labels` (List of String) The set of labels to be transferred
@@ -3338,10 +3338,10 @@ Optional:
Optional:
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
-- `max_unavailable` (String) The number of pods for the Integration that can be unavailable after an eviction. It can be either an absolute number or a percentage (default '1' if 'min-available' is also not set). Only one of 'max-unavailable' and 'min-available' can be specified.
-- `min_available` (String) The number of pods for the Integration that must still be available after an eviction. It can be either an absolute number or a percentage. Only one of 'min-available' and 'max-unavailable' can be specified.
+- `max_unavailable` (String) The number of pods for the Integration that can be unavailable after an eviction.It can be either an absolute number or a percentage (default '1' if 'min-available' is also not set).Only one of 'max-unavailable' and 'min-available' can be specified.
+- `min_available` (String) The number of pods for the Integration that must still be available after an eviction.It can be either an absolute number or a percentage.Only one of 'min-available' and 'max-unavailable' can be specified.
@@ -3349,11 +3349,11 @@ Optional:
Optional:
-- `auto` (Boolean) To automatically detect from the environment if a default platform can be created (it will be created on OpenShift or when a registry address is set). Deprecated: Platform is auto generated by the operator install procedure - maintained for backward compatibility
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
-- `create_default` (Boolean) To create a default (empty) platform when the platform is missing. Deprecated: Platform is auto generated by the operator install procedure - maintained for backward compatibility
+- `auto` (Boolean) To automatically detect from the environment if a default platform can be created (it will be created on OpenShift or when a registry address is set).Deprecated: Platform is auto generated by the operator install procedure - maintained for backward compatibility
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
+- `create_default` (Boolean) To create a default (empty) platform when the platform is missing.Deprecated: Platform is auto generated by the operator install procedure - maintained for backward compatibility
- `enabled` (Boolean) Deprecated: no longer in use.
-- `global` (Boolean) Indicates if the platform should be created globally in the case of global operator (default true). Deprecated: Platform is auto generated by the operator install procedure - maintained for backward compatibility
+- `global` (Boolean) Indicates if the platform should be created globally in the case of global operator (default true).Deprecated: Platform is auto generated by the operator install procedure - maintained for backward compatibility
@@ -3361,7 +3361,7 @@ Optional:
Optional:
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
@@ -3370,7 +3370,7 @@ Optional:
Optional:
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
- `pod_monitor` (Boolean) Whether a 'PodMonitor' resource is created (default 'true').
- `pod_monitor_labels` (List of String) The 'PodMonitor' resource labels, applicable when 'pod-monitor' is 'true'.
@@ -3382,7 +3382,7 @@ Optional:
Optional:
- `auto` (Boolean) Automatically configures the platform registry secret on the pod if it is of type 'kubernetes.io/dockerconfigjson'.
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
- `image_puller_delegation` (Boolean) When using a global operator with a shared platform, this enables delegation of the 'system:image-puller' cluster role on the operator namespace to the integration service account.
- `secret_name` (String) The pull secret name to set on the Pod. If left empty this is automatically taken from the 'IntegrationPlatform' registry configuration.
@@ -3393,12 +3393,12 @@ Optional:
Optional:
-- `build_mode` (List of String) The Quarkus mode to run: either 'jvm' or 'native' (default 'jvm'). In case both 'jvm' and 'native' are specified, two 'IntegrationKit' resources are created, with the 'native' kit having precedence over the 'jvm' one once ready.
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `build_mode` (List of String) The Quarkus mode to run: either 'jvm' or 'native' (default 'jvm').In case both 'jvm' and 'native' are specified, two 'IntegrationKit' resources are created,with the 'native' kit having precedence over the 'jvm' one once ready.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Deprecated: no longer in use.
- `native_base_image` (String) The base image to use when running a native build (default 'quay.io/quarkus/quarkus-micro-image:2.0')
- `native_builder_image` (String) The image containing the tooling required for a native build (by default it will use the one provided in the runtime catalog)
-- `package_types` (List of String) The Quarkus package types, 'fast-jar' or 'native' (default 'fast-jar'). In case both 'fast-jar' and 'native' are specified, two 'IntegrationKit' resources are created, with the native kit having precedence over the 'fast-jar' one once ready. The order influences the resolution of the current kit for the integration. The kit corresponding to the first package type will be assigned to the integration in case no existing kit that matches the integration exists. Deprecated: use 'build-mode' instead.
+- `package_types` (List of String) The Quarkus package types, 'fast-jar' or 'native' (default 'fast-jar').In case both 'fast-jar' and 'native' are specified, two 'IntegrationKit' resources are created,with the native kit having precedence over the 'fast-jar' one once ready.The order influences the resolution of the current kit for the integration.The kit corresponding to the first package type will be assigned to theintegration in case no existing kit that matches the integration exists.Deprecated: use 'build-mode' instead.
@@ -3406,7 +3406,7 @@ Optional:
Optional:
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
@@ -3415,20 +3415,20 @@ Optional:
Optional:
-- `annotations` (Map of String) The annotations added to route. This can be used to set route specific annotations For annotations options see https://docs.openshift.com/container-platform/3.11/architecture/networking/routes.html#route-specific-annotations CLI usage example: -t 'route.annotations.'haproxy.router.openshift.io/balance'=true'
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `annotations` (Map of String) The annotations added to route.This can be used to set route specific annotationsFor annotations options see https://docs.openshift.com/container-platform/3.11/architecture/networking/routes.html#route-specific-annotationsCLI usage example: -t 'route.annotations.'haproxy.router.openshift.io/balance'=true'
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
- `host` (String) To configure the host exposed by the route.
-- `tls_ca_certificate` (String) The TLS CA certificate contents. Refer to the OpenShift route documentation for additional information.
-- `tls_ca_certificate_secret` (String) The secret name and key reference to the TLS CA certificate. The format is 'secret-name[/key-name]', the value represents the secret name, if there is only one key in the secret it will be read, otherwise you can set a key name separated with a '/'. Refer to the OpenShift route documentation for additional information.
-- `tls_certificate` (String) The TLS certificate contents. Refer to the OpenShift route documentation for additional information.
-- `tls_certificate_secret` (String) The secret name and key reference to the TLS certificate. The format is 'secret-name[/key-name]', the value represents the secret name, if there is only one key in the secret it will be read, otherwise you can set a key name separated with a '/'. Refer to the OpenShift route documentation for additional information.
-- `tls_destination_ca_certificate` (String) The destination CA certificate provides the contents of the ca certificate of the final destination. When using reencrypt termination this file should be provided in order to have routers use it for health checks on the secure connection. If this field is not specified, the router may provide its own destination CA and perform hostname validation using the short service name (service.namespace.svc), which allows infrastructure generated certificates to automatically verify. Refer to the OpenShift route documentation for additional information.
-- `tls_destination_ca_certificate_secret` (String) The secret name and key reference to the destination CA certificate. The format is 'secret-name[/key-name]', the value represents the secret name, if there is only one key in the secret it will be read, otherwise you can set a key name separated with a '/'. Refer to the OpenShift route documentation for additional information.
-- `tls_insecure_edge_termination_policy` (String) To configure how to deal with insecure traffic, e.g. 'Allow', 'Disable' or 'Redirect' traffic. Refer to the OpenShift route documentation for additional information.
-- `tls_key` (String) The TLS certificate key contents. Refer to the OpenShift route documentation for additional information.
-- `tls_key_secret` (String) The secret name and key reference to the TLS certificate key. The format is 'secret-name[/key-name]', the value represents the secret name, if there is only one key in the secret it will be read, otherwise you can set a key name separated with a '/'. Refer to the OpenShift route documentation for additional information.
-- `tls_termination` (String) The TLS termination type, like 'edge', 'passthrough' or 'reencrypt'. Refer to the OpenShift route documentation for additional information.
+- `tls_ca_certificate` (String) The TLS CA certificate contents.Refer to the OpenShift route documentation for additional information.
+- `tls_ca_certificate_secret` (String) The secret name and key reference to the TLS CA certificate. The format is 'secret-name[/key-name]', the value represents the secret name, if there is only one key in the secret it will be read, otherwise you can set a key name separated with a '/'.Refer to the OpenShift route documentation for additional information.
+- `tls_certificate` (String) The TLS certificate contents.Refer to the OpenShift route documentation for additional information.
+- `tls_certificate_secret` (String) The secret name and key reference to the TLS certificate. The format is 'secret-name[/key-name]', the value represents the secret name, if there is only one key in the secret it will be read, otherwise you can set a key name separated with a '/'.Refer to the OpenShift route documentation for additional information.
+- `tls_destination_ca_certificate` (String) The destination CA certificate provides the contents of the ca certificate of the final destination. When using reencrypttermination this file should be provided in order to have routers use it for health checks on the secure connection.If this field is not specified, the router may provide its own destination CA and perform hostname validation usingthe short service name (service.namespace.svc), which allows infrastructure generated certificates to automaticallyverify.Refer to the OpenShift route documentation for additional information.
+- `tls_destination_ca_certificate_secret` (String) The secret name and key reference to the destination CA certificate. The format is 'secret-name[/key-name]', the value represents the secret name, if there is only one key in the secret it will be read, otherwise you can set a key name separated with a '/'.Refer to the OpenShift route documentation for additional information.
+- `tls_insecure_edge_termination_policy` (String) To configure how to deal with insecure traffic, e.g. 'Allow', 'Disable' or 'Redirect' traffic.Refer to the OpenShift route documentation for additional information.
+- `tls_key` (String) The TLS certificate key contents.Refer to the OpenShift route documentation for additional information.
+- `tls_key_secret` (String) The secret name and key reference to the TLS certificate key. The format is 'secret-name[/key-name]', the value represents the secret name, if there is only one key in the secret it will be read, otherwise you can set a key name separated with a '/'.Refer to the OpenShift route documentation for additional information.
+- `tls_termination` (String) The TLS termination type, like 'edge', 'passthrough' or 'reencrypt'.Refer to the OpenShift route documentation for additional information.
@@ -3436,7 +3436,7 @@ Optional:
Optional:
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Deprecated: no longer in use.
- `run_as_non_root` (Boolean) Security Context RunAsNonRoot configuration (default false).
- `run_as_user` (Number) Security Context RunAsUser configuration (default none): this value is automatically retrieved in Openshift clusters when not explicitly set.
@@ -3449,9 +3449,9 @@ Optional:
Optional:
- `auto` (Boolean) To automatically detect from the code if a Service needs to be created.
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
-- `node_port` (Boolean) Enable Service to be exposed as NodePort (default 'false'). Deprecated: Use service type instead.
+- `node_port` (Boolean) Enable Service to be exposed as NodePort (default 'false').Deprecated: Use service type instead.
- `type` (String) The type of service to be used, either 'ClusterIP', 'NodePort' or 'LoadBalancer'.
@@ -3460,7 +3460,7 @@ Optional:
Optional:
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
- `services` (List of String) List of Services in the form [[apigroup/]version:]kind:[namespace/]name
@@ -3486,7 +3486,7 @@ Required:
Optional:
-- `configuration` (Map of String) Legacy trait configuration parameters. Deprecated: for backward compatibility.
+- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility.
- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property.
- `taints` (List of String) The list of taints to tolerate, in the form 'Key[=Value]:Effect[:Seconds]'
@@ -3526,12 +3526,12 @@ Optional:
Optional:
- `api_version` (String) API version of the referent.
-- `field_path` (String) If referring to a piece of an object instead of an entire object, this string should contain a valid JSON/Go field access statement, such as desiredState.manifest.containers[2]. For example, if the object reference is to a container within a pod, this would take on a value like: 'spec.containers{name}' (where 'name' refers to the name of the container that triggered the event) or if no container name is specified 'spec.containers[2]' (container with index 2 in this pod). This syntax is chosen only to have some well-defined way of referencing a part of an object. TODO: this design is not final and this field is subject to change in the future.
-- `kind` (String) Kind of the referent. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-- `namespace` (String) Namespace of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/
-- `resource_version` (String) Specific resourceVersion to which this reference is made, if any. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
-- `uid` (String) UID of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids
+- `field_path` (String) If referring to a piece of an object instead of an entire object, this stringshould contain a valid JSON/Go field access statement, such as desiredState.manifest.containers[2].For example, if the object reference is to a container within a pod, this would take on a value like:'spec.containers{name}' (where 'name' refers to the name of the container that triggeredthe event) or if no container name is specified 'spec.containers[2]' (container withindex 2 in this pod). This syntax is chosen only to have some well-defined way ofreferencing a part of an object.TODO: this design is not final and this field is subject to change in the future.
+- `kind` (String) Kind of the referent.More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+- `namespace` (String) Namespace of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/
+- `resource_version` (String) Specific resourceVersion to which this reference is made, if any.More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
+- `uid` (String) UID of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids
@@ -3560,12 +3560,12 @@ Optional:
Optional:
- `api_version` (String) API version of the referent.
-- `field_path` (String) If referring to a piece of an object instead of an entire object, this string should contain a valid JSON/Go field access statement, such as desiredState.manifest.containers[2]. For example, if the object reference is to a container within a pod, this would take on a value like: 'spec.containers{name}' (where 'name' refers to the name of the container that triggered the event) or if no container name is specified 'spec.containers[2]' (container with index 2 in this pod). This syntax is chosen only to have some well-defined way of referencing a part of an object. TODO: this design is not final and this field is subject to change in the future.
-- `kind` (String) Kind of the referent. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-- `namespace` (String) Namespace of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/
-- `resource_version` (String) Specific resourceVersion to which this reference is made, if any. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
-- `uid` (String) UID of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids
+- `field_path` (String) If referring to a piece of an object instead of an entire object, this stringshould contain a valid JSON/Go field access statement, such as desiredState.manifest.containers[2].For example, if the object reference is to a container within a pod, this would take on a value like:'spec.containers{name}' (where 'name' refers to the name of the container that triggeredthe event) or if no container name is specified 'spec.containers[2]' (container withindex 2 in this pod). This syntax is chosen only to have some well-defined way ofreferencing a part of an object.TODO: this design is not final and this field is subject to change in the future.
+- `kind` (String) Kind of the referent.More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+- `namespace` (String) Namespace of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/
+- `resource_version` (String) Specific resourceVersion to which this reference is made, if any.More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
+- `uid` (String) UID of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids
@@ -3594,9 +3594,9 @@ Optional:
Optional:
- `api_version` (String) API version of the referent.
-- `field_path` (String) If referring to a piece of an object instead of an entire object, this string should contain a valid JSON/Go field access statement, such as desiredState.manifest.containers[2]. For example, if the object reference is to a container within a pod, this would take on a value like: 'spec.containers{name}' (where 'name' refers to the name of the container that triggered the event) or if no container name is specified 'spec.containers[2]' (container with index 2 in this pod). This syntax is chosen only to have some well-defined way of referencing a part of an object. TODO: this design is not final and this field is subject to change in the future.
-- `kind` (String) Kind of the referent. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-- `namespace` (String) Namespace of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/
-- `resource_version` (String) Specific resourceVersion to which this reference is made, if any. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
-- `uid` (String) UID of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids
+- `field_path` (String) If referring to a piece of an object instead of an entire object, this stringshould contain a valid JSON/Go field access statement, such as desiredState.manifest.containers[2].For example, if the object reference is to a container within a pod, this would take on a value like:'spec.containers{name}' (where 'name' refers to the name of the container that triggeredthe event) or if no container name is specified 'spec.containers[2]' (container withindex 2 in this pod). This syntax is chosen only to have some well-defined way ofreferencing a part of an object.TODO: this design is not final and this field is subject to change in the future.
+- `kind` (String) Kind of the referent.More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+- `namespace` (String) Namespace of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/
+- `resource_version` (String) Specific resourceVersion to which this reference is made, if any.More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
+- `uid` (String) UID of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids
diff --git a/docs/data-sources/ceph_rook_io_ceph_object_store_v1_manifest.md b/docs/data-sources/ceph_rook_io_ceph_object_store_v1_manifest.md
index ff643bbc6..49e108987 100644
--- a/docs/data-sources/ceph_rook_io_ceph_object_store_v1_manifest.md
+++ b/docs/data-sources/ceph_rook_io_ceph_object_store_v1_manifest.md
@@ -54,16 +54,42 @@ Optional:
Optional:
- `allow_users_in_namespaces` (List of String) The list of allowed namespaces in addition to the object store namespacewhere ceph object store users may be created. Specify '*' to allow allnamespaces, otherwise list individual namespaces that are to be allowed.This is useful for applications that need object store credentialsto be created in their own namespace, where neither OBCs nor COSIis being used to create buckets. The default is empty.
+- `auth` (Attributes) The authentication configuration (see [below for nested schema](#nestedatt--spec--auth))
- `data_pool` (Attributes) The data pool settings (see [below for nested schema](#nestedatt--spec--data_pool))
- `gateway` (Attributes) The rgw pod info (see [below for nested schema](#nestedatt--spec--gateway))
- `health_check` (Attributes) The RGW health probes (see [below for nested schema](#nestedatt--spec--health_check))
- `hosting` (Attributes) Hosting settings for the object store.A common use case for hosting configuration is to inform Rook of endpoints that support DNSwildcards, which in turn allows virtual host-style bucket addressing. (see [below for nested schema](#nestedatt--spec--hosting))
- `metadata_pool` (Attributes) The metadata pool settings (see [below for nested schema](#nestedatt--spec--metadata_pool))
- `preserve_pools_on_delete` (Boolean) Preserve pools on object store deletion
+- `protocols` (Attributes) The protocol specification (see [below for nested schema](#nestedatt--spec--protocols))
- `security` (Attributes) Security represents security settings (see [below for nested schema](#nestedatt--spec--security))
- `shared_pools` (Attributes) The pool information when configuring RADOS namespaces in existing pools. (see [below for nested schema](#nestedatt--spec--shared_pools))
- `zone` (Attributes) The multisite info (see [below for nested schema](#nestedatt--spec--zone))
+
+### Nested Schema for `spec.auth`
+
+Optional:
+
+- `keystone` (Attributes) The spec for Keystone (see [below for nested schema](#nestedatt--spec--auth--keystone))
+
+
+### Nested Schema for `spec.auth.keystone`
+
+Required:
+
+- `accepted_roles` (List of String) The roles requires to serve requests.
+- `service_user_secret_name` (String) The name of the secret containing the credentials for the service user account used by RGW. It has to be in the same namespace as the object store resource.
+- `url` (String) The URL for the Keystone server.
+
+Optional:
+
+- `implicit_tenants` (String) Create new users in their own tenants of the same name. Possible values are true, false, swift and s3. The latter have the effect of splitting the identity space such that only the indicated protocol will use implicit tenants.
+- `revocation_interval` (Number) The number of seconds between token revocation checks.
+- `token_cache_size` (Number) The maximum number of entries in each Keystone token cache.
+
+
+
### Nested Schema for `spec.data_pool`
@@ -979,6 +1005,34 @@ Optional:
+
+### Nested Schema for `spec.protocols`
+
+Optional:
+
+- `s3` (Attributes) The spec for S3 (see [below for nested schema](#nestedatt--spec--protocols--s3))
+- `swift` (Attributes) The spec for Swift (see [below for nested schema](#nestedatt--spec--protocols--swift))
+
+
+### Nested Schema for `spec.protocols.s3`
+
+Optional:
+
+- `auth_use_keystone` (Boolean) Whether to use Keystone for authentication. This option maps directly to the rgw_s3_auth_use_keystone option. Enabling it allows generating S3 credentials via an OpenStack API call, see the docs. If not given, the defaults of the corresponding RGW option apply.
+- `enabled` (Boolean) Whether to enable S3. This defaults to true (even if protocols.s3 is not present in the CRD). This maintains backwards compatibility – by default S3 is enabled.
+
+
+
+### Nested Schema for `spec.protocols.swift`
+
+Optional:
+
+- `account_in_url` (Boolean) Whether or not the Swift account name should be included in the Swift API URL. If set to false (the default), then the Swift API will listen on a URL formed like http://host:port//v1. If set to true, the Swift API URL will be http://host:port//v1/AUTH_. You must set this option to true (and update the Keystone service catalog) if you want radosgw to support publicly-readable containers and temporary URLs.
+- `url_prefix` (String) The URL prefix for the Swift API, to distinguish it from the S3 API endpoint. The default is swift, which makes the Swift API available at the URL http://host:port/swift/v1 (or http://host:port/swift/v1/AUTH_%(tenant_id)s if rgw swift account in url is enabled).
+- `versioning_enabled` (Boolean) Enables the Object Versioning of OpenStack Object Storage API. This allows clients to put the X-Versions-Location attribute on containers that should be versioned.
+
+
+
### Nested Schema for `spec.security`
diff --git a/docs/data-sources/cert_manager_io_cluster_issuer_v1_manifest.md b/docs/data-sources/cert_manager_io_cluster_issuer_v1_manifest.md
index 345324411..91b99cb2c 100644
--- a/docs/data-sources/cert_manager_io_cluster_issuer_v1_manifest.md
+++ b/docs/data-sources/cert_manager_io_cluster_issuer_v1_manifest.md
@@ -448,6 +448,7 @@ Optional:
- `labels` (Map of String) Custom labels that will be applied to HTTPRoutes created by cert-managerwhile solving HTTP-01 challenges.
- `parent_refs` (Attributes List) When solving an HTTP-01 challenge, cert-manager creates an HTTPRoute.cert-manager needs to know which parentRefs should be used when creatingthe HTTPRoute. Usually, the parentRef references a Gateway. See:https://gateway-api.sigs.k8s.io/api-types/httproute/#attaching-to-gateways (see [below for nested schema](#nestedatt--spec--acme--solvers--http01--gateway_http_route--parent_refs))
+- `pod_template` (Attributes) Optional pod template used to configure the ACME challenge solver podsused for HTTP01 challenges. (see [below for nested schema](#nestedatt--spec--acme--solvers--http01--gateway_http_route--pod_template))
- `service_type` (String) Optional service type for Kubernetes solver service. Supported valuesare NodePort or ClusterIP. If unset, defaults to NodePort.
@@ -466,6 +467,488 @@ Optional:
- `section_name` (String) SectionName is the name of a section within the target resource. In thefollowing resources, SectionName is interpreted as the following:* Gateway: Listener name. When both Port (experimental) and SectionNameare specified, the name and port of the selected listener must matchboth specified values.* Service: Port name. When both Port (experimental) and SectionNameare specified, the name and port of the selected listener must matchboth specified values.Implementations MAY choose to support attaching Routes to other resources.If that is the case, they MUST clearly document how SectionName isinterpreted.When unspecified (empty string), this will reference the entire resource.For the purpose of status, an attachment is considered successful if atleast one section in the parent resource accepts it. For example, Gatewaylisteners can restrict which Routes can attach to them by Route kind,namespace, or hostname. If 1 of 2 Gateway listeners accept attachment fromthe referencing Route, the Route MUST be considered successfullyattached. If no Gateway listeners accept attachment from this Route, theRoute MUST be considered detached from the Gateway.Support: Core
+
+### Nested Schema for `spec.acme.solvers.http01.gateway_http_route.pod_template`
+
+Optional:
+
+- `metadata` (Attributes) ObjectMeta overrides for the pod used to solve HTTP01 challenges.Only the 'labels' and 'annotations' fields may be set.If labels or annotations overlap with in-built values, the values herewill override the in-built values. (see [below for nested schema](#nestedatt--spec--acme--solvers--http01--gateway_http_route--pod_template--metadata))
+- `spec` (Attributes) PodSpec defines overrides for the HTTP01 challenge solver pod.Check ACMEChallengeSolverHTTP01IngressPodSpec to find out currently supported fields.All other fields will be ignored. (see [below for nested schema](#nestedatt--spec--acme--solvers--http01--gateway_http_route--pod_template--spec))
+
+
+### Nested Schema for `spec.acme.solvers.http01.gateway_http_route.pod_template.metadata`
+
+Optional:
+
+- `annotations` (Map of String) Annotations that should be added to the create ACME HTTP01 solver pods.
+- `labels` (Map of String) Labels that should be added to the created ACME HTTP01 solver pods.
+
+
+
+### Nested Schema for `spec.acme.solvers.http01.gateway_http_route.pod_template.spec`
+
+Optional:
+
+- `affinity` (Attributes) If specified, the pod's scheduling constraints (see [below for nested schema](#nestedatt--spec--acme--solvers--http01--gateway_http_route--pod_template--spec--affinity))
+- `image_pull_secrets` (Attributes List) If specified, the pod's imagePullSecrets (see [below for nested schema](#nestedatt--spec--acme--solvers--http01--gateway_http_route--pod_template--spec--image_pull_secrets))
+- `node_selector` (Map of String) NodeSelector is a selector which must be true for the pod to fit on a node.Selector which must match a node's labels for the pod to be scheduled on that node.More info: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/
+- `priority_class_name` (String) If specified, the pod's priorityClassName.
+- `security_context` (Attributes) If specified, the pod's security context (see [below for nested schema](#nestedatt--spec--acme--solvers--http01--gateway_http_route--pod_template--spec--security_context))
+- `service_account_name` (String) If specified, the pod's service account
+- `tolerations` (Attributes List) If specified, the pod's tolerations. (see [below for nested schema](#nestedatt--spec--acme--solvers--http01--gateway_http_route--pod_template--spec--tolerations))
+
+
+### Nested Schema for `spec.acme.solvers.http01.gateway_http_route.pod_template.spec.affinity`
+
+Optional:
+
+- `node_affinity` (Attributes) Describes node affinity scheduling rules for the pod. (see [below for nested schema](#nestedatt--spec--acme--solvers--http01--gateway_http_route--pod_template--spec--affinity--node_affinity))
+- `pod_affinity` (Attributes) Describes pod affinity scheduling rules (e.g. co-locate this pod in the same node, zone, etc. as some other pod(s)). (see [below for nested schema](#nestedatt--spec--acme--solvers--http01--gateway_http_route--pod_template--spec--affinity--pod_affinity))
+- `pod_anti_affinity` (Attributes) Describes pod anti-affinity scheduling rules (e.g. avoid putting this pod in the same node, zone, etc. as some other pod(s)). (see [below for nested schema](#nestedatt--spec--acme--solvers--http01--gateway_http_route--pod_template--spec--affinity--pod_anti_affinity))
+
+
+### Nested Schema for `spec.acme.solvers.http01.gateway_http_route.pod_template.spec.affinity.node_affinity`
+
+Optional:
+
+- `preferred_during_scheduling_ignored_during_execution` (Attributes List) The scheduler will prefer to schedule pods to nodes that satisfythe affinity expressions specified by this field, but it may choosea node that violates one or more of the expressions. The node that ismost preferred is the one with the greatest sum of weights, i.e.for each node that meets all of the scheduling requirements (resourcerequest, requiredDuringScheduling affinity expressions, etc.),compute a sum by iterating through the elements of this field and adding'weight' to the sum if the node matches the corresponding matchExpressions; thenode(s) with the highest sum are the most preferred. (see [below for nested schema](#nestedatt--spec--acme--solvers--http01--gateway_http_route--pod_template--spec--affinity--node_affinity--preferred_during_scheduling_ignored_during_execution))
+- `required_during_scheduling_ignored_during_execution` (Attributes) If the affinity requirements specified by this field are not met atscheduling time, the pod will not be scheduled onto the node.If the affinity requirements specified by this field cease to be metat some point during pod execution (e.g. due to an update), the systemmay or may not try to eventually evict the pod from its node. (see [below for nested schema](#nestedatt--spec--acme--solvers--http01--gateway_http_route--pod_template--spec--affinity--node_affinity--required_during_scheduling_ignored_during_execution))
+
+
+### Nested Schema for `spec.acme.solvers.http01.gateway_http_route.pod_template.spec.affinity.node_affinity.preferred_during_scheduling_ignored_during_execution`
+
+Required:
+
+- `preference` (Attributes) A node selector term, associated with the corresponding weight. (see [below for nested schema](#nestedatt--spec--acme--solvers--http01--gateway_http_route--pod_template--spec--affinity--node_affinity--preferred_during_scheduling_ignored_during_execution--preference))
+- `weight` (Number) Weight associated with matching the corresponding nodeSelectorTerm, in the range 1-100.
+
+
+### Nested Schema for `spec.acme.solvers.http01.gateway_http_route.pod_template.spec.affinity.node_affinity.preferred_during_scheduling_ignored_during_execution.preference`
+
+Optional:
+
+- `match_expressions` (Attributes List) A list of node selector requirements by node's labels. (see [below for nested schema](#nestedatt--spec--acme--solvers--http01--gateway_http_route--pod_template--spec--affinity--node_affinity--preferred_during_scheduling_ignored_during_execution--preference--match_expressions))
+- `match_fields` (Attributes List) A list of node selector requirements by node's fields. (see [below for nested schema](#nestedatt--spec--acme--solvers--http01--gateway_http_route--pod_template--spec--affinity--node_affinity--preferred_during_scheduling_ignored_during_execution--preference--match_fields))
+
+
+### Nested Schema for `spec.acme.solvers.http01.gateway_http_route.pod_template.spec.affinity.node_affinity.preferred_during_scheduling_ignored_during_execution.preference.match_expressions`
+
+Required:
+
+- `key` (String) The label key that the selector applies to.
+- `operator` (String) Represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt.
+
+Optional:
+
+- `values` (List of String) An array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. If the operator is Gt or Lt, the valuesarray must have a single element, which will be interpreted as an integer.This array is replaced during a strategic merge patch.
+
+
+
+### Nested Schema for `spec.acme.solvers.http01.gateway_http_route.pod_template.spec.affinity.node_affinity.preferred_during_scheduling_ignored_during_execution.preference.match_fields`
+
+Required:
+
+- `key` (String) The label key that the selector applies to.
+- `operator` (String) Represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt.
+
+Optional:
+
+- `values` (List of String) An array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. If the operator is Gt or Lt, the valuesarray must have a single element, which will be interpreted as an integer.This array is replaced during a strategic merge patch.
+
+
+
+
+
+### Nested Schema for `spec.acme.solvers.http01.gateway_http_route.pod_template.spec.affinity.node_affinity.required_during_scheduling_ignored_during_execution`
+
+Required:
+
+- `node_selector_terms` (Attributes List) Required. A list of node selector terms. The terms are ORed. (see [below for nested schema](#nestedatt--spec--acme--solvers--http01--gateway_http_route--pod_template--spec--affinity--node_affinity--required_during_scheduling_ignored_during_execution--node_selector_terms))
+
+
+### Nested Schema for `spec.acme.solvers.http01.gateway_http_route.pod_template.spec.affinity.node_affinity.required_during_scheduling_ignored_during_execution.node_selector_terms`
+
+Optional:
+
+- `match_expressions` (Attributes List) A list of node selector requirements by node's labels. (see [below for nested schema](#nestedatt--spec--acme--solvers--http01--gateway_http_route--pod_template--spec--affinity--node_affinity--required_during_scheduling_ignored_during_execution--node_selector_terms--match_expressions))
+- `match_fields` (Attributes List) A list of node selector requirements by node's fields. (see [below for nested schema](#nestedatt--spec--acme--solvers--http01--gateway_http_route--pod_template--spec--affinity--node_affinity--required_during_scheduling_ignored_during_execution--node_selector_terms--match_fields))
+
+
+### Nested Schema for `spec.acme.solvers.http01.gateway_http_route.pod_template.spec.affinity.node_affinity.required_during_scheduling_ignored_during_execution.node_selector_terms.match_expressions`
+
+Required:
+
+- `key` (String) The label key that the selector applies to.
+- `operator` (String) Represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt.
+
+Optional:
+
+- `values` (List of String) An array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. If the operator is Gt or Lt, the valuesarray must have a single element, which will be interpreted as an integer.This array is replaced during a strategic merge patch.
+
+
+
+### Nested Schema for `spec.acme.solvers.http01.gateway_http_route.pod_template.spec.affinity.node_affinity.required_during_scheduling_ignored_during_execution.node_selector_terms.match_fields`
+
+Required:
+
+- `key` (String) The label key that the selector applies to.
+- `operator` (String) Represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt.
+
+Optional:
+
+- `values` (List of String) An array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. If the operator is Gt or Lt, the valuesarray must have a single element, which will be interpreted as an integer.This array is replaced during a strategic merge patch.
+
+
+
+
+
+
+### Nested Schema for `spec.acme.solvers.http01.gateway_http_route.pod_template.spec.affinity.pod_affinity`
+
+Optional:
+
+- `preferred_during_scheduling_ignored_during_execution` (Attributes List) The scheduler will prefer to schedule pods to nodes that satisfythe affinity expressions specified by this field, but it may choosea node that violates one or more of the expressions. The node that ismost preferred is the one with the greatest sum of weights, i.e.for each node that meets all of the scheduling requirements (resourcerequest, requiredDuringScheduling affinity expressions, etc.),compute a sum by iterating through the elements of this field and adding'weight' to the sum if the node has pods which matches the corresponding podAffinityTerm; thenode(s) with the highest sum are the most preferred. (see [below for nested schema](#nestedatt--spec--acme--solvers--http01--gateway_http_route--pod_template--spec--affinity--pod_affinity--preferred_during_scheduling_ignored_during_execution))
+- `required_during_scheduling_ignored_during_execution` (Attributes List) If the affinity requirements specified by this field are not met atscheduling time, the pod will not be scheduled onto the node.If the affinity requirements specified by this field cease to be metat some point during pod execution (e.g. due to a pod label update), thesystem may or may not try to eventually evict the pod from its node.When there are multiple elements, the lists of nodes corresponding to eachpodAffinityTerm are intersected, i.e. all terms must be satisfied. (see [below for nested schema](#nestedatt--spec--acme--solvers--http01--gateway_http_route--pod_template--spec--affinity--pod_affinity--required_during_scheduling_ignored_during_execution))
+
+
+### Nested Schema for `spec.acme.solvers.http01.gateway_http_route.pod_template.spec.affinity.pod_affinity.preferred_during_scheduling_ignored_during_execution`
+
+Required:
+
+- `pod_affinity_term` (Attributes) Required. A pod affinity term, associated with the corresponding weight. (see [below for nested schema](#nestedatt--spec--acme--solvers--http01--gateway_http_route--pod_template--spec--affinity--pod_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term))
+- `weight` (Number) weight associated with matching the corresponding podAffinityTerm,in the range 1-100.
+
+
+### Nested Schema for `spec.acme.solvers.http01.gateway_http_route.pod_template.spec.affinity.pod_affinity.preferred_during_scheduling_ignored_during_execution.pod_affinity_term`
+
+Required:
+
+- `topology_key` (String) This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matchingthe labelSelector in the specified namespaces, where co-located is defined as running on a nodewhose value of the label with key topologyKey matches that of any node on which any of theselected pods is running.Empty topologyKey is not allowed.
+
+Optional:
+
+- `label_selector` (Attributes) A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods. (see [below for nested schema](#nestedatt--spec--acme--solvers--http01--gateway_http_route--pod_template--spec--affinity--pod_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--label_selector))
+- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
+- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
+- `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--acme--solvers--http01--gateway_http_route--pod_template--spec--affinity--pod_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--namespace_selector))
+- `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.
+
+
+### Nested Schema for `spec.acme.solvers.http01.gateway_http_route.pod_template.spec.affinity.pod_affinity.preferred_during_scheduling_ignored_during_execution.pod_affinity_term.label_selector`
+
+Optional:
+
+- `match_expressions` (Attributes List) matchExpressions is a list of label selector requirements. The requirements are ANDed. (see [below for nested schema](#nestedatt--spec--acme--solvers--http01--gateway_http_route--pod_template--spec--affinity--pod_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--label_selector--match_expressions))
+- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.
+
+
+### Nested Schema for `spec.acme.solvers.http01.gateway_http_route.pod_template.spec.affinity.pod_affinity.preferred_during_scheduling_ignored_during_execution.pod_affinity_term.label_selector.match_expressions`
+
+Required:
+
+- `key` (String) key is the label key that the selector applies to.
+- `operator` (String) operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.
+
+Optional:
+
+- `values` (List of String) values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.
+
+
+
+
+### Nested Schema for `spec.acme.solvers.http01.gateway_http_route.pod_template.spec.affinity.pod_affinity.preferred_during_scheduling_ignored_during_execution.pod_affinity_term.namespace_selector`
+
+Optional:
+
+- `match_expressions` (Attributes List) matchExpressions is a list of label selector requirements. The requirements are ANDed. (see [below for nested schema](#nestedatt--spec--acme--solvers--http01--gateway_http_route--pod_template--spec--affinity--pod_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--namespace_selector--match_expressions))
+- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.
+
+
+### Nested Schema for `spec.acme.solvers.http01.gateway_http_route.pod_template.spec.affinity.pod_affinity.preferred_during_scheduling_ignored_during_execution.pod_affinity_term.namespace_selector.match_expressions`
+
+Required:
+
+- `key` (String) key is the label key that the selector applies to.
+- `operator` (String) operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.
+
+Optional:
+
+- `values` (List of String) values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.
+
+
+
+
+
+
+### Nested Schema for `spec.acme.solvers.http01.gateway_http_route.pod_template.spec.affinity.pod_affinity.required_during_scheduling_ignored_during_execution`
+
+Required:
+
+- `topology_key` (String) This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matchingthe labelSelector in the specified namespaces, where co-located is defined as running on a nodewhose value of the label with key topologyKey matches that of any node on which any of theselected pods is running.Empty topologyKey is not allowed.
+
+Optional:
+
+- `label_selector` (Attributes) A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods. (see [below for nested schema](#nestedatt--spec--acme--solvers--http01--gateway_http_route--pod_template--spec--affinity--pod_affinity--required_during_scheduling_ignored_during_execution--label_selector))
+- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
+- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
+- `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--acme--solvers--http01--gateway_http_route--pod_template--spec--affinity--pod_affinity--required_during_scheduling_ignored_during_execution--namespace_selector))
+- `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.
+
+
+### Nested Schema for `spec.acme.solvers.http01.gateway_http_route.pod_template.spec.affinity.pod_affinity.required_during_scheduling_ignored_during_execution.label_selector`
+
+Optional:
+
+- `match_expressions` (Attributes List) matchExpressions is a list of label selector requirements. The requirements are ANDed. (see [below for nested schema](#nestedatt--spec--acme--solvers--http01--gateway_http_route--pod_template--spec--affinity--pod_affinity--required_during_scheduling_ignored_during_execution--label_selector--match_expressions))
+- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.
+
+
+### Nested Schema for `spec.acme.solvers.http01.gateway_http_route.pod_template.spec.affinity.pod_affinity.required_during_scheduling_ignored_during_execution.label_selector.match_expressions`
+
+Required:
+
+- `key` (String) key is the label key that the selector applies to.
+- `operator` (String) operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.
+
+Optional:
+
+- `values` (List of String) values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.
+
+
+
+
+### Nested Schema for `spec.acme.solvers.http01.gateway_http_route.pod_template.spec.affinity.pod_affinity.required_during_scheduling_ignored_during_execution.namespace_selector`
+
+Optional:
+
+- `match_expressions` (Attributes List) matchExpressions is a list of label selector requirements. The requirements are ANDed. (see [below for nested schema](#nestedatt--spec--acme--solvers--http01--gateway_http_route--pod_template--spec--affinity--pod_affinity--required_during_scheduling_ignored_during_execution--namespace_selector--match_expressions))
+- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.
+
+
+### Nested Schema for `spec.acme.solvers.http01.gateway_http_route.pod_template.spec.affinity.pod_affinity.required_during_scheduling_ignored_during_execution.namespace_selector.match_expressions`
+
+Required:
+
+- `key` (String) key is the label key that the selector applies to.
+- `operator` (String) operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.
+
+Optional:
+
+- `values` (List of String) values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.
+
+
+
+
+
+
+### Nested Schema for `spec.acme.solvers.http01.gateway_http_route.pod_template.spec.affinity.pod_anti_affinity`
+
+Optional:
+
+- `preferred_during_scheduling_ignored_during_execution` (Attributes List) The scheduler will prefer to schedule pods to nodes that satisfythe anti-affinity expressions specified by this field, but it may choosea node that violates one or more of the expressions. The node that ismost preferred is the one with the greatest sum of weights, i.e.for each node that meets all of the scheduling requirements (resourcerequest, requiredDuringScheduling anti-affinity expressions, etc.),compute a sum by iterating through the elements of this field and adding'weight' to the sum if the node has pods which matches the corresponding podAffinityTerm; thenode(s) with the highest sum are the most preferred. (see [below for nested schema](#nestedatt--spec--acme--solvers--http01--gateway_http_route--pod_template--spec--affinity--pod_anti_affinity--preferred_during_scheduling_ignored_during_execution))
+- `required_during_scheduling_ignored_during_execution` (Attributes List) If the anti-affinity requirements specified by this field are not met atscheduling time, the pod will not be scheduled onto the node.If the anti-affinity requirements specified by this field cease to be metat some point during pod execution (e.g. due to a pod label update), thesystem may or may not try to eventually evict the pod from its node.When there are multiple elements, the lists of nodes corresponding to eachpodAffinityTerm are intersected, i.e. all terms must be satisfied. (see [below for nested schema](#nestedatt--spec--acme--solvers--http01--gateway_http_route--pod_template--spec--affinity--pod_anti_affinity--required_during_scheduling_ignored_during_execution))
+
+
+### Nested Schema for `spec.acme.solvers.http01.gateway_http_route.pod_template.spec.affinity.pod_anti_affinity.preferred_during_scheduling_ignored_during_execution`
+
+Required:
+
+- `pod_affinity_term` (Attributes) Required. A pod affinity term, associated with the corresponding weight. (see [below for nested schema](#nestedatt--spec--acme--solvers--http01--gateway_http_route--pod_template--spec--affinity--pod_anti_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term))
+- `weight` (Number) weight associated with matching the corresponding podAffinityTerm,in the range 1-100.
+
+
+### Nested Schema for `spec.acme.solvers.http01.gateway_http_route.pod_template.spec.affinity.pod_anti_affinity.preferred_during_scheduling_ignored_during_execution.pod_affinity_term`
+
+Required:
+
+- `topology_key` (String) This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matchingthe labelSelector in the specified namespaces, where co-located is defined as running on a nodewhose value of the label with key topologyKey matches that of any node on which any of theselected pods is running.Empty topologyKey is not allowed.
+
+Optional:
+
+- `label_selector` (Attributes) A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods. (see [below for nested schema](#nestedatt--spec--acme--solvers--http01--gateway_http_route--pod_template--spec--affinity--pod_anti_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--label_selector))
+- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
+- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
+- `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--acme--solvers--http01--gateway_http_route--pod_template--spec--affinity--pod_anti_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--namespace_selector))
+- `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.
+
+
+### Nested Schema for `spec.acme.solvers.http01.gateway_http_route.pod_template.spec.affinity.pod_anti_affinity.preferred_during_scheduling_ignored_during_execution.pod_affinity_term.label_selector`
+
+Optional:
+
+- `match_expressions` (Attributes List) matchExpressions is a list of label selector requirements. The requirements are ANDed. (see [below for nested schema](#nestedatt--spec--acme--solvers--http01--gateway_http_route--pod_template--spec--affinity--pod_anti_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--label_selector--match_expressions))
+- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.
+
+
+### Nested Schema for `spec.acme.solvers.http01.gateway_http_route.pod_template.spec.affinity.pod_anti_affinity.preferred_during_scheduling_ignored_during_execution.pod_affinity_term.label_selector.match_expressions`
+
+Required:
+
+- `key` (String) key is the label key that the selector applies to.
+- `operator` (String) operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.
+
+Optional:
+
+- `values` (List of String) values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.
+
+
+
+
+### Nested Schema for `spec.acme.solvers.http01.gateway_http_route.pod_template.spec.affinity.pod_anti_affinity.preferred_during_scheduling_ignored_during_execution.pod_affinity_term.namespace_selector`
+
+Optional:
+
+- `match_expressions` (Attributes List) matchExpressions is a list of label selector requirements. The requirements are ANDed. (see [below for nested schema](#nestedatt--spec--acme--solvers--http01--gateway_http_route--pod_template--spec--affinity--pod_anti_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--namespace_selector--match_expressions))
+- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.
+
+
+### Nested Schema for `spec.acme.solvers.http01.gateway_http_route.pod_template.spec.affinity.pod_anti_affinity.preferred_during_scheduling_ignored_during_execution.pod_affinity_term.namespace_selector.match_expressions`
+
+Required:
+
+- `key` (String) key is the label key that the selector applies to.
+- `operator` (String) operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.
+
+Optional:
+
+- `values` (List of String) values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.
+
+
+
+
+
+
+### Nested Schema for `spec.acme.solvers.http01.gateway_http_route.pod_template.spec.affinity.pod_anti_affinity.required_during_scheduling_ignored_during_execution`
+
+Required:
+
+- `topology_key` (String) This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matchingthe labelSelector in the specified namespaces, where co-located is defined as running on a nodewhose value of the label with key topologyKey matches that of any node on which any of theselected pods is running.Empty topologyKey is not allowed.
+
+Optional:
+
+- `label_selector` (Attributes) A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods. (see [below for nested schema](#nestedatt--spec--acme--solvers--http01--gateway_http_route--pod_template--spec--affinity--pod_anti_affinity--required_during_scheduling_ignored_during_execution--label_selector))
+- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
+- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
+- `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--acme--solvers--http01--gateway_http_route--pod_template--spec--affinity--pod_anti_affinity--required_during_scheduling_ignored_during_execution--namespace_selector))
+- `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.
+
+
+### Nested Schema for `spec.acme.solvers.http01.gateway_http_route.pod_template.spec.affinity.pod_anti_affinity.required_during_scheduling_ignored_during_execution.label_selector`
+
+Optional:
+
+- `match_expressions` (Attributes List) matchExpressions is a list of label selector requirements. The requirements are ANDed. (see [below for nested schema](#nestedatt--spec--acme--solvers--http01--gateway_http_route--pod_template--spec--affinity--pod_anti_affinity--required_during_scheduling_ignored_during_execution--label_selector--match_expressions))
+- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.
+
+
+### Nested Schema for `spec.acme.solvers.http01.gateway_http_route.pod_template.spec.affinity.pod_anti_affinity.required_during_scheduling_ignored_during_execution.label_selector.match_expressions`
+
+Required:
+
+- `key` (String) key is the label key that the selector applies to.
+- `operator` (String) operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.
+
+Optional:
+
+- `values` (List of String) values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.
+
+
+
+
+### Nested Schema for `spec.acme.solvers.http01.gateway_http_route.pod_template.spec.affinity.pod_anti_affinity.required_during_scheduling_ignored_during_execution.namespace_selector`
+
+Optional:
+
+- `match_expressions` (Attributes List) matchExpressions is a list of label selector requirements. The requirements are ANDed. (see [below for nested schema](#nestedatt--spec--acme--solvers--http01--gateway_http_route--pod_template--spec--affinity--pod_anti_affinity--required_during_scheduling_ignored_during_execution--namespace_selector--match_expressions))
+- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.
+
+
+### Nested Schema for `spec.acme.solvers.http01.gateway_http_route.pod_template.spec.affinity.pod_anti_affinity.required_during_scheduling_ignored_during_execution.namespace_selector.match_expressions`
+
+Required:
+
+- `key` (String) key is the label key that the selector applies to.
+- `operator` (String) operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.
+
+Optional:
+
+- `values` (List of String) values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.
+
+
+
+
+
+
+
+### Nested Schema for `spec.acme.solvers.http01.gateway_http_route.pod_template.spec.image_pull_secrets`
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+
+
+
+### Nested Schema for `spec.acme.solvers.http01.gateway_http_route.pod_template.spec.security_context`
+
+Optional:
+
+- `fs_group` (Number) A special supplemental group that applies to all containers in a pod.Some volume types allow the Kubelet to change the ownership of that volumeto be owned by the pod:1. The owning GID will be the FSGroup2. The setgid bit is set (new files created in the volume will be owned by FSGroup)3. The permission bits are OR'd with rw-rw----If unset, the Kubelet will not modify the ownership and permissions of any volume.Note that this field cannot be set when spec.os.name is windows.
+- `fs_group_change_policy` (String) fsGroupChangePolicy defines behavior of changing ownership and permission of the volumebefore being exposed inside Pod. This field will only apply tovolume types which support fsGroup based ownership(and permissions).It will have no effect on ephemeral volume types such as: secret, configmapsand emptydir.Valid values are 'OnRootMismatch' and 'Always'. If not specified, 'Always' is used.Note that this field cannot be set when spec.os.name is windows.
+- `run_as_group` (Number) The GID to run the entrypoint of the container process.Uses runtime default if unset.May also be set in SecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedencefor that container.Note that this field cannot be set when spec.os.name is windows.
+- `run_as_non_root` (Boolean) Indicates that the container must run as a non-root user.If true, the Kubelet will validate the image at runtime to ensure that itdoes not run as UID 0 (root) and fail to start the container if it does.If unset or false, no such validation will be performed.May also be set in SecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.
+- `run_as_user` (Number) The UID to run the entrypoint of the container process.Defaults to user specified in image metadata if unspecified.May also be set in SecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedencefor that container.Note that this field cannot be set when spec.os.name is windows.
+- `se_linux_options` (Attributes) The SELinux context to be applied to all containers.If unspecified, the container runtime will allocate a random SELinux context for eachcontainer. May also be set in SecurityContext. If set inboth SecurityContext and PodSecurityContext, the value specified in SecurityContexttakes precedence for that container.Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--acme--solvers--http01--gateway_http_route--pod_template--spec--security_context--se_linux_options))
+- `seccomp_profile` (Attributes) The seccomp options to use by the containers in this pod.Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--acme--solvers--http01--gateway_http_route--pod_template--spec--security_context--seccomp_profile))
+- `supplemental_groups` (List of String) A list of groups applied to the first process run in each container, in additionto the container's primary GID, the fsGroup (if specified), and group membershipsdefined in the container image for the uid of the container process. If unspecified,no additional groups are added to any container. Note that group membershipsdefined in the container image for the uid of the container process are still effective,even if they are not included in this list.Note that this field cannot be set when spec.os.name is windows.
+- `sysctls` (Attributes List) Sysctls hold a list of namespaced sysctls used for the pod. Pods with unsupportedsysctls (by the container runtime) might fail to launch.Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--acme--solvers--http01--gateway_http_route--pod_template--spec--security_context--sysctls))
+
+
+### Nested Schema for `spec.acme.solvers.http01.gateway_http_route.pod_template.spec.security_context.se_linux_options`
+
+Optional:
+
+- `level` (String) Level is SELinux level label that applies to the container.
+- `role` (String) Role is a SELinux role label that applies to the container.
+- `type` (String) Type is a SELinux type label that applies to the container.
+- `user` (String) User is a SELinux user label that applies to the container.
+
+
+
+### Nested Schema for `spec.acme.solvers.http01.gateway_http_route.pod_template.spec.security_context.seccomp_profile`
+
+Required:
+
+- `type` (String) type indicates which kind of seccomp profile will be applied.Valid options are:Localhost - a profile defined in a file on the node should be used.RuntimeDefault - the container runtime default profile should be used.Unconfined - no profile should be applied.
+
+Optional:
+
+- `localhost_profile` (String) localhostProfile indicates a profile defined in a file on the node should be used.The profile must be preconfigured on the node to work.Must be a descending path, relative to the kubelet's configured seccomp profile location.Must be set if type is 'Localhost'. Must NOT be set for any other type.
+
+
+
+### Nested Schema for `spec.acme.solvers.http01.gateway_http_route.pod_template.spec.security_context.sysctls`
+
+Required:
+
+- `name` (String) Name of a property to set
+- `value` (String) Value of a property to set
+
+
+
+
+### Nested Schema for `spec.acme.solvers.http01.gateway_http_route.pod_template.spec.tolerations`
+
+Optional:
+
+- `effect` (String) Effect indicates the taint effect to match. Empty means match all taint effects.When specified, allowed values are NoSchedule, PreferNoSchedule and NoExecute.
+- `key` (String) Key is the taint key that the toleration applies to. Empty means match all taint keys.If the key is empty, operator must be Exists; this combination means to match all values and all keys.
+- `operator` (String) Operator represents a key's relationship to the value.Valid operators are Exists and Equal. Defaults to Equal.Exists is equivalent to wildcard for value, so that a pod cantolerate all taints of a particular category.
+- `toleration_seconds` (Number) TolerationSeconds represents the period of time the toleration (which must beof effect NoExecute, otherwise this field is ignored) tolerates the taint. By default,it is not set, which means tolerate the taint forever (do not evict). Zero andnegative values will be treated as 0 (evict immediately) by the system.
+- `value` (String) Value is the taint value the toleration matches to.If the operator is Exists, the value should be empty, otherwise just a regular string.
+
+
+
+
### Nested Schema for `spec.acme.solvers.http01.ingress`
@@ -522,6 +1005,7 @@ Optional:
- `image_pull_secrets` (Attributes List) If specified, the pod's imagePullSecrets (see [below for nested schema](#nestedatt--spec--acme--solvers--http01--ingress--pod_template--spec--image_pull_secrets))
- `node_selector` (Map of String) NodeSelector is a selector which must be true for the pod to fit on a node.Selector which must match a node's labels for the pod to be scheduled on that node.More info: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/
- `priority_class_name` (String) If specified, the pod's priorityClassName.
+- `security_context` (Attributes) If specified, the pod's security context (see [below for nested schema](#nestedatt--spec--acme--solvers--http01--ingress--pod_template--spec--security_context))
- `service_account_name` (String) If specified, the pod's service account
- `tolerations` (Attributes List) If specified, the pod's tolerations. (see [below for nested schema](#nestedatt--spec--acme--solvers--http01--ingress--pod_template--spec--tolerations))
@@ -915,6 +1399,54 @@ Optional:
- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+
+### Nested Schema for `spec.acme.solvers.http01.ingress.pod_template.spec.security_context`
+
+Optional:
+
+- `fs_group` (Number) A special supplemental group that applies to all containers in a pod.Some volume types allow the Kubelet to change the ownership of that volumeto be owned by the pod:1. The owning GID will be the FSGroup2. The setgid bit is set (new files created in the volume will be owned by FSGroup)3. The permission bits are OR'd with rw-rw----If unset, the Kubelet will not modify the ownership and permissions of any volume.Note that this field cannot be set when spec.os.name is windows.
+- `fs_group_change_policy` (String) fsGroupChangePolicy defines behavior of changing ownership and permission of the volumebefore being exposed inside Pod. This field will only apply tovolume types which support fsGroup based ownership(and permissions).It will have no effect on ephemeral volume types such as: secret, configmapsand emptydir.Valid values are 'OnRootMismatch' and 'Always'. If not specified, 'Always' is used.Note that this field cannot be set when spec.os.name is windows.
+- `run_as_group` (Number) The GID to run the entrypoint of the container process.Uses runtime default if unset.May also be set in SecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedencefor that container.Note that this field cannot be set when spec.os.name is windows.
+- `run_as_non_root` (Boolean) Indicates that the container must run as a non-root user.If true, the Kubelet will validate the image at runtime to ensure that itdoes not run as UID 0 (root) and fail to start the container if it does.If unset or false, no such validation will be performed.May also be set in SecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.
+- `run_as_user` (Number) The UID to run the entrypoint of the container process.Defaults to user specified in image metadata if unspecified.May also be set in SecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedencefor that container.Note that this field cannot be set when spec.os.name is windows.
+- `se_linux_options` (Attributes) The SELinux context to be applied to all containers.If unspecified, the container runtime will allocate a random SELinux context for eachcontainer. May also be set in SecurityContext. If set inboth SecurityContext and PodSecurityContext, the value specified in SecurityContexttakes precedence for that container.Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--acme--solvers--http01--ingress--pod_template--spec--security_context--se_linux_options))
+- `seccomp_profile` (Attributes) The seccomp options to use by the containers in this pod.Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--acme--solvers--http01--ingress--pod_template--spec--security_context--seccomp_profile))
+- `supplemental_groups` (List of String) A list of groups applied to the first process run in each container, in additionto the container's primary GID, the fsGroup (if specified), and group membershipsdefined in the container image for the uid of the container process. If unspecified,no additional groups are added to any container. Note that group membershipsdefined in the container image for the uid of the container process are still effective,even if they are not included in this list.Note that this field cannot be set when spec.os.name is windows.
+- `sysctls` (Attributes List) Sysctls hold a list of namespaced sysctls used for the pod. Pods with unsupportedsysctls (by the container runtime) might fail to launch.Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--acme--solvers--http01--ingress--pod_template--spec--security_context--sysctls))
+
+
+### Nested Schema for `spec.acme.solvers.http01.ingress.pod_template.spec.security_context.se_linux_options`
+
+Optional:
+
+- `level` (String) Level is SELinux level label that applies to the container.
+- `role` (String) Role is a SELinux role label that applies to the container.
+- `type` (String) Type is a SELinux type label that applies to the container.
+- `user` (String) User is a SELinux user label that applies to the container.
+
+
+
+### Nested Schema for `spec.acme.solvers.http01.ingress.pod_template.spec.security_context.seccomp_profile`
+
+Required:
+
+- `type` (String) type indicates which kind of seccomp profile will be applied.Valid options are:Localhost - a profile defined in a file on the node should be used.RuntimeDefault - the container runtime default profile should be used.Unconfined - no profile should be applied.
+
+Optional:
+
+- `localhost_profile` (String) localhostProfile indicates a profile defined in a file on the node should be used.The profile must be preconfigured on the node to work.Must be a descending path, relative to the kubelet's configured seccomp profile location.Must be set if type is 'Localhost'. Must NOT be set for any other type.
+
+
+
+### Nested Schema for `spec.acme.solvers.http01.ingress.pod_template.spec.security_context.sysctls`
+
+Required:
+
+- `name` (String) Name of a property to set
+- `value` (String) Value of a property to set
+
+
+
### Nested Schema for `spec.acme.solvers.http01.ingress.pod_template.spec.tolerations`
diff --git a/docs/data-sources/cert_manager_io_issuer_v1_manifest.md b/docs/data-sources/cert_manager_io_issuer_v1_manifest.md
index 9aed0820d..d1b7f7dbc 100644
--- a/docs/data-sources/cert_manager_io_issuer_v1_manifest.md
+++ b/docs/data-sources/cert_manager_io_issuer_v1_manifest.md
@@ -450,6 +450,7 @@ Optional:
- `labels` (Map of String) Custom labels that will be applied to HTTPRoutes created by cert-managerwhile solving HTTP-01 challenges.
- `parent_refs` (Attributes List) When solving an HTTP-01 challenge, cert-manager creates an HTTPRoute.cert-manager needs to know which parentRefs should be used when creatingthe HTTPRoute. Usually, the parentRef references a Gateway. See:https://gateway-api.sigs.k8s.io/api-types/httproute/#attaching-to-gateways (see [below for nested schema](#nestedatt--spec--acme--solvers--http01--gateway_http_route--parent_refs))
+- `pod_template` (Attributes) Optional pod template used to configure the ACME challenge solver podsused for HTTP01 challenges. (see [below for nested schema](#nestedatt--spec--acme--solvers--http01--gateway_http_route--pod_template))
- `service_type` (String) Optional service type for Kubernetes solver service. Supported valuesare NodePort or ClusterIP. If unset, defaults to NodePort.
@@ -468,6 +469,488 @@ Optional:
- `section_name` (String) SectionName is the name of a section within the target resource. In thefollowing resources, SectionName is interpreted as the following:* Gateway: Listener name. When both Port (experimental) and SectionNameare specified, the name and port of the selected listener must matchboth specified values.* Service: Port name. When both Port (experimental) and SectionNameare specified, the name and port of the selected listener must matchboth specified values.Implementations MAY choose to support attaching Routes to other resources.If that is the case, they MUST clearly document how SectionName isinterpreted.When unspecified (empty string), this will reference the entire resource.For the purpose of status, an attachment is considered successful if atleast one section in the parent resource accepts it. For example, Gatewaylisteners can restrict which Routes can attach to them by Route kind,namespace, or hostname. If 1 of 2 Gateway listeners accept attachment fromthe referencing Route, the Route MUST be considered successfullyattached. If no Gateway listeners accept attachment from this Route, theRoute MUST be considered detached from the Gateway.Support: Core
+
+### Nested Schema for `spec.acme.solvers.http01.gateway_http_route.pod_template`
+
+Optional:
+
+- `metadata` (Attributes) ObjectMeta overrides for the pod used to solve HTTP01 challenges.Only the 'labels' and 'annotations' fields may be set.If labels or annotations overlap with in-built values, the values herewill override the in-built values. (see [below for nested schema](#nestedatt--spec--acme--solvers--http01--gateway_http_route--pod_template--metadata))
+- `spec` (Attributes) PodSpec defines overrides for the HTTP01 challenge solver pod.Check ACMEChallengeSolverHTTP01IngressPodSpec to find out currently supported fields.All other fields will be ignored. (see [below for nested schema](#nestedatt--spec--acme--solvers--http01--gateway_http_route--pod_template--spec))
+
+
+### Nested Schema for `spec.acme.solvers.http01.gateway_http_route.pod_template.metadata`
+
+Optional:
+
+- `annotations` (Map of String) Annotations that should be added to the create ACME HTTP01 solver pods.
+- `labels` (Map of String) Labels that should be added to the created ACME HTTP01 solver pods.
+
+
+
+### Nested Schema for `spec.acme.solvers.http01.gateway_http_route.pod_template.spec`
+
+Optional:
+
+- `affinity` (Attributes) If specified, the pod's scheduling constraints (see [below for nested schema](#nestedatt--spec--acme--solvers--http01--gateway_http_route--pod_template--spec--affinity))
+- `image_pull_secrets` (Attributes List) If specified, the pod's imagePullSecrets (see [below for nested schema](#nestedatt--spec--acme--solvers--http01--gateway_http_route--pod_template--spec--image_pull_secrets))
+- `node_selector` (Map of String) NodeSelector is a selector which must be true for the pod to fit on a node.Selector which must match a node's labels for the pod to be scheduled on that node.More info: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/
+- `priority_class_name` (String) If specified, the pod's priorityClassName.
+- `security_context` (Attributes) If specified, the pod's security context (see [below for nested schema](#nestedatt--spec--acme--solvers--http01--gateway_http_route--pod_template--spec--security_context))
+- `service_account_name` (String) If specified, the pod's service account
+- `tolerations` (Attributes List) If specified, the pod's tolerations. (see [below for nested schema](#nestedatt--spec--acme--solvers--http01--gateway_http_route--pod_template--spec--tolerations))
+
+
+### Nested Schema for `spec.acme.solvers.http01.gateway_http_route.pod_template.spec.affinity`
+
+Optional:
+
+- `node_affinity` (Attributes) Describes node affinity scheduling rules for the pod. (see [below for nested schema](#nestedatt--spec--acme--solvers--http01--gateway_http_route--pod_template--spec--affinity--node_affinity))
+- `pod_affinity` (Attributes) Describes pod affinity scheduling rules (e.g. co-locate this pod in the same node, zone, etc. as some other pod(s)). (see [below for nested schema](#nestedatt--spec--acme--solvers--http01--gateway_http_route--pod_template--spec--affinity--pod_affinity))
+- `pod_anti_affinity` (Attributes) Describes pod anti-affinity scheduling rules (e.g. avoid putting this pod in the same node, zone, etc. as some other pod(s)). (see [below for nested schema](#nestedatt--spec--acme--solvers--http01--gateway_http_route--pod_template--spec--affinity--pod_anti_affinity))
+
+
+### Nested Schema for `spec.acme.solvers.http01.gateway_http_route.pod_template.spec.affinity.node_affinity`
+
+Optional:
+
+- `preferred_during_scheduling_ignored_during_execution` (Attributes List) The scheduler will prefer to schedule pods to nodes that satisfythe affinity expressions specified by this field, but it may choosea node that violates one or more of the expressions. The node that ismost preferred is the one with the greatest sum of weights, i.e.for each node that meets all of the scheduling requirements (resourcerequest, requiredDuringScheduling affinity expressions, etc.),compute a sum by iterating through the elements of this field and adding'weight' to the sum if the node matches the corresponding matchExpressions; thenode(s) with the highest sum are the most preferred. (see [below for nested schema](#nestedatt--spec--acme--solvers--http01--gateway_http_route--pod_template--spec--affinity--node_affinity--preferred_during_scheduling_ignored_during_execution))
+- `required_during_scheduling_ignored_during_execution` (Attributes) If the affinity requirements specified by this field are not met atscheduling time, the pod will not be scheduled onto the node.If the affinity requirements specified by this field cease to be metat some point during pod execution (e.g. due to an update), the systemmay or may not try to eventually evict the pod from its node. (see [below for nested schema](#nestedatt--spec--acme--solvers--http01--gateway_http_route--pod_template--spec--affinity--node_affinity--required_during_scheduling_ignored_during_execution))
+
+
+### Nested Schema for `spec.acme.solvers.http01.gateway_http_route.pod_template.spec.affinity.node_affinity.preferred_during_scheduling_ignored_during_execution`
+
+Required:
+
+- `preference` (Attributes) A node selector term, associated with the corresponding weight. (see [below for nested schema](#nestedatt--spec--acme--solvers--http01--gateway_http_route--pod_template--spec--affinity--node_affinity--preferred_during_scheduling_ignored_during_execution--preference))
+- `weight` (Number) Weight associated with matching the corresponding nodeSelectorTerm, in the range 1-100.
+
+
+### Nested Schema for `spec.acme.solvers.http01.gateway_http_route.pod_template.spec.affinity.node_affinity.preferred_during_scheduling_ignored_during_execution.preference`
+
+Optional:
+
+- `match_expressions` (Attributes List) A list of node selector requirements by node's labels. (see [below for nested schema](#nestedatt--spec--acme--solvers--http01--gateway_http_route--pod_template--spec--affinity--node_affinity--preferred_during_scheduling_ignored_during_execution--preference--match_expressions))
+- `match_fields` (Attributes List) A list of node selector requirements by node's fields. (see [below for nested schema](#nestedatt--spec--acme--solvers--http01--gateway_http_route--pod_template--spec--affinity--node_affinity--preferred_during_scheduling_ignored_during_execution--preference--match_fields))
+
+
+### Nested Schema for `spec.acme.solvers.http01.gateway_http_route.pod_template.spec.affinity.node_affinity.preferred_during_scheduling_ignored_during_execution.preference.match_expressions`
+
+Required:
+
+- `key` (String) The label key that the selector applies to.
+- `operator` (String) Represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt.
+
+Optional:
+
+- `values` (List of String) An array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. If the operator is Gt or Lt, the valuesarray must have a single element, which will be interpreted as an integer.This array is replaced during a strategic merge patch.
+
+
+
+### Nested Schema for `spec.acme.solvers.http01.gateway_http_route.pod_template.spec.affinity.node_affinity.preferred_during_scheduling_ignored_during_execution.preference.match_fields`
+
+Required:
+
+- `key` (String) The label key that the selector applies to.
+- `operator` (String) Represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt.
+
+Optional:
+
+- `values` (List of String) An array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. If the operator is Gt or Lt, the valuesarray must have a single element, which will be interpreted as an integer.This array is replaced during a strategic merge patch.
+
+
+
+
+
+### Nested Schema for `spec.acme.solvers.http01.gateway_http_route.pod_template.spec.affinity.node_affinity.required_during_scheduling_ignored_during_execution`
+
+Required:
+
+- `node_selector_terms` (Attributes List) Required. A list of node selector terms. The terms are ORed. (see [below for nested schema](#nestedatt--spec--acme--solvers--http01--gateway_http_route--pod_template--spec--affinity--node_affinity--required_during_scheduling_ignored_during_execution--node_selector_terms))
+
+
+### Nested Schema for `spec.acme.solvers.http01.gateway_http_route.pod_template.spec.affinity.node_affinity.required_during_scheduling_ignored_during_execution.node_selector_terms`
+
+Optional:
+
+- `match_expressions` (Attributes List) A list of node selector requirements by node's labels. (see [below for nested schema](#nestedatt--spec--acme--solvers--http01--gateway_http_route--pod_template--spec--affinity--node_affinity--required_during_scheduling_ignored_during_execution--node_selector_terms--match_expressions))
+- `match_fields` (Attributes List) A list of node selector requirements by node's fields. (see [below for nested schema](#nestedatt--spec--acme--solvers--http01--gateway_http_route--pod_template--spec--affinity--node_affinity--required_during_scheduling_ignored_during_execution--node_selector_terms--match_fields))
+
+
+### Nested Schema for `spec.acme.solvers.http01.gateway_http_route.pod_template.spec.affinity.node_affinity.required_during_scheduling_ignored_during_execution.node_selector_terms.match_expressions`
+
+Required:
+
+- `key` (String) The label key that the selector applies to.
+- `operator` (String) Represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt.
+
+Optional:
+
+- `values` (List of String) An array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. If the operator is Gt or Lt, the valuesarray must have a single element, which will be interpreted as an integer.This array is replaced during a strategic merge patch.
+
+
+
+### Nested Schema for `spec.acme.solvers.http01.gateway_http_route.pod_template.spec.affinity.node_affinity.required_during_scheduling_ignored_during_execution.node_selector_terms.match_fields`
+
+Required:
+
+- `key` (String) The label key that the selector applies to.
+- `operator` (String) Represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt.
+
+Optional:
+
+- `values` (List of String) An array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. If the operator is Gt or Lt, the valuesarray must have a single element, which will be interpreted as an integer.This array is replaced during a strategic merge patch.
+
+
+
+
+
+
+### Nested Schema for `spec.acme.solvers.http01.gateway_http_route.pod_template.spec.affinity.pod_affinity`
+
+Optional:
+
+- `preferred_during_scheduling_ignored_during_execution` (Attributes List) The scheduler will prefer to schedule pods to nodes that satisfythe affinity expressions specified by this field, but it may choosea node that violates one or more of the expressions. The node that ismost preferred is the one with the greatest sum of weights, i.e.for each node that meets all of the scheduling requirements (resourcerequest, requiredDuringScheduling affinity expressions, etc.),compute a sum by iterating through the elements of this field and adding'weight' to the sum if the node has pods which matches the corresponding podAffinityTerm; thenode(s) with the highest sum are the most preferred. (see [below for nested schema](#nestedatt--spec--acme--solvers--http01--gateway_http_route--pod_template--spec--affinity--pod_affinity--preferred_during_scheduling_ignored_during_execution))
+- `required_during_scheduling_ignored_during_execution` (Attributes List) If the affinity requirements specified by this field are not met atscheduling time, the pod will not be scheduled onto the node.If the affinity requirements specified by this field cease to be metat some point during pod execution (e.g. due to a pod label update), thesystem may or may not try to eventually evict the pod from its node.When there are multiple elements, the lists of nodes corresponding to eachpodAffinityTerm are intersected, i.e. all terms must be satisfied. (see [below for nested schema](#nestedatt--spec--acme--solvers--http01--gateway_http_route--pod_template--spec--affinity--pod_affinity--required_during_scheduling_ignored_during_execution))
+
+
+### Nested Schema for `spec.acme.solvers.http01.gateway_http_route.pod_template.spec.affinity.pod_affinity.preferred_during_scheduling_ignored_during_execution`
+
+Required:
+
+- `pod_affinity_term` (Attributes) Required. A pod affinity term, associated with the corresponding weight. (see [below for nested schema](#nestedatt--spec--acme--solvers--http01--gateway_http_route--pod_template--spec--affinity--pod_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term))
+- `weight` (Number) weight associated with matching the corresponding podAffinityTerm,in the range 1-100.
+
+
+### Nested Schema for `spec.acme.solvers.http01.gateway_http_route.pod_template.spec.affinity.pod_affinity.preferred_during_scheduling_ignored_during_execution.pod_affinity_term`
+
+Required:
+
+- `topology_key` (String) This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matchingthe labelSelector in the specified namespaces, where co-located is defined as running on a nodewhose value of the label with key topologyKey matches that of any node on which any of theselected pods is running.Empty topologyKey is not allowed.
+
+Optional:
+
+- `label_selector` (Attributes) A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods. (see [below for nested schema](#nestedatt--spec--acme--solvers--http01--gateway_http_route--pod_template--spec--affinity--pod_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--label_selector))
+- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
+- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
+- `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--acme--solvers--http01--gateway_http_route--pod_template--spec--affinity--pod_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--namespace_selector))
+- `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.
+
+
+### Nested Schema for `spec.acme.solvers.http01.gateway_http_route.pod_template.spec.affinity.pod_affinity.preferred_during_scheduling_ignored_during_execution.pod_affinity_term.label_selector`
+
+Optional:
+
+- `match_expressions` (Attributes List) matchExpressions is a list of label selector requirements. The requirements are ANDed. (see [below for nested schema](#nestedatt--spec--acme--solvers--http01--gateway_http_route--pod_template--spec--affinity--pod_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--label_selector--match_expressions))
+- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.
+
+
+### Nested Schema for `spec.acme.solvers.http01.gateway_http_route.pod_template.spec.affinity.pod_affinity.preferred_during_scheduling_ignored_during_execution.pod_affinity_term.label_selector.match_expressions`
+
+Required:
+
+- `key` (String) key is the label key that the selector applies to.
+- `operator` (String) operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.
+
+Optional:
+
+- `values` (List of String) values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.
+
+
+
+
+### Nested Schema for `spec.acme.solvers.http01.gateway_http_route.pod_template.spec.affinity.pod_affinity.preferred_during_scheduling_ignored_during_execution.pod_affinity_term.namespace_selector`
+
+Optional:
+
+- `match_expressions` (Attributes List) matchExpressions is a list of label selector requirements. The requirements are ANDed. (see [below for nested schema](#nestedatt--spec--acme--solvers--http01--gateway_http_route--pod_template--spec--affinity--pod_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--namespace_selector--match_expressions))
+- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.
+
+
+### Nested Schema for `spec.acme.solvers.http01.gateway_http_route.pod_template.spec.affinity.pod_affinity.preferred_during_scheduling_ignored_during_execution.pod_affinity_term.namespace_selector.match_expressions`
+
+Required:
+
+- `key` (String) key is the label key that the selector applies to.
+- `operator` (String) operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.
+
+Optional:
+
+- `values` (List of String) values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.
+
+
+
+
+
+
+### Nested Schema for `spec.acme.solvers.http01.gateway_http_route.pod_template.spec.affinity.pod_affinity.required_during_scheduling_ignored_during_execution`
+
+Required:
+
+- `topology_key` (String) This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matchingthe labelSelector in the specified namespaces, where co-located is defined as running on a nodewhose value of the label with key topologyKey matches that of any node on which any of theselected pods is running.Empty topologyKey is not allowed.
+
+Optional:
+
+- `label_selector` (Attributes) A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods. (see [below for nested schema](#nestedatt--spec--acme--solvers--http01--gateway_http_route--pod_template--spec--affinity--pod_affinity--required_during_scheduling_ignored_during_execution--label_selector))
+- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
+- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
+- `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--acme--solvers--http01--gateway_http_route--pod_template--spec--affinity--pod_affinity--required_during_scheduling_ignored_during_execution--namespace_selector))
+- `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.
+
+
+### Nested Schema for `spec.acme.solvers.http01.gateway_http_route.pod_template.spec.affinity.pod_affinity.required_during_scheduling_ignored_during_execution.label_selector`
+
+Optional:
+
+- `match_expressions` (Attributes List) matchExpressions is a list of label selector requirements. The requirements are ANDed. (see [below for nested schema](#nestedatt--spec--acme--solvers--http01--gateway_http_route--pod_template--spec--affinity--pod_affinity--required_during_scheduling_ignored_during_execution--label_selector--match_expressions))
+- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.
+
+
+### Nested Schema for `spec.acme.solvers.http01.gateway_http_route.pod_template.spec.affinity.pod_affinity.required_during_scheduling_ignored_during_execution.label_selector.match_expressions`
+
+Required:
+
+- `key` (String) key is the label key that the selector applies to.
+- `operator` (String) operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.
+
+Optional:
+
+- `values` (List of String) values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.
+
+
+
+
+### Nested Schema for `spec.acme.solvers.http01.gateway_http_route.pod_template.spec.affinity.pod_affinity.required_during_scheduling_ignored_during_execution.namespace_selector`
+
+Optional:
+
+- `match_expressions` (Attributes List) matchExpressions is a list of label selector requirements. The requirements are ANDed. (see [below for nested schema](#nestedatt--spec--acme--solvers--http01--gateway_http_route--pod_template--spec--affinity--pod_affinity--required_during_scheduling_ignored_during_execution--namespace_selector--match_expressions))
+- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.
+
+
+### Nested Schema for `spec.acme.solvers.http01.gateway_http_route.pod_template.spec.affinity.pod_affinity.required_during_scheduling_ignored_during_execution.namespace_selector.match_expressions`
+
+Required:
+
+- `key` (String) key is the label key that the selector applies to.
+- `operator` (String) operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.
+
+Optional:
+
+- `values` (List of String) values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.
+
+
+
+
+
+
+### Nested Schema for `spec.acme.solvers.http01.gateway_http_route.pod_template.spec.affinity.pod_anti_affinity`
+
+Optional:
+
+- `preferred_during_scheduling_ignored_during_execution` (Attributes List) The scheduler will prefer to schedule pods to nodes that satisfythe anti-affinity expressions specified by this field, but it may choosea node that violates one or more of the expressions. The node that ismost preferred is the one with the greatest sum of weights, i.e.for each node that meets all of the scheduling requirements (resourcerequest, requiredDuringScheduling anti-affinity expressions, etc.),compute a sum by iterating through the elements of this field and adding'weight' to the sum if the node has pods which matches the corresponding podAffinityTerm; thenode(s) with the highest sum are the most preferred. (see [below for nested schema](#nestedatt--spec--acme--solvers--http01--gateway_http_route--pod_template--spec--affinity--pod_anti_affinity--preferred_during_scheduling_ignored_during_execution))
+- `required_during_scheduling_ignored_during_execution` (Attributes List) If the anti-affinity requirements specified by this field are not met atscheduling time, the pod will not be scheduled onto the node.If the anti-affinity requirements specified by this field cease to be metat some point during pod execution (e.g. due to a pod label update), thesystem may or may not try to eventually evict the pod from its node.When there are multiple elements, the lists of nodes corresponding to eachpodAffinityTerm are intersected, i.e. all terms must be satisfied. (see [below for nested schema](#nestedatt--spec--acme--solvers--http01--gateway_http_route--pod_template--spec--affinity--pod_anti_affinity--required_during_scheduling_ignored_during_execution))
+
+
+### Nested Schema for `spec.acme.solvers.http01.gateway_http_route.pod_template.spec.affinity.pod_anti_affinity.preferred_during_scheduling_ignored_during_execution`
+
+Required:
+
+- `pod_affinity_term` (Attributes) Required. A pod affinity term, associated with the corresponding weight. (see [below for nested schema](#nestedatt--spec--acme--solvers--http01--gateway_http_route--pod_template--spec--affinity--pod_anti_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term))
+- `weight` (Number) weight associated with matching the corresponding podAffinityTerm,in the range 1-100.
+
+
+### Nested Schema for `spec.acme.solvers.http01.gateway_http_route.pod_template.spec.affinity.pod_anti_affinity.preferred_during_scheduling_ignored_during_execution.pod_affinity_term`
+
+Required:
+
+- `topology_key` (String) This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matchingthe labelSelector in the specified namespaces, where co-located is defined as running on a nodewhose value of the label with key topologyKey matches that of any node on which any of theselected pods is running.Empty topologyKey is not allowed.
+
+Optional:
+
+- `label_selector` (Attributes) A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods. (see [below for nested schema](#nestedatt--spec--acme--solvers--http01--gateway_http_route--pod_template--spec--affinity--pod_anti_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--label_selector))
+- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
+- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
+- `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--acme--solvers--http01--gateway_http_route--pod_template--spec--affinity--pod_anti_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--namespace_selector))
+- `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.
+
+
+### Nested Schema for `spec.acme.solvers.http01.gateway_http_route.pod_template.spec.affinity.pod_anti_affinity.preferred_during_scheduling_ignored_during_execution.pod_affinity_term.label_selector`
+
+Optional:
+
+- `match_expressions` (Attributes List) matchExpressions is a list of label selector requirements. The requirements are ANDed. (see [below for nested schema](#nestedatt--spec--acme--solvers--http01--gateway_http_route--pod_template--spec--affinity--pod_anti_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--label_selector--match_expressions))
+- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.
+
+
+### Nested Schema for `spec.acme.solvers.http01.gateway_http_route.pod_template.spec.affinity.pod_anti_affinity.preferred_during_scheduling_ignored_during_execution.pod_affinity_term.label_selector.match_expressions`
+
+Required:
+
+- `key` (String) key is the label key that the selector applies to.
+- `operator` (String) operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.
+
+Optional:
+
+- `values` (List of String) values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.
+
+
+
+
+### Nested Schema for `spec.acme.solvers.http01.gateway_http_route.pod_template.spec.affinity.pod_anti_affinity.preferred_during_scheduling_ignored_during_execution.pod_affinity_term.namespace_selector`
+
+Optional:
+
+- `match_expressions` (Attributes List) matchExpressions is a list of label selector requirements. The requirements are ANDed. (see [below for nested schema](#nestedatt--spec--acme--solvers--http01--gateway_http_route--pod_template--spec--affinity--pod_anti_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--namespace_selector--match_expressions))
+- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.
+
+
+### Nested Schema for `spec.acme.solvers.http01.gateway_http_route.pod_template.spec.affinity.pod_anti_affinity.preferred_during_scheduling_ignored_during_execution.pod_affinity_term.namespace_selector.match_expressions`
+
+Required:
+
+- `key` (String) key is the label key that the selector applies to.
+- `operator` (String) operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.
+
+Optional:
+
+- `values` (List of String) values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.
+
+
+
+
+
+
+### Nested Schema for `spec.acme.solvers.http01.gateway_http_route.pod_template.spec.affinity.pod_anti_affinity.required_during_scheduling_ignored_during_execution`
+
+Required:
+
+- `topology_key` (String) This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matchingthe labelSelector in the specified namespaces, where co-located is defined as running on a nodewhose value of the label with key topologyKey matches that of any node on which any of theselected pods is running.Empty topologyKey is not allowed.
+
+Optional:
+
+- `label_selector` (Attributes) A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods. (see [below for nested schema](#nestedatt--spec--acme--solvers--http01--gateway_http_route--pod_template--spec--affinity--pod_anti_affinity--required_during_scheduling_ignored_during_execution--label_selector))
+- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
+- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
+- `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--acme--solvers--http01--gateway_http_route--pod_template--spec--affinity--pod_anti_affinity--required_during_scheduling_ignored_during_execution--namespace_selector))
+- `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.
+
+
+### Nested Schema for `spec.acme.solvers.http01.gateway_http_route.pod_template.spec.affinity.pod_anti_affinity.required_during_scheduling_ignored_during_execution.label_selector`
+
+Optional:
+
+- `match_expressions` (Attributes List) matchExpressions is a list of label selector requirements. The requirements are ANDed. (see [below for nested schema](#nestedatt--spec--acme--solvers--http01--gateway_http_route--pod_template--spec--affinity--pod_anti_affinity--required_during_scheduling_ignored_during_execution--label_selector--match_expressions))
+- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.
+
+
+### Nested Schema for `spec.acme.solvers.http01.gateway_http_route.pod_template.spec.affinity.pod_anti_affinity.required_during_scheduling_ignored_during_execution.label_selector.match_expressions`
+
+Required:
+
+- `key` (String) key is the label key that the selector applies to.
+- `operator` (String) operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.
+
+Optional:
+
+- `values` (List of String) values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.
+
+
+
+
+### Nested Schema for `spec.acme.solvers.http01.gateway_http_route.pod_template.spec.affinity.pod_anti_affinity.required_during_scheduling_ignored_during_execution.namespace_selector`
+
+Optional:
+
+- `match_expressions` (Attributes List) matchExpressions is a list of label selector requirements. The requirements are ANDed. (see [below for nested schema](#nestedatt--spec--acme--solvers--http01--gateway_http_route--pod_template--spec--affinity--pod_anti_affinity--required_during_scheduling_ignored_during_execution--namespace_selector--match_expressions))
+- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.
+
+
+### Nested Schema for `spec.acme.solvers.http01.gateway_http_route.pod_template.spec.affinity.pod_anti_affinity.required_during_scheduling_ignored_during_execution.namespace_selector.match_expressions`
+
+Required:
+
+- `key` (String) key is the label key that the selector applies to.
+- `operator` (String) operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.
+
+Optional:
+
+- `values` (List of String) values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.
+
+
+
+
+
+
+
+### Nested Schema for `spec.acme.solvers.http01.gateway_http_route.pod_template.spec.image_pull_secrets`
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+
+
+
+### Nested Schema for `spec.acme.solvers.http01.gateway_http_route.pod_template.spec.security_context`
+
+Optional:
+
+- `fs_group` (Number) A special supplemental group that applies to all containers in a pod.Some volume types allow the Kubelet to change the ownership of that volumeto be owned by the pod:1. The owning GID will be the FSGroup2. The setgid bit is set (new files created in the volume will be owned by FSGroup)3. The permission bits are OR'd with rw-rw----If unset, the Kubelet will not modify the ownership and permissions of any volume.Note that this field cannot be set when spec.os.name is windows.
+- `fs_group_change_policy` (String) fsGroupChangePolicy defines behavior of changing ownership and permission of the volumebefore being exposed inside Pod. This field will only apply tovolume types which support fsGroup based ownership(and permissions).It will have no effect on ephemeral volume types such as: secret, configmapsand emptydir.Valid values are 'OnRootMismatch' and 'Always'. If not specified, 'Always' is used.Note that this field cannot be set when spec.os.name is windows.
+- `run_as_group` (Number) The GID to run the entrypoint of the container process.Uses runtime default if unset.May also be set in SecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedencefor that container.Note that this field cannot be set when spec.os.name is windows.
+- `run_as_non_root` (Boolean) Indicates that the container must run as a non-root user.If true, the Kubelet will validate the image at runtime to ensure that itdoes not run as UID 0 (root) and fail to start the container if it does.If unset or false, no such validation will be performed.May also be set in SecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.
+- `run_as_user` (Number) The UID to run the entrypoint of the container process.Defaults to user specified in image metadata if unspecified.May also be set in SecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedencefor that container.Note that this field cannot be set when spec.os.name is windows.
+- `se_linux_options` (Attributes) The SELinux context to be applied to all containers.If unspecified, the container runtime will allocate a random SELinux context for eachcontainer. May also be set in SecurityContext. If set inboth SecurityContext and PodSecurityContext, the value specified in SecurityContexttakes precedence for that container.Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--acme--solvers--http01--gateway_http_route--pod_template--spec--security_context--se_linux_options))
+- `seccomp_profile` (Attributes) The seccomp options to use by the containers in this pod.Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--acme--solvers--http01--gateway_http_route--pod_template--spec--security_context--seccomp_profile))
+- `supplemental_groups` (List of String) A list of groups applied to the first process run in each container, in additionto the container's primary GID, the fsGroup (if specified), and group membershipsdefined in the container image for the uid of the container process. If unspecified,no additional groups are added to any container. Note that group membershipsdefined in the container image for the uid of the container process are still effective,even if they are not included in this list.Note that this field cannot be set when spec.os.name is windows.
+- `sysctls` (Attributes List) Sysctls hold a list of namespaced sysctls used for the pod. Pods with unsupportedsysctls (by the container runtime) might fail to launch.Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--acme--solvers--http01--gateway_http_route--pod_template--spec--security_context--sysctls))
+
+
+### Nested Schema for `spec.acme.solvers.http01.gateway_http_route.pod_template.spec.security_context.se_linux_options`
+
+Optional:
+
+- `level` (String) Level is SELinux level label that applies to the container.
+- `role` (String) Role is a SELinux role label that applies to the container.
+- `type` (String) Type is a SELinux type label that applies to the container.
+- `user` (String) User is a SELinux user label that applies to the container.
+
+
+
+### Nested Schema for `spec.acme.solvers.http01.gateway_http_route.pod_template.spec.security_context.seccomp_profile`
+
+Required:
+
+- `type` (String) type indicates which kind of seccomp profile will be applied.Valid options are:Localhost - a profile defined in a file on the node should be used.RuntimeDefault - the container runtime default profile should be used.Unconfined - no profile should be applied.
+
+Optional:
+
+- `localhost_profile` (String) localhostProfile indicates a profile defined in a file on the node should be used.The profile must be preconfigured on the node to work.Must be a descending path, relative to the kubelet's configured seccomp profile location.Must be set if type is 'Localhost'. Must NOT be set for any other type.
+
+
+
+### Nested Schema for `spec.acme.solvers.http01.gateway_http_route.pod_template.spec.security_context.sysctls`
+
+Required:
+
+- `name` (String) Name of a property to set
+- `value` (String) Value of a property to set
+
+
+
+
+### Nested Schema for `spec.acme.solvers.http01.gateway_http_route.pod_template.spec.tolerations`
+
+Optional:
+
+- `effect` (String) Effect indicates the taint effect to match. Empty means match all taint effects.When specified, allowed values are NoSchedule, PreferNoSchedule and NoExecute.
+- `key` (String) Key is the taint key that the toleration applies to. Empty means match all taint keys.If the key is empty, operator must be Exists; this combination means to match all values and all keys.
+- `operator` (String) Operator represents a key's relationship to the value.Valid operators are Exists and Equal. Defaults to Equal.Exists is equivalent to wildcard for value, so that a pod cantolerate all taints of a particular category.
+- `toleration_seconds` (Number) TolerationSeconds represents the period of time the toleration (which must beof effect NoExecute, otherwise this field is ignored) tolerates the taint. By default,it is not set, which means tolerate the taint forever (do not evict). Zero andnegative values will be treated as 0 (evict immediately) by the system.
+- `value` (String) Value is the taint value the toleration matches to.If the operator is Exists, the value should be empty, otherwise just a regular string.
+
+
+
+
### Nested Schema for `spec.acme.solvers.http01.ingress`
@@ -524,6 +1007,7 @@ Optional:
- `image_pull_secrets` (Attributes List) If specified, the pod's imagePullSecrets (see [below for nested schema](#nestedatt--spec--acme--solvers--http01--ingress--pod_template--spec--image_pull_secrets))
- `node_selector` (Map of String) NodeSelector is a selector which must be true for the pod to fit on a node.Selector which must match a node's labels for the pod to be scheduled on that node.More info: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/
- `priority_class_name` (String) If specified, the pod's priorityClassName.
+- `security_context` (Attributes) If specified, the pod's security context (see [below for nested schema](#nestedatt--spec--acme--solvers--http01--ingress--pod_template--spec--security_context))
- `service_account_name` (String) If specified, the pod's service account
- `tolerations` (Attributes List) If specified, the pod's tolerations. (see [below for nested schema](#nestedatt--spec--acme--solvers--http01--ingress--pod_template--spec--tolerations))
@@ -917,6 +1401,54 @@ Optional:
- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+
+### Nested Schema for `spec.acme.solvers.http01.ingress.pod_template.spec.security_context`
+
+Optional:
+
+- `fs_group` (Number) A special supplemental group that applies to all containers in a pod.Some volume types allow the Kubelet to change the ownership of that volumeto be owned by the pod:1. The owning GID will be the FSGroup2. The setgid bit is set (new files created in the volume will be owned by FSGroup)3. The permission bits are OR'd with rw-rw----If unset, the Kubelet will not modify the ownership and permissions of any volume.Note that this field cannot be set when spec.os.name is windows.
+- `fs_group_change_policy` (String) fsGroupChangePolicy defines behavior of changing ownership and permission of the volumebefore being exposed inside Pod. This field will only apply tovolume types which support fsGroup based ownership(and permissions).It will have no effect on ephemeral volume types such as: secret, configmapsand emptydir.Valid values are 'OnRootMismatch' and 'Always'. If not specified, 'Always' is used.Note that this field cannot be set when spec.os.name is windows.
+- `run_as_group` (Number) The GID to run the entrypoint of the container process.Uses runtime default if unset.May also be set in SecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedencefor that container.Note that this field cannot be set when spec.os.name is windows.
+- `run_as_non_root` (Boolean) Indicates that the container must run as a non-root user.If true, the Kubelet will validate the image at runtime to ensure that itdoes not run as UID 0 (root) and fail to start the container if it does.If unset or false, no such validation will be performed.May also be set in SecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.
+- `run_as_user` (Number) The UID to run the entrypoint of the container process.Defaults to user specified in image metadata if unspecified.May also be set in SecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedencefor that container.Note that this field cannot be set when spec.os.name is windows.
+- `se_linux_options` (Attributes) The SELinux context to be applied to all containers.If unspecified, the container runtime will allocate a random SELinux context for eachcontainer. May also be set in SecurityContext. If set inboth SecurityContext and PodSecurityContext, the value specified in SecurityContexttakes precedence for that container.Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--acme--solvers--http01--ingress--pod_template--spec--security_context--se_linux_options))
+- `seccomp_profile` (Attributes) The seccomp options to use by the containers in this pod.Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--acme--solvers--http01--ingress--pod_template--spec--security_context--seccomp_profile))
+- `supplemental_groups` (List of String) A list of groups applied to the first process run in each container, in additionto the container's primary GID, the fsGroup (if specified), and group membershipsdefined in the container image for the uid of the container process. If unspecified,no additional groups are added to any container. Note that group membershipsdefined in the container image for the uid of the container process are still effective,even if they are not included in this list.Note that this field cannot be set when spec.os.name is windows.
+- `sysctls` (Attributes List) Sysctls hold a list of namespaced sysctls used for the pod. Pods with unsupportedsysctls (by the container runtime) might fail to launch.Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--acme--solvers--http01--ingress--pod_template--spec--security_context--sysctls))
+
+
+### Nested Schema for `spec.acme.solvers.http01.ingress.pod_template.spec.security_context.se_linux_options`
+
+Optional:
+
+- `level` (String) Level is SELinux level label that applies to the container.
+- `role` (String) Role is a SELinux role label that applies to the container.
+- `type` (String) Type is a SELinux type label that applies to the container.
+- `user` (String) User is a SELinux user label that applies to the container.
+
+
+
+### Nested Schema for `spec.acme.solvers.http01.ingress.pod_template.spec.security_context.seccomp_profile`
+
+Required:
+
+- `type` (String) type indicates which kind of seccomp profile will be applied.Valid options are:Localhost - a profile defined in a file on the node should be used.RuntimeDefault - the container runtime default profile should be used.Unconfined - no profile should be applied.
+
+Optional:
+
+- `localhost_profile` (String) localhostProfile indicates a profile defined in a file on the node should be used.The profile must be preconfigured on the node to work.Must be a descending path, relative to the kubelet's configured seccomp profile location.Must be set if type is 'Localhost'. Must NOT be set for any other type.
+
+
+
+### Nested Schema for `spec.acme.solvers.http01.ingress.pod_template.spec.security_context.sysctls`
+
+Required:
+
+- `name` (String) Name of a property to set
+- `value` (String) Value of a property to set
+
+
+
### Nested Schema for `spec.acme.solvers.http01.ingress.pod_template.spec.tolerations`
diff --git a/docs/data-sources/cloudfront_services_k8s_aws_distribution_v1alpha1_manifest.md b/docs/data-sources/cloudfront_services_k8s_aws_distribution_v1alpha1_manifest.md
index 91c471ff5..94988ef3c 100644
--- a/docs/data-sources/cloudfront_services_k8s_aws_distribution_v1alpha1_manifest.md
+++ b/docs/data-sources/cloudfront_services_k8s_aws_distribution_v1alpha1_manifest.md
@@ -580,3 +580,4 @@ Optional:
Optional:
- `name` (String)
+- `namespace` (String)
diff --git a/docs/data-sources/cloudwatchlogs_services_k8s_aws_log_group_v1alpha1_manifest.md b/docs/data-sources/cloudwatchlogs_services_k8s_aws_log_group_v1alpha1_manifest.md
index aceaa6906..ab771a5eb 100644
--- a/docs/data-sources/cloudwatchlogs_services_k8s_aws_log_group_v1alpha1_manifest.md
+++ b/docs/data-sources/cloudwatchlogs_services_k8s_aws_log_group_v1alpha1_manifest.md
@@ -78,6 +78,7 @@ Optional:
Optional:
- `name` (String)
+- `namespace` (String)
diff --git a/docs/data-sources/data_fluid_io_alluxio_runtime_v1alpha1_manifest.md b/docs/data-sources/data_fluid_io_alluxio_runtime_v1alpha1_manifest.md
index d636780f4..e807997d7 100644
--- a/docs/data-sources/data_fluid_io_alluxio_runtime_v1alpha1_manifest.md
+++ b/docs/data-sources/data_fluid_io_alluxio_runtime_v1alpha1_manifest.md
@@ -61,6 +61,7 @@ Optional:
- `disable_prometheus` (Boolean) Disable monitoring for Alluxio RuntimePrometheus is enabled by default
- `fuse` (Attributes) The component spec of Alluxio Fuse (see [below for nested schema](#nestedatt--spec--fuse))
- `hadoop_config` (String) Name of the configMap used to support HDFS configurations when using HDFS as Alluxio's UFS. The configMapmust be in the same namespace with the AlluxioRuntime. The configMap should contain user-specific HDFS conf files in it.For now, only 'hdfs-site.xml' and 'core-site.xml' are supported. It must take the filename of the conf file as the key and contentof the file as the value.
+- `image_pull_secrets` (Attributes List) ImagePullSecrets that will be used to pull images (see [below for nested schema](#nestedatt--spec--image_pull_secrets))
- `init_users` (Attributes) The spec of init users (see [below for nested schema](#nestedatt--spec--init_users))
- `job_master` (Attributes) The component spec of Alluxio job master (see [below for nested schema](#nestedatt--spec--job_master))
- `job_worker` (Attributes) The component spec of Alluxio job Worker (see [below for nested schema](#nestedatt--spec--job_worker))
@@ -92,6 +93,7 @@ Optional:
- `enabled` (Boolean) Enabled or Disabled for the components. For now, only API Gateway is enabled or disabled.
- `env` (Map of String) Environment variables that will be used by Alluxio component.
+- `image_pull_secrets` (Attributes List) ImagePullSecrets that will be used to pull images (see [below for nested schema](#nestedatt--spec--api_gateway--image_pull_secrets))
- `jvm_options` (List of String) Options for JVM
- `network_mode` (String) Whether to use hostnetwork or not
- `node_selector` (Map of String) NodeSelector is a selector which must be true for the master to fit on a node
@@ -102,6 +104,14 @@ Optional:
- `resources` (Attributes) Resources that will be requested by the Alluxio component.
Resources are not allowed for ephemeral containers. Ephemeral containers use spare resourcesalready allocated to the pod. (see [below for nested schema](#nestedatt--spec--api_gateway--resources))
- `volume_mounts` (Attributes List) VolumeMounts specifies the volumes listed in '.spec.volumes' to mount into the alluxio runtime component's filesystem. (see [below for nested schema](#nestedatt--spec--api_gateway--volume_mounts))
+
+### Nested Schema for `spec.api_gateway.image_pull_secrets`
+
+Optional:
+
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
+
+
### Nested Schema for `spec.api_gateway.pod_metadata`
@@ -165,6 +175,7 @@ Optional:
- `env` (Map of String) Environment variables that will be used by Alluxio Fuse
- `image` (String) Image for Alluxio Fuse(e.g. alluxio/alluxio-fuse)
- `image_pull_policy` (String) One of the three policies: 'Always', 'IfNotPresent', 'Never'
+- `image_pull_secrets` (Attributes List) ImagePullSecrets that will be used to pull images (see [below for nested schema](#nestedatt--spec--fuse--image_pull_secrets))
- `image_tag` (String) Image Tag for Alluxio Fuse(e.g. 2.3.0-SNAPSHOT)
- `jvm_options` (List of String) Options for JVM
- `network_mode` (String) Whether to use hostnetwork or not
@@ -174,6 +185,14 @@ Optional:
- `resources` (Attributes) Resources that will be requested by Alluxio Fuse.
Resources are not allowed for ephemeral containers. Ephemeral containers use spare resourcesalready allocated to the pod. (see [below for nested schema](#nestedatt--spec--fuse--resources))
- `volume_mounts` (Attributes List) VolumeMounts specifies the volumes listed in '.spec.volumes' to mount into the alluxio runtime component's filesystem. (see [below for nested schema](#nestedatt--spec--fuse--volume_mounts))
+
+### Nested Schema for `spec.fuse.image_pull_secrets`
+
+Optional:
+
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
+
+
### Nested Schema for `spec.fuse.pod_metadata`
@@ -218,6 +237,14 @@ Optional:
+
+### Nested Schema for `spec.image_pull_secrets`
+
+Optional:
+
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
+
+
### Nested Schema for `spec.init_users`
@@ -255,6 +282,7 @@ Optional:
- `enabled` (Boolean) Enabled or Disabled for the components. For now, only API Gateway is enabled or disabled.
- `env` (Map of String) Environment variables that will be used by Alluxio component.
+- `image_pull_secrets` (Attributes List) ImagePullSecrets that will be used to pull images (see [below for nested schema](#nestedatt--spec--job_master--image_pull_secrets))
- `jvm_options` (List of String) Options for JVM
- `network_mode` (String) Whether to use hostnetwork or not
- `node_selector` (Map of String) NodeSelector is a selector which must be true for the master to fit on a node
@@ -265,6 +293,14 @@ Optional:
- `resources` (Attributes) Resources that will be requested by the Alluxio component.
Resources are not allowed for ephemeral containers. Ephemeral containers use spare resourcesalready allocated to the pod. (see [below for nested schema](#nestedatt--spec--job_master--resources))
- `volume_mounts` (Attributes List) VolumeMounts specifies the volumes listed in '.spec.volumes' to mount into the alluxio runtime component's filesystem. (see [below for nested schema](#nestedatt--spec--job_master--volume_mounts))
+
+### Nested Schema for `spec.job_master.image_pull_secrets`
+
+Optional:
+
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
+
+
### Nested Schema for `spec.job_master.pod_metadata`
@@ -316,6 +352,7 @@ Optional:
- `enabled` (Boolean) Enabled or Disabled for the components. For now, only API Gateway is enabled or disabled.
- `env` (Map of String) Environment variables that will be used by Alluxio component.
+- `image_pull_secrets` (Attributes List) ImagePullSecrets that will be used to pull images (see [below for nested schema](#nestedatt--spec--job_worker--image_pull_secrets))
- `jvm_options` (List of String) Options for JVM
- `network_mode` (String) Whether to use hostnetwork or not
- `node_selector` (Map of String) NodeSelector is a selector which must be true for the master to fit on a node
@@ -326,6 +363,14 @@ Optional:
- `resources` (Attributes) Resources that will be requested by the Alluxio component.
Resources are not allowed for ephemeral containers. Ephemeral containers use spare resourcesalready allocated to the pod. (see [below for nested schema](#nestedatt--spec--job_worker--resources))
- `volume_mounts` (Attributes List) VolumeMounts specifies the volumes listed in '.spec.volumes' to mount into the alluxio runtime component's filesystem. (see [below for nested schema](#nestedatt--spec--job_worker--volume_mounts))
+
+### Nested Schema for `spec.job_worker.image_pull_secrets`
+
+Optional:
+
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
+
+
### Nested Schema for `spec.job_worker.pod_metadata`
@@ -403,6 +448,7 @@ Optional:
- `enabled` (Boolean) Enabled or Disabled for the components. For now, only API Gateway is enabled or disabled.
- `env` (Map of String) Environment variables that will be used by Alluxio component.
+- `image_pull_secrets` (Attributes List) ImagePullSecrets that will be used to pull images (see [below for nested schema](#nestedatt--spec--master--image_pull_secrets))
- `jvm_options` (List of String) Options for JVM
- `network_mode` (String) Whether to use hostnetwork or not
- `node_selector` (Map of String) NodeSelector is a selector which must be true for the master to fit on a node
@@ -413,6 +459,14 @@ Optional:
- `resources` (Attributes) Resources that will be requested by the Alluxio component.
Resources are not allowed for ephemeral containers. Ephemeral containers use spare resourcesalready allocated to the pod. (see [below for nested schema](#nestedatt--spec--master--resources))
- `volume_mounts` (Attributes List) VolumeMounts specifies the volumes listed in '.spec.volumes' to mount into the alluxio runtime component's filesystem. (see [below for nested schema](#nestedatt--spec--master--volume_mounts))
+
+### Nested Schema for `spec.master.image_pull_secrets`
+
+Optional:
+
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
+
+
### Nested Schema for `spec.master.pod_metadata`
@@ -2094,6 +2148,7 @@ Optional:
- `enabled` (Boolean) Enabled or Disabled for the components. For now, only API Gateway is enabled or disabled.
- `env` (Map of String) Environment variables that will be used by Alluxio component.
+- `image_pull_secrets` (Attributes List) ImagePullSecrets that will be used to pull images (see [below for nested schema](#nestedatt--spec--worker--image_pull_secrets))
- `jvm_options` (List of String) Options for JVM
- `network_mode` (String) Whether to use hostnetwork or not
- `node_selector` (Map of String) NodeSelector is a selector which must be true for the master to fit on a node
@@ -2104,6 +2159,14 @@ Optional:
- `resources` (Attributes) Resources that will be requested by the Alluxio component.
Resources are not allowed for ephemeral containers. Ephemeral containers use spare resourcesalready allocated to the pod. (see [below for nested schema](#nestedatt--spec--worker--resources))
- `volume_mounts` (Attributes List) VolumeMounts specifies the volumes listed in '.spec.volumes' to mount into the alluxio runtime component's filesystem. (see [below for nested schema](#nestedatt--spec--worker--volume_mounts))
+
+### Nested Schema for `spec.worker.image_pull_secrets`
+
+Optional:
+
+- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
+
+
### Nested Schema for `spec.worker.pod_metadata`
diff --git a/docs/data-sources/dataprotection_kubeblocks_io_backup_policy_v1alpha1_manifest.md b/docs/data-sources/dataprotection_kubeblocks_io_backup_policy_v1alpha1_manifest.md
index 114fe593b..96648254f 100644
--- a/docs/data-sources/dataprotection_kubeblocks_io_backup_policy_v1alpha1_manifest.md
+++ b/docs/data-sources/dataprotection_kubeblocks_io_backup_policy_v1alpha1_manifest.md
@@ -216,10 +216,33 @@ Optional:
Optional:
+- `fallback_label_selector` (Attributes) fallbackLabelSelector is used to filter available pods when the labelSelector fails.This only takes effect when the 'strategy' field below is set to 'Any'. (see [below for nested schema](#nestedatt--spec--backup_methods--target--pod_selector--fallback_label_selector))
- `match_expressions` (Attributes List) matchExpressions is a list of label selector requirements. The requirements are ANDed. (see [below for nested schema](#nestedatt--spec--backup_methods--target--pod_selector--match_expressions))
- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.
- `strategy` (String) Specifies the strategy to select the target pod when multiple pods are selected.Valid values are:- 'Any': select any one pod that match the labelsSelector.- 'All': select all pods that match the labelsSelector. The backup data for the current podwill be stored in a subdirectory named after the pod.
+
+### Nested Schema for `spec.backup_methods.target.pod_selector.fallback_label_selector`
+
+Optional:
+
+- `match_expressions` (Attributes List) matchExpressions is a list of label selector requirements. The requirements are ANDed. (see [below for nested schema](#nestedatt--spec--backup_methods--target--pod_selector--fallback_label_selector--match_expressions))
+- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.
+
+
+### Nested Schema for `spec.backup_methods.target.pod_selector.fallback_label_selector.match_expressions`
+
+Required:
+
+- `key` (String) key is the label key that the selector applies to.
+- `operator` (String) operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.
+
+Optional:
+
+- `values` (List of String) values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.
+
+
+
### Nested Schema for `spec.backup_methods.target.pod_selector.match_expressions`
@@ -323,10 +346,33 @@ Optional:
Optional:
+- `fallback_label_selector` (Attributes) fallbackLabelSelector is used to filter available pods when the labelSelector fails.This only takes effect when the 'strategy' field below is set to 'Any'. (see [below for nested schema](#nestedatt--spec--backup_methods--targets--pod_selector--fallback_label_selector))
- `match_expressions` (Attributes List) matchExpressions is a list of label selector requirements. The requirements are ANDed. (see [below for nested schema](#nestedatt--spec--backup_methods--targets--pod_selector--match_expressions))
- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.
- `strategy` (String) Specifies the strategy to select the target pod when multiple pods are selected.Valid values are:- 'Any': select any one pod that match the labelsSelector.- 'All': select all pods that match the labelsSelector. The backup data for the current podwill be stored in a subdirectory named after the pod.
+
+### Nested Schema for `spec.backup_methods.targets.pod_selector.fallback_label_selector`
+
+Optional:
+
+- `match_expressions` (Attributes List) matchExpressions is a list of label selector requirements. The requirements are ANDed. (see [below for nested schema](#nestedatt--spec--backup_methods--targets--pod_selector--fallback_label_selector--match_expressions))
+- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.
+
+
+### Nested Schema for `spec.backup_methods.targets.pod_selector.fallback_label_selector.match_expressions`
+
+Required:
+
+- `key` (String) key is the label key that the selector applies to.
+- `operator` (String) operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.
+
+Optional:
+
+- `values` (List of String) values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.
+
+
+
### Nested Schema for `spec.backup_methods.targets.pod_selector.match_expressions`
@@ -428,10 +474,33 @@ Optional:
Optional:
+- `fallback_label_selector` (Attributes) fallbackLabelSelector is used to filter available pods when the labelSelector fails.This only takes effect when the 'strategy' field below is set to 'Any'. (see [below for nested schema](#nestedatt--spec--target--pod_selector--fallback_label_selector))
- `match_expressions` (Attributes List) matchExpressions is a list of label selector requirements. The requirements are ANDed. (see [below for nested schema](#nestedatt--spec--target--pod_selector--match_expressions))
- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.
- `strategy` (String) Specifies the strategy to select the target pod when multiple pods are selected.Valid values are:- 'Any': select any one pod that match the labelsSelector.- 'All': select all pods that match the labelsSelector. The backup data for the current podwill be stored in a subdirectory named after the pod.
+
+### Nested Schema for `spec.target.pod_selector.fallback_label_selector`
+
+Optional:
+
+- `match_expressions` (Attributes List) matchExpressions is a list of label selector requirements. The requirements are ANDed. (see [below for nested schema](#nestedatt--spec--target--pod_selector--fallback_label_selector--match_expressions))
+- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.
+
+
+### Nested Schema for `spec.target.pod_selector.fallback_label_selector.match_expressions`
+
+Required:
+
+- `key` (String) key is the label key that the selector applies to.
+- `operator` (String) operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.
+
+Optional:
+
+- `values` (List of String) values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.
+
+
+
### Nested Schema for `spec.target.pod_selector.match_expressions`
@@ -510,10 +579,33 @@ Optional:
Optional:
+- `fallback_label_selector` (Attributes) fallbackLabelSelector is used to filter available pods when the labelSelector fails.This only takes effect when the 'strategy' field below is set to 'Any'. (see [below for nested schema](#nestedatt--spec--targets--pod_selector--fallback_label_selector))
- `match_expressions` (Attributes List) matchExpressions is a list of label selector requirements. The requirements are ANDed. (see [below for nested schema](#nestedatt--spec--targets--pod_selector--match_expressions))
- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.
- `strategy` (String) Specifies the strategy to select the target pod when multiple pods are selected.Valid values are:- 'Any': select any one pod that match the labelsSelector.- 'All': select all pods that match the labelsSelector. The backup data for the current podwill be stored in a subdirectory named after the pod.
+
+### Nested Schema for `spec.targets.pod_selector.fallback_label_selector`
+
+Optional:
+
+- `match_expressions` (Attributes List) matchExpressions is a list of label selector requirements. The requirements are ANDed. (see [below for nested schema](#nestedatt--spec--targets--pod_selector--fallback_label_selector--match_expressions))
+- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.
+
+
+### Nested Schema for `spec.targets.pod_selector.fallback_label_selector.match_expressions`
+
+Required:
+
+- `key` (String) key is the label key that the selector applies to.
+- `operator` (String) operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.
+
+Optional:
+
+- `values` (List of String) values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.
+
+
+
### Nested Schema for `spec.targets.pod_selector.match_expressions`
diff --git a/docs/data-sources/dataprotection_kubeblocks_io_restore_v1alpha1_manifest.md b/docs/data-sources/dataprotection_kubeblocks_io_restore_v1alpha1_manifest.md
index 52d3828ff..057ec09f6 100644
--- a/docs/data-sources/dataprotection_kubeblocks_io_restore_v1alpha1_manifest.md
+++ b/docs/data-sources/dataprotection_kubeblocks_io_restore_v1alpha1_manifest.md
@@ -285,7 +285,9 @@ Required:
Optional:
-- `label_selector` (Attributes) A label query over a set of resources, in this case pods. (see [below for nested schema](#nestedatt--spec--prepare_data_config--scheduling_spec--affinity--pod_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--label_selector))
+- `label_selector` (Attributes) A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods. (see [below for nested schema](#nestedatt--spec--prepare_data_config--scheduling_spec--affinity--pod_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--label_selector))
+- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
+- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
- `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--prepare_data_config--scheduling_spec--affinity--pod_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--namespace_selector))
- `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.
@@ -344,7 +346,9 @@ Required:
Optional:
-- `label_selector` (Attributes) A label query over a set of resources, in this case pods. (see [below for nested schema](#nestedatt--spec--prepare_data_config--scheduling_spec--affinity--pod_affinity--required_during_scheduling_ignored_during_execution--label_selector))
+- `label_selector` (Attributes) A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods. (see [below for nested schema](#nestedatt--spec--prepare_data_config--scheduling_spec--affinity--pod_affinity--required_during_scheduling_ignored_during_execution--label_selector))
+- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
+- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
- `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--prepare_data_config--scheduling_spec--affinity--pod_affinity--required_during_scheduling_ignored_during_execution--namespace_selector))
- `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.
@@ -419,7 +423,9 @@ Required:
Optional:
-- `label_selector` (Attributes) A label query over a set of resources, in this case pods. (see [below for nested schema](#nestedatt--spec--prepare_data_config--scheduling_spec--affinity--pod_anti_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--label_selector))
+- `label_selector` (Attributes) A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods. (see [below for nested schema](#nestedatt--spec--prepare_data_config--scheduling_spec--affinity--pod_anti_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--label_selector))
+- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
+- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
- `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--prepare_data_config--scheduling_spec--affinity--pod_anti_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--namespace_selector))
- `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.
@@ -478,7 +484,9 @@ Required:
Optional:
-- `label_selector` (Attributes) A label query over a set of resources, in this case pods. (see [below for nested schema](#nestedatt--spec--prepare_data_config--scheduling_spec--affinity--pod_anti_affinity--required_during_scheduling_ignored_during_execution--label_selector))
+- `label_selector` (Attributes) A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods. (see [below for nested schema](#nestedatt--spec--prepare_data_config--scheduling_spec--affinity--pod_anti_affinity--required_during_scheduling_ignored_during_execution--label_selector))
+- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
+- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
- `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--prepare_data_config--scheduling_spec--affinity--pod_anti_affinity--required_during_scheduling_ignored_during_execution--namespace_selector))
- `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.
@@ -618,6 +626,7 @@ Optional:
- `resources` (Attributes) resources represents the minimum resources the volume should have.If RecoverVolumeExpansionFailure feature is enabled users are allowed to specify resource requirementsthat are lower than previous value but must still be higher than capacity recorded in thestatus field of the claim.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources (see [below for nested schema](#nestedatt--spec--prepare_data_config--volume_claims--volume_claim_spec--resources))
- `selector` (Attributes) selector is a label query over volumes to consider for binding. (see [below for nested schema](#nestedatt--spec--prepare_data_config--volume_claims--volume_claim_spec--selector))
- `storage_class_name` (String) storageClassName is the name of the StorageClass required by the claim.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#class-1
+- `volume_attributes_class_name` (String) volumeAttributesClassName may be used to set the VolumeAttributesClass used by this claim.If specified, the CSI driver will create or update the volume with the attributes definedin the corresponding VolumeAttributesClass. This has a different purpose than storageClassName,it can be changed after the claim is created. An empty string value means that no VolumeAttributesClasswill be applied to the claim but it's not allowed to reset this field to empty string once it is set.If unspecified and the PersistentVolumeClaim is unbound, the default VolumeAttributesClasswill be set by the persistentvolume controller if it exists.If the resource referred to by volumeAttributesClass does not exist, this PersistentVolumeClaim will beset to a Pending state, as reflected by the modifyVolumeStatus field, until such as a resourceexists.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#volumeattributesclass(Alpha) Using this field requires the VolumeAttributesClass feature gate to be enabled.
- `volume_mode` (String) volumeMode defines what type of volume is required by the claim.Value of Filesystem is implied when not included in claim spec.
- `volume_name` (String) volumeName is the binding reference to the PersistentVolume backing this claim.
@@ -653,18 +662,9 @@ Optional:
Optional:
-- `claims` (Attributes List) Claims lists the names of resources, defined in spec.resourceClaims,that are used by this container.This is an alpha field and requires enabling theDynamicResourceAllocation feature gate.This field is immutable. It can only be set for containers. (see [below for nested schema](#nestedatt--spec--prepare_data_config--volume_claims--volume_claim_spec--resources--claims))
- `limits` (Map of String) Limits describes the maximum amount of compute resources allowed.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
- `requests` (Map of String) Requests describes the minimum amount of compute resources required.If Requests is omitted for a container, it defaults to Limits if that is explicitly specified,otherwise to an implementation-defined value. Requests cannot exceed Limits.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-
-### Nested Schema for `spec.prepare_data_config.volume_claims.volume_claim_spec.resources.claims`
-
-Required:
-
-- `name` (String) Name must match the name of one entry in pod.spec.resourceClaims ofthe Pod where this field is used. It makes that resource availableinside a container.
-
-
### Nested Schema for `spec.prepare_data_config.volume_claims.volume_claim_spec.selector`
@@ -738,6 +738,7 @@ Optional:
- `resources` (Attributes) resources represents the minimum resources the volume should have.If RecoverVolumeExpansionFailure feature is enabled users are allowed to specify resource requirementsthat are lower than previous value but must still be higher than capacity recorded in thestatus field of the claim.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources (see [below for nested schema](#nestedatt--spec--prepare_data_config--volume_claims_template--templates--volume_claim_spec--resources))
- `selector` (Attributes) selector is a label query over volumes to consider for binding. (see [below for nested schema](#nestedatt--spec--prepare_data_config--volume_claims_template--templates--volume_claim_spec--selector))
- `storage_class_name` (String) storageClassName is the name of the StorageClass required by the claim.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#class-1
+- `volume_attributes_class_name` (String) volumeAttributesClassName may be used to set the VolumeAttributesClass used by this claim.If specified, the CSI driver will create or update the volume with the attributes definedin the corresponding VolumeAttributesClass. This has a different purpose than storageClassName,it can be changed after the claim is created. An empty string value means that no VolumeAttributesClasswill be applied to the claim but it's not allowed to reset this field to empty string once it is set.If unspecified and the PersistentVolumeClaim is unbound, the default VolumeAttributesClasswill be set by the persistentvolume controller if it exists.If the resource referred to by volumeAttributesClass does not exist, this PersistentVolumeClaim will beset to a Pending state, as reflected by the modifyVolumeStatus field, until such as a resourceexists.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#volumeattributesclass(Alpha) Using this field requires the VolumeAttributesClass feature gate to be enabled.
- `volume_mode` (String) volumeMode defines what type of volume is required by the claim.Value of Filesystem is implied when not included in claim spec.
- `volume_name` (String) volumeName is the binding reference to the PersistentVolume backing this claim.
@@ -773,18 +774,9 @@ Optional:
Optional:
-- `claims` (Attributes List) Claims lists the names of resources, defined in spec.resourceClaims,that are used by this container.This is an alpha field and requires enabling theDynamicResourceAllocation feature gate.This field is immutable. It can only be set for containers. (see [below for nested schema](#nestedatt--spec--prepare_data_config--volume_claims_template--templates--volume_claim_spec--resources--claims))
- `limits` (Map of String) Limits describes the maximum amount of compute resources allowed.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
- `requests` (Map of String) Requests describes the minimum amount of compute resources required.If Requests is omitted for a container, it defaults to Limits if that is explicitly specified,otherwise to an implementation-defined value. Requests cannot exceed Limits.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-
-### Nested Schema for `spec.prepare_data_config.volume_claims_template.templates.volume_claim_spec.resources.claims`
-
-Required:
-
-- `name` (String) Name must match the name of one entry in pod.spec.resourceClaims ofthe Pod where this field is used. It makes that resource availableinside a container.
-
-
### Nested Schema for `spec.prepare_data_config.volume_claims_template.templates.volume_claim_spec.selector`
@@ -902,10 +894,33 @@ Optional:
Optional:
+- `fallback_label_selector` (Attributes) fallbackLabelSelector is used to filter available pods when the labelSelector fails.This only takes effect when the 'strategy' field below is set to 'Any'. (see [below for nested schema](#nestedatt--spec--ready_config--job_action--target--pod_selector--fallback_label_selector))
- `match_expressions` (Attributes List) matchExpressions is a list of label selector requirements. The requirements are ANDed. (see [below for nested schema](#nestedatt--spec--ready_config--job_action--target--pod_selector--match_expressions))
- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.
- `strategy` (String) Specifies the strategy to select the target pod when multiple pods are selected.Valid values are:- 'Any': select any one pod that match the labelsSelector.- 'All': select all pods that match the labelsSelector. The backup data for the current podwill be stored in a subdirectory named after the pod.
+
+### Nested Schema for `spec.ready_config.job_action.target.pod_selector.fallback_label_selector`
+
+Optional:
+
+- `match_expressions` (Attributes List) matchExpressions is a list of label selector requirements. The requirements are ANDed. (see [below for nested schema](#nestedatt--spec--ready_config--job_action--target--pod_selector--fallback_label_selector--match_expressions))
+- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.
+
+
+### Nested Schema for `spec.ready_config.job_action.target.pod_selector.fallback_label_selector.match_expressions`
+
+Required:
+
+- `key` (String) key is the label key that the selector applies to.
+- `operator` (String) operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.
+
+Optional:
+
+- `values` (List of String) values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.
+
+
+
### Nested Schema for `spec.ready_config.job_action.target.pod_selector.match_expressions`
diff --git a/docs/data-sources/documentdb_services_k8s_aws_db_cluster_v1alpha1_manifest.md b/docs/data-sources/documentdb_services_k8s_aws_db_cluster_v1alpha1_manifest.md
index 60a9b3009..da92f7b10 100644
--- a/docs/data-sources/documentdb_services_k8s_aws_db_cluster_v1alpha1_manifest.md
+++ b/docs/data-sources/documentdb_services_k8s_aws_db_cluster_v1alpha1_manifest.md
@@ -99,6 +99,7 @@ Optional:
Optional:
- `name` (String)
+- `namespace` (String)
@@ -115,6 +116,7 @@ Optional:
Optional:
- `name` (String)
+- `namespace` (String)
@@ -153,3 +155,4 @@ Optional:
Optional:
- `name` (String)
+- `namespace` (String)
diff --git a/docs/data-sources/documentdb_services_k8s_aws_db_instance_v1alpha1_manifest.md b/docs/data-sources/documentdb_services_k8s_aws_db_instance_v1alpha1_manifest.md
index 1ff63a240..a8bb85988 100644
--- a/docs/data-sources/documentdb_services_k8s_aws_db_instance_v1alpha1_manifest.md
+++ b/docs/data-sources/documentdb_services_k8s_aws_db_instance_v1alpha1_manifest.md
@@ -86,6 +86,7 @@ Optional:
Optional:
- `name` (String)
+- `namespace` (String)
diff --git a/docs/data-sources/documentdb_services_k8s_aws_db_subnet_group_v1alpha1_manifest.md b/docs/data-sources/documentdb_services_k8s_aws_db_subnet_group_v1alpha1_manifest.md
index 5b7c4e15a..739cccb07 100644
--- a/docs/data-sources/documentdb_services_k8s_aws_db_subnet_group_v1alpha1_manifest.md
+++ b/docs/data-sources/documentdb_services_k8s_aws_db_subnet_group_v1alpha1_manifest.md
@@ -77,6 +77,7 @@ Optional:
Optional:
- `name` (String)
+- `namespace` (String)
diff --git a/docs/data-sources/ec2_services_k8s_aws_dhcp_options_v1alpha1_manifest.md b/docs/data-sources/ec2_services_k8s_aws_dhcp_options_v1alpha1_manifest.md
index 861ed1f37..793c774ed 100644
--- a/docs/data-sources/ec2_services_k8s_aws_dhcp_options_v1alpha1_manifest.md
+++ b/docs/data-sources/ec2_services_k8s_aws_dhcp_options_v1alpha1_manifest.md
@@ -94,3 +94,4 @@ Optional:
Optional:
- `name` (String)
+- `namespace` (String)
diff --git a/docs/data-sources/ec2_services_k8s_aws_internet_gateway_v1alpha1_manifest.md b/docs/data-sources/ec2_services_k8s_aws_internet_gateway_v1alpha1_manifest.md
index 356c35936..531bcab0f 100644
--- a/docs/data-sources/ec2_services_k8s_aws_internet_gateway_v1alpha1_manifest.md
+++ b/docs/data-sources/ec2_services_k8s_aws_internet_gateway_v1alpha1_manifest.md
@@ -74,6 +74,7 @@ Optional:
Optional:
- `name` (String)
+- `namespace` (String)
@@ -99,3 +100,4 @@ Optional:
Optional:
- `name` (String)
+- `namespace` (String)
diff --git a/docs/data-sources/ec2_services_k8s_aws_nat_gateway_v1alpha1_manifest.md b/docs/data-sources/ec2_services_k8s_aws_nat_gateway_v1alpha1_manifest.md
index 286c9e010..ede2417be 100644
--- a/docs/data-sources/ec2_services_k8s_aws_nat_gateway_v1alpha1_manifest.md
+++ b/docs/data-sources/ec2_services_k8s_aws_nat_gateway_v1alpha1_manifest.md
@@ -75,6 +75,7 @@ Optional:
Optional:
- `name` (String)
+- `namespace` (String)
@@ -91,6 +92,7 @@ Optional:
Optional:
- `name` (String)
+- `namespace` (String)
diff --git a/docs/data-sources/ec2_services_k8s_aws_route_table_v1alpha1_manifest.md b/docs/data-sources/ec2_services_k8s_aws_route_table_v1alpha1_manifest.md
index 360436ea1..9c0c87867 100644
--- a/docs/data-sources/ec2_services_k8s_aws_route_table_v1alpha1_manifest.md
+++ b/docs/data-sources/ec2_services_k8s_aws_route_table_v1alpha1_manifest.md
@@ -98,6 +98,7 @@ Optional:
Optional:
- `name` (String)
+- `namespace` (String)
@@ -114,6 +115,7 @@ Optional:
Optional:
- `name` (String)
+- `namespace` (String)
@@ -130,6 +132,7 @@ Optional:
Optional:
- `name` (String)
+- `namespace` (String)
@@ -146,6 +149,7 @@ Optional:
Optional:
- `name` (String)
+- `namespace` (String)
@@ -162,6 +166,7 @@ Optional:
Optional:
- `name` (String)
+- `namespace` (String)
@@ -188,3 +193,4 @@ Optional:
Optional:
- `name` (String)
+- `namespace` (String)
diff --git a/docs/data-sources/ec2_services_k8s_aws_security_group_v1alpha1_manifest.md b/docs/data-sources/ec2_services_k8s_aws_security_group_v1alpha1_manifest.md
index c24c68895..db1c41e73 100644
--- a/docs/data-sources/ec2_services_k8s_aws_security_group_v1alpha1_manifest.md
+++ b/docs/data-sources/ec2_services_k8s_aws_security_group_v1alpha1_manifest.md
@@ -134,6 +134,7 @@ Optional:
Optional:
- `name` (String)
+- `namespace` (String)
@@ -150,6 +151,7 @@ Optional:
Optional:
- `name` (String)
+- `namespace` (String)
@@ -223,6 +225,7 @@ Optional:
Optional:
- `name` (String)
+- `namespace` (String)
@@ -239,6 +242,7 @@ Optional:
Optional:
- `name` (String)
+- `namespace` (String)
@@ -266,3 +270,4 @@ Optional:
Optional:
- `name` (String)
+- `namespace` (String)
diff --git a/docs/data-sources/ec2_services_k8s_aws_subnet_v1alpha1_manifest.md b/docs/data-sources/ec2_services_k8s_aws_subnet_v1alpha1_manifest.md
index 8be23faec..483417efb 100644
--- a/docs/data-sources/ec2_services_k8s_aws_subnet_v1alpha1_manifest.md
+++ b/docs/data-sources/ec2_services_k8s_aws_subnet_v1alpha1_manifest.md
@@ -87,6 +87,7 @@ Optional:
Optional:
- `name` (String)
+- `namespace` (String)
@@ -112,3 +113,4 @@ Optional:
Optional:
- `name` (String)
+- `namespace` (String)
diff --git a/docs/data-sources/ec2_services_k8s_aws_vpc_endpoint_v1alpha1_manifest.md b/docs/data-sources/ec2_services_k8s_aws_vpc_endpoint_v1alpha1_manifest.md
index df4a0d750..4cf13c0cc 100644
--- a/docs/data-sources/ec2_services_k8s_aws_vpc_endpoint_v1alpha1_manifest.md
+++ b/docs/data-sources/ec2_services_k8s_aws_vpc_endpoint_v1alpha1_manifest.md
@@ -95,6 +95,7 @@ Optional:
Optional:
- `name` (String)
+- `namespace` (String)
@@ -111,6 +112,7 @@ Optional:
Optional:
- `name` (String)
+- `namespace` (String)
@@ -127,6 +129,7 @@ Optional:
Optional:
- `name` (String)
+- `namespace` (String)
@@ -152,3 +155,4 @@ Optional:
Optional:
- `name` (String)
+- `namespace` (String)
diff --git a/docs/data-sources/efs_services_k8s_aws_access_point_v1alpha1_manifest.md b/docs/data-sources/efs_services_k8s_aws_access_point_v1alpha1_manifest.md
index a9eb08ebf..3c83511b6 100644
--- a/docs/data-sources/efs_services_k8s_aws_access_point_v1alpha1_manifest.md
+++ b/docs/data-sources/efs_services_k8s_aws_access_point_v1alpha1_manifest.md
@@ -74,6 +74,7 @@ Optional:
Optional:
- `name` (String)
+- `namespace` (String)
diff --git a/docs/data-sources/efs_services_k8s_aws_file_system_v1alpha1_manifest.md b/docs/data-sources/efs_services_k8s_aws_file_system_v1alpha1_manifest.md
index 0f7db9f14..075da6766 100644
--- a/docs/data-sources/efs_services_k8s_aws_file_system_v1alpha1_manifest.md
+++ b/docs/data-sources/efs_services_k8s_aws_file_system_v1alpha1_manifest.md
@@ -98,6 +98,7 @@ Optional:
Optional:
- `name` (String)
+- `namespace` (String)
diff --git a/docs/data-sources/efs_services_k8s_aws_mount_target_v1alpha1_manifest.md b/docs/data-sources/efs_services_k8s_aws_mount_target_v1alpha1_manifest.md
index 310dbebe2..aa47f09a7 100644
--- a/docs/data-sources/efs_services_k8s_aws_mount_target_v1alpha1_manifest.md
+++ b/docs/data-sources/efs_services_k8s_aws_mount_target_v1alpha1_manifest.md
@@ -76,6 +76,7 @@ Optional:
Optional:
- `name` (String)
+- `namespace` (String)
@@ -92,6 +93,7 @@ Optional:
Optional:
- `name` (String)
+- `namespace` (String)
@@ -108,3 +110,4 @@ Optional:
Optional:
- `name` (String)
+- `namespace` (String)
diff --git a/docs/data-sources/eks_services_k8s_aws_addon_v1alpha1_manifest.md b/docs/data-sources/eks_services_k8s_aws_addon_v1alpha1_manifest.md
index 3a9bcdf56..95b5a03e9 100644
--- a/docs/data-sources/eks_services_k8s_aws_addon_v1alpha1_manifest.md
+++ b/docs/data-sources/eks_services_k8s_aws_addon_v1alpha1_manifest.md
@@ -82,6 +82,7 @@ Optional:
Optional:
- `name` (String)
+- `namespace` (String)
@@ -98,3 +99,4 @@ Optional:
Optional:
- `name` (String)
+- `namespace` (String)
diff --git a/docs/data-sources/eks_services_k8s_aws_cluster_v1alpha1_manifest.md b/docs/data-sources/eks_services_k8s_aws_cluster_v1alpha1_manifest.md
index a557a7f02..1c54261b6 100644
--- a/docs/data-sources/eks_services_k8s_aws_cluster_v1alpha1_manifest.md
+++ b/docs/data-sources/eks_services_k8s_aws_cluster_v1alpha1_manifest.md
@@ -97,6 +97,7 @@ Optional:
Optional:
- `name` (String)
+- `namespace` (String)
@@ -113,6 +114,7 @@ Optional:
Optional:
- `name` (String)
+- `namespace` (String)
@@ -155,6 +157,7 @@ Optional:
Optional:
- `name` (String)
+- `namespace` (String)
@@ -217,3 +220,4 @@ Optional:
Optional:
- `name` (String)
+- `namespace` (String)
diff --git a/docs/data-sources/eks_services_k8s_aws_fargate_profile_v1alpha1_manifest.md b/docs/data-sources/eks_services_k8s_aws_fargate_profile_v1alpha1_manifest.md
index fff944f35..b53a5d331 100644
--- a/docs/data-sources/eks_services_k8s_aws_fargate_profile_v1alpha1_manifest.md
+++ b/docs/data-sources/eks_services_k8s_aws_fargate_profile_v1alpha1_manifest.md
@@ -82,6 +82,7 @@ Optional:
Optional:
- `name` (String)
+- `namespace` (String)
@@ -98,6 +99,7 @@ Optional:
Optional:
- `name` (String)
+- `namespace` (String)
@@ -123,3 +125,4 @@ Optional:
Optional:
- `name` (String)
+- `namespace` (String)
diff --git a/docs/data-sources/eks_services_k8s_aws_nodegroup_v1alpha1_manifest.md b/docs/data-sources/eks_services_k8s_aws_nodegroup_v1alpha1_manifest.md
index 1e9a2d0d1..f13d23d58 100644
--- a/docs/data-sources/eks_services_k8s_aws_nodegroup_v1alpha1_manifest.md
+++ b/docs/data-sources/eks_services_k8s_aws_nodegroup_v1alpha1_manifest.md
@@ -93,6 +93,7 @@ Optional:
Optional:
- `name` (String)
+- `namespace` (String)
@@ -119,6 +120,7 @@ Optional:
Optional:
- `name` (String)
+- `namespace` (String)
@@ -144,6 +146,7 @@ Optional:
Optional:
- `name` (String)
+- `namespace` (String)
@@ -171,6 +174,7 @@ Optional:
Optional:
- `name` (String)
+- `namespace` (String)
diff --git a/docs/data-sources/emrcontainers_services_k8s_aws_job_run_v1alpha1_manifest.md b/docs/data-sources/emrcontainers_services_k8s_aws_job_run_v1alpha1_manifest.md
index 0859448ae..9268da6aa 100644
--- a/docs/data-sources/emrcontainers_services_k8s_aws_job_run_v1alpha1_manifest.md
+++ b/docs/data-sources/emrcontainers_services_k8s_aws_job_run_v1alpha1_manifest.md
@@ -98,3 +98,4 @@ Optional:
Optional:
- `name` (String)
+- `namespace` (String)
diff --git a/docs/data-sources/external_secrets_io_cluster_secret_store_v1beta1_manifest.md b/docs/data-sources/external_secrets_io_cluster_secret_store_v1beta1_manifest.md
index 17b61031f..a5281a5a2 100644
--- a/docs/data-sources/external_secrets_io_cluster_secret_store_v1beta1_manifest.md
+++ b/docs/data-sources/external_secrets_io_cluster_secret_store_v1beta1_manifest.md
@@ -88,6 +88,7 @@ Optional:
- `alibaba` (Attributes) Alibaba configures this store to sync secrets using Alibaba Cloud provider (see [below for nested schema](#nestedatt--spec--provider--alibaba))
- `aws` (Attributes) AWS configures this store to sync secrets using AWS Secret Manager provider (see [below for nested schema](#nestedatt--spec--provider--aws))
- `azurekv` (Attributes) AzureKV configures this store to sync secrets using Azure Key Vault provider (see [below for nested schema](#nestedatt--spec--provider--azurekv))
+- `beyondtrust` (Attributes) Beyondtrust configures this store to sync secrets using Password Safe provider. (see [below for nested schema](#nestedatt--spec--provider--beyondtrust))
- `bitwardensecretsmanager` (Attributes) BitwardenSecretsManager configures this store to sync secrets using BitwardenSecretsManager provider (see [below for nested schema](#nestedatt--spec--provider--bitwardensecretsmanager))
- `chef` (Attributes) Chef configures this store to sync secrets with chef server (see [below for nested schema](#nestedatt--spec--provider--chef))
- `conjur` (Attributes) Conjur configures this store to sync secrets using conjur provider (see [below for nested schema](#nestedatt--spec--provider--conjur))
@@ -477,6 +478,120 @@ Optional:
+
+### Nested Schema for `spec.provider.beyondtrust`
+
+Required:
+
+- `auth` (Attributes) Auth configures how the operator authenticates with Beyondtrust. (see [below for nested schema](#nestedatt--spec--provider--beyondtrust--auth))
+- `server` (Attributes) Auth configures how API server works. (see [below for nested schema](#nestedatt--spec--provider--beyondtrust--server))
+
+
+### Nested Schema for `spec.provider.beyondtrust.auth`
+
+Required:
+
+- `client_id` (Attributes) (see [below for nested schema](#nestedatt--spec--provider--beyondtrust--auth--client_id))
+- `client_secret` (Attributes) (see [below for nested schema](#nestedatt--spec--provider--beyondtrust--auth--client_secret))
+
+Optional:
+
+- `certificate` (Attributes) Content of the certificate (cert.pem) for use when authenticating with an OAuth client Id using a Client Certificate. (see [below for nested schema](#nestedatt--spec--provider--beyondtrust--auth--certificate))
+- `certificate_key` (Attributes) Certificate private key (key.pem). For use when authenticating with an OAuth client Id (see [below for nested schema](#nestedatt--spec--provider--beyondtrust--auth--certificate_key))
+
+
+### Nested Schema for `spec.provider.beyondtrust.auth.client_id`
+
+Optional:
+
+- `secret_ref` (Attributes) SecretRef references a key in a secret that will be used as value. (see [below for nested schema](#nestedatt--spec--provider--beyondtrust--auth--client_id--secret_ref))
+- `value` (String) Value can be specified directly to set a value without using a secret.
+
+
+### Nested Schema for `spec.provider.beyondtrust.auth.client_id.secret_ref`
+
+Optional:
+
+- `key` (String) The key of the entry in the Secret resource's 'data' field to be used. Some instances of this field may bedefaulted, in others it may be required.
+- `name` (String) The name of the Secret resource being referred to.
+- `namespace` (String) Namespace of the resource being referred to. Ignored if referent is not cluster-scoped. cluster-scoped defaultsto the namespace of the referent.
+
+
+
+
+### Nested Schema for `spec.provider.beyondtrust.auth.client_secret`
+
+Optional:
+
+- `secret_ref` (Attributes) SecretRef references a key in a secret that will be used as value. (see [below for nested schema](#nestedatt--spec--provider--beyondtrust--auth--client_secret--secret_ref))
+- `value` (String) Value can be specified directly to set a value without using a secret.
+
+
+### Nested Schema for `spec.provider.beyondtrust.auth.client_secret.secret_ref`
+
+Optional:
+
+- `key` (String) The key of the entry in the Secret resource's 'data' field to be used. Some instances of this field may bedefaulted, in others it may be required.
+- `name` (String) The name of the Secret resource being referred to.
+- `namespace` (String) Namespace of the resource being referred to. Ignored if referent is not cluster-scoped. cluster-scoped defaultsto the namespace of the referent.
+
+
+
+
+### Nested Schema for `spec.provider.beyondtrust.auth.certificate`
+
+Optional:
+
+- `secret_ref` (Attributes) SecretRef references a key in a secret that will be used as value. (see [below for nested schema](#nestedatt--spec--provider--beyondtrust--auth--certificate--secret_ref))
+- `value` (String) Value can be specified directly to set a value without using a secret.
+
+
+### Nested Schema for `spec.provider.beyondtrust.auth.certificate.secret_ref`
+
+Optional:
+
+- `key` (String) The key of the entry in the Secret resource's 'data' field to be used. Some instances of this field may bedefaulted, in others it may be required.
+- `name` (String) The name of the Secret resource being referred to.
+- `namespace` (String) Namespace of the resource being referred to. Ignored if referent is not cluster-scoped. cluster-scoped defaultsto the namespace of the referent.
+
+
+
+
+### Nested Schema for `spec.provider.beyondtrust.auth.certificate_key`
+
+Optional:
+
+- `secret_ref` (Attributes) SecretRef references a key in a secret that will be used as value. (see [below for nested schema](#nestedatt--spec--provider--beyondtrust--auth--certificate_key--secret_ref))
+- `value` (String) Value can be specified directly to set a value without using a secret.
+
+
+### Nested Schema for `spec.provider.beyondtrust.auth.certificate_key.secret_ref`
+
+Optional:
+
+- `key` (String) The key of the entry in the Secret resource's 'data' field to be used. Some instances of this field may bedefaulted, in others it may be required.
+- `name` (String) The name of the Secret resource being referred to.
+- `namespace` (String) Namespace of the resource being referred to. Ignored if referent is not cluster-scoped. cluster-scoped defaultsto the namespace of the referent.
+
+
+
+
+
+### Nested Schema for `spec.provider.beyondtrust.server`
+
+Required:
+
+- `api_url` (String)
+- `verify_ca` (Boolean)
+
+Optional:
+
+- `client_time_out_seconds` (Number) Timeout specifies a time limit for requests made by this Client. The timeout includes connection time, any redirects, and reading the response body. Defaults to 45 seconds.
+- `retrieval_type` (String) The secret retrieval type. SECRET = Secrets Safe (credential, text, file). MANAGED_ACCOUNT = Password Safe account associated with a system.
+- `separator` (String) A character that separates the folder names.
+
+
+
### Nested Schema for `spec.provider.bitwardensecretsmanager`
diff --git a/docs/data-sources/external_secrets_io_secret_store_v1beta1_manifest.md b/docs/data-sources/external_secrets_io_secret_store_v1beta1_manifest.md
index 561ae7301..2e2fa610e 100644
--- a/docs/data-sources/external_secrets_io_secret_store_v1beta1_manifest.md
+++ b/docs/data-sources/external_secrets_io_secret_store_v1beta1_manifest.md
@@ -73,6 +73,7 @@ Optional:
- `alibaba` (Attributes) Alibaba configures this store to sync secrets using Alibaba Cloud provider (see [below for nested schema](#nestedatt--spec--provider--alibaba))
- `aws` (Attributes) AWS configures this store to sync secrets using AWS Secret Manager provider (see [below for nested schema](#nestedatt--spec--provider--aws))
- `azurekv` (Attributes) AzureKV configures this store to sync secrets using Azure Key Vault provider (see [below for nested schema](#nestedatt--spec--provider--azurekv))
+- `beyondtrust` (Attributes) Beyondtrust configures this store to sync secrets using Password Safe provider. (see [below for nested schema](#nestedatt--spec--provider--beyondtrust))
- `bitwardensecretsmanager` (Attributes) BitwardenSecretsManager configures this store to sync secrets using BitwardenSecretsManager provider (see [below for nested schema](#nestedatt--spec--provider--bitwardensecretsmanager))
- `chef` (Attributes) Chef configures this store to sync secrets with chef server (see [below for nested schema](#nestedatt--spec--provider--chef))
- `conjur` (Attributes) Conjur configures this store to sync secrets using conjur provider (see [below for nested schema](#nestedatt--spec--provider--conjur))
@@ -462,6 +463,120 @@ Optional:
+
+### Nested Schema for `spec.provider.beyondtrust`
+
+Required:
+
+- `auth` (Attributes) Auth configures how the operator authenticates with Beyondtrust. (see [below for nested schema](#nestedatt--spec--provider--beyondtrust--auth))
+- `server` (Attributes) Auth configures how API server works. (see [below for nested schema](#nestedatt--spec--provider--beyondtrust--server))
+
+
+### Nested Schema for `spec.provider.beyondtrust.auth`
+
+Required:
+
+- `client_id` (Attributes) (see [below for nested schema](#nestedatt--spec--provider--beyondtrust--auth--client_id))
+- `client_secret` (Attributes) (see [below for nested schema](#nestedatt--spec--provider--beyondtrust--auth--client_secret))
+
+Optional:
+
+- `certificate` (Attributes) Content of the certificate (cert.pem) for use when authenticating with an OAuth client Id using a Client Certificate. (see [below for nested schema](#nestedatt--spec--provider--beyondtrust--auth--certificate))
+- `certificate_key` (Attributes) Certificate private key (key.pem). For use when authenticating with an OAuth client Id (see [below for nested schema](#nestedatt--spec--provider--beyondtrust--auth--certificate_key))
+
+
+### Nested Schema for `spec.provider.beyondtrust.auth.client_id`
+
+Optional:
+
+- `secret_ref` (Attributes) SecretRef references a key in a secret that will be used as value. (see [below for nested schema](#nestedatt--spec--provider--beyondtrust--auth--client_id--secret_ref))
+- `value` (String) Value can be specified directly to set a value without using a secret.
+
+
+### Nested Schema for `spec.provider.beyondtrust.auth.client_id.secret_ref`
+
+Optional:
+
+- `key` (String) The key of the entry in the Secret resource's 'data' field to be used. Some instances of this field may bedefaulted, in others it may be required.
+- `name` (String) The name of the Secret resource being referred to.
+- `namespace` (String) Namespace of the resource being referred to. Ignored if referent is not cluster-scoped. cluster-scoped defaultsto the namespace of the referent.
+
+
+
+
+### Nested Schema for `spec.provider.beyondtrust.auth.client_secret`
+
+Optional:
+
+- `secret_ref` (Attributes) SecretRef references a key in a secret that will be used as value. (see [below for nested schema](#nestedatt--spec--provider--beyondtrust--auth--client_secret--secret_ref))
+- `value` (String) Value can be specified directly to set a value without using a secret.
+
+
+### Nested Schema for `spec.provider.beyondtrust.auth.client_secret.secret_ref`
+
+Optional:
+
+- `key` (String) The key of the entry in the Secret resource's 'data' field to be used. Some instances of this field may bedefaulted, in others it may be required.
+- `name` (String) The name of the Secret resource being referred to.
+- `namespace` (String) Namespace of the resource being referred to. Ignored if referent is not cluster-scoped. cluster-scoped defaultsto the namespace of the referent.
+
+
+
+
+### Nested Schema for `spec.provider.beyondtrust.auth.certificate`
+
+Optional:
+
+- `secret_ref` (Attributes) SecretRef references a key in a secret that will be used as value. (see [below for nested schema](#nestedatt--spec--provider--beyondtrust--auth--certificate--secret_ref))
+- `value` (String) Value can be specified directly to set a value without using a secret.
+
+
+### Nested Schema for `spec.provider.beyondtrust.auth.certificate.secret_ref`
+
+Optional:
+
+- `key` (String) The key of the entry in the Secret resource's 'data' field to be used. Some instances of this field may bedefaulted, in others it may be required.
+- `name` (String) The name of the Secret resource being referred to.
+- `namespace` (String) Namespace of the resource being referred to. Ignored if referent is not cluster-scoped. cluster-scoped defaultsto the namespace of the referent.
+
+
+
+
+### Nested Schema for `spec.provider.beyondtrust.auth.certificate_key`
+
+Optional:
+
+- `secret_ref` (Attributes) SecretRef references a key in a secret that will be used as value. (see [below for nested schema](#nestedatt--spec--provider--beyondtrust--auth--certificate_key--secret_ref))
+- `value` (String) Value can be specified directly to set a value without using a secret.
+
+
+### Nested Schema for `spec.provider.beyondtrust.auth.certificate_key.secret_ref`
+
+Optional:
+
+- `key` (String) The key of the entry in the Secret resource's 'data' field to be used. Some instances of this field may bedefaulted, in others it may be required.
+- `name` (String) The name of the Secret resource being referred to.
+- `namespace` (String) Namespace of the resource being referred to. Ignored if referent is not cluster-scoped. cluster-scoped defaultsto the namespace of the referent.
+
+
+
+
+
+### Nested Schema for `spec.provider.beyondtrust.server`
+
+Required:
+
+- `api_url` (String)
+- `verify_ca` (Boolean)
+
+Optional:
+
+- `client_time_out_seconds` (Number) Timeout specifies a time limit for requests made by this Client. The timeout includes connection time, any redirects, and reading the response body. Defaults to 45 seconds.
+- `retrieval_type` (String) The secret retrieval type. SECRET = Secrets Safe (credential, text, file). MANAGED_ACCOUNT = Password Safe account associated with a system.
+- `separator` (String) A character that separates the folder names.
+
+
+
### Nested Schema for `spec.provider.bitwardensecretsmanager`
diff --git a/docs/data-sources/flink_apache_org_flink_deployment_v1beta1_manifest.md b/docs/data-sources/flink_apache_org_flink_deployment_v1beta1_manifest.md
index 4d7907020..aec8b2afc 100644
--- a/docs/data-sources/flink_apache_org_flink_deployment_v1beta1_manifest.md
+++ b/docs/data-sources/flink_apache_org_flink_deployment_v1beta1_manifest.md
@@ -99,6 +99,7 @@ Optional:
- `args` (List of String)
- `checkpoint_trigger_nonce` (Number)
- `entry_class` (String)
+- `flink_state_snapshot_reference` (Attributes) (see [below for nested schema](#nestedatt--spec--job--flink_state_snapshot_reference))
- `initial_savepoint_path` (String)
- `jar_uri` (String)
- `parallelism` (Number)
@@ -107,6 +108,16 @@ Optional:
- `state` (String)
- `upgrade_mode` (String)
+
+### Nested Schema for `spec.job.flink_state_snapshot_reference`
+
+Optional:
+
+- `name` (String)
+- `namespace` (String)
+- `path` (String)
+
+
### Nested Schema for `spec.job_manager`
diff --git a/docs/data-sources/flink_apache_org_flink_session_job_v1beta1_manifest.md b/docs/data-sources/flink_apache_org_flink_session_job_v1beta1_manifest.md
index 3e47c811a..9c23216fc 100644
--- a/docs/data-sources/flink_apache_org_flink_session_job_v1beta1_manifest.md
+++ b/docs/data-sources/flink_apache_org_flink_session_job_v1beta1_manifest.md
@@ -69,6 +69,7 @@ Optional:
- `args` (List of String)
- `checkpoint_trigger_nonce` (Number)
- `entry_class` (String)
+- `flink_state_snapshot_reference` (Attributes) (see [below for nested schema](#nestedatt--spec--job--flink_state_snapshot_reference))
- `initial_savepoint_path` (String)
- `jar_uri` (String)
- `parallelism` (Number)
@@ -76,3 +77,12 @@ Optional:
- `savepoint_trigger_nonce` (Number)
- `state` (String)
- `upgrade_mode` (String)
+
+
+### Nested Schema for `spec.job.flink_state_snapshot_reference`
+
+Optional:
+
+- `name` (String)
+- `namespace` (String)
+- `path` (String)
diff --git a/docs/data-sources/flows_netobserv_io_flow_collector_v1beta1_manifest.md b/docs/data-sources/flows_netobserv_io_flow_collector_v1beta1_manifest.md
index a3fed24a5..a4e3cb629 100644
--- a/docs/data-sources/flows_netobserv_io_flow_collector_v1beta1_manifest.md
+++ b/docs/data-sources/flows_netobserv_io_flow_collector_v1beta1_manifest.md
@@ -117,6 +117,7 @@ Optional:
- `ports` (String) Ports defines the ports to filter flows by. it can be user for either source or destination ports.To filter a single port, set a single port as an integer value. For example ports: 80.To filter a range of ports, use a 'start-end' range, string format. For example ports: '80-10
- `protocol` (String) Protocol defines the protocol to filter flows by.
- `source_ports` (String) SourcePorts defines the source ports to filter flows by.To filter a single port, set a single port as an integer value. For example sourcePorts: 80.To filter a range of ports, use a 'start-end' range, string format. For example sourcePorts: '80-100'.
+- `tcp_flags` (String) 'tcpFlags' defines the TCP flags to filter flows by.
diff --git a/docs/data-sources/flows_netobserv_io_flow_collector_v1beta2_manifest.md b/docs/data-sources/flows_netobserv_io_flow_collector_v1beta2_manifest.md
index e53e103ce..784e78946 100644
--- a/docs/data-sources/flows_netobserv_io_flow_collector_v1beta2_manifest.md
+++ b/docs/data-sources/flows_netobserv_io_flow_collector_v1beta2_manifest.md
@@ -524,6 +524,7 @@ Optional:
- `ports` (String) 'ports' defines the ports to filter flows by. It is used both for source and destination ports.To filter a single port, set a single port as an integer value. For example: 'ports: 80'.To filter a range of ports, use a 'start-end' range in string format. For example: 'ports: '80-100''.
- `protocol` (String) 'protocol' defines the protocol to filter flows by.
- `source_ports` (String) 'sourcePorts' defines the source ports to filter flows by.To filter a single port, set a single port as an integer value. For example: 'sourcePorts: 80'.To filter a range of ports, use a 'start-end' range in string format. For example: 'sourcePorts: '80-100''.
+- `tcp_flags` (String) 'tcpFlags' defines the TCP flags to filter flows by.
diff --git a/docs/data-sources/gateway_networking_k8s_io_http_route_v1_manifest.md b/docs/data-sources/gateway_networking_k8s_io_http_route_v1_manifest.md
index 83a5f91a6..019bb194b 100644
--- a/docs/data-sources/gateway_networking_k8s_io_http_route_v1_manifest.md
+++ b/docs/data-sources/gateway_networking_k8s_io_http_route_v1_manifest.md
@@ -480,5 +480,5 @@ Optional:
Optional:
-- `backend_request` (String) BackendRequest specifies a timeout for an individual request from the gatewayto a backend. This covers the time from when the request first starts beingsent from the gateway to when the full response has been received from the backend.Setting a timeout to the zero duration (e.g. '0s') SHOULD disable the timeoutcompletely. Implementations that cannot completely disable the timeout MUSTinstead interpret the zero duration as the longest possible value to whichthe timeout can be set.An entire client HTTP transaction with a gateway, covered by the Request timeout,may result in more than one call from the gateway to the destination backend,for example, if automatic retries are supported.Because the Request timeout encompasses the BackendRequest timeout, the value ofBackendRequest must be <= the value of Request timeout.Support: Extended
-- `request` (String) Request specifies the maximum duration for a gateway to respond to an HTTP request.If the gateway has not been able to respond before this deadline is met, the gatewayMUST return a timeout error.For example, setting the 'rules.timeouts.request' field to the value '10s' in an'HTTPRoute' will cause a timeout if a client request is taking longer than 10 secondsto complete.Setting a timeout to the zero duration (e.g. '0s') SHOULD disable the timeoutcompletely. Implementations that cannot completely disable the timeout MUSTinstead interpret the zero duration as the longest possible value to whichthe timeout can be set.This timeout is intended to cover as close to the whole request-response transactionas possible although an implementation MAY choose to start the timeout after the entirerequest stream has been received instead of immediately after the transaction isinitiated by the client.When this field is unspecified, request timeout behavior is implementation-specific.Support: Extended
+- `backend_request` (String) BackendRequest specifies a timeout for an individual request from the gatewayto a backend. This covers the time from when the request first starts beingsent from the gateway to when the full response has been received from the backend.Setting a timeout to the zero duration (e.g. '0s') SHOULD disable the timeoutcompletely. Implementations that cannot completely disable the timeout MUSTinstead interpret the zero duration as the longest possible value to whichthe timeout can be set.An entire client HTTP transaction with a gateway, covered by the Request timeout,may result in more than one call from the gateway to the destination backend,for example, if automatic retries are supported.The value of BackendRequest must be a Gateway API Duration string as defined byGEP-2257. When this field is unspecified, its behavior is implementation-specific;when specified, the value of BackendRequest must be no more than the value of theRequest timeout (since the Request timeout encompasses the BackendRequest timeout).Support: Extended
+- `request` (String) Request specifies the maximum duration for a gateway to respond to an HTTP request.If the gateway has not been able to respond before this deadline is met, the gatewayMUST return a timeout error.For example, setting the 'rules.timeouts.request' field to the value '10s' in an'HTTPRoute' will cause a timeout if a client request is taking longer than 10 secondsto complete.Setting a timeout to the zero duration (e.g. '0s') SHOULD disable the timeoutcompletely. Implementations that cannot completely disable the timeout MUSTinstead interpret the zero duration as the longest possible value to whichthe timeout can be set.This timeout is intended to cover as close to the whole request-response transactionas possible although an implementation MAY choose to start the timeout after the entirerequest stream has been received instead of immediately after the transaction isinitiated by the client.The value of Request is a Gateway API Duration string as defined by GEP-2257. When thisfield is unspecified, request timeout behavior is implementation-specific.Support: Extended
diff --git a/docs/data-sources/gateway_networking_k8s_io_http_route_v1beta1_manifest.md b/docs/data-sources/gateway_networking_k8s_io_http_route_v1beta1_manifest.md
index f3cc82b4a..7323df7b6 100644
--- a/docs/data-sources/gateway_networking_k8s_io_http_route_v1beta1_manifest.md
+++ b/docs/data-sources/gateway_networking_k8s_io_http_route_v1beta1_manifest.md
@@ -480,5 +480,5 @@ Optional:
Optional:
-- `backend_request` (String) BackendRequest specifies a timeout for an individual request from the gatewayto a backend. This covers the time from when the request first starts beingsent from the gateway to when the full response has been received from the backend.Setting a timeout to the zero duration (e.g. '0s') SHOULD disable the timeoutcompletely. Implementations that cannot completely disable the timeout MUSTinstead interpret the zero duration as the longest possible value to whichthe timeout can be set.An entire client HTTP transaction with a gateway, covered by the Request timeout,may result in more than one call from the gateway to the destination backend,for example, if automatic retries are supported.Because the Request timeout encompasses the BackendRequest timeout, the value ofBackendRequest must be <= the value of Request timeout.Support: Extended
-- `request` (String) Request specifies the maximum duration for a gateway to respond to an HTTP request.If the gateway has not been able to respond before this deadline is met, the gatewayMUST return a timeout error.For example, setting the 'rules.timeouts.request' field to the value '10s' in an'HTTPRoute' will cause a timeout if a client request is taking longer than 10 secondsto complete.Setting a timeout to the zero duration (e.g. '0s') SHOULD disable the timeoutcompletely. Implementations that cannot completely disable the timeout MUSTinstead interpret the zero duration as the longest possible value to whichthe timeout can be set.This timeout is intended to cover as close to the whole request-response transactionas possible although an implementation MAY choose to start the timeout after the entirerequest stream has been received instead of immediately after the transaction isinitiated by the client.When this field is unspecified, request timeout behavior is implementation-specific.Support: Extended
+- `backend_request` (String) BackendRequest specifies a timeout for an individual request from the gatewayto a backend. This covers the time from when the request first starts beingsent from the gateway to when the full response has been received from the backend.Setting a timeout to the zero duration (e.g. '0s') SHOULD disable the timeoutcompletely. Implementations that cannot completely disable the timeout MUSTinstead interpret the zero duration as the longest possible value to whichthe timeout can be set.An entire client HTTP transaction with a gateway, covered by the Request timeout,may result in more than one call from the gateway to the destination backend,for example, if automatic retries are supported.The value of BackendRequest must be a Gateway API Duration string as defined byGEP-2257. When this field is unspecified, its behavior is implementation-specific;when specified, the value of BackendRequest must be no more than the value of theRequest timeout (since the Request timeout encompasses the BackendRequest timeout).Support: Extended
+- `request` (String) Request specifies the maximum duration for a gateway to respond to an HTTP request.If the gateway has not been able to respond before this deadline is met, the gatewayMUST return a timeout error.For example, setting the 'rules.timeouts.request' field to the value '10s' in an'HTTPRoute' will cause a timeout if a client request is taking longer than 10 secondsto complete.Setting a timeout to the zero duration (e.g. '0s') SHOULD disable the timeoutcompletely. Implementations that cannot completely disable the timeout MUSTinstead interpret the zero duration as the longest possible value to whichthe timeout can be set.This timeout is intended to cover as close to the whole request-response transactionas possible although an implementation MAY choose to start the timeout after the entirerequest stream has been received instead of immediately after the transaction isinitiated by the client.The value of Request is a Gateway API Duration string as defined by GEP-2257. When thisfield is unspecified, request timeout behavior is implementation-specific.Support: Extended
diff --git a/docs/data-sources/gateway_solo_io_gateway_v1_manifest.md b/docs/data-sources/gateway_solo_io_gateway_v1_manifest.md
index 401c8a025..77cbe4378 100644
--- a/docs/data-sources/gateway_solo_io_gateway_v1_manifest.md
+++ b/docs/data-sources/gateway_solo_io_gateway_v1_manifest.md
@@ -477,6 +477,7 @@ Optional:
- `allow_renegotiation` (Boolean)
- `alpn_protocols` (List of String)
+- `one_way_tls` (Boolean)
- `parameters` (Attributes) (see [below for nested schema](#nestedatt--spec--http_gateway--options--dynamic_forward_proxy--ssl_config--parameters))
- `sds` (Attributes) (see [below for nested schema](#nestedatt--spec--http_gateway--options--dynamic_forward_proxy--ssl_config--sds))
- `secret_ref` (Attributes) (see [below for nested schema](#nestedatt--spec--http_gateway--options--dynamic_forward_proxy--ssl_config--secret_ref))
@@ -2388,6 +2389,7 @@ Optional:
- `allow_renegotiation` (Boolean)
- `alpn_protocols` (List of String)
+- `one_way_tls` (Boolean)
- `parameters` (Attributes) (see [below for nested schema](#nestedatt--spec--hybrid_gateway--matched_gateways--http_gateway--options--dynamic_forward_proxy--ssl_config--parameters))
- `sds` (Attributes) (see [below for nested schema](#nestedatt--spec--hybrid_gateway--matched_gateways--http_gateway--options--dynamic_forward_proxy--ssl_config--sds))
- `secret_ref` (Attributes) (see [below for nested schema](#nestedatt--spec--hybrid_gateway--matched_gateways--http_gateway--options--dynamic_forward_proxy--ssl_config--secret_ref))
diff --git a/docs/data-sources/gateway_solo_io_matchable_http_gateway_v1_manifest.md b/docs/data-sources/gateway_solo_io_matchable_http_gateway_v1_manifest.md
index 3d04dda83..1c035d370 100644
--- a/docs/data-sources/gateway_solo_io_matchable_http_gateway_v1_manifest.md
+++ b/docs/data-sources/gateway_solo_io_matchable_http_gateway_v1_manifest.md
@@ -469,6 +469,7 @@ Optional:
- `allow_renegotiation` (Boolean)
- `alpn_protocols` (List of String)
+- `one_way_tls` (Boolean)
- `parameters` (Attributes) (see [below for nested schema](#nestedatt--spec--http_gateway--options--dynamic_forward_proxy--ssl_config--parameters))
- `sds` (Attributes) (see [below for nested schema](#nestedatt--spec--http_gateway--options--dynamic_forward_proxy--ssl_config--sds))
- `secret_ref` (Attributes) (see [below for nested schema](#nestedatt--spec--http_gateway--options--dynamic_forward_proxy--ssl_config--secret_ref))
diff --git a/docs/data-sources/gloo_solo_io_upstream_v1_manifest.md b/docs/data-sources/gloo_solo_io_upstream_v1_manifest.md
index ce23d213e..1fd5809a8 100644
--- a/docs/data-sources/gloo_solo_io_upstream_v1_manifest.md
+++ b/docs/data-sources/gloo_solo_io_upstream_v1_manifest.md
@@ -694,6 +694,7 @@ Optional:
- `allow_renegotiation` (Boolean)
- `alpn_protocols` (List of String)
+- `one_way_tls` (Boolean)
- `parameters` (Attributes) (see [below for nested schema](#nestedatt--spec--failover--prioritized_localities--locality_endpoints--lb_endpoints--upstream_ssl_config--parameters))
- `sds` (Attributes) (see [below for nested schema](#nestedatt--spec--failover--prioritized_localities--locality_endpoints--lb_endpoints--upstream_ssl_config--sds))
- `secret_ref` (Attributes) (see [below for nested schema](#nestedatt--spec--failover--prioritized_localities--locality_endpoints--lb_endpoints--upstream_ssl_config--secret_ref))
@@ -998,6 +999,7 @@ Optional:
- `allow_renegotiation` (Boolean)
- `alpn_protocols` (List of String)
+- `one_way_tls` (Boolean)
- `parameters` (Attributes) (see [below for nested schema](#nestedatt--spec--http_connect_ssl_config--parameters))
- `sds` (Attributes) (see [below for nested schema](#nestedatt--spec--http_connect_ssl_config--sds))
- `secret_ref` (Attributes) (see [below for nested schema](#nestedatt--spec--http_connect_ssl_config--secret_ref))
@@ -1671,6 +1673,7 @@ Optional:
- `allow_renegotiation` (Boolean)
- `alpn_protocols` (List of String)
+- `one_way_tls` (Boolean)
- `parameters` (Attributes) (see [below for nested schema](#nestedatt--spec--ssl_config--parameters))
- `sds` (Attributes) (see [below for nested schema](#nestedatt--spec--ssl_config--sds))
- `secret_ref` (Attributes) (see [below for nested schema](#nestedatt--spec--ssl_config--secret_ref))
diff --git a/docs/data-sources/hive_openshift_io_cluster_deployment_v1_manifest.md b/docs/data-sources/hive_openshift_io_cluster_deployment_v1_manifest.md
index 9441d3849..f5df72cc6 100644
--- a/docs/data-sources/hive_openshift_io_cluster_deployment_v1_manifest.md
+++ b/docs/data-sources/hive_openshift_io_cluster_deployment_v1_manifest.md
@@ -154,7 +154,7 @@ Optional:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. TODO: Add other useful fields. apiVersion, kind, uid? More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
@@ -188,7 +188,7 @@ Optional:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. TODO: Add other useful fields. apiVersion, kind, uid? More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
@@ -204,7 +204,7 @@ Required:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. TODO: Add other useful fields. apiVersion, kind, uid? More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
@@ -225,7 +225,7 @@ Optional:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. TODO: Add other useful fields. apiVersion, kind, uid? More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
@@ -275,7 +275,7 @@ Optional:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. TODO: Add other useful fields. apiVersion, kind, uid? More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
@@ -297,7 +297,7 @@ Optional:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. TODO: Add other useful fields. apiVersion, kind, uid? More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
@@ -305,7 +305,7 @@ Optional:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. TODO: Add other useful fields. apiVersion, kind, uid? More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
@@ -328,7 +328,7 @@ Optional:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. TODO: Add other useful fields. apiVersion, kind, uid? More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
@@ -336,7 +336,7 @@ Optional:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. TODO: Add other useful fields. apiVersion, kind, uid? More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
@@ -362,7 +362,7 @@ Optional:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. TODO: Add other useful fields. apiVersion, kind, uid? More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
@@ -370,7 +370,7 @@ Optional:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. TODO: Add other useful fields. apiVersion, kind, uid? More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
@@ -380,7 +380,7 @@ Optional:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. TODO: Add other useful fields. apiVersion, kind, uid? More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
@@ -400,7 +400,7 @@ Optional:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. TODO: Add other useful fields. apiVersion, kind, uid? More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
@@ -434,7 +434,7 @@ Optional:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. TODO: Add other useful fields. apiVersion, kind, uid? More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
@@ -442,7 +442,7 @@ Optional:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. TODO: Add other useful fields. apiVersion, kind, uid? More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
@@ -499,7 +499,7 @@ Optional:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. TODO: Add other useful fields. apiVersion, kind, uid? More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
@@ -627,7 +627,7 @@ Required:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. TODO: Add other useful fields. apiVersion, kind, uid? More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
@@ -661,7 +661,7 @@ Required:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. TODO: Add other useful fields. apiVersion, kind, uid? More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
@@ -699,7 +699,7 @@ Required:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. TODO: Add other useful fields. apiVersion, kind, uid? More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
- `optional` (Boolean) Specify whether the Secret or its key must be defined
@@ -710,7 +710,7 @@ Optional:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. TODO: Add other useful fields. apiVersion, kind, uid? More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
@@ -718,7 +718,7 @@ Optional:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. TODO: Add other useful fields. apiVersion, kind, uid? More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
@@ -726,7 +726,7 @@ Optional:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. TODO: Add other useful fields. apiVersion, kind, uid? More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
@@ -735,4 +735,4 @@ Optional:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. TODO: Add other useful fields. apiVersion, kind, uid? More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
diff --git a/docs/data-sources/hive_openshift_io_cluster_deprovision_v1_manifest.md b/docs/data-sources/hive_openshift_io_cluster_deprovision_v1_manifest.md
index a11e8d314..4dae1744b 100644
--- a/docs/data-sources/hive_openshift_io_cluster_deprovision_v1_manifest.md
+++ b/docs/data-sources/hive_openshift_io_cluster_deprovision_v1_manifest.md
@@ -107,7 +107,7 @@ Optional:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. TODO: Add other useful fields. apiVersion, kind, uid? More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
@@ -125,7 +125,7 @@ Optional:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. TODO: Add other useful fields. apiVersion, kind, uid? More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
@@ -146,7 +146,7 @@ Optional:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. TODO: Add other useful fields. apiVersion, kind, uid? More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
@@ -164,7 +164,7 @@ Required:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. TODO: Add other useful fields. apiVersion, kind, uid? More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
@@ -185,7 +185,7 @@ Optional:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. TODO: Add other useful fields. apiVersion, kind, uid? More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
@@ -193,7 +193,7 @@ Optional:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. TODO: Add other useful fields. apiVersion, kind, uid? More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
@@ -211,7 +211,7 @@ Required:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. TODO: Add other useful fields. apiVersion, kind, uid? More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
@@ -219,7 +219,7 @@ Optional:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. TODO: Add other useful fields. apiVersion, kind, uid? More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
@@ -237,7 +237,7 @@ Required:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. TODO: Add other useful fields. apiVersion, kind, uid? More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
@@ -245,4 +245,4 @@ Optional:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. TODO: Add other useful fields. apiVersion, kind, uid? More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
diff --git a/docs/data-sources/hive_openshift_io_cluster_pool_v1_manifest.md b/docs/data-sources/hive_openshift_io_cluster_pool_v1_manifest.md
index f0601e7c1..685391798 100644
--- a/docs/data-sources/hive_openshift_io_cluster_pool_v1_manifest.md
+++ b/docs/data-sources/hive_openshift_io_cluster_pool_v1_manifest.md
@@ -167,7 +167,7 @@ Optional:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. TODO: Add other useful fields. apiVersion, kind, uid? More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
@@ -201,7 +201,7 @@ Optional:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. TODO: Add other useful fields. apiVersion, kind, uid? More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
@@ -217,7 +217,7 @@ Required:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. TODO: Add other useful fields. apiVersion, kind, uid? More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
@@ -238,7 +238,7 @@ Optional:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. TODO: Add other useful fields. apiVersion, kind, uid? More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
@@ -288,7 +288,7 @@ Optional:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. TODO: Add other useful fields. apiVersion, kind, uid? More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
@@ -310,7 +310,7 @@ Optional:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. TODO: Add other useful fields. apiVersion, kind, uid? More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
@@ -318,7 +318,7 @@ Optional:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. TODO: Add other useful fields. apiVersion, kind, uid? More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
@@ -341,7 +341,7 @@ Optional:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. TODO: Add other useful fields. apiVersion, kind, uid? More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
@@ -349,7 +349,7 @@ Optional:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. TODO: Add other useful fields. apiVersion, kind, uid? More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
@@ -375,7 +375,7 @@ Optional:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. TODO: Add other useful fields. apiVersion, kind, uid? More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
@@ -383,7 +383,7 @@ Optional:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. TODO: Add other useful fields. apiVersion, kind, uid? More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
@@ -410,7 +410,7 @@ Optional:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. TODO: Add other useful fields. apiVersion, kind, uid? More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
@@ -444,7 +444,7 @@ Required:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. TODO: Add other useful fields. apiVersion, kind, uid? More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
@@ -482,7 +482,7 @@ Required:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. TODO: Add other useful fields. apiVersion, kind, uid? More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
- `optional` (Boolean) Specify whether the Secret or its key must be defined
@@ -502,4 +502,4 @@ Optional:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. TODO: Add other useful fields. apiVersion, kind, uid? More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
diff --git a/docs/data-sources/hive_openshift_io_cluster_provision_v1_manifest.md b/docs/data-sources/hive_openshift_io_cluster_provision_v1_manifest.md
index cd160383e..748abb861 100644
--- a/docs/data-sources/hive_openshift_io_cluster_provision_v1_manifest.md
+++ b/docs/data-sources/hive_openshift_io_cluster_provision_v1_manifest.md
@@ -77,7 +77,7 @@ Optional:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. TODO: Add other useful fields. apiVersion, kind, uid? More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
@@ -85,7 +85,7 @@ Optional:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. TODO: Add other useful fields. apiVersion, kind, uid? More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
@@ -93,4 +93,4 @@ Optional:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. TODO: Add other useful fields. apiVersion, kind, uid? More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
diff --git a/docs/data-sources/hive_openshift_io_dns_zone_v1_manifest.md b/docs/data-sources/hive_openshift_io_dns_zone_v1_manifest.md
index 97118d900..aa367e24f 100644
--- a/docs/data-sources/hive_openshift_io_dns_zone_v1_manifest.md
+++ b/docs/data-sources/hive_openshift_io_dns_zone_v1_manifest.md
@@ -101,7 +101,7 @@ Optional:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. TODO: Add other useful fields. apiVersion, kind, uid? More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
@@ -122,7 +122,7 @@ Optional:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. TODO: Add other useful fields. apiVersion, kind, uid? More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
@@ -138,4 +138,4 @@ Required:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. TODO: Add other useful fields. apiVersion, kind, uid? More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
diff --git a/docs/data-sources/hive_openshift_io_hive_config_v1_manifest.md b/docs/data-sources/hive_openshift_io_hive_config_v1_manifest.md
index dbe5f406e..727f4792f 100644
--- a/docs/data-sources/hive_openshift_io_hive_config_v1_manifest.md
+++ b/docs/data-sources/hive_openshift_io_hive_config_v1_manifest.md
@@ -83,7 +83,7 @@ Optional:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. TODO: Add other useful fields. apiVersion, kind, uid? More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
@@ -116,7 +116,7 @@ Optional:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. TODO: Add other useful fields. apiVersion, kind, uid? More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
@@ -136,7 +136,7 @@ Optional:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. TODO: Add other useful fields. apiVersion, kind, uid? More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
@@ -317,7 +317,7 @@ Optional:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. TODO: Add other useful fields. apiVersion, kind, uid? More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
@@ -344,7 +344,7 @@ Optional:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. TODO: Add other useful fields. apiVersion, kind, uid? More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
@@ -376,7 +376,7 @@ Optional:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. TODO: Add other useful fields. apiVersion, kind, uid? More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
@@ -397,7 +397,7 @@ Optional:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. TODO: Add other useful fields. apiVersion, kind, uid? More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
@@ -413,7 +413,7 @@ Required:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. TODO: Add other useful fields. apiVersion, kind, uid? More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
@@ -459,7 +459,7 @@ Optional:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. TODO: Add other useful fields. apiVersion, kind, uid? More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
@@ -510,4 +510,4 @@ Optional:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. TODO: Add other useful fields. apiVersion, kind, uid? More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
diff --git a/docs/data-sources/hive_openshift_io_machine_pool_v1_manifest.md b/docs/data-sources/hive_openshift_io_machine_pool_v1_manifest.md
index 88802a7f4..faeda2b49 100644
--- a/docs/data-sources/hive_openshift_io_machine_pool_v1_manifest.md
+++ b/docs/data-sources/hive_openshift_io_machine_pool_v1_manifest.md
@@ -71,7 +71,7 @@ Optional:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. TODO: Add other useful fields. apiVersion, kind, uid? More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
diff --git a/docs/data-sources/hive_openshift_io_sync_identity_provider_v1_manifest.md b/docs/data-sources/hive_openshift_io_sync_identity_provider_v1_manifest.md
index bf8a222b1..ea138c493 100644
--- a/docs/data-sources/hive_openshift_io_sync_identity_provider_v1_manifest.md
+++ b/docs/data-sources/hive_openshift_io_sync_identity_provider_v1_manifest.md
@@ -63,7 +63,7 @@ Required:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. TODO: Add other useful fields. apiVersion, kind, uid? More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
diff --git a/docs/data-sources/hive_openshift_io_sync_set_v1_manifest.md b/docs/data-sources/hive_openshift_io_sync_set_v1_manifest.md
index cbb6c1f67..78ec28a07 100644
--- a/docs/data-sources/hive_openshift_io_sync_set_v1_manifest.md
+++ b/docs/data-sources/hive_openshift_io_sync_set_v1_manifest.md
@@ -71,7 +71,7 @@ Optional:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. TODO: Add other useful fields. apiVersion, kind, uid? More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
diff --git a/docs/data-sources/hiveinternal_openshift_io_fake_cluster_install_v1alpha1_manifest.md b/docs/data-sources/hiveinternal_openshift_io_fake_cluster_install_v1alpha1_manifest.md
index c3642a006..c27e4625e 100644
--- a/docs/data-sources/hiveinternal_openshift_io_fake_cluster_install_v1alpha1_manifest.md
+++ b/docs/data-sources/hiveinternal_openshift_io_fake_cluster_install_v1alpha1_manifest.md
@@ -72,7 +72,7 @@ Optional:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. TODO: Add other useful fields. apiVersion, kind, uid? More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
@@ -102,7 +102,7 @@ Optional:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. TODO: Add other useful fields. apiVersion, kind, uid? More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
@@ -110,7 +110,7 @@ Optional:
Optional:
-- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. TODO: Add other useful fields. apiVersion, kind, uid? More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
diff --git a/docs/data-sources/jobset_x_k8s_io_job_set_v1alpha2_manifest.md b/docs/data-sources/jobset_x_k8s_io_job_set_v1alpha2_manifest.md
index bfd678a01..4a9c715ea 100644
--- a/docs/data-sources/jobset_x_k8s_io_job_set_v1alpha2_manifest.md
+++ b/docs/data-sources/jobset_x_k8s_io_job_set_v1alpha2_manifest.md
@@ -157,12 +157,14 @@ Optional:
- `backoff_limit_per_index` (Number) Specifies the limit for the number of retries within anindex before marking this index as failed. When enabled the number offailures per index is kept in the pod'sbatch.kubernetes.io/job-index-failure-count annotation. It can onlybe set when Job's completionMode=Indexed, and the Pod's restartpolicy is Never. The field is immutable.This field is beta-level. It can be used when the 'JobBackoffLimitPerIndex'feature gate is enabled (enabled by default).
- `completion_mode` (String) completionMode specifies how Pod completions are tracked. It can be'NonIndexed' (default) or 'Indexed'.'NonIndexed' means that the Job is considered complete when there havebeen .spec.completions successfully completed Pods. Each Pod completion ishomologous to each other.'Indexed' means that the Pods of aJob get an associated completion index from 0 to (.spec.completions - 1),available in the annotation batch.kubernetes.io/job-completion-index.The Job is considered complete when there is one successfully completed Podfor each index.When value is 'Indexed', .spec.completions must be specified and'.spec.parallelism' must be less than or equal to 10^5.In addition, The Pod name takes the form'$(job-name)-$(index)-$(random-string)',the Pod hostname takes the form '$(job-name)-$(index)'.More completion modes can be added in the future.If the Job controller observes a mode that it doesn't recognize, whichis possible during upgrades due to version skew, the controllerskips updates for the Job.
- `completions` (Number) Specifies the desired number of successfully finished pods thejob should be run with. Setting to null means that the success of anypod signals the success of all pods, and allows parallelism to have any positivevalue. Setting to 1 means that parallelism is limited to 1 and the success of thatpod signals the success of the job.More info: https://kubernetes.io/docs/concepts/workloads/controllers/jobs-run-to-completion/
+- `managed_by` (String) ManagedBy field indicates the controller that manages a Job. The k8s Jobcontroller reconciles jobs which don't have this field at all or the fieldvalue is the reserved string 'kubernetes.io/job-controller', but skipsreconciling Jobs with a custom value for this field.The value must be a valid domain-prefixed path (e.g. acme.io/foo) -all characters before the first '/' must be a valid subdomain as definedby RFC 1123. All characters trailing the first '/' must be valid HTTP Pathcharacters as defined by RFC 3986. The value cannot exceed 64 characters.This field is alpha-level. The job controller accepts setting the fieldwhen the feature gate JobManagedBy is enabled (disabled by default).
- `manual_selector` (Boolean) manualSelector controls generation of pod labels and pod selectors.Leave 'manualSelector' unset unless you are certain what you are doing.When false or unset, the system pick labels unique to this joband appends those labels to the pod template. When true,the user is responsible for picking unique labels and specifyingthe selector. Failure to pick a unique label may cause thisand other jobs to not function correctly. However, You may see'manualSelector=true' in jobs that were created with the old 'extensions/v1beta1'API.More info: https://kubernetes.io/docs/concepts/workloads/controllers/jobs-run-to-completion/#specifying-your-own-pod-selector
- `max_failed_indexes` (Number) Specifies the maximal number of failed indexes before marking the Job asfailed, when backoffLimitPerIndex is set. Once the number of failedindexes exceeds this number the entire Job is marked as Failed and itsexecution is terminated. When left as null the job continues execution ofall of its indexes and is marked with the 'Complete' Job condition.It can only be specified when backoffLimitPerIndex is set.It can be null or up to completions. It is required and must beless than or equal to 10^4 when is completions greater than 10^5.This field is beta-level. It can be used when the 'JobBackoffLimitPerIndex'feature gate is enabled (enabled by default).
- `parallelism` (Number) Specifies the maximum desired number of pods the job shouldrun at any given time. The actual number of pods running in steady state willbe less than this number when ((.spec.completions - .status.successful) < .spec.parallelism),i.e. when the work left to do is less than max parallelism.More info: https://kubernetes.io/docs/concepts/workloads/controllers/jobs-run-to-completion/
- `pod_failure_policy` (Attributes) Specifies the policy of handling failed pods. In particular, it allows tospecify the set of actions and conditions which need to besatisfied to take the associated action.If empty, the default behaviour applies - the counter of failed pods,represented by the jobs's .status.failed field, is incremented and it ischecked against the backoffLimit. This field cannot be used in combinationwith restartPolicy=OnFailure.This field is beta-level. It can be used when the 'JobPodFailurePolicy'feature gate is enabled (enabled by default). (see [below for nested schema](#nestedatt--spec--replicated_jobs--template--spec--pod_failure_policy))
- `pod_replacement_policy` (String) podReplacementPolicy specifies when to create replacement Pods.Possible values are:- TerminatingOrFailed means that we recreate pods when they are terminating (has a metadata.deletionTimestamp) or failed.- Failed means to wait until a previously created Pod is fully terminated (has phase Failed or Succeeded) before creating a replacement Pod.When using podFailurePolicy, Failed is the the only allowed value.TerminatingOrFailed and Failed are allowed values when podFailurePolicy is not in use.This is an beta field. To use this, enable the JobPodReplacementPolicy feature toggle.This is on by default.
- `selector` (Attributes) A label query over pods that should match the pod count.Normally, the system sets this field for you.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#label-selectors (see [below for nested schema](#nestedatt--spec--replicated_jobs--template--spec--selector))
+- `success_policy` (Attributes) successPolicy specifies the policy when the Job can be declared as succeeded.If empty, the default behavior applies - the Job is declared as succeededonly when the number of succeeded pods equals to the completions.When the field is specified, it must be immutable and works only for the Indexed Jobs.Once the Job meets the SuccessPolicy, the lingering pods are terminated.This field is alpha-level. To use this field, you must enable the'JobSuccessPolicy' feature gate (disabled by default). (see [below for nested schema](#nestedatt--spec--replicated_jobs--template--spec--success_policy))
- `suspend` (Boolean) suspend specifies whether the Job controller should create Pods or not. Ifa Job is created with suspend set to true, no Pods are created by the Jobcontroller. If a Job is suspended after creation (i.e. the flag goes fromfalse to true), the Job controller will delete all active Pods associatedwith this Job. Users must design their workload to gracefully handle this.Suspending a Job will reset the StartTime field of the Job, effectivelyresetting the ActiveDeadlineSeconds timer too. Defaults to false.
- `ttl_seconds_after_finished` (Number) ttlSecondsAfterFinished limits the lifetime of a Job that has finishedexecution (either Complete or Failed). If this field is set,ttlSecondsAfterFinished after the Job finishes, it is eligible to beautomatically deleted. When the Job is being deleted, its lifecycleguarantees (e.g. finalizers) will be honored. If this field is unset,the Job won't be automatically deleted. If this field is set to zero,the Job becomes eligible to be deleted immediately after it finishes.
@@ -202,7 +204,7 @@ Optional:
- `dns_policy` (String) Set DNS policy for the pod.Defaults to 'ClusterFirst'.Valid values are 'ClusterFirstWithHostNet', 'ClusterFirst', 'Default' or 'None'.DNS parameters given in DNSConfig will be merged with the policy selected with DNSPolicy.To have DNS options set along with hostNetwork, you have to specify DNS policyexplicitly to 'ClusterFirstWithHostNet'.
- `enable_service_links` (Boolean) EnableServiceLinks indicates whether information about services should be injected into pod'senvironment variables, matching the syntax of Docker links.Optional: Defaults to true.
- `ephemeral_containers` (Attributes List) List of ephemeral containers run in this pod. Ephemeral containers may be run in an existingpod to perform user-initiated actions such as debugging. This list cannot be specified whencreating a pod, and it cannot be modified by updating the pod spec. In order to add anephemeral container to an existing pod, use the pod's ephemeralcontainers subresource. (see [below for nested schema](#nestedatt--spec--replicated_jobs--template--spec--template--spec--ephemeral_containers))
-- `host_aliases` (Attributes List) HostAliases is an optional list of hosts and IPs that will be injected into the pod's hostsfile if specified. This is only valid for non-hostNetwork pods. (see [below for nested schema](#nestedatt--spec--replicated_jobs--template--spec--template--spec--host_aliases))
+- `host_aliases` (Attributes List) HostAliases is an optional list of hosts and IPs that will be injected into the pod's hostsfile if specified. (see [below for nested schema](#nestedatt--spec--replicated_jobs--template--spec--template--spec--host_aliases))
- `host_ipc` (Boolean) Use the host's ipc namespace.Optional: Default to false.
- `host_network` (Boolean) Host networking requested for this pod. Use the host's network namespace.If this option is set, the ports that will be used must be specified.Default to false.
- `host_pid` (Boolean) Use the host's pid namespace.Optional: Default to false.
@@ -212,7 +214,7 @@ Optional:
- `init_containers` (Attributes List) List of initialization containers belonging to the pod.Init containers are executed in order prior to containers being started. If anyinit container fails, the pod is considered to have failed and is handled accordingto its restartPolicy. The name for an init container or normal container must beunique among all containers.Init containers may not have Lifecycle actions, Readiness probes, Liveness probes, or Startup probes.The resourceRequirements of an init container are taken into account during schedulingby finding the highest request/limit for each resource type, and then using the max ofof that value or the sum of the normal containers. Limits are applied to init containersin a similar fashion.Init containers cannot currently be added or removed.Cannot be updated.More info: https://kubernetes.io/docs/concepts/workloads/pods/init-containers/ (see [below for nested schema](#nestedatt--spec--replicated_jobs--template--spec--template--spec--init_containers))
- `node_name` (String) NodeName is a request to schedule this pod onto a specific node. If it is non-empty,the scheduler simply schedules this pod onto that node, assuming that it fits resourcerequirements.
- `node_selector` (Map of String) NodeSelector is a selector which must be true for the pod to fit on a node.Selector which must match a node's labels for the pod to be scheduled on that node.More info: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/
-- `os` (Attributes) Specifies the OS of the containers in the pod.Some pod and container fields are restricted if this is set.If the OS field is set to linux, the following fields must be unset:-securityContext.windowsOptionsIf the OS field is set to windows, following fields must be unset:- spec.hostPID- spec.hostIPC- spec.hostUsers- spec.securityContext.seLinuxOptions- spec.securityContext.seccompProfile- spec.securityContext.fsGroup- spec.securityContext.fsGroupChangePolicy- spec.securityContext.sysctls- spec.shareProcessNamespace- spec.securityContext.runAsUser- spec.securityContext.runAsGroup- spec.securityContext.supplementalGroups- spec.containers[*].securityContext.seLinuxOptions- spec.containers[*].securityContext.seccompProfile- spec.containers[*].securityContext.capabilities- spec.containers[*].securityContext.readOnlyRootFilesystem- spec.containers[*].securityContext.privileged- spec.containers[*].securityContext.allowPrivilegeEscalation- spec.containers[*].securityContext.procMount- spec.containers[*].securityContext.runAsUser- spec.containers[*].securityContext.runAsGroup (see [below for nested schema](#nestedatt--spec--replicated_jobs--template--spec--template--spec--os))
+- `os` (Attributes) Specifies the OS of the containers in the pod.Some pod and container fields are restricted if this is set.If the OS field is set to linux, the following fields must be unset:-securityContext.windowsOptionsIf the OS field is set to windows, following fields must be unset:- spec.hostPID- spec.hostIPC- spec.hostUsers- spec.securityContext.appArmorProfile- spec.securityContext.seLinuxOptions- spec.securityContext.seccompProfile- spec.securityContext.fsGroup- spec.securityContext.fsGroupChangePolicy- spec.securityContext.sysctls- spec.shareProcessNamespace- spec.securityContext.runAsUser- spec.securityContext.runAsGroup- spec.securityContext.supplementalGroups- spec.containers[*].securityContext.appArmorProfile- spec.containers[*].securityContext.seLinuxOptions- spec.containers[*].securityContext.seccompProfile- spec.containers[*].securityContext.capabilities- spec.containers[*].securityContext.readOnlyRootFilesystem- spec.containers[*].securityContext.privileged- spec.containers[*].securityContext.allowPrivilegeEscalation- spec.containers[*].securityContext.procMount- spec.containers[*].securityContext.runAsUser- spec.containers[*].securityContext.runAsGroup (see [below for nested schema](#nestedatt--spec--replicated_jobs--template--spec--template--spec--os))
- `overhead` (Map of String) Overhead represents the resource overhead associated with running a pod for a given RuntimeClass.This field will be autopopulated at admission time by the RuntimeClass admission controller. Ifthe RuntimeClass admission controller is enabled, overhead must not be set in Pod create requests.The RuntimeClass admission controller will reject Pod create requests which have the overhead alreadyset. If RuntimeClass is configured and selected in the PodSpec, Overhead will be set to the valuedefined in the corresponding RuntimeClass, otherwise it will remain unset and treated as zero.More info: https://git.k8s.io/enhancements/keps/sig-node/688-pod-overhead/README.md
- `preemption_policy` (String) PreemptionPolicy is the Policy for preempting pods with lower priority.One of Never, PreemptLowerPriority.Defaults to PreemptLowerPriority if unset.
- `priority` (Number) The priority value. Various system components use this field to find thepriority of the pod. When Priority Admission Controller is enabled, itprevents users from setting this field. The admission controller populatesthis field from PriorityClassName.The higher the value, the higher the priority.
@@ -222,9 +224,9 @@ Optional:
- `restart_policy` (String) Restart policy for all containers within the pod.One of Always, OnFailure, Never. In some contexts, only a subset of those values may be permitted.Default to Always.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle/#restart-policy
- `runtime_class_name` (String) RuntimeClassName refers to a RuntimeClass object in the node.k8s.io group, which should be usedto run this pod. If no RuntimeClass resource matches the named class, the pod will not be run.If unset or empty, the 'legacy' RuntimeClass will be used, which is an implicit class with anempty definition that uses the default runtime handler.More info: https://git.k8s.io/enhancements/keps/sig-node/585-runtime-class
- `scheduler_name` (String) If specified, the pod will be dispatched by specified scheduler.If not specified, the pod will be dispatched by default scheduler.
-- `scheduling_gates` (Attributes List) SchedulingGates is an opaque list of values that if specified will block scheduling the pod.If schedulingGates is not empty, the pod will stay in the SchedulingGated state and thescheduler will not attempt to schedule the pod.SchedulingGates can only be set at pod creation time, and be removed only afterwards.This is a beta feature enabled by the PodSchedulingReadiness feature gate. (see [below for nested schema](#nestedatt--spec--replicated_jobs--template--spec--template--spec--scheduling_gates))
+- `scheduling_gates` (Attributes List) SchedulingGates is an opaque list of values that if specified will block scheduling the pod.If schedulingGates is not empty, the pod will stay in the SchedulingGated state and thescheduler will not attempt to schedule the pod.SchedulingGates can only be set at pod creation time, and be removed only afterwards. (see [below for nested schema](#nestedatt--spec--replicated_jobs--template--spec--template--spec--scheduling_gates))
- `security_context` (Attributes) SecurityContext holds pod-level security attributes and common container settings.Optional: Defaults to empty. See type description for default values of each field. (see [below for nested schema](#nestedatt--spec--replicated_jobs--template--spec--template--spec--security_context))
-- `service_account` (String) DeprecatedServiceAccount is a depreciated alias for ServiceAccountName.Deprecated: Use serviceAccountName instead.
+- `service_account` (String) DeprecatedServiceAccount is a deprecated alias for ServiceAccountName.Deprecated: Use serviceAccountName instead.
- `service_account_name` (String) ServiceAccountName is the name of the ServiceAccount to use to run this pod.More info: https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/
- `set_hostname_as_fqdn` (Boolean) If true the pod's hostname will be configured as the pod's FQDN, rather than the leaf name (the default).In Linux containers, this means setting the FQDN in the hostname field of the kernel (the nodename field of struct utsname).In Windows containers, this means setting the registry value of hostname for the registry key HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParameters to FQDN.If a pod does not have FQDN, this has no effect.Default to false.
- `share_process_namespace` (Boolean) Share a single process namespace between all of the containers in a pod.When this is set containers will be able to view and signal processes from other containersin the same pod, and the first process in each container will not be assigned PID 1.HostPID and ShareProcessNamespace cannot both be set.Optional: Default to false.
@@ -298,7 +300,7 @@ Required:
Optional:
-- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
@@ -336,7 +338,7 @@ Required:
Optional:
-- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
- `optional` (Boolean) Specify whether the Secret or its key must be defined
@@ -356,7 +358,7 @@ Optional:
Optional:
-- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
- `optional` (Boolean) Specify whether the ConfigMap must be defined
@@ -365,7 +367,7 @@ Optional:
Optional:
-- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
- `optional` (Boolean) Specify whether the Secret must be defined
@@ -699,6 +701,7 @@ Required:
Optional:
- `allow_privilege_escalation` (Boolean) AllowPrivilegeEscalation controls whether a process can gain moreprivileges than its parent process. This bool directly controls ifthe no_new_privs flag will be set on the container process.AllowPrivilegeEscalation is true always when the container is:1) run as Privileged2) has CAP_SYS_ADMINNote that this field cannot be set when spec.os.name is windows.
+- `app_armor_profile` (Attributes) appArmorProfile is the AppArmor options to use by this container. If set, this profileoverrides the pod's appArmorProfile.Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--replicated_jobs--template--spec--template--spec--containers--security_context--app_armor_profile))
- `capabilities` (Attributes) The capabilities to add/drop when running containers.Defaults to the default set of capabilities granted by the container runtime.Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--replicated_jobs--template--spec--template--spec--containers--security_context--capabilities))
- `privileged` (Boolean) Run container in privileged mode.Processes in privileged containers are essentially equivalent to root on the host.Defaults to false.Note that this field cannot be set when spec.os.name is windows.
- `proc_mount` (String) procMount denotes the type of proc mount to use for the containers.The default is DefaultProcMount which uses the container runtime defaults forreadonly paths and masked paths.This requires the ProcMountType feature flag to be enabled.Note that this field cannot be set when spec.os.name is windows.
@@ -710,6 +713,18 @@ Optional:
- `seccomp_profile` (Attributes) The seccomp options to use by this container. If seccomp options areprovided at both the pod & container level, the container optionsoverride the pod options.Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--replicated_jobs--template--spec--template--spec--containers--security_context--seccomp_profile))
- `windows_options` (Attributes) The Windows specific settings applied to all containers.If unspecified, the options from the PodSecurityContext will be used.If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.Note that this field cannot be set when spec.os.name is linux. (see [below for nested schema](#nestedatt--spec--replicated_jobs--template--spec--template--spec--containers--security_context--windows_options))
+
+### Nested Schema for `spec.replicated_jobs.template.spec.template.spec.containers.security_context.app_armor_profile`
+
+Required:
+
+- `type` (String) type indicates which kind of AppArmor profile will be applied.Valid options are: Localhost - a profile pre-loaded on the node. RuntimeDefault - the container runtime's default profile. Unconfined - no AppArmor enforcement.
+
+Optional:
+
+- `localhost_profile` (String) localhostProfile indicates a profile loaded on the node that should be used.The profile must be preconfigured on the node to work.Must match the loaded name of the profile.Must be set if and only if type is 'Localhost'.
+
+
### Nested Schema for `spec.replicated_jobs.template.spec.template.spec.containers.security_context.capabilities`
@@ -846,8 +861,9 @@ Required:
Optional:
-- `mount_propagation` (String) mountPropagation determines how mounts are propagated from the hostto container and the other way around.When not set, MountPropagationNone is used.This field is beta in 1.10.
+- `mount_propagation` (String) mountPropagation determines how mounts are propagated from the hostto container and the other way around.When not set, MountPropagationNone is used.This field is beta in 1.10.When RecursiveReadOnly is set to IfPossible or to Enabled, MountPropagation must be None or unspecified(which defaults to None).
- `read_only` (Boolean) Mounted read-only if true, read-write otherwise (false or unspecified).Defaults to false.
+- `recursive_read_only` (String) RecursiveReadOnly specifies whether read-only mounts should be handledrecursively.If ReadOnly is false, this field has no meaning and must be unspecified.If ReadOnly is true, and this field is set to Disabled, the mount is not maderecursively read-only. If this field is set to IfPossible, the mount is maderecursively read-only, if it is supported by the container runtime. If thisfield is set to Enabled, the mount is made recursively read-only if it issupported by the container runtime, otherwise the pod will not be started andan error will be generated to indicate the reason.If this field is set to IfPossible or Enabled, MountPropagation must be set toNone (or be unspecified, which defaults to None).If this field is not specified, it is treated as an equivalent of Disabled.
- `sub_path` (String) Path within the volume from which the container's volume should be mounted.Defaults to '' (volume's root).
- `sub_path_expr` (String) Expanded path within the volume from which the container's volume should be mounted.Behaves similarly to SubPath but environment variable references $(VAR_NAME) are expanded using the container's environment.Defaults to '' (volume's root).SubPathExpr and SubPath are mutually exclusive.
@@ -984,8 +1000,8 @@ Required:
Optional:
- `label_selector` (Attributes) A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods. (see [below for nested schema](#nestedatt--spec--replicated_jobs--template--spec--template--spec--affinity--pod_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--label_selector))
-- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
-- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
+- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
+- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
- `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--replicated_jobs--template--spec--template--spec--affinity--pod_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--namespace_selector))
- `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.
@@ -1045,8 +1061,8 @@ Required:
Optional:
- `label_selector` (Attributes) A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods. (see [below for nested schema](#nestedatt--spec--replicated_jobs--template--spec--template--spec--affinity--pod_affinity--required_during_scheduling_ignored_during_execution--label_selector))
-- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
-- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
+- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
+- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
- `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--replicated_jobs--template--spec--template--spec--affinity--pod_affinity--required_during_scheduling_ignored_during_execution--namespace_selector))
- `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.
@@ -1122,8 +1138,8 @@ Required:
Optional:
- `label_selector` (Attributes) A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods. (see [below for nested schema](#nestedatt--spec--replicated_jobs--template--spec--template--spec--affinity--pod_anti_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--label_selector))
-- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
-- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
+- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
+- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
- `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--replicated_jobs--template--spec--template--spec--affinity--pod_anti_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--namespace_selector))
- `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.
@@ -1183,8 +1199,8 @@ Required:
Optional:
- `label_selector` (Attributes) A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods. (see [below for nested schema](#nestedatt--spec--replicated_jobs--template--spec--template--spec--affinity--pod_anti_affinity--required_during_scheduling_ignored_during_execution--label_selector))
-- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
-- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
+- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
+- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
- `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--replicated_jobs--template--spec--template--spec--affinity--pod_anti_affinity--required_during_scheduling_ignored_during_execution--namespace_selector))
- `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.
@@ -1319,7 +1335,7 @@ Required:
Optional:
-- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
@@ -1357,7 +1373,7 @@ Required:
Optional:
-- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
- `optional` (Boolean) Specify whether the Secret or its key must be defined
@@ -1377,7 +1393,7 @@ Optional:
Optional:
-- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
- `optional` (Boolean) Specify whether the ConfigMap must be defined
@@ -1386,7 +1402,7 @@ Optional:
Optional:
-- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
- `optional` (Boolean) Specify whether the Secret must be defined
@@ -1720,6 +1736,7 @@ Required:
Optional:
- `allow_privilege_escalation` (Boolean) AllowPrivilegeEscalation controls whether a process can gain moreprivileges than its parent process. This bool directly controls ifthe no_new_privs flag will be set on the container process.AllowPrivilegeEscalation is true always when the container is:1) run as Privileged2) has CAP_SYS_ADMINNote that this field cannot be set when spec.os.name is windows.
+- `app_armor_profile` (Attributes) appArmorProfile is the AppArmor options to use by this container. If set, this profileoverrides the pod's appArmorProfile.Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--replicated_jobs--template--spec--template--spec--ephemeral_containers--security_context--app_armor_profile))
- `capabilities` (Attributes) The capabilities to add/drop when running containers.Defaults to the default set of capabilities granted by the container runtime.Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--replicated_jobs--template--spec--template--spec--ephemeral_containers--security_context--capabilities))
- `privileged` (Boolean) Run container in privileged mode.Processes in privileged containers are essentially equivalent to root on the host.Defaults to false.Note that this field cannot be set when spec.os.name is windows.
- `proc_mount` (String) procMount denotes the type of proc mount to use for the containers.The default is DefaultProcMount which uses the container runtime defaults forreadonly paths and masked paths.This requires the ProcMountType feature flag to be enabled.Note that this field cannot be set when spec.os.name is windows.
@@ -1731,6 +1748,18 @@ Optional:
- `seccomp_profile` (Attributes) The seccomp options to use by this container. If seccomp options areprovided at both the pod & container level, the container optionsoverride the pod options.Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--replicated_jobs--template--spec--template--spec--ephemeral_containers--security_context--seccomp_profile))
- `windows_options` (Attributes) The Windows specific settings applied to all containers.If unspecified, the options from the PodSecurityContext will be used.If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.Note that this field cannot be set when spec.os.name is linux. (see [below for nested schema](#nestedatt--spec--replicated_jobs--template--spec--template--spec--ephemeral_containers--security_context--windows_options))
+
+### Nested Schema for `spec.replicated_jobs.template.spec.template.spec.ephemeral_containers.security_context.app_armor_profile`
+
+Required:
+
+- `type` (String) type indicates which kind of AppArmor profile will be applied.Valid options are: Localhost - a profile pre-loaded on the node. RuntimeDefault - the container runtime's default profile. Unconfined - no AppArmor enforcement.
+
+Optional:
+
+- `localhost_profile` (String) localhostProfile indicates a profile loaded on the node that should be used.The profile must be preconfigured on the node to work.Must match the loaded name of the profile.Must be set if and only if type is 'Localhost'.
+
+
### Nested Schema for `spec.replicated_jobs.template.spec.template.spec.ephemeral_containers.security_context.capabilities`
@@ -1867,8 +1896,9 @@ Required:
Optional:
-- `mount_propagation` (String) mountPropagation determines how mounts are propagated from the hostto container and the other way around.When not set, MountPropagationNone is used.This field is beta in 1.10.
+- `mount_propagation` (String) mountPropagation determines how mounts are propagated from the hostto container and the other way around.When not set, MountPropagationNone is used.This field is beta in 1.10.When RecursiveReadOnly is set to IfPossible or to Enabled, MountPropagation must be None or unspecified(which defaults to None).
- `read_only` (Boolean) Mounted read-only if true, read-write otherwise (false or unspecified).Defaults to false.
+- `recursive_read_only` (String) RecursiveReadOnly specifies whether read-only mounts should be handledrecursively.If ReadOnly is false, this field has no meaning and must be unspecified.If ReadOnly is true, and this field is set to Disabled, the mount is not maderecursively read-only. If this field is set to IfPossible, the mount is maderecursively read-only, if it is supported by the container runtime. If thisfield is set to Enabled, the mount is made recursively read-only if it issupported by the container runtime, otherwise the pod will not be started andan error will be generated to indicate the reason.If this field is set to IfPossible or Enabled, MountPropagation must be set toNone (or be unspecified, which defaults to None).If this field is not specified, it is treated as an equivalent of Disabled.
- `sub_path` (String) Path within the volume from which the container's volume should be mounted.Defaults to '' (volume's root).
- `sub_path_expr` (String) Expanded path within the volume from which the container's volume should be mounted.Behaves similarly to SubPath but environment variable references $(VAR_NAME) are expanded using the container's environment.Defaults to '' (volume's root).SubPathExpr and SubPath are mutually exclusive.
@@ -1877,10 +1907,13 @@ Optional:
### Nested Schema for `spec.replicated_jobs.template.spec.template.spec.host_aliases`
+Required:
+
+- `ip` (String) IP address of the host file entry.
+
Optional:
- `hostnames` (List of String) Hostnames for the above IP address.
-- `ip` (String) IP address of the host file entry.
@@ -1888,7 +1921,7 @@ Optional:
Optional:
-- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
@@ -1955,7 +1988,7 @@ Required:
Optional:
-- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
@@ -1993,7 +2026,7 @@ Required:
Optional:
-- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
- `optional` (Boolean) Specify whether the Secret or its key must be defined
@@ -2013,7 +2046,7 @@ Optional:
Optional:
-- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
- `optional` (Boolean) Specify whether the ConfigMap must be defined
@@ -2022,7 +2055,7 @@ Optional:
Optional:
-- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
- `optional` (Boolean) Specify whether the Secret must be defined
@@ -2356,6 +2389,7 @@ Required:
Optional:
- `allow_privilege_escalation` (Boolean) AllowPrivilegeEscalation controls whether a process can gain moreprivileges than its parent process. This bool directly controls ifthe no_new_privs flag will be set on the container process.AllowPrivilegeEscalation is true always when the container is:1) run as Privileged2) has CAP_SYS_ADMINNote that this field cannot be set when spec.os.name is windows.
+- `app_armor_profile` (Attributes) appArmorProfile is the AppArmor options to use by this container. If set, this profileoverrides the pod's appArmorProfile.Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--replicated_jobs--template--spec--template--spec--init_containers--security_context--app_armor_profile))
- `capabilities` (Attributes) The capabilities to add/drop when running containers.Defaults to the default set of capabilities granted by the container runtime.Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--replicated_jobs--template--spec--template--spec--init_containers--security_context--capabilities))
- `privileged` (Boolean) Run container in privileged mode.Processes in privileged containers are essentially equivalent to root on the host.Defaults to false.Note that this field cannot be set when spec.os.name is windows.
- `proc_mount` (String) procMount denotes the type of proc mount to use for the containers.The default is DefaultProcMount which uses the container runtime defaults forreadonly paths and masked paths.This requires the ProcMountType feature flag to be enabled.Note that this field cannot be set when spec.os.name is windows.
@@ -2367,6 +2401,18 @@ Optional:
- `seccomp_profile` (Attributes) The seccomp options to use by this container. If seccomp options areprovided at both the pod & container level, the container optionsoverride the pod options.Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--replicated_jobs--template--spec--template--spec--init_containers--security_context--seccomp_profile))
- `windows_options` (Attributes) The Windows specific settings applied to all containers.If unspecified, the options from the PodSecurityContext will be used.If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.Note that this field cannot be set when spec.os.name is linux. (see [below for nested schema](#nestedatt--spec--replicated_jobs--template--spec--template--spec--init_containers--security_context--windows_options))
+
+### Nested Schema for `spec.replicated_jobs.template.spec.template.spec.init_containers.security_context.app_armor_profile`
+
+Required:
+
+- `type` (String) type indicates which kind of AppArmor profile will be applied.Valid options are: Localhost - a profile pre-loaded on the node. RuntimeDefault - the container runtime's default profile. Unconfined - no AppArmor enforcement.
+
+Optional:
+
+- `localhost_profile` (String) localhostProfile indicates a profile loaded on the node that should be used.The profile must be preconfigured on the node to work.Must match the loaded name of the profile.Must be set if and only if type is 'Localhost'.
+
+
### Nested Schema for `spec.replicated_jobs.template.spec.template.spec.init_containers.security_context.capabilities`
@@ -2503,8 +2549,9 @@ Required:
Optional:
-- `mount_propagation` (String) mountPropagation determines how mounts are propagated from the hostto container and the other way around.When not set, MountPropagationNone is used.This field is beta in 1.10.
+- `mount_propagation` (String) mountPropagation determines how mounts are propagated from the hostto container and the other way around.When not set, MountPropagationNone is used.This field is beta in 1.10.When RecursiveReadOnly is set to IfPossible or to Enabled, MountPropagation must be None or unspecified(which defaults to None).
- `read_only` (Boolean) Mounted read-only if true, read-write otherwise (false or unspecified).Defaults to false.
+- `recursive_read_only` (String) RecursiveReadOnly specifies whether read-only mounts should be handledrecursively.If ReadOnly is false, this field has no meaning and must be unspecified.If ReadOnly is true, and this field is set to Disabled, the mount is not maderecursively read-only. If this field is set to IfPossible, the mount is maderecursively read-only, if it is supported by the container runtime. If thisfield is set to Enabled, the mount is made recursively read-only if it issupported by the container runtime, otherwise the pod will not be started andan error will be generated to indicate the reason.If this field is set to IfPossible or Enabled, MountPropagation must be set toNone (or be unspecified, which defaults to None).If this field is not specified, it is treated as an equivalent of Disabled.
- `sub_path` (String) Path within the volume from which the container's volume should be mounted.Defaults to '' (volume's root).
- `sub_path_expr` (String) Expanded path within the volume from which the container's volume should be mounted.Behaves similarly to SubPath but environment variable references $(VAR_NAME) are expanded using the container's environment.Defaults to '' (volume's root).SubPathExpr and SubPath are mutually exclusive.
@@ -2560,6 +2607,7 @@ Required:
Optional:
+- `app_armor_profile` (Attributes) appArmorProfile is the AppArmor options to use by the containers in this pod.Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--replicated_jobs--template--spec--template--spec--security_context--app_armor_profile))
- `fs_group` (Number) A special supplemental group that applies to all containers in a pod.Some volume types allow the Kubelet to change the ownership of that volumeto be owned by the pod:1. The owning GID will be the FSGroup2. The setgid bit is set (new files created in the volume will be owned by FSGroup)3. The permission bits are OR'd with rw-rw----If unset, the Kubelet will not modify the ownership and permissions of any volume.Note that this field cannot be set when spec.os.name is windows.
- `fs_group_change_policy` (String) fsGroupChangePolicy defines behavior of changing ownership and permission of the volumebefore being exposed inside Pod. This field will only apply tovolume types which support fsGroup based ownership(and permissions).It will have no effect on ephemeral volume types such as: secret, configmapsand emptydir.Valid values are 'OnRootMismatch' and 'Always'. If not specified, 'Always' is used.Note that this field cannot be set when spec.os.name is windows.
- `run_as_group` (Number) The GID to run the entrypoint of the container process.Uses runtime default if unset.May also be set in SecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedencefor that container.Note that this field cannot be set when spec.os.name is windows.
@@ -2571,6 +2619,18 @@ Optional:
- `sysctls` (Attributes List) Sysctls hold a list of namespaced sysctls used for the pod. Pods with unsupportedsysctls (by the container runtime) might fail to launch.Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--replicated_jobs--template--spec--template--spec--security_context--sysctls))
- `windows_options` (Attributes) The Windows specific settings applied to all containers.If unspecified, the options within a container's SecurityContext will be used.If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.Note that this field cannot be set when spec.os.name is linux. (see [below for nested schema](#nestedatt--spec--replicated_jobs--template--spec--template--spec--security_context--windows_options))
+
+### Nested Schema for `spec.replicated_jobs.template.spec.template.spec.security_context.app_armor_profile`
+
+Required:
+
+- `type` (String) type indicates which kind of AppArmor profile will be applied.Valid options are: Localhost - a profile pre-loaded on the node. RuntimeDefault - the container runtime's default profile. Unconfined - no AppArmor enforcement.
+
+Optional:
+
+- `localhost_profile` (String) localhostProfile indicates a profile loaded on the node that should be used.The profile must be preconfigured on the node to work.Must match the loaded name of the profile.Must be set if and only if type is 'Localhost'.
+
+
### Nested Schema for `spec.replicated_jobs.template.spec.template.spec.security_context.se_linux_options`
@@ -2640,7 +2700,7 @@ Optional:
- `label_selector` (Attributes) LabelSelector is used to find matching pods.Pods that match this label selector are counted to determine the number of podsin their corresponding topology domain. (see [below for nested schema](#nestedatt--spec--replicated_jobs--template--spec--template--spec--topology_spread_constraints--label_selector))
- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select the pods over whichspreading will be calculated. The keys are used to lookup values from theincoming pod labels, those key-value labels are ANDed with labelSelectorto select the group of existing pods over which spreading will be calculatedfor the incoming pod. The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.MatchLabelKeys cannot be set when LabelSelector isn't set.Keys that don't exist in the incoming pod labels willbe ignored. A null or empty list means only match against labelSelector.This is a beta field and requires the MatchLabelKeysInPodTopologySpread feature gate to be enabled (enabled by default).
-- `min_domains` (Number) MinDomains indicates a minimum number of eligible domains.When the number of eligible domains with matching topology keys is less than minDomains,Pod Topology Spread treats 'global minimum' as 0, and then the calculation of Skew is performed.And when the number of eligible domains with matching topology keys equals or greater than minDomains,this value has no effect on scheduling.As a result, when the number of eligible domains is less than minDomains,scheduler won't schedule more than maxSkew Pods to those domains.If value is nil, the constraint behaves as if MinDomains is equal to 1.Valid values are integers greater than 0.When value is not nil, WhenUnsatisfiable must be DoNotSchedule.For example, in a 3-zone cluster, MaxSkew is set to 2, MinDomains is set to 5 and pods with the samelabelSelector spread as 2/2/2:| zone1 | zone2 | zone3 || P P | P P | P P |The number of domains is less than 5(MinDomains), so 'global minimum' is treated as 0.In this situation, new pod with the same labelSelector cannot be scheduled,because computed skew will be 3(3 - 0) if new Pod is scheduled to any of the three zones,it will violate MaxSkew.This is a beta field and requires the MinDomainsInPodTopologySpread feature gate to be enabled (enabled by default).
+- `min_domains` (Number) MinDomains indicates a minimum number of eligible domains.When the number of eligible domains with matching topology keys is less than minDomains,Pod Topology Spread treats 'global minimum' as 0, and then the calculation of Skew is performed.And when the number of eligible domains with matching topology keys equals or greater than minDomains,this value has no effect on scheduling.As a result, when the number of eligible domains is less than minDomains,scheduler won't schedule more than maxSkew Pods to those domains.If value is nil, the constraint behaves as if MinDomains is equal to 1.Valid values are integers greater than 0.When value is not nil, WhenUnsatisfiable must be DoNotSchedule.For example, in a 3-zone cluster, MaxSkew is set to 2, MinDomains is set to 5 and pods with the samelabelSelector spread as 2/2/2:| zone1 | zone2 | zone3 || P P | P P | P P |The number of domains is less than 5(MinDomains), so 'global minimum' is treated as 0.In this situation, new pod with the same labelSelector cannot be scheduled,because computed skew will be 3(3 - 0) if new Pod is scheduled to any of the three zones,it will violate MaxSkew.
- `node_affinity_policy` (String) NodeAffinityPolicy indicates how we will treat Pod's nodeAffinity/nodeSelectorwhen calculating pod topology spread skew. Options are:- Honor: only nodes matching nodeAffinity/nodeSelector are included in the calculations.- Ignore: nodeAffinity/nodeSelector are ignored. All nodes are included in the calculations.If this value is nil, the behavior is equivalent to the Honor policy.This is a beta-level feature default enabled by the NodeInclusionPolicyInPodTopologySpread feature flag.
- `node_taints_policy` (String) NodeTaintsPolicy indicates how we will treat node taints when calculatingpod topology spread skew. Options are:- Honor: nodes without taints, along with tainted nodes for which the incoming podhas a toleration, are included.- Ignore: node taints are ignored. All nodes are included.If this value is nil, the behavior is equivalent to the Ignore policy.This is a beta-level feature default enabled by the NodeInclusionPolicyInPodTopologySpread feature flag.
@@ -2769,7 +2829,7 @@ Optional:
Optional:
-- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
@@ -2791,7 +2851,7 @@ Optional:
Optional:
-- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
@@ -2802,7 +2862,7 @@ Optional:
- `default_mode` (Number) defaultMode is optional: mode bits used to set permissions on created files by default.Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511.YAML accepts both octal and decimal values, JSON requires decimal values for mode bits.Defaults to 0644.Directories within the path are not affected by this setting.This might be in conflict with other options that affect the filemode, like fsGroup, and the result can be other mode bits set.
- `items` (Attributes List) items if unspecified, each key-value pair in the Data field of the referencedConfigMap will be projected into the volume as a file whose name is thekey and content is the value. If specified, the listed keys will beprojected into the specified paths, and unlisted keys will not bepresent. If a key is specified which is not present in the ConfigMap,the volume setup will error unless it is marked optional. Paths must berelative and may not contain the '..' path or start with '..'. (see [below for nested schema](#nestedatt--spec--replicated_jobs--template--spec--template--spec--volumes--config_map--items))
-- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
- `optional` (Boolean) optional specify whether the ConfigMap or its keys must be defined
@@ -2838,7 +2898,7 @@ Optional:
Optional:
-- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
@@ -2859,7 +2919,7 @@ Required:
Optional:
-- `field_ref` (Attributes) Required: Selects a field of the pod: only annotations, labels, name and namespace are supported. (see [below for nested schema](#nestedatt--spec--replicated_jobs--template--spec--template--spec--volumes--downward_api--items--field_ref))
+- `field_ref` (Attributes) Required: Selects a field of the pod: only annotations, labels, name, namespace and uid are supported. (see [below for nested schema](#nestedatt--spec--replicated_jobs--template--spec--template--spec--volumes--downward_api--items--field_ref))
- `mode` (Number) Optional: mode bits used to set permissions on this file, must be an octal valuebetween 0000 and 0777 or a decimal value between 0 and 511.YAML accepts both octal and decimal values, JSON requires decimal values for mode bits.If not specified, the volume defaultMode will be used.This might be in conflict with other options that affect the filemode, like fsGroup, and the result can be other mode bits set.
- `resource_field_ref` (Attributes) Selects a resource of the container: only resources limits and requests(limits.cpu, limits.memory, requests.cpu and requests.memory) are currently supported. (see [below for nested schema](#nestedatt--spec--replicated_jobs--template--spec--template--spec--volumes--downward_api--items--resource_field_ref))
@@ -2928,7 +2988,7 @@ Optional:
- `resources` (Attributes) resources represents the minimum resources the volume should have.If RecoverVolumeExpansionFailure feature is enabled users are allowed to specify resource requirementsthat are lower than previous value but must still be higher than capacity recorded in thestatus field of the claim.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources (see [below for nested schema](#nestedatt--spec--replicated_jobs--template--spec--template--spec--volumes--ephemeral--volume_claim_template--spec--resources))
- `selector` (Attributes) selector is a label query over volumes to consider for binding. (see [below for nested schema](#nestedatt--spec--replicated_jobs--template--spec--template--spec--volumes--ephemeral--volume_claim_template--spec--selector))
- `storage_class_name` (String) storageClassName is the name of the StorageClass required by the claim.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#class-1
-- `volume_attributes_class_name` (String) volumeAttributesClassName may be used to set the VolumeAttributesClass used by this claim.If specified, the CSI driver will create or update the volume with the attributes definedin the corresponding VolumeAttributesClass. This has a different purpose than storageClassName,it can be changed after the claim is created. An empty string value means that no VolumeAttributesClasswill be applied to the claim but it's not allowed to reset this field to empty string once it is set.If unspecified and the PersistentVolumeClaim is unbound, the default VolumeAttributesClasswill be set by the persistentvolume controller if it exists.If the resource referred to by volumeAttributesClass does not exist, this PersistentVolumeClaim will beset to a Pending state, as reflected by the modifyVolumeStatus field, until such as a resourceexists.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#volumeattributesclass(Alpha) Using this field requires the VolumeAttributesClass feature gate to be enabled.
+- `volume_attributes_class_name` (String) volumeAttributesClassName may be used to set the VolumeAttributesClass used by this claim.If specified, the CSI driver will create or update the volume with the attributes definedin the corresponding VolumeAttributesClass. This has a different purpose than storageClassName,it can be changed after the claim is created. An empty string value means that no VolumeAttributesClasswill be applied to the claim but it's not allowed to reset this field to empty string once it is set.If unspecified and the PersistentVolumeClaim is unbound, the default VolumeAttributesClasswill be set by the persistentvolume controller if it exists.If the resource referred to by volumeAttributesClass does not exist, this PersistentVolumeClaim will beset to a Pending state, as reflected by the modifyVolumeStatus field, until such as a resourceexists.More info: https://kubernetes.io/docs/concepts/storage/volume-attributes-classes/(Alpha) Using this field requires the VolumeAttributesClass feature gate to be enabled.
- `volume_mode` (String) volumeMode defines what type of volume is required by the claim.Value of Filesystem is implied when not included in claim spec.
- `volume_name` (String) volumeName is the binding reference to the PersistentVolume backing this claim.
@@ -3036,7 +3096,7 @@ Optional:
Optional:
-- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
@@ -3126,7 +3186,7 @@ Optional:
Optional:
-- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
@@ -3242,7 +3302,7 @@ Optional:
Optional:
- `items` (Attributes List) items if unspecified, each key-value pair in the Data field of the referencedConfigMap will be projected into the volume as a file whose name is thekey and content is the value. If specified, the listed keys will beprojected into the specified paths, and unlisted keys will not bepresent. If a key is specified which is not present in the ConfigMap,the volume setup will error unless it is marked optional. Paths must berelative and may not contain the '..' path or start with '..'. (see [below for nested schema](#nestedatt--spec--replicated_jobs--template--spec--template--spec--volumes--projected--sources--config_map--items))
-- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
- `optional` (Boolean) optional specify whether the ConfigMap or its keys must be defined
@@ -3275,7 +3335,7 @@ Required:
Optional:
-- `field_ref` (Attributes) Required: Selects a field of the pod: only annotations, labels, name and namespace are supported. (see [below for nested schema](#nestedatt--spec--replicated_jobs--template--spec--template--spec--volumes--projected--sources--downward_api--items--field_ref))
+- `field_ref` (Attributes) Required: Selects a field of the pod: only annotations, labels, name, namespace and uid are supported. (see [below for nested schema](#nestedatt--spec--replicated_jobs--template--spec--template--spec--volumes--projected--sources--downward_api--items--field_ref))
- `mode` (Number) Optional: mode bits used to set permissions on this file, must be an octal valuebetween 0000 and 0777 or a decimal value between 0 and 511.YAML accepts both octal and decimal values, JSON requires decimal values for mode bits.If not specified, the volume defaultMode will be used.This might be in conflict with other options that affect the filemode, like fsGroup, and the result can be other mode bits set.
- `resource_field_ref` (Attributes) Selects a resource of the container: only resources limits and requests(limits.cpu, limits.memory, requests.cpu and requests.memory) are currently supported. (see [below for nested schema](#nestedatt--spec--replicated_jobs--template--spec--template--spec--volumes--projected--sources--downward_api--items--resource_field_ref))
@@ -3312,7 +3372,7 @@ Optional:
Optional:
- `items` (Attributes List) items if unspecified, each key-value pair in the Data field of the referencedSecret will be projected into the volume as a file whose name is thekey and content is the value. If specified, the listed keys will beprojected into the specified paths, and unlisted keys will not bepresent. If a key is specified which is not present in the Secret,the volume setup will error unless it is marked optional. Paths must berelative and may not contain the '..' path or start with '..'. (see [below for nested schema](#nestedatt--spec--replicated_jobs--template--spec--template--spec--volumes--projected--sources--secret--items))
-- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
- `optional` (Boolean) optional field specify whether the Secret or its key must be defined
@@ -3382,7 +3442,7 @@ Optional:
Optional:
-- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
@@ -3410,7 +3470,7 @@ Optional:
Optional:
-- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
@@ -3454,7 +3514,7 @@ Optional:
Optional:
-- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
@@ -3540,6 +3600,23 @@ Optional:
+
+### Nested Schema for `spec.replicated_jobs.template.spec.success_policy`
+
+Required:
+
+- `rules` (Attributes List) rules represents the list of alternative rules for the declaring the Jobsas successful before '.status.succeeded >= .spec.completions'. Once any of the rules are met,the 'SucceededCriteriaMet' condition is added, and the lingering pods are removed.The terminal state for such a Job has the 'Complete' condition.Additionally, these rules are evaluated in order; Once the Job meets one of the rules,other rules are ignored. At most 20 elements are allowed. (see [below for nested schema](#nestedatt--spec--replicated_jobs--template--spec--success_policy--rules))
+
+
+### Nested Schema for `spec.replicated_jobs.template.spec.success_policy.rules`
+
+Optional:
+
+- `succeeded_count` (Number) succeededCount specifies the minimal required size of the actual set of the succeeded indexesfor the Job. When succeededCount is used along with succeededIndexes, the check isconstrained only to the set of indexes specified by succeededIndexes.For example, given that succeededIndexes is '1-4', succeededCount is '3',and completed indexes are '1', '3', and '5', the Job isn't declared as succeededbecause only '1' and '3' indexes are considered in that rules.When this field is null, this doesn't default to any value andis never evaluated at any time.When specified it needs to be a positive integer.
+- `succeeded_indexes` (String) succeededIndexes specifies the set of indexeswhich need to be contained in the actual set of the succeeded indexes for the Job.The list of indexes must be within 0 to '.spec.completions-1' andmust not contain duplicates. At least one element is required.The indexes are represented as intervals separated by commas.The intervals can be a decimal integer or a pair of decimal integers separated by a hyphen.The number are listed in represented by the first and last element of the series,separated by a hyphen.For example, if the completed indexes are 1, 3, 4, 5 and 7, they arerepresented as '1,3-5,7'.When this field is null, this field doesn't default to any valueand is never evaluated at any time.
+
+
+
diff --git a/docs/data-sources/k8s_mariadb_com_maria_db_v1alpha1_manifest.md b/docs/data-sources/k8s_mariadb_com_maria_db_v1alpha1_manifest.md
index ded04c14f..95a338cc4 100644
--- a/docs/data-sources/k8s_mariadb_com_maria_db_v1alpha1_manifest.md
+++ b/docs/data-sources/k8s_mariadb_com_maria_db_v1alpha1_manifest.md
@@ -95,7 +95,7 @@ Optional:
- `service_account_name` (String) ServiceAccountName is the name of the ServiceAccount to be used by the Pods.
- `sidecar_containers` (Attributes List) SidecarContainers to be used in the Pod. (see [below for nested schema](#nestedatt--spec--sidecar_containers))
- `storage` (Attributes) Storage defines the storage options to be used for provisioning the PVCs mounted by MariaDB. (see [below for nested schema](#nestedatt--spec--storage))
-- `suspend` (Boolean) Suspend defines whether the MariaDB reconciliation loop is enabled. This can be useful for maintenance, as disabling the reconciliation loop prevents the operator from interfering with user operations during maintenance activities.
+- `suspend` (Boolean) Suspend indicates whether the current resource should be suspended or not.This can be useful for maintenance, as disabling the reconciliation prevents the operator from interfering with user operations during maintenance activities.
- `time_zone` (String) TimeZone sets the default timezone. If not provided, it defaults to SYSTEM and the timezone data is not loaded.
- `tolerations` (Attributes List) Tolerations to be used in the Pod. (see [below for nested schema](#nestedatt--spec--tolerations))
- `topology_spread_constraints` (Attributes List) TopologySpreadConstraints to be used in the Pod. (see [below for nested schema](#nestedatt--spec--topology_spread_constraints))
@@ -6609,7 +6609,7 @@ Optional:
- `module` (String) Module is the module to use to monitor MariaDB servers. It is mandatory when no MariaDB reference is provided.
- `name` (String) Name is the identifier of the monitor. It is defaulted if not provided.
- `params` (Map of String) Params defines extra parameters to pass to the monitor.Any parameter supported by MaxScale may be specified here. See reference:https://mariadb.com/kb/en/mariadb-maxscale-2308-common-monitor-parameters/.Monitor specific parameter are also suported:https://mariadb.com/kb/en/mariadb-maxscale-2308-galera-monitor/#galera-monitor-optional-parameters.https://mariadb.com/kb/en/mariadb-maxscale-2308-mariadb-monitor/#configuration.
-- `suspend` (Boolean) Suspend indicates whether the current resource should be suspended or not. Feature flag --feature-maxscale-suspend is required in the controller to enable this.
+- `suspend` (Boolean) Suspend indicates whether the current resource should be suspended or not.This can be useful for maintenance, as disabling the reconciliation prevents the operator from interfering with user operations during maintenance activities.
@@ -6633,7 +6633,7 @@ Required:
Optional:
- `params` (Map of String) Params defines extra parameters to pass to the service.Any parameter supported by MaxScale may be specified here. See reference:https://mariadb.com/kb/en/mariadb-maxscale-2308-mariadb-maxscale-configuration-guide/#service_1.Router specific parameter are also suported:https://mariadb.com/kb/en/mariadb-maxscale-2308-readwritesplit/#configuration.https://mariadb.com/kb/en/mariadb-maxscale-2308-readconnroute/#configuration.
-- `suspend` (Boolean) Suspend indicates whether the current resource should be suspended or not. Feature flag --feature-maxscale-suspend is required in the controller to enable this.
+- `suspend` (Boolean) Suspend indicates whether the current resource should be suspended or not.This can be useful for maintenance, as disabling the reconciliation prevents the operator from interfering with user operations during maintenance activities.
### Nested Schema for `spec.max_scale.services.listener`
@@ -6644,7 +6644,7 @@ Optional:
- `params` (Map of String) Params defines extra parameters to pass to the listener.Any parameter supported by MaxScale may be specified here. See reference:https://mariadb.com/kb/en/mariadb-maxscale-2308-mariadb-maxscale-configuration-guide/#listener_1.
- `port` (Number) Port is the network port where the MaxScale server will listen.
- `protocol` (String) Protocol is the MaxScale protocol to use when communicating with the client. If not provided, it defaults to MariaDBProtocol.
-- `suspend` (Boolean) Suspend indicates whether the current resource should be suspended or not. Feature flag --feature-maxscale-suspend is required in the controller to enable this.
+- `suspend` (Boolean) Suspend indicates whether the current resource should be suspended or not.This can be useful for maintenance, as disabling the reconciliation prevents the operator from interfering with user operations during maintenance activities.
diff --git a/docs/data-sources/k8s_mariadb_com_max_scale_v1alpha1_manifest.md b/docs/data-sources/k8s_mariadb_com_max_scale_v1alpha1_manifest.md
index 8b1e972ea..9946b01ad 100644
--- a/docs/data-sources/k8s_mariadb_com_max_scale_v1alpha1_manifest.md
+++ b/docs/data-sources/k8s_mariadb_com_max_scale_v1alpha1_manifest.md
@@ -89,6 +89,7 @@ Optional:
- `service_account_name` (String) ServiceAccountName is the name of the ServiceAccount to be used by the Pods.
- `services` (Attributes List) Services define how the traffic is forwarded to the MariaDB servers. It is defaulted if not provided. (see [below for nested schema](#nestedatt--spec--services))
- `sidecar_containers` (Attributes List) SidecarContainers to be used in the Pod. (see [below for nested schema](#nestedatt--spec--sidecar_containers))
+- `suspend` (Boolean) Suspend indicates whether the current resource should be suspended or not.This can be useful for maintenance, as disabling the reconciliation prevents the operator from interfering with user operations during maintenance activities.
- `tolerations` (Attributes List) Tolerations to be used in the Pod. (see [below for nested schema](#nestedatt--spec--tolerations))
- `topology_spread_constraints` (Attributes List) TopologySpreadConstraints to be used in the Pod. (see [below for nested schema](#nestedatt--spec--topology_spread_constraints))
- `update_strategy` (Attributes) UpdateStrategy defines the update strategy for the StatefulSet object. (see [below for nested schema](#nestedatt--spec--update_strategy))
@@ -3876,7 +3877,7 @@ Optional:
- `module` (String) Module is the module to use to monitor MariaDB servers. It is mandatory when no MariaDB reference is provided.
- `name` (String) Name is the identifier of the monitor. It is defaulted if not provided.
- `params` (Map of String) Params defines extra parameters to pass to the monitor.Any parameter supported by MaxScale may be specified here. See reference:https://mariadb.com/kb/en/mariadb-maxscale-2308-common-monitor-parameters/.Monitor specific parameter are also suported:https://mariadb.com/kb/en/mariadb-maxscale-2308-galera-monitor/#galera-monitor-optional-parameters.https://mariadb.com/kb/en/mariadb-maxscale-2308-mariadb-monitor/#configuration.
-- `suspend` (Boolean) Suspend indicates whether the current resource should be suspended or not. Feature flag --feature-maxscale-suspend is required in the controller to enable this.
+- `suspend` (Boolean) Suspend indicates whether the current resource should be suspended or not.This can be useful for maintenance, as disabling the reconciliation prevents the operator from interfering with user operations during maintenance activities.
@@ -4163,7 +4164,7 @@ Required:
Optional:
- `params` (Map of String) Params defines extra parameters to pass to the service.Any parameter supported by MaxScale may be specified here. See reference:https://mariadb.com/kb/en/mariadb-maxscale-2308-mariadb-maxscale-configuration-guide/#service_1.Router specific parameter are also suported:https://mariadb.com/kb/en/mariadb-maxscale-2308-readwritesplit/#configuration.https://mariadb.com/kb/en/mariadb-maxscale-2308-readconnroute/#configuration.
-- `suspend` (Boolean) Suspend indicates whether the current resource should be suspended or not. Feature flag --feature-maxscale-suspend is required in the controller to enable this.
+- `suspend` (Boolean) Suspend indicates whether the current resource should be suspended or not.This can be useful for maintenance, as disabling the reconciliation prevents the operator from interfering with user operations during maintenance activities.
### Nested Schema for `spec.services.listener`
@@ -4174,7 +4175,7 @@ Optional:
- `params` (Map of String) Params defines extra parameters to pass to the listener.Any parameter supported by MaxScale may be specified here. See reference:https://mariadb.com/kb/en/mariadb-maxscale-2308-mariadb-maxscale-configuration-guide/#listener_1.
- `port` (Number) Port is the network port where the MaxScale server will listen.
- `protocol` (String) Protocol is the MaxScale protocol to use when communicating with the client. If not provided, it defaults to MariaDBProtocol.
-- `suspend` (Boolean) Suspend indicates whether the current resource should be suspended or not. Feature flag --feature-maxscale-suspend is required in the controller to enable this.
+- `suspend` (Boolean) Suspend indicates whether the current resource should be suspended or not.This can be useful for maintenance, as disabling the reconciliation prevents the operator from interfering with user operations during maintenance activities.
diff --git a/docs/data-sources/k8s_nginx_org_policy_v1_manifest.md b/docs/data-sources/k8s_nginx_org_policy_v1_manifest.md
index 43c728840..17b64a055 100644
--- a/docs/data-sources/k8s_nginx_org_policy_v1_manifest.md
+++ b/docs/data-sources/k8s_nginx_org_policy_v1_manifest.md
@@ -151,7 +151,9 @@ Optional:
- `auth_extra_args` (List of String)
- `client_id` (String)
- `client_secret` (String)
+- `end_session_endpoint` (String)
- `jwks_uri` (String)
+- `post_logout_redirect_uri` (String)
- `redirect_uri` (String)
- `scope` (String)
- `token_endpoint` (String)
diff --git a/docs/data-sources/kafka_services_k8s_aws_cluster_v1alpha1_manifest.md b/docs/data-sources/kafka_services_k8s_aws_cluster_v1alpha1_manifest.md
index d041ae0e5..4d901e67c 100644
--- a/docs/data-sources/kafka_services_k8s_aws_cluster_v1alpha1_manifest.md
+++ b/docs/data-sources/kafka_services_k8s_aws_cluster_v1alpha1_manifest.md
@@ -141,6 +141,7 @@ Optional:
Optional:
- `name` (String)
+- `namespace` (String)
diff --git a/docs/data-sources/karpenter_sh_node_pool_v1_manifest.md b/docs/data-sources/karpenter_sh_node_pool_v1_manifest.md
index 1616b1ac0..bce6f49b7 100644
--- a/docs/data-sources/karpenter_sh_node_pool_v1_manifest.md
+++ b/docs/data-sources/karpenter_sh_node_pool_v1_manifest.md
@@ -64,7 +64,7 @@ Optional:
Required:
-- `spec` (Attributes) NodeClaimSpec describes the desired state of the NodeClaim (see [below for nested schema](#nestedatt--spec--template--spec))
+- `spec` (Attributes) NodeClaimTemplateSpec describes the desired state of the NodeClaim in the NodepoolNodeClaimTemplateSpec is used in the NodePool's NodeClaimTemplate, with the resource requests omitted sinceusers are not able to set resource requests in the NodePool. (see [below for nested schema](#nestedatt--spec--template--spec))
Optional:
diff --git a/docs/data-sources/karpenter_sh_node_pool_v1beta1_manifest.md b/docs/data-sources/karpenter_sh_node_pool_v1beta1_manifest.md
index c8beb94f2..165ec9804 100644
--- a/docs/data-sources/karpenter_sh_node_pool_v1beta1_manifest.md
+++ b/docs/data-sources/karpenter_sh_node_pool_v1beta1_manifest.md
@@ -198,5 +198,4 @@ Required:
Optional:
- `duration` (String) Duration determines how long a Budget is active since each Schedule hit.Only minutes and hours are accepted, as cron does not work in seconds.If omitted, the budget is always active.This is required if Schedule is set.This regex has an optional 0s at the end since the duration.String() always addsa 0s at the end.
-- `reasons` (List of String) Reasons is a list of disruption methods that this budget applies to. If Reasons is not set, this budget applies to all methods.Otherwise, this will apply to each reason defined.allowed reasons are Underutilized, Empty, and Drifted.
- `schedule` (String) Schedule specifies when a budget begins being active, followingthe upstream cronjob syntax. If omitted, the budget is always active.Timezones are not supported.This field is required if Duration is set.
diff --git a/docs/data-sources/kms_services_k8s_aws_alias_v1alpha1_manifest.md b/docs/data-sources/kms_services_k8s_aws_alias_v1alpha1_manifest.md
index 0a767dad2..4e1cd0e68 100644
--- a/docs/data-sources/kms_services_k8s_aws_alias_v1alpha1_manifest.md
+++ b/docs/data-sources/kms_services_k8s_aws_alias_v1alpha1_manifest.md
@@ -75,3 +75,4 @@ Optional:
Optional:
- `name` (String)
+- `namespace` (String)
diff --git a/docs/data-sources/kms_services_k8s_aws_grant_v1alpha1_manifest.md b/docs/data-sources/kms_services_k8s_aws_grant_v1alpha1_manifest.md
index e3902e3ac..5baa86bbc 100644
--- a/docs/data-sources/kms_services_k8s_aws_grant_v1alpha1_manifest.md
+++ b/docs/data-sources/kms_services_k8s_aws_grant_v1alpha1_manifest.md
@@ -89,3 +89,4 @@ Optional:
Optional:
- `name` (String)
+- `namespace` (String)
diff --git a/docs/data-sources/kyverno_io_cluster_policy_v1_manifest.md b/docs/data-sources/kyverno_io_cluster_policy_v1_manifest.md
index ac3d2b95b..83e6f4d71 100644
--- a/docs/data-sources/kyverno_io_cluster_policy_v1_manifest.md
+++ b/docs/data-sources/kyverno_io_cluster_policy_v1_manifest.md
@@ -1048,7 +1048,7 @@ Optional:
- `message` (String) Message specifies a custom message to be displayed on failure.
- `pattern` (Map of String) Pattern specifies an overlay-style pattern used to check resources.
- `pod_security` (Attributes) PodSecurity applies exemptions for Kubernetes Pod Security admissionby specifying exclusions for Pod Security Standards controls. (see [below for nested schema](#nestedatt--spec--rules--validate--pod_security))
-- `validation_failure_action` (String) ValidationFailureAction defines if a validation policy rule violation should blockthe admission review request (enforce), or allow (audit) the admission review requestand report an error in a policy report. Optional.Allowed values are audit or enforce.
+- `validation_failure_action` (String) ValidationFailureAction defines if a validation policy rule violation should blockthe admission review request (Enforce), or allow (Audit) the admission review requestand report an error in a policy report. Optional.Allowed values are Audit or Enforce.
- `validation_failure_action_overrides` (Attributes List) ValidationFailureActionOverrides is a Cluster Policy attribute that specifies ValidationFailureActionnamespace-wise. It overrides ValidationFailureAction for the specified namespaces. (see [below for nested schema](#nestedatt--spec--rules--validate--validation_failure_action_overrides))
@@ -1549,6 +1549,7 @@ Optional:
- `subject` (String) Deprecated. Use KeylessAttestor instead.
- `type` (String) Type specifies the method of signature validation. The allowed optionsare Cosign and Notary. By default Cosign is used if a type is not specified.
- `use_cache` (Boolean) UseCache enables caching of image verify responses for this rule.
+- `validation_failure_action` (String) Allowed values are Audit or Enforce.
- `verify_digest` (Boolean) VerifyDigest validates that images have a digest.
diff --git a/docs/data-sources/kyverno_io_cluster_policy_v2beta1_manifest.md b/docs/data-sources/kyverno_io_cluster_policy_v2beta1_manifest.md
index 91acd592a..02817def0 100644
--- a/docs/data-sources/kyverno_io_cluster_policy_v2beta1_manifest.md
+++ b/docs/data-sources/kyverno_io_cluster_policy_v2beta1_manifest.md
@@ -925,7 +925,7 @@ Optional:
- `message` (String) Message specifies a custom message to be displayed on failure.
- `pattern` (Map of String) Pattern specifies an overlay-style pattern used to check resources.
- `pod_security` (Attributes) PodSecurity applies exemptions for Kubernetes Pod Security admissionby specifying exclusions for Pod Security Standards controls. (see [below for nested schema](#nestedatt--spec--rules--validate--pod_security))
-- `validation_failure_action` (String) ValidationFailureAction defines if a validation policy rule violation should blockthe admission review request (enforce), or allow (audit) the admission review requestand report an error in a policy report. Optional.Allowed values are audit or enforce.
+- `validation_failure_action` (String) ValidationFailureAction defines if a validation policy rule violation should blockthe admission review request (Enforce), or allow (Audit) the admission review requestand report an error in a policy report. Optional.Allowed values are Audit or Enforce.
- `validation_failure_action_overrides` (Attributes List) ValidationFailureActionOverrides is a Cluster Policy attribute that specifies ValidationFailureActionnamespace-wise. It overrides ValidationFailureAction for the specified namespaces. (see [below for nested schema](#nestedatt--spec--rules--validate--validation_failure_action_overrides))
@@ -1449,6 +1449,7 @@ Optional:
- `skip_image_references` (List of String) SkipImageReferences is a list of matching image reference patterns that should be skipped.At least one pattern in the list must match the image for the rule to be skipped. Each image referenceconsists of a registry address (defaults to docker.io), repository, image, and tag (defaults to latest).Wildcards ('*' and '?') are allowed. See: https://kubernetes.io/docs/concepts/containers/images.
- `type` (String) Type specifies the method of signature validation. The allowed optionsare Cosign and Notary. By default Cosign is used if a type is not specified.
- `use_cache` (Boolean) UseCache enables caching of image verify responses for this rule
+- `validation_failure_action` (String) Allowed values are Audit or Enforce.
- `verify_digest` (Boolean) VerifyDigest validates that images have a digest.
diff --git a/docs/data-sources/kyverno_io_policy_v1_manifest.md b/docs/data-sources/kyverno_io_policy_v1_manifest.md
index 01e6b60a9..00ff0629f 100644
--- a/docs/data-sources/kyverno_io_policy_v1_manifest.md
+++ b/docs/data-sources/kyverno_io_policy_v1_manifest.md
@@ -1050,7 +1050,7 @@ Optional:
- `message` (String) Message specifies a custom message to be displayed on failure.
- `pattern` (Map of String) Pattern specifies an overlay-style pattern used to check resources.
- `pod_security` (Attributes) PodSecurity applies exemptions for Kubernetes Pod Security admissionby specifying exclusions for Pod Security Standards controls. (see [below for nested schema](#nestedatt--spec--rules--validate--pod_security))
-- `validation_failure_action` (String) ValidationFailureAction defines if a validation policy rule violation should blockthe admission review request (enforce), or allow (audit) the admission review requestand report an error in a policy report. Optional.Allowed values are audit or enforce.
+- `validation_failure_action` (String) ValidationFailureAction defines if a validation policy rule violation should blockthe admission review request (Enforce), or allow (Audit) the admission review requestand report an error in a policy report. Optional.Allowed values are Audit or Enforce.
- `validation_failure_action_overrides` (Attributes List) ValidationFailureActionOverrides is a Cluster Policy attribute that specifies ValidationFailureActionnamespace-wise. It overrides ValidationFailureAction for the specified namespaces. (see [below for nested schema](#nestedatt--spec--rules--validate--validation_failure_action_overrides))
@@ -1551,6 +1551,7 @@ Optional:
- `subject` (String) Deprecated. Use KeylessAttestor instead.
- `type` (String) Type specifies the method of signature validation. The allowed optionsare Cosign and Notary. By default Cosign is used if a type is not specified.
- `use_cache` (Boolean) UseCache enables caching of image verify responses for this rule.
+- `validation_failure_action` (String) Allowed values are Audit or Enforce.
- `verify_digest` (Boolean) VerifyDigest validates that images have a digest.
diff --git a/docs/data-sources/kyverno_io_policy_v2beta1_manifest.md b/docs/data-sources/kyverno_io_policy_v2beta1_manifest.md
index dcdbf2509..cf10b32b6 100644
--- a/docs/data-sources/kyverno_io_policy_v2beta1_manifest.md
+++ b/docs/data-sources/kyverno_io_policy_v2beta1_manifest.md
@@ -927,7 +927,7 @@ Optional:
- `message` (String) Message specifies a custom message to be displayed on failure.
- `pattern` (Map of String) Pattern specifies an overlay-style pattern used to check resources.
- `pod_security` (Attributes) PodSecurity applies exemptions for Kubernetes Pod Security admissionby specifying exclusions for Pod Security Standards controls. (see [below for nested schema](#nestedatt--spec--rules--validate--pod_security))
-- `validation_failure_action` (String) ValidationFailureAction defines if a validation policy rule violation should blockthe admission review request (enforce), or allow (audit) the admission review requestand report an error in a policy report. Optional.Allowed values are audit or enforce.
+- `validation_failure_action` (String) ValidationFailureAction defines if a validation policy rule violation should blockthe admission review request (Enforce), or allow (Audit) the admission review requestand report an error in a policy report. Optional.Allowed values are Audit or Enforce.
- `validation_failure_action_overrides` (Attributes List) ValidationFailureActionOverrides is a Cluster Policy attribute that specifies ValidationFailureActionnamespace-wise. It overrides ValidationFailureAction for the specified namespaces. (see [below for nested schema](#nestedatt--spec--rules--validate--validation_failure_action_overrides))
@@ -1451,6 +1451,7 @@ Optional:
- `skip_image_references` (List of String) SkipImageReferences is a list of matching image reference patterns that should be skipped.At least one pattern in the list must match the image for the rule to be skipped. Each image referenceconsists of a registry address (defaults to docker.io), repository, image, and tag (defaults to latest).Wildcards ('*' and '?') are allowed. See: https://kubernetes.io/docs/concepts/containers/images.
- `type` (String) Type specifies the method of signature validation. The allowed optionsare Cosign and Notary. By default Cosign is used if a type is not specified.
- `use_cache` (Boolean) UseCache enables caching of image verify responses for this rule
+- `validation_failure_action` (String) Allowed values are Audit or Enforce.
- `verify_digest` (Boolean) VerifyDigest validates that images have a digest.
diff --git a/docs/data-sources/logging_banzaicloud_io_syslog_ng_cluster_output_v1beta1_manifest.md b/docs/data-sources/logging_banzaicloud_io_syslog_ng_cluster_output_v1beta1_manifest.md
index 82d8950be..2319fd3ac 100644
--- a/docs/data-sources/logging_banzaicloud_io_syslog_ng_cluster_output_v1beta1_manifest.md
+++ b/docs/data-sources/logging_banzaicloud_io_syslog_ng_cluster_output_v1beta1_manifest.md
@@ -65,6 +65,7 @@ Optional:
- `mongodb` (Attributes) (see [below for nested schema](#nestedatt--spec--mongodb))
- `mqtt` (Attributes) (see [below for nested schema](#nestedatt--spec--mqtt))
- `openobserve` (Attributes) (see [below for nested schema](#nestedatt--spec--openobserve))
+- `opentelemetry` (Attributes) (see [below for nested schema](#nestedatt--spec--opentelemetry))
- `redis` (Attributes) (see [below for nested schema](#nestedatt--spec--redis))
- `s3` (Attributes) (see [below for nested schema](#nestedatt--spec--s3))
- `splunk_hec_event` (Attributes) (see [below for nested schema](#nestedatt--spec--splunk_hec_event))
@@ -2202,6 +2203,226 @@ Optional:
+
+### Nested Schema for `spec.opentelemetry`
+
+Required:
+
+- `url` (String)
+
+Optional:
+
+- `auth` (Attributes) (see [below for nested schema](#nestedatt--spec--opentelemetry--auth))
+- `batch_bytes` (Number)
+- `batch_lines` (Number)
+- `batch_timeout` (Number)
+- `channel_args` (Map of String)
+- `compression` (Boolean)
+- `disk_buffer` (Attributes) (see [below for nested schema](#nestedatt--spec--opentelemetry--disk_buffer))
+
+
+### Nested Schema for `spec.opentelemetry.auth`
+
+Optional:
+
+- `adc` (Map of String)
+- `alts` (Attributes) (see [below for nested schema](#nestedatt--spec--opentelemetry--auth--alts))
+- `insecure` (Map of String)
+- `tls` (Attributes) (see [below for nested schema](#nestedatt--spec--opentelemetry--auth--tls))
+
+
+### Nested Schema for `spec.opentelemetry.auth.alts`
+
+Optional:
+
+- `target_service_accounts` (List of String)
+
+
+
+### Nested Schema for `spec.opentelemetry.auth.tls`
+
+Optional:
+
+- `ca_file` (Attributes) (see [below for nested schema](#nestedatt--spec--opentelemetry--auth--tls--ca_file))
+- `cert_file` (Attributes) (see [below for nested schema](#nestedatt--spec--opentelemetry--auth--tls--cert_file))
+- `key_file` (Attributes) (see [below for nested schema](#nestedatt--spec--opentelemetry--auth--tls--key_file))
+
+
+### Nested Schema for `spec.opentelemetry.auth.tls.ca_file`
+
+Optional:
+
+- `mount_from` (Attributes) (see [below for nested schema](#nestedatt--spec--opentelemetry--auth--tls--ca_file--mount_from))
+- `value` (String)
+- `value_from` (Attributes) (see [below for nested schema](#nestedatt--spec--opentelemetry--auth--tls--ca_file--value_from))
+
+
+### Nested Schema for `spec.opentelemetry.auth.tls.ca_file.mount_from`
+
+Optional:
+
+- `secret_key_ref` (Attributes) (see [below for nested schema](#nestedatt--spec--opentelemetry--auth--tls--ca_file--mount_from--secret_key_ref))
+
+
+### Nested Schema for `spec.opentelemetry.auth.tls.ca_file.mount_from.secret_key_ref`
+
+Required:
+
+- `key` (String)
+
+Optional:
+
+- `name` (String)
+- `optional` (Boolean)
+
+
+
+
+### Nested Schema for `spec.opentelemetry.auth.tls.ca_file.value_from`
+
+Optional:
+
+- `secret_key_ref` (Attributes) (see [below for nested schema](#nestedatt--spec--opentelemetry--auth--tls--ca_file--value_from--secret_key_ref))
+
+
+### Nested Schema for `spec.opentelemetry.auth.tls.ca_file.value_from.secret_key_ref`
+
+Required:
+
+- `key` (String)
+
+Optional:
+
+- `name` (String)
+- `optional` (Boolean)
+
+
+
+
+
+### Nested Schema for `spec.opentelemetry.auth.tls.cert_file`
+
+Optional:
+
+- `mount_from` (Attributes) (see [below for nested schema](#nestedatt--spec--opentelemetry--auth--tls--cert_file--mount_from))
+- `value` (String)
+- `value_from` (Attributes) (see [below for nested schema](#nestedatt--spec--opentelemetry--auth--tls--cert_file--value_from))
+
+
+### Nested Schema for `spec.opentelemetry.auth.tls.cert_file.mount_from`
+
+Optional:
+
+- `secret_key_ref` (Attributes) (see [below for nested schema](#nestedatt--spec--opentelemetry--auth--tls--cert_file--mount_from--secret_key_ref))
+
+
+### Nested Schema for `spec.opentelemetry.auth.tls.cert_file.mount_from.secret_key_ref`
+
+Required:
+
+- `key` (String)
+
+Optional:
+
+- `name` (String)
+- `optional` (Boolean)
+
+
+
+
+### Nested Schema for `spec.opentelemetry.auth.tls.cert_file.value_from`
+
+Optional:
+
+- `secret_key_ref` (Attributes) (see [below for nested schema](#nestedatt--spec--opentelemetry--auth--tls--cert_file--value_from--secret_key_ref))
+
+
+### Nested Schema for `spec.opentelemetry.auth.tls.cert_file.value_from.secret_key_ref`
+
+Required:
+
+- `key` (String)
+
+Optional:
+
+- `name` (String)
+- `optional` (Boolean)
+
+
+
+
+
+### Nested Schema for `spec.opentelemetry.auth.tls.key_file`
+
+Optional:
+
+- `mount_from` (Attributes) (see [below for nested schema](#nestedatt--spec--opentelemetry--auth--tls--key_file--mount_from))
+- `value` (String)
+- `value_from` (Attributes) (see [below for nested schema](#nestedatt--spec--opentelemetry--auth--tls--key_file--value_from))
+
+
+### Nested Schema for `spec.opentelemetry.auth.tls.key_file.mount_from`
+
+Optional:
+
+- `secret_key_ref` (Attributes) (see [below for nested schema](#nestedatt--spec--opentelemetry--auth--tls--key_file--mount_from--secret_key_ref))
+
+
+### Nested Schema for `spec.opentelemetry.auth.tls.key_file.mount_from.secret_key_ref`
+
+Required:
+
+- `key` (String)
+
+Optional:
+
+- `name` (String)
+- `optional` (Boolean)
+
+
+
+
+### Nested Schema for `spec.opentelemetry.auth.tls.key_file.value_from`
+
+Optional:
+
+- `secret_key_ref` (Attributes) (see [below for nested schema](#nestedatt--spec--opentelemetry--auth--tls--key_file--value_from--secret_key_ref))
+
+
+### Nested Schema for `spec.opentelemetry.auth.tls.key_file.value_from.secret_key_ref`
+
+Required:
+
+- `key` (String)
+
+Optional:
+
+- `name` (String)
+- `optional` (Boolean)
+
+
+
+
+
+
+
+### Nested Schema for `spec.opentelemetry.disk_buffer`
+
+Required:
+
+- `disk_buf_size` (Number)
+- `reliable` (Boolean)
+
+Optional:
+
+- `compaction` (Boolean)
+- `dir` (String)
+- `mem_buf_length` (Number)
+- `mem_buf_size` (Number)
+- `q_out_size` (Number)
+
+
+
### Nested Schema for `spec.redis`
diff --git a/docs/data-sources/logging_banzaicloud_io_syslog_ng_output_v1beta1_manifest.md b/docs/data-sources/logging_banzaicloud_io_syslog_ng_output_v1beta1_manifest.md
index e22b5c05f..81510067a 100644
--- a/docs/data-sources/logging_banzaicloud_io_syslog_ng_output_v1beta1_manifest.md
+++ b/docs/data-sources/logging_banzaicloud_io_syslog_ng_output_v1beta1_manifest.md
@@ -66,6 +66,7 @@ Optional:
- `mongodb` (Attributes) (see [below for nested schema](#nestedatt--spec--mongodb))
- `mqtt` (Attributes) (see [below for nested schema](#nestedatt--spec--mqtt))
- `openobserve` (Attributes) (see [below for nested schema](#nestedatt--spec--openobserve))
+- `opentelemetry` (Attributes) (see [below for nested schema](#nestedatt--spec--opentelemetry))
- `redis` (Attributes) (see [below for nested schema](#nestedatt--spec--redis))
- `s3` (Attributes) (see [below for nested schema](#nestedatt--spec--s3))
- `splunk_hec_event` (Attributes) (see [below for nested schema](#nestedatt--spec--splunk_hec_event))
@@ -2203,6 +2204,226 @@ Optional:
+
+### Nested Schema for `spec.opentelemetry`
+
+Required:
+
+- `url` (String)
+
+Optional:
+
+- `auth` (Attributes) (see [below for nested schema](#nestedatt--spec--opentelemetry--auth))
+- `batch_bytes` (Number)
+- `batch_lines` (Number)
+- `batch_timeout` (Number)
+- `channel_args` (Map of String)
+- `compression` (Boolean)
+- `disk_buffer` (Attributes) (see [below for nested schema](#nestedatt--spec--opentelemetry--disk_buffer))
+
+
+### Nested Schema for `spec.opentelemetry.auth`
+
+Optional:
+
+- `adc` (Map of String)
+- `alts` (Attributes) (see [below for nested schema](#nestedatt--spec--opentelemetry--auth--alts))
+- `insecure` (Map of String)
+- `tls` (Attributes) (see [below for nested schema](#nestedatt--spec--opentelemetry--auth--tls))
+
+
+### Nested Schema for `spec.opentelemetry.auth.alts`
+
+Optional:
+
+- `target_service_accounts` (List of String)
+
+
+
+### Nested Schema for `spec.opentelemetry.auth.tls`
+
+Optional:
+
+- `ca_file` (Attributes) (see [below for nested schema](#nestedatt--spec--opentelemetry--auth--tls--ca_file))
+- `cert_file` (Attributes) (see [below for nested schema](#nestedatt--spec--opentelemetry--auth--tls--cert_file))
+- `key_file` (Attributes) (see [below for nested schema](#nestedatt--spec--opentelemetry--auth--tls--key_file))
+
+
+### Nested Schema for `spec.opentelemetry.auth.tls.ca_file`
+
+Optional:
+
+- `mount_from` (Attributes) (see [below for nested schema](#nestedatt--spec--opentelemetry--auth--tls--ca_file--mount_from))
+- `value` (String)
+- `value_from` (Attributes) (see [below for nested schema](#nestedatt--spec--opentelemetry--auth--tls--ca_file--value_from))
+
+
+### Nested Schema for `spec.opentelemetry.auth.tls.ca_file.mount_from`
+
+Optional:
+
+- `secret_key_ref` (Attributes) (see [below for nested schema](#nestedatt--spec--opentelemetry--auth--tls--ca_file--mount_from--secret_key_ref))
+
+
+### Nested Schema for `spec.opentelemetry.auth.tls.ca_file.mount_from.secret_key_ref`
+
+Required:
+
+- `key` (String)
+
+Optional:
+
+- `name` (String)
+- `optional` (Boolean)
+
+
+
+
+### Nested Schema for `spec.opentelemetry.auth.tls.ca_file.value_from`
+
+Optional:
+
+- `secret_key_ref` (Attributes) (see [below for nested schema](#nestedatt--spec--opentelemetry--auth--tls--ca_file--value_from--secret_key_ref))
+
+
+### Nested Schema for `spec.opentelemetry.auth.tls.ca_file.value_from.secret_key_ref`
+
+Required:
+
+- `key` (String)
+
+Optional:
+
+- `name` (String)
+- `optional` (Boolean)
+
+
+
+
+
+### Nested Schema for `spec.opentelemetry.auth.tls.cert_file`
+
+Optional:
+
+- `mount_from` (Attributes) (see [below for nested schema](#nestedatt--spec--opentelemetry--auth--tls--cert_file--mount_from))
+- `value` (String)
+- `value_from` (Attributes) (see [below for nested schema](#nestedatt--spec--opentelemetry--auth--tls--cert_file--value_from))
+
+
+### Nested Schema for `spec.opentelemetry.auth.tls.cert_file.mount_from`
+
+Optional:
+
+- `secret_key_ref` (Attributes) (see [below for nested schema](#nestedatt--spec--opentelemetry--auth--tls--cert_file--mount_from--secret_key_ref))
+
+
+### Nested Schema for `spec.opentelemetry.auth.tls.cert_file.mount_from.secret_key_ref`
+
+Required:
+
+- `key` (String)
+
+Optional:
+
+- `name` (String)
+- `optional` (Boolean)
+
+
+
+
+### Nested Schema for `spec.opentelemetry.auth.tls.cert_file.value_from`
+
+Optional:
+
+- `secret_key_ref` (Attributes) (see [below for nested schema](#nestedatt--spec--opentelemetry--auth--tls--cert_file--value_from--secret_key_ref))
+
+
+### Nested Schema for `spec.opentelemetry.auth.tls.cert_file.value_from.secret_key_ref`
+
+Required:
+
+- `key` (String)
+
+Optional:
+
+- `name` (String)
+- `optional` (Boolean)
+
+
+
+
+
+### Nested Schema for `spec.opentelemetry.auth.tls.key_file`
+
+Optional:
+
+- `mount_from` (Attributes) (see [below for nested schema](#nestedatt--spec--opentelemetry--auth--tls--key_file--mount_from))
+- `value` (String)
+- `value_from` (Attributes) (see [below for nested schema](#nestedatt--spec--opentelemetry--auth--tls--key_file--value_from))
+
+
+### Nested Schema for `spec.opentelemetry.auth.tls.key_file.mount_from`
+
+Optional:
+
+- `secret_key_ref` (Attributes) (see [below for nested schema](#nestedatt--spec--opentelemetry--auth--tls--key_file--mount_from--secret_key_ref))
+
+
+### Nested Schema for `spec.opentelemetry.auth.tls.key_file.mount_from.secret_key_ref`
+
+Required:
+
+- `key` (String)
+
+Optional:
+
+- `name` (String)
+- `optional` (Boolean)
+
+
+
+
+### Nested Schema for `spec.opentelemetry.auth.tls.key_file.value_from`
+
+Optional:
+
+- `secret_key_ref` (Attributes) (see [below for nested schema](#nestedatt--spec--opentelemetry--auth--tls--key_file--value_from--secret_key_ref))
+
+
+### Nested Schema for `spec.opentelemetry.auth.tls.key_file.value_from.secret_key_ref`
+
+Required:
+
+- `key` (String)
+
+Optional:
+
+- `name` (String)
+- `optional` (Boolean)
+
+
+
+
+
+
+
+### Nested Schema for `spec.opentelemetry.disk_buffer`
+
+Required:
+
+- `disk_buf_size` (Number)
+- `reliable` (Boolean)
+
+Optional:
+
+- `compaction` (Boolean)
+- `dir` (String)
+- `mem_buf_length` (Number)
+- `mem_buf_size` (Number)
+- `q_out_size` (Number)
+
+
+
### Nested Schema for `spec.redis`
diff --git a/docs/data-sources/memorydb_services_k8s_aws_acl_v1alpha1_manifest.md b/docs/data-sources/memorydb_services_k8s_aws_acl_v1alpha1_manifest.md
index 2b0de397d..0c5eefd32 100644
--- a/docs/data-sources/memorydb_services_k8s_aws_acl_v1alpha1_manifest.md
+++ b/docs/data-sources/memorydb_services_k8s_aws_acl_v1alpha1_manifest.md
@@ -85,3 +85,4 @@ Optional:
Optional:
- `name` (String)
+- `namespace` (String)
diff --git a/docs/data-sources/memorydb_services_k8s_aws_cluster_v1alpha1_manifest.md b/docs/data-sources/memorydb_services_k8s_aws_cluster_v1alpha1_manifest.md
index 61eca933a..7e7a37854 100644
--- a/docs/data-sources/memorydb_services_k8s_aws_cluster_v1alpha1_manifest.md
+++ b/docs/data-sources/memorydb_services_k8s_aws_cluster_v1alpha1_manifest.md
@@ -99,6 +99,7 @@ Optional:
Optional:
- `name` (String)
+- `namespace` (String)
@@ -115,6 +116,7 @@ Optional:
Optional:
- `name` (String)
+- `namespace` (String)
@@ -131,6 +133,7 @@ Optional:
Optional:
- `name` (String)
+- `namespace` (String)
@@ -147,6 +150,7 @@ Optional:
Optional:
- `name` (String)
+- `namespace` (String)
@@ -163,6 +167,7 @@ Optional:
Optional:
- `name` (String)
+- `namespace` (String)
@@ -179,6 +184,7 @@ Optional:
Optional:
- `name` (String)
+- `namespace` (String)
diff --git a/docs/data-sources/memorydb_services_k8s_aws_snapshot_v1alpha1_manifest.md b/docs/data-sources/memorydb_services_k8s_aws_snapshot_v1alpha1_manifest.md
index 1f382662b..3e15765ab 100644
--- a/docs/data-sources/memorydb_services_k8s_aws_snapshot_v1alpha1_manifest.md
+++ b/docs/data-sources/memorydb_services_k8s_aws_snapshot_v1alpha1_manifest.md
@@ -79,6 +79,7 @@ Optional:
Optional:
- `name` (String)
+- `namespace` (String)
@@ -95,6 +96,7 @@ Optional:
Optional:
- `name` (String)
+- `namespace` (String)
diff --git a/docs/data-sources/memorydb_services_k8s_aws_subnet_group_v1alpha1_manifest.md b/docs/data-sources/memorydb_services_k8s_aws_subnet_group_v1alpha1_manifest.md
index bb62a1b3f..f60b55a6d 100644
--- a/docs/data-sources/memorydb_services_k8s_aws_subnet_group_v1alpha1_manifest.md
+++ b/docs/data-sources/memorydb_services_k8s_aws_subnet_group_v1alpha1_manifest.md
@@ -77,6 +77,7 @@ Optional:
Optional:
- `name` (String)
+- `namespace` (String)
diff --git a/docs/data-sources/monitoring_coreos_com_alertmanager_config_v1alpha1_manifest.md b/docs/data-sources/monitoring_coreos_com_alertmanager_config_v1alpha1_manifest.md
index 97fd577d1..b4ce0d3ba 100644
--- a/docs/data-sources/monitoring_coreos_com_alertmanager_config_v1alpha1_manifest.md
+++ b/docs/data-sources/monitoring_coreos_com_alertmanager_config_v1alpha1_manifest.md
@@ -280,7 +280,12 @@ Required:
Optional:
- `endpoint_params` (Map of String) 'endpointParams' configures the HTTP parameters to append to the tokenURL.
+- `no_proxy` (String) 'noProxy' is a comma-separated string that can contain IPs, CIDR notation, domain namesthat should be excluded from proxying. IP and domain names cancontain port numbers.It requires Prometheus >= v2.43.0.
+- `proxy_connect_header` (Map of String) ProxyConnectHeader optionally specifies headers to send toproxies during CONNECT requests.It requires Prometheus >= v2.43.0.
+- `proxy_from_environment` (Boolean) Whether to use the proxy configuration defined by environment variables (HTTP_PROXY, HTTPS_PROXY, and NO_PROXY).If unset, Prometheus uses its default value.It requires Prometheus >= v2.43.0.
+- `proxy_url` (String) 'proxyURL' defines the HTTP proxy server to use.It requires Prometheus >= v2.43.0.
- `scopes` (List of String) 'scopes' defines the OAuth2 scopes used for the token request.
+- `tls_config` (Attributes) TLS configuration to use when connecting to the OAuth2 server.It requires Prometheus >= v2.43.0. (see [below for nested schema](#nestedatt--spec--receivers--discord_configs--http_config--oauth2--tls_config))
### Nested Schema for `spec.receivers.discord_configs.http_config.oauth2.client_id`
@@ -330,6 +335,103 @@ Optional:
- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+### Nested Schema for `spec.receivers.discord_configs.http_config.oauth2.tls_config`
+
+Optional:
+
+- `ca` (Attributes) Certificate authority used when verifying server certificates. (see [below for nested schema](#nestedatt--spec--receivers--discord_configs--http_config--oauth2--tls_config--ca))
+- `cert` (Attributes) Client certificate to present when doing client-authentication. (see [below for nested schema](#nestedatt--spec--receivers--discord_configs--http_config--oauth2--tls_config--cert))
+- `insecure_skip_verify` (Boolean) Disable target certificate validation.
+- `key_secret` (Attributes) Secret containing the client key file for the targets. (see [below for nested schema](#nestedatt--spec--receivers--discord_configs--http_config--oauth2--tls_config--key_secret))
+- `max_version` (String) Maximum acceptable TLS version.It requires Prometheus >= v2.41.0.
+- `min_version` (String) Minimum acceptable TLS version.It requires Prometheus >= v2.35.0.
+- `server_name` (String) Used to verify the hostname for the targets.
+
+
+### Nested Schema for `spec.receivers.discord_configs.http_config.oauth2.tls_config.ca`
+
+Optional:
+
+- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--discord_configs--http_config--oauth2--tls_config--ca--config_map))
+- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--discord_configs--http_config--oauth2--tls_config--ca--secret))
+
+
+### Nested Schema for `spec.receivers.discord_configs.http_config.oauth2.tls_config.ca.config_map`
+
+Required:
+
+- `key` (String) The key to select.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
+
+
+
+### Nested Schema for `spec.receivers.discord_configs.http_config.oauth2.tls_config.ca.secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
+
+### Nested Schema for `spec.receivers.discord_configs.http_config.oauth2.tls_config.cert`
+
+Optional:
+
+- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--discord_configs--http_config--oauth2--tls_config--cert--config_map))
+- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--discord_configs--http_config--oauth2--tls_config--cert--secret))
+
+
+### Nested Schema for `spec.receivers.discord_configs.http_config.oauth2.tls_config.cert.config_map`
+
+Required:
+
+- `key` (String) The key to select.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
+
+
+
+### Nested Schema for `spec.receivers.discord_configs.http_config.oauth2.tls_config.cert.secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
+
+### Nested Schema for `spec.receivers.discord_configs.http_config.oauth2.tls_config.key_secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
### Nested Schema for `spec.receivers.discord_configs.http_config.tls_config`
@@ -706,7 +808,12 @@ Required:
Optional:
- `endpoint_params` (Map of String) 'endpointParams' configures the HTTP parameters to append to the tokenURL.
+- `no_proxy` (String) 'noProxy' is a comma-separated string that can contain IPs, CIDR notation, domain namesthat should be excluded from proxying. IP and domain names cancontain port numbers.It requires Prometheus >= v2.43.0.
+- `proxy_connect_header` (Map of String) ProxyConnectHeader optionally specifies headers to send toproxies during CONNECT requests.It requires Prometheus >= v2.43.0.
+- `proxy_from_environment` (Boolean) Whether to use the proxy configuration defined by environment variables (HTTP_PROXY, HTTPS_PROXY, and NO_PROXY).If unset, Prometheus uses its default value.It requires Prometheus >= v2.43.0.
+- `proxy_url` (String) 'proxyURL' defines the HTTP proxy server to use.It requires Prometheus >= v2.43.0.
- `scopes` (List of String) 'scopes' defines the OAuth2 scopes used for the token request.
+- `tls_config` (Attributes) TLS configuration to use when connecting to the OAuth2 server.It requires Prometheus >= v2.43.0. (see [below for nested schema](#nestedatt--spec--receivers--msteams_configs--http_config--oauth2--tls_config))
### Nested Schema for `spec.receivers.msteams_configs.http_config.oauth2.client_id`
@@ -756,6 +863,103 @@ Optional:
- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+### Nested Schema for `spec.receivers.msteams_configs.http_config.oauth2.tls_config`
+
+Optional:
+
+- `ca` (Attributes) Certificate authority used when verifying server certificates. (see [below for nested schema](#nestedatt--spec--receivers--msteams_configs--http_config--oauth2--tls_config--ca))
+- `cert` (Attributes) Client certificate to present when doing client-authentication. (see [below for nested schema](#nestedatt--spec--receivers--msteams_configs--http_config--oauth2--tls_config--cert))
+- `insecure_skip_verify` (Boolean) Disable target certificate validation.
+- `key_secret` (Attributes) Secret containing the client key file for the targets. (see [below for nested schema](#nestedatt--spec--receivers--msteams_configs--http_config--oauth2--tls_config--key_secret))
+- `max_version` (String) Maximum acceptable TLS version.It requires Prometheus >= v2.41.0.
+- `min_version` (String) Minimum acceptable TLS version.It requires Prometheus >= v2.35.0.
+- `server_name` (String) Used to verify the hostname for the targets.
+
+
+### Nested Schema for `spec.receivers.msteams_configs.http_config.oauth2.tls_config.ca`
+
+Optional:
+
+- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--msteams_configs--http_config--oauth2--tls_config--ca--config_map))
+- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--msteams_configs--http_config--oauth2--tls_config--ca--secret))
+
+
+### Nested Schema for `spec.receivers.msteams_configs.http_config.oauth2.tls_config.ca.config_map`
+
+Required:
+
+- `key` (String) The key to select.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
+
+
+
+### Nested Schema for `spec.receivers.msteams_configs.http_config.oauth2.tls_config.ca.secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
+
+### Nested Schema for `spec.receivers.msteams_configs.http_config.oauth2.tls_config.cert`
+
+Optional:
+
+- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--msteams_configs--http_config--oauth2--tls_config--cert--config_map))
+- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--msteams_configs--http_config--oauth2--tls_config--cert--secret))
+
+
+### Nested Schema for `spec.receivers.msteams_configs.http_config.oauth2.tls_config.cert.config_map`
+
+Required:
+
+- `key` (String) The key to select.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
+
+
+
+### Nested Schema for `spec.receivers.msteams_configs.http_config.oauth2.tls_config.cert.secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
+
+### Nested Schema for `spec.receivers.msteams_configs.http_config.oauth2.tls_config.key_secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
### Nested Schema for `spec.receivers.msteams_configs.http_config.tls_config`
@@ -994,7 +1198,12 @@ Required:
Optional:
- `endpoint_params` (Map of String) 'endpointParams' configures the HTTP parameters to append to the tokenURL.
+- `no_proxy` (String) 'noProxy' is a comma-separated string that can contain IPs, CIDR notation, domain namesthat should be excluded from proxying. IP and domain names cancontain port numbers.It requires Prometheus >= v2.43.0.
+- `proxy_connect_header` (Map of String) ProxyConnectHeader optionally specifies headers to send toproxies during CONNECT requests.It requires Prometheus >= v2.43.0.
+- `proxy_from_environment` (Boolean) Whether to use the proxy configuration defined by environment variables (HTTP_PROXY, HTTPS_PROXY, and NO_PROXY).If unset, Prometheus uses its default value.It requires Prometheus >= v2.43.0.
+- `proxy_url` (String) 'proxyURL' defines the HTTP proxy server to use.It requires Prometheus >= v2.43.0.
- `scopes` (List of String) 'scopes' defines the OAuth2 scopes used for the token request.
+- `tls_config` (Attributes) TLS configuration to use when connecting to the OAuth2 server.It requires Prometheus >= v2.43.0. (see [below for nested schema](#nestedatt--spec--receivers--opsgenie_configs--http_config--oauth2--tls_config))
### Nested Schema for `spec.receivers.opsgenie_configs.http_config.oauth2.client_id`
@@ -1044,6 +1253,103 @@ Optional:
- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+### Nested Schema for `spec.receivers.opsgenie_configs.http_config.oauth2.tls_config`
+
+Optional:
+
+- `ca` (Attributes) Certificate authority used when verifying server certificates. (see [below for nested schema](#nestedatt--spec--receivers--opsgenie_configs--http_config--oauth2--tls_config--ca))
+- `cert` (Attributes) Client certificate to present when doing client-authentication. (see [below for nested schema](#nestedatt--spec--receivers--opsgenie_configs--http_config--oauth2--tls_config--cert))
+- `insecure_skip_verify` (Boolean) Disable target certificate validation.
+- `key_secret` (Attributes) Secret containing the client key file for the targets. (see [below for nested schema](#nestedatt--spec--receivers--opsgenie_configs--http_config--oauth2--tls_config--key_secret))
+- `max_version` (String) Maximum acceptable TLS version.It requires Prometheus >= v2.41.0.
+- `min_version` (String) Minimum acceptable TLS version.It requires Prometheus >= v2.35.0.
+- `server_name` (String) Used to verify the hostname for the targets.
+
+
+### Nested Schema for `spec.receivers.opsgenie_configs.http_config.oauth2.tls_config.ca`
+
+Optional:
+
+- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--opsgenie_configs--http_config--oauth2--tls_config--ca--config_map))
+- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--opsgenie_configs--http_config--oauth2--tls_config--ca--secret))
+
+
+### Nested Schema for `spec.receivers.opsgenie_configs.http_config.oauth2.tls_config.ca.config_map`
+
+Required:
+
+- `key` (String) The key to select.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
+
+
+
+### Nested Schema for `spec.receivers.opsgenie_configs.http_config.oauth2.tls_config.ca.secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
+
+### Nested Schema for `spec.receivers.opsgenie_configs.http_config.oauth2.tls_config.cert`
+
+Optional:
+
+- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--opsgenie_configs--http_config--oauth2--tls_config--cert--config_map))
+- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--opsgenie_configs--http_config--oauth2--tls_config--cert--secret))
+
+
+### Nested Schema for `spec.receivers.opsgenie_configs.http_config.oauth2.tls_config.cert.config_map`
+
+Required:
+
+- `key` (String) The key to select.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
+
+
+
+### Nested Schema for `spec.receivers.opsgenie_configs.http_config.oauth2.tls_config.cert.secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
+
+### Nested Schema for `spec.receivers.opsgenie_configs.http_config.oauth2.tls_config.key_secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
### Nested Schema for `spec.receivers.opsgenie_configs.http_config.tls_config`
@@ -1284,7 +1590,12 @@ Required:
Optional:
- `endpoint_params` (Map of String) 'endpointParams' configures the HTTP parameters to append to the tokenURL.
+- `no_proxy` (String) 'noProxy' is a comma-separated string that can contain IPs, CIDR notation, domain namesthat should be excluded from proxying. IP and domain names cancontain port numbers.It requires Prometheus >= v2.43.0.
+- `proxy_connect_header` (Map of String) ProxyConnectHeader optionally specifies headers to send toproxies during CONNECT requests.It requires Prometheus >= v2.43.0.
+- `proxy_from_environment` (Boolean) Whether to use the proxy configuration defined by environment variables (HTTP_PROXY, HTTPS_PROXY, and NO_PROXY).If unset, Prometheus uses its default value.It requires Prometheus >= v2.43.0.
+- `proxy_url` (String) 'proxyURL' defines the HTTP proxy server to use.It requires Prometheus >= v2.43.0.
- `scopes` (List of String) 'scopes' defines the OAuth2 scopes used for the token request.
+- `tls_config` (Attributes) TLS configuration to use when connecting to the OAuth2 server.It requires Prometheus >= v2.43.0. (see [below for nested schema](#nestedatt--spec--receivers--pagerduty_configs--http_config--oauth2--tls_config))
### Nested Schema for `spec.receivers.pagerduty_configs.http_config.oauth2.client_id`
@@ -1334,30 +1645,29 @@ Optional:
- `optional` (Boolean) Specify whether the Secret or its key must be defined
-
-
-### Nested Schema for `spec.receivers.pagerduty_configs.http_config.tls_config`
+
+### Nested Schema for `spec.receivers.pagerduty_configs.http_config.oauth2.tls_config`
Optional:
-- `ca` (Attributes) Certificate authority used when verifying server certificates. (see [below for nested schema](#nestedatt--spec--receivers--pagerduty_configs--http_config--tls_config--ca))
-- `cert` (Attributes) Client certificate to present when doing client-authentication. (see [below for nested schema](#nestedatt--spec--receivers--pagerduty_configs--http_config--tls_config--cert))
+- `ca` (Attributes) Certificate authority used when verifying server certificates. (see [below for nested schema](#nestedatt--spec--receivers--pagerduty_configs--http_config--oauth2--tls_config--ca))
+- `cert` (Attributes) Client certificate to present when doing client-authentication. (see [below for nested schema](#nestedatt--spec--receivers--pagerduty_configs--http_config--oauth2--tls_config--cert))
- `insecure_skip_verify` (Boolean) Disable target certificate validation.
-- `key_secret` (Attributes) Secret containing the client key file for the targets. (see [below for nested schema](#nestedatt--spec--receivers--pagerduty_configs--http_config--tls_config--key_secret))
+- `key_secret` (Attributes) Secret containing the client key file for the targets. (see [below for nested schema](#nestedatt--spec--receivers--pagerduty_configs--http_config--oauth2--tls_config--key_secret))
- `max_version` (String) Maximum acceptable TLS version.It requires Prometheus >= v2.41.0.
- `min_version` (String) Minimum acceptable TLS version.It requires Prometheus >= v2.35.0.
- `server_name` (String) Used to verify the hostname for the targets.
-
-### Nested Schema for `spec.receivers.pagerduty_configs.http_config.tls_config.ca`
+
+### Nested Schema for `spec.receivers.pagerduty_configs.http_config.oauth2.tls_config.ca`
Optional:
-- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--pagerduty_configs--http_config--tls_config--ca--config_map))
-- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--pagerduty_configs--http_config--tls_config--ca--secret))
+- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--pagerduty_configs--http_config--oauth2--tls_config--ca--config_map))
+- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--pagerduty_configs--http_config--oauth2--tls_config--ca--secret))
-
-### Nested Schema for `spec.receivers.pagerduty_configs.http_config.tls_config.ca.config_map`
+
+### Nested Schema for `spec.receivers.pagerduty_configs.http_config.oauth2.tls_config.ca.config_map`
Required:
@@ -1369,8 +1679,8 @@ Optional:
- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
-
-### Nested Schema for `spec.receivers.pagerduty_configs.http_config.tls_config.ca.secret`
+
+### Nested Schema for `spec.receivers.pagerduty_configs.http_config.oauth2.tls_config.ca.secret`
Required:
@@ -1383,16 +1693,16 @@ Optional:
-
-### Nested Schema for `spec.receivers.pagerduty_configs.http_config.tls_config.cert`
+
+### Nested Schema for `spec.receivers.pagerduty_configs.http_config.oauth2.tls_config.cert`
Optional:
-- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--pagerduty_configs--http_config--tls_config--cert--config_map))
-- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--pagerduty_configs--http_config--tls_config--cert--secret))
+- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--pagerduty_configs--http_config--oauth2--tls_config--cert--config_map))
+- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--pagerduty_configs--http_config--oauth2--tls_config--cert--secret))
-
-### Nested Schema for `spec.receivers.pagerduty_configs.http_config.tls_config.cert.config_map`
+
+### Nested Schema for `spec.receivers.pagerduty_configs.http_config.oauth2.tls_config.cert.config_map`
Required:
@@ -1404,8 +1714,8 @@ Optional:
- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
-
-### Nested Schema for `spec.receivers.pagerduty_configs.http_config.tls_config.cert.secret`
+
+### Nested Schema for `spec.receivers.pagerduty_configs.http_config.oauth2.tls_config.cert.secret`
Required:
@@ -1418,8 +1728,8 @@ Optional:
-
-### Nested Schema for `spec.receivers.pagerduty_configs.http_config.tls_config.key_secret`
+
+### Nested Schema for `spec.receivers.pagerduty_configs.http_config.oauth2.tls_config.key_secret`
Required:
@@ -1433,17 +1743,115 @@ Optional:
-
-### Nested Schema for `spec.receivers.pagerduty_configs.pager_duty_image_configs`
+
+### Nested Schema for `spec.receivers.pagerduty_configs.http_config.tls_config`
Optional:
-- `alt` (String) Alt is the optional alternative text for the image.
-- `href` (String) Optional URL; makes the image a clickable link.
-- `src` (String) Src of the image being attached to the incident
-
-
-
+- `ca` (Attributes) Certificate authority used when verifying server certificates. (see [below for nested schema](#nestedatt--spec--receivers--pagerduty_configs--http_config--tls_config--ca))
+- `cert` (Attributes) Client certificate to present when doing client-authentication. (see [below for nested schema](#nestedatt--spec--receivers--pagerduty_configs--http_config--tls_config--cert))
+- `insecure_skip_verify` (Boolean) Disable target certificate validation.
+- `key_secret` (Attributes) Secret containing the client key file for the targets. (see [below for nested schema](#nestedatt--spec--receivers--pagerduty_configs--http_config--tls_config--key_secret))
+- `max_version` (String) Maximum acceptable TLS version.It requires Prometheus >= v2.41.0.
+- `min_version` (String) Minimum acceptable TLS version.It requires Prometheus >= v2.35.0.
+- `server_name` (String) Used to verify the hostname for the targets.
+
+
+### Nested Schema for `spec.receivers.pagerduty_configs.http_config.tls_config.ca`
+
+Optional:
+
+- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--pagerduty_configs--http_config--tls_config--ca--config_map))
+- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--pagerduty_configs--http_config--tls_config--ca--secret))
+
+
+### Nested Schema for `spec.receivers.pagerduty_configs.http_config.tls_config.ca.config_map`
+
+Required:
+
+- `key` (String) The key to select.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
+
+
+
+### Nested Schema for `spec.receivers.pagerduty_configs.http_config.tls_config.ca.secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
+
+### Nested Schema for `spec.receivers.pagerduty_configs.http_config.tls_config.cert`
+
+Optional:
+
+- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--pagerduty_configs--http_config--tls_config--cert--config_map))
+- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--pagerduty_configs--http_config--tls_config--cert--secret))
+
+
+### Nested Schema for `spec.receivers.pagerduty_configs.http_config.tls_config.cert.config_map`
+
+Required:
+
+- `key` (String) The key to select.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
+
+
+
+### Nested Schema for `spec.receivers.pagerduty_configs.http_config.tls_config.cert.secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
+
+### Nested Schema for `spec.receivers.pagerduty_configs.http_config.tls_config.key_secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
+
+
+### Nested Schema for `spec.receivers.pagerduty_configs.pager_duty_image_configs`
+
+Optional:
+
+- `alt` (String) Alt is the optional alternative text for the image.
+- `href` (String) Optional URL; makes the image a clickable link.
+- `src` (String) Src of the image being attached to the incident
+
+
+
### Nested Schema for `spec.receivers.pagerduty_configs.pager_duty_link_configs`
Optional:
@@ -1597,7 +2005,12 @@ Required:
Optional:
- `endpoint_params` (Map of String) 'endpointParams' configures the HTTP parameters to append to the tokenURL.
+- `no_proxy` (String) 'noProxy' is a comma-separated string that can contain IPs, CIDR notation, domain namesthat should be excluded from proxying. IP and domain names cancontain port numbers.It requires Prometheus >= v2.43.0.
+- `proxy_connect_header` (Map of String) ProxyConnectHeader optionally specifies headers to send toproxies during CONNECT requests.It requires Prometheus >= v2.43.0.
+- `proxy_from_environment` (Boolean) Whether to use the proxy configuration defined by environment variables (HTTP_PROXY, HTTPS_PROXY, and NO_PROXY).If unset, Prometheus uses its default value.It requires Prometheus >= v2.43.0.
+- `proxy_url` (String) 'proxyURL' defines the HTTP proxy server to use.It requires Prometheus >= v2.43.0.
- `scopes` (List of String) 'scopes' defines the OAuth2 scopes used for the token request.
+- `tls_config` (Attributes) TLS configuration to use when connecting to the OAuth2 server.It requires Prometheus >= v2.43.0. (see [below for nested schema](#nestedatt--spec--receivers--pushover_configs--http_config--oauth2--tls_config))
### Nested Schema for `spec.receivers.pushover_configs.http_config.oauth2.client_id`
@@ -1647,6 +2060,103 @@ Optional:
- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+### Nested Schema for `spec.receivers.pushover_configs.http_config.oauth2.tls_config`
+
+Optional:
+
+- `ca` (Attributes) Certificate authority used when verifying server certificates. (see [below for nested schema](#nestedatt--spec--receivers--pushover_configs--http_config--oauth2--tls_config--ca))
+- `cert` (Attributes) Client certificate to present when doing client-authentication. (see [below for nested schema](#nestedatt--spec--receivers--pushover_configs--http_config--oauth2--tls_config--cert))
+- `insecure_skip_verify` (Boolean) Disable target certificate validation.
+- `key_secret` (Attributes) Secret containing the client key file for the targets. (see [below for nested schema](#nestedatt--spec--receivers--pushover_configs--http_config--oauth2--tls_config--key_secret))
+- `max_version` (String) Maximum acceptable TLS version.It requires Prometheus >= v2.41.0.
+- `min_version` (String) Minimum acceptable TLS version.It requires Prometheus >= v2.35.0.
+- `server_name` (String) Used to verify the hostname for the targets.
+
+
+### Nested Schema for `spec.receivers.pushover_configs.http_config.oauth2.tls_config.ca`
+
+Optional:
+
+- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--pushover_configs--http_config--oauth2--tls_config--ca--config_map))
+- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--pushover_configs--http_config--oauth2--tls_config--ca--secret))
+
+
+### Nested Schema for `spec.receivers.pushover_configs.http_config.oauth2.tls_config.ca.config_map`
+
+Required:
+
+- `key` (String) The key to select.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
+
+
+
+### Nested Schema for `spec.receivers.pushover_configs.http_config.oauth2.tls_config.ca.secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
+
+### Nested Schema for `spec.receivers.pushover_configs.http_config.oauth2.tls_config.cert`
+
+Optional:
+
+- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--pushover_configs--http_config--oauth2--tls_config--cert--config_map))
+- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--pushover_configs--http_config--oauth2--tls_config--cert--secret))
+
+
+### Nested Schema for `spec.receivers.pushover_configs.http_config.oauth2.tls_config.cert.config_map`
+
+Required:
+
+- `key` (String) The key to select.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
+
+
+
+### Nested Schema for `spec.receivers.pushover_configs.http_config.oauth2.tls_config.cert.secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
+
+### Nested Schema for `spec.receivers.pushover_configs.http_config.oauth2.tls_config.key_secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
### Nested Schema for `spec.receivers.pushover_configs.http_config.tls_config`
@@ -1953,7 +2463,12 @@ Required:
Optional:
- `endpoint_params` (Map of String) 'endpointParams' configures the HTTP parameters to append to the tokenURL.
+- `no_proxy` (String) 'noProxy' is a comma-separated string that can contain IPs, CIDR notation, domain namesthat should be excluded from proxying. IP and domain names cancontain port numbers.It requires Prometheus >= v2.43.0.
+- `proxy_connect_header` (Map of String) ProxyConnectHeader optionally specifies headers to send toproxies during CONNECT requests.It requires Prometheus >= v2.43.0.
+- `proxy_from_environment` (Boolean) Whether to use the proxy configuration defined by environment variables (HTTP_PROXY, HTTPS_PROXY, and NO_PROXY).If unset, Prometheus uses its default value.It requires Prometheus >= v2.43.0.
+- `proxy_url` (String) 'proxyURL' defines the HTTP proxy server to use.It requires Prometheus >= v2.43.0.
- `scopes` (List of String) 'scopes' defines the OAuth2 scopes used for the token request.
+- `tls_config` (Attributes) TLS configuration to use when connecting to the OAuth2 server.It requires Prometheus >= v2.43.0. (see [below for nested schema](#nestedatt--spec--receivers--slack_configs--http_config--oauth2--tls_config))
### Nested Schema for `spec.receivers.slack_configs.http_config.oauth2.client_id`
@@ -2003,6 +2518,103 @@ Optional:
- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+### Nested Schema for `spec.receivers.slack_configs.http_config.oauth2.tls_config`
+
+Optional:
+
+- `ca` (Attributes) Certificate authority used when verifying server certificates. (see [below for nested schema](#nestedatt--spec--receivers--slack_configs--http_config--oauth2--tls_config--ca))
+- `cert` (Attributes) Client certificate to present when doing client-authentication. (see [below for nested schema](#nestedatt--spec--receivers--slack_configs--http_config--oauth2--tls_config--cert))
+- `insecure_skip_verify` (Boolean) Disable target certificate validation.
+- `key_secret` (Attributes) Secret containing the client key file for the targets. (see [below for nested schema](#nestedatt--spec--receivers--slack_configs--http_config--oauth2--tls_config--key_secret))
+- `max_version` (String) Maximum acceptable TLS version.It requires Prometheus >= v2.41.0.
+- `min_version` (String) Minimum acceptable TLS version.It requires Prometheus >= v2.35.0.
+- `server_name` (String) Used to verify the hostname for the targets.
+
+
+### Nested Schema for `spec.receivers.slack_configs.http_config.oauth2.tls_config.ca`
+
+Optional:
+
+- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--slack_configs--http_config--oauth2--tls_config--ca--config_map))
+- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--slack_configs--http_config--oauth2--tls_config--ca--secret))
+
+
+### Nested Schema for `spec.receivers.slack_configs.http_config.oauth2.tls_config.ca.config_map`
+
+Required:
+
+- `key` (String) The key to select.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
+
+
+
+### Nested Schema for `spec.receivers.slack_configs.http_config.oauth2.tls_config.ca.secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
+
+### Nested Schema for `spec.receivers.slack_configs.http_config.oauth2.tls_config.cert`
+
+Optional:
+
+- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--slack_configs--http_config--oauth2--tls_config--cert--config_map))
+- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--slack_configs--http_config--oauth2--tls_config--cert--secret))
+
+
+### Nested Schema for `spec.receivers.slack_configs.http_config.oauth2.tls_config.cert.config_map`
+
+Required:
+
+- `key` (String) The key to select.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
+
+
+
+### Nested Schema for `spec.receivers.slack_configs.http_config.oauth2.tls_config.cert.secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
+
+### Nested Schema for `spec.receivers.slack_configs.http_config.oauth2.tls_config.key_secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
### Nested Schema for `spec.receivers.slack_configs.http_config.tls_config`
@@ -2214,7 +2826,12 @@ Required:
Optional:
- `endpoint_params` (Map of String) 'endpointParams' configures the HTTP parameters to append to the tokenURL.
+- `no_proxy` (String) 'noProxy' is a comma-separated string that can contain IPs, CIDR notation, domain namesthat should be excluded from proxying. IP and domain names cancontain port numbers.It requires Prometheus >= v2.43.0.
+- `proxy_connect_header` (Map of String) ProxyConnectHeader optionally specifies headers to send toproxies during CONNECT requests.It requires Prometheus >= v2.43.0.
+- `proxy_from_environment` (Boolean) Whether to use the proxy configuration defined by environment variables (HTTP_PROXY, HTTPS_PROXY, and NO_PROXY).If unset, Prometheus uses its default value.It requires Prometheus >= v2.43.0.
+- `proxy_url` (String) 'proxyURL' defines the HTTP proxy server to use.It requires Prometheus >= v2.43.0.
- `scopes` (List of String) 'scopes' defines the OAuth2 scopes used for the token request.
+- `tls_config` (Attributes) TLS configuration to use when connecting to the OAuth2 server.It requires Prometheus >= v2.43.0. (see [below for nested schema](#nestedatt--spec--receivers--sns_configs--http_config--oauth2--tls_config))
### Nested Schema for `spec.receivers.sns_configs.http_config.oauth2.client_id`
@@ -2264,6 +2881,103 @@ Optional:
- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+### Nested Schema for `spec.receivers.sns_configs.http_config.oauth2.tls_config`
+
+Optional:
+
+- `ca` (Attributes) Certificate authority used when verifying server certificates. (see [below for nested schema](#nestedatt--spec--receivers--sns_configs--http_config--oauth2--tls_config--ca))
+- `cert` (Attributes) Client certificate to present when doing client-authentication. (see [below for nested schema](#nestedatt--spec--receivers--sns_configs--http_config--oauth2--tls_config--cert))
+- `insecure_skip_verify` (Boolean) Disable target certificate validation.
+- `key_secret` (Attributes) Secret containing the client key file for the targets. (see [below for nested schema](#nestedatt--spec--receivers--sns_configs--http_config--oauth2--tls_config--key_secret))
+- `max_version` (String) Maximum acceptable TLS version.It requires Prometheus >= v2.41.0.
+- `min_version` (String) Minimum acceptable TLS version.It requires Prometheus >= v2.35.0.
+- `server_name` (String) Used to verify the hostname for the targets.
+
+
+### Nested Schema for `spec.receivers.sns_configs.http_config.oauth2.tls_config.ca`
+
+Optional:
+
+- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--sns_configs--http_config--oauth2--tls_config--ca--config_map))
+- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--sns_configs--http_config--oauth2--tls_config--ca--secret))
+
+
+### Nested Schema for `spec.receivers.sns_configs.http_config.oauth2.tls_config.ca.config_map`
+
+Required:
+
+- `key` (String) The key to select.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
+
+
+
+### Nested Schema for `spec.receivers.sns_configs.http_config.oauth2.tls_config.ca.secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
+
+### Nested Schema for `spec.receivers.sns_configs.http_config.oauth2.tls_config.cert`
+
+Optional:
+
+- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--sns_configs--http_config--oauth2--tls_config--cert--config_map))
+- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--sns_configs--http_config--oauth2--tls_config--cert--secret))
+
+
+### Nested Schema for `spec.receivers.sns_configs.http_config.oauth2.tls_config.cert.config_map`
+
+Required:
+
+- `key` (String) The key to select.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
+
+
+
+### Nested Schema for `spec.receivers.sns_configs.http_config.oauth2.tls_config.cert.secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
+
+### Nested Schema for `spec.receivers.sns_configs.http_config.oauth2.tls_config.key_secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
### Nested Schema for `spec.receivers.sns_configs.http_config.tls_config`
@@ -2525,7 +3239,12 @@ Required:
Optional:
- `endpoint_params` (Map of String) 'endpointParams' configures the HTTP parameters to append to the tokenURL.
+- `no_proxy` (String) 'noProxy' is a comma-separated string that can contain IPs, CIDR notation, domain namesthat should be excluded from proxying. IP and domain names cancontain port numbers.It requires Prometheus >= v2.43.0.
+- `proxy_connect_header` (Map of String) ProxyConnectHeader optionally specifies headers to send toproxies during CONNECT requests.It requires Prometheus >= v2.43.0.
+- `proxy_from_environment` (Boolean) Whether to use the proxy configuration defined by environment variables (HTTP_PROXY, HTTPS_PROXY, and NO_PROXY).If unset, Prometheus uses its default value.It requires Prometheus >= v2.43.0.
+- `proxy_url` (String) 'proxyURL' defines the HTTP proxy server to use.It requires Prometheus >= v2.43.0.
- `scopes` (List of String) 'scopes' defines the OAuth2 scopes used for the token request.
+- `tls_config` (Attributes) TLS configuration to use when connecting to the OAuth2 server.It requires Prometheus >= v2.43.0. (see [below for nested schema](#nestedatt--spec--receivers--telegram_configs--http_config--oauth2--tls_config))
### Nested Schema for `spec.receivers.telegram_configs.http_config.oauth2.client_id`
@@ -2575,6 +3294,103 @@ Optional:
- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+### Nested Schema for `spec.receivers.telegram_configs.http_config.oauth2.tls_config`
+
+Optional:
+
+- `ca` (Attributes) Certificate authority used when verifying server certificates. (see [below for nested schema](#nestedatt--spec--receivers--telegram_configs--http_config--oauth2--tls_config--ca))
+- `cert` (Attributes) Client certificate to present when doing client-authentication. (see [below for nested schema](#nestedatt--spec--receivers--telegram_configs--http_config--oauth2--tls_config--cert))
+- `insecure_skip_verify` (Boolean) Disable target certificate validation.
+- `key_secret` (Attributes) Secret containing the client key file for the targets. (see [below for nested schema](#nestedatt--spec--receivers--telegram_configs--http_config--oauth2--tls_config--key_secret))
+- `max_version` (String) Maximum acceptable TLS version.It requires Prometheus >= v2.41.0.
+- `min_version` (String) Minimum acceptable TLS version.It requires Prometheus >= v2.35.0.
+- `server_name` (String) Used to verify the hostname for the targets.
+
+
+### Nested Schema for `spec.receivers.telegram_configs.http_config.oauth2.tls_config.ca`
+
+Optional:
+
+- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--telegram_configs--http_config--oauth2--tls_config--ca--config_map))
+- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--telegram_configs--http_config--oauth2--tls_config--ca--secret))
+
+
+### Nested Schema for `spec.receivers.telegram_configs.http_config.oauth2.tls_config.ca.config_map`
+
+Required:
+
+- `key` (String) The key to select.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
+
+
+
+### Nested Schema for `spec.receivers.telegram_configs.http_config.oauth2.tls_config.ca.secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
+
+### Nested Schema for `spec.receivers.telegram_configs.http_config.oauth2.tls_config.cert`
+
+Optional:
+
+- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--telegram_configs--http_config--oauth2--tls_config--cert--config_map))
+- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--telegram_configs--http_config--oauth2--tls_config--cert--secret))
+
+
+### Nested Schema for `spec.receivers.telegram_configs.http_config.oauth2.tls_config.cert.config_map`
+
+Required:
+
+- `key` (String) The key to select.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
+
+
+
+### Nested Schema for `spec.receivers.telegram_configs.http_config.oauth2.tls_config.cert.secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
+
+### Nested Schema for `spec.receivers.telegram_configs.http_config.oauth2.tls_config.key_secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
### Nested Schema for `spec.receivers.telegram_configs.http_config.tls_config`
@@ -2769,22 +3585,136 @@ Optional:
- `optional` (Boolean) Specify whether the Secret or its key must be defined
-
-### Nested Schema for `spec.receivers.victorops_configs.http_config.basic_auth.username`
+
+### Nested Schema for `spec.receivers.victorops_configs.http_config.basic_auth.username`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
+
+### Nested Schema for `spec.receivers.victorops_configs.http_config.bearer_token_secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
+### Nested Schema for `spec.receivers.victorops_configs.http_config.oauth2`
+
+Required:
+
+- `client_id` (Attributes) 'clientId' specifies a key of a Secret or ConfigMap containing theOAuth2 client's ID. (see [below for nested schema](#nestedatt--spec--receivers--victorops_configs--http_config--oauth2--client_id))
+- `client_secret` (Attributes) 'clientSecret' specifies a key of a Secret containing the OAuth2client's secret. (see [below for nested schema](#nestedatt--spec--receivers--victorops_configs--http_config--oauth2--client_secret))
+- `token_url` (String) 'tokenURL' configures the URL to fetch the token from.
+
+Optional:
+
+- `endpoint_params` (Map of String) 'endpointParams' configures the HTTP parameters to append to the tokenURL.
+- `no_proxy` (String) 'noProxy' is a comma-separated string that can contain IPs, CIDR notation, domain namesthat should be excluded from proxying. IP and domain names cancontain port numbers.It requires Prometheus >= v2.43.0.
+- `proxy_connect_header` (Map of String) ProxyConnectHeader optionally specifies headers to send toproxies during CONNECT requests.It requires Prometheus >= v2.43.0.
+- `proxy_from_environment` (Boolean) Whether to use the proxy configuration defined by environment variables (HTTP_PROXY, HTTPS_PROXY, and NO_PROXY).If unset, Prometheus uses its default value.It requires Prometheus >= v2.43.0.
+- `proxy_url` (String) 'proxyURL' defines the HTTP proxy server to use.It requires Prometheus >= v2.43.0.
+- `scopes` (List of String) 'scopes' defines the OAuth2 scopes used for the token request.
+- `tls_config` (Attributes) TLS configuration to use when connecting to the OAuth2 server.It requires Prometheus >= v2.43.0. (see [below for nested schema](#nestedatt--spec--receivers--victorops_configs--http_config--oauth2--tls_config))
+
+
+### Nested Schema for `spec.receivers.victorops_configs.http_config.oauth2.client_id`
+
+Optional:
+
+- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--victorops_configs--http_config--oauth2--client_id--config_map))
+- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--victorops_configs--http_config--oauth2--client_id--secret))
+
+
+### Nested Schema for `spec.receivers.victorops_configs.http_config.oauth2.client_id.config_map`
+
+Required:
+
+- `key` (String) The key to select.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
+
+
+
+### Nested Schema for `spec.receivers.victorops_configs.http_config.oauth2.client_id.secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
+
+### Nested Schema for `spec.receivers.victorops_configs.http_config.oauth2.client_secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
+### Nested Schema for `spec.receivers.victorops_configs.http_config.oauth2.tls_config`
+
+Optional:
+
+- `ca` (Attributes) Certificate authority used when verifying server certificates. (see [below for nested schema](#nestedatt--spec--receivers--victorops_configs--http_config--oauth2--tls_config--ca))
+- `cert` (Attributes) Client certificate to present when doing client-authentication. (see [below for nested schema](#nestedatt--spec--receivers--victorops_configs--http_config--oauth2--tls_config--cert))
+- `insecure_skip_verify` (Boolean) Disable target certificate validation.
+- `key_secret` (Attributes) Secret containing the client key file for the targets. (see [below for nested schema](#nestedatt--spec--receivers--victorops_configs--http_config--oauth2--tls_config--key_secret))
+- `max_version` (String) Maximum acceptable TLS version.It requires Prometheus >= v2.41.0.
+- `min_version` (String) Minimum acceptable TLS version.It requires Prometheus >= v2.35.0.
+- `server_name` (String) Used to verify the hostname for the targets.
+
+
+### Nested Schema for `spec.receivers.victorops_configs.http_config.oauth2.tls_config.ca`
+
+Optional:
+
+- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--victorops_configs--http_config--oauth2--tls_config--ca--config_map))
+- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--victorops_configs--http_config--oauth2--tls_config--ca--secret))
+
+
+### Nested Schema for `spec.receivers.victorops_configs.http_config.oauth2.tls_config.ca.config_map`
Required:
-- `key` (String) The key of the secret to select from. Must be a valid secret key.
+- `key` (String) The key to select.
Optional:
- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
-- `optional` (Boolean) Specify whether the Secret or its key must be defined
-
+- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
-
-### Nested Schema for `spec.receivers.victorops_configs.http_config.bearer_token_secret`
+
+### Nested Schema for `spec.receivers.victorops_configs.http_config.oauth2.tls_config.ca.secret`
Required:
@@ -2796,30 +3726,17 @@ Optional:
- `optional` (Boolean) Specify whether the Secret or its key must be defined
-
-### Nested Schema for `spec.receivers.victorops_configs.http_config.oauth2`
-
-Required:
-
-- `client_id` (Attributes) 'clientId' specifies a key of a Secret or ConfigMap containing theOAuth2 client's ID. (see [below for nested schema](#nestedatt--spec--receivers--victorops_configs--http_config--oauth2--client_id))
-- `client_secret` (Attributes) 'clientSecret' specifies a key of a Secret containing the OAuth2client's secret. (see [below for nested schema](#nestedatt--spec--receivers--victorops_configs--http_config--oauth2--client_secret))
-- `token_url` (String) 'tokenURL' configures the URL to fetch the token from.
-
-Optional:
-
-- `endpoint_params` (Map of String) 'endpointParams' configures the HTTP parameters to append to the tokenURL.
-- `scopes` (List of String) 'scopes' defines the OAuth2 scopes used for the token request.
-
-### Nested Schema for `spec.receivers.victorops_configs.http_config.oauth2.client_id`
+
+### Nested Schema for `spec.receivers.victorops_configs.http_config.oauth2.tls_config.cert`
Optional:
-- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--victorops_configs--http_config--oauth2--client_id--config_map))
-- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--victorops_configs--http_config--oauth2--client_id--secret))
+- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--victorops_configs--http_config--oauth2--tls_config--cert--config_map))
+- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--victorops_configs--http_config--oauth2--tls_config--cert--secret))
-
-### Nested Schema for `spec.receivers.victorops_configs.http_config.oauth2.client_id.config_map`
+
+### Nested Schema for `spec.receivers.victorops_configs.http_config.oauth2.tls_config.cert.config_map`
Required:
@@ -2831,8 +3748,8 @@ Optional:
- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
-
-### Nested Schema for `spec.receivers.victorops_configs.http_config.oauth2.client_id.secret`
+
+### Nested Schema for `spec.receivers.victorops_configs.http_config.oauth2.tls_config.cert.secret`
Required:
@@ -2845,8 +3762,8 @@ Optional:
-
-### Nested Schema for `spec.receivers.victorops_configs.http_config.oauth2.client_secret`
+
+### Nested Schema for `spec.receivers.victorops_configs.http_config.oauth2.tls_config.key_secret`
Required:
@@ -2859,6 +3776,7 @@ Optional:
+
### Nested Schema for `spec.receivers.victorops_configs.http_config.tls_config`
@@ -3067,7 +3985,12 @@ Required:
Optional:
- `endpoint_params` (Map of String) 'endpointParams' configures the HTTP parameters to append to the tokenURL.
+- `no_proxy` (String) 'noProxy' is a comma-separated string that can contain IPs, CIDR notation, domain namesthat should be excluded from proxying. IP and domain names cancontain port numbers.It requires Prometheus >= v2.43.0.
+- `proxy_connect_header` (Map of String) ProxyConnectHeader optionally specifies headers to send toproxies during CONNECT requests.It requires Prometheus >= v2.43.0.
+- `proxy_from_environment` (Boolean) Whether to use the proxy configuration defined by environment variables (HTTP_PROXY, HTTPS_PROXY, and NO_PROXY).If unset, Prometheus uses its default value.It requires Prometheus >= v2.43.0.
+- `proxy_url` (String) 'proxyURL' defines the HTTP proxy server to use.It requires Prometheus >= v2.43.0.
- `scopes` (List of String) 'scopes' defines the OAuth2 scopes used for the token request.
+- `tls_config` (Attributes) TLS configuration to use when connecting to the OAuth2 server.It requires Prometheus >= v2.43.0. (see [below for nested schema](#nestedatt--spec--receivers--webex_configs--http_config--oauth2--tls_config))
### Nested Schema for `spec.receivers.webex_configs.http_config.oauth2.client_id`
@@ -3117,6 +4040,103 @@ Optional:
- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+### Nested Schema for `spec.receivers.webex_configs.http_config.oauth2.tls_config`
+
+Optional:
+
+- `ca` (Attributes) Certificate authority used when verifying server certificates. (see [below for nested schema](#nestedatt--spec--receivers--webex_configs--http_config--oauth2--tls_config--ca))
+- `cert` (Attributes) Client certificate to present when doing client-authentication. (see [below for nested schema](#nestedatt--spec--receivers--webex_configs--http_config--oauth2--tls_config--cert))
+- `insecure_skip_verify` (Boolean) Disable target certificate validation.
+- `key_secret` (Attributes) Secret containing the client key file for the targets. (see [below for nested schema](#nestedatt--spec--receivers--webex_configs--http_config--oauth2--tls_config--key_secret))
+- `max_version` (String) Maximum acceptable TLS version.It requires Prometheus >= v2.41.0.
+- `min_version` (String) Minimum acceptable TLS version.It requires Prometheus >= v2.35.0.
+- `server_name` (String) Used to verify the hostname for the targets.
+
+
+### Nested Schema for `spec.receivers.webex_configs.http_config.oauth2.tls_config.ca`
+
+Optional:
+
+- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--webex_configs--http_config--oauth2--tls_config--ca--config_map))
+- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--webex_configs--http_config--oauth2--tls_config--ca--secret))
+
+
+### Nested Schema for `spec.receivers.webex_configs.http_config.oauth2.tls_config.ca.config_map`
+
+Required:
+
+- `key` (String) The key to select.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
+
+
+
+### Nested Schema for `spec.receivers.webex_configs.http_config.oauth2.tls_config.ca.secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
+
+### Nested Schema for `spec.receivers.webex_configs.http_config.oauth2.tls_config.cert`
+
+Optional:
+
+- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--webex_configs--http_config--oauth2--tls_config--cert--config_map))
+- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--webex_configs--http_config--oauth2--tls_config--cert--secret))
+
+
+### Nested Schema for `spec.receivers.webex_configs.http_config.oauth2.tls_config.cert.config_map`
+
+Required:
+
+- `key` (String) The key to select.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
+
+
+
+### Nested Schema for `spec.receivers.webex_configs.http_config.oauth2.tls_config.cert.secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
+
+### Nested Schema for `spec.receivers.webex_configs.http_config.oauth2.tls_config.key_secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
### Nested Schema for `spec.receivers.webex_configs.http_config.tls_config`
@@ -3323,7 +4343,12 @@ Required:
Optional:
- `endpoint_params` (Map of String) 'endpointParams' configures the HTTP parameters to append to the tokenURL.
+- `no_proxy` (String) 'noProxy' is a comma-separated string that can contain IPs, CIDR notation, domain namesthat should be excluded from proxying. IP and domain names cancontain port numbers.It requires Prometheus >= v2.43.0.
+- `proxy_connect_header` (Map of String) ProxyConnectHeader optionally specifies headers to send toproxies during CONNECT requests.It requires Prometheus >= v2.43.0.
+- `proxy_from_environment` (Boolean) Whether to use the proxy configuration defined by environment variables (HTTP_PROXY, HTTPS_PROXY, and NO_PROXY).If unset, Prometheus uses its default value.It requires Prometheus >= v2.43.0.
+- `proxy_url` (String) 'proxyURL' defines the HTTP proxy server to use.It requires Prometheus >= v2.43.0.
- `scopes` (List of String) 'scopes' defines the OAuth2 scopes used for the token request.
+- `tls_config` (Attributes) TLS configuration to use when connecting to the OAuth2 server.It requires Prometheus >= v2.43.0. (see [below for nested schema](#nestedatt--spec--receivers--webhook_configs--http_config--oauth2--tls_config))
### Nested Schema for `spec.receivers.webhook_configs.http_config.oauth2.client_id`
@@ -3373,6 +4398,103 @@ Optional:
- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+### Nested Schema for `spec.receivers.webhook_configs.http_config.oauth2.tls_config`
+
+Optional:
+
+- `ca` (Attributes) Certificate authority used when verifying server certificates. (see [below for nested schema](#nestedatt--spec--receivers--webhook_configs--http_config--oauth2--tls_config--ca))
+- `cert` (Attributes) Client certificate to present when doing client-authentication. (see [below for nested schema](#nestedatt--spec--receivers--webhook_configs--http_config--oauth2--tls_config--cert))
+- `insecure_skip_verify` (Boolean) Disable target certificate validation.
+- `key_secret` (Attributes) Secret containing the client key file for the targets. (see [below for nested schema](#nestedatt--spec--receivers--webhook_configs--http_config--oauth2--tls_config--key_secret))
+- `max_version` (String) Maximum acceptable TLS version.It requires Prometheus >= v2.41.0.
+- `min_version` (String) Minimum acceptable TLS version.It requires Prometheus >= v2.35.0.
+- `server_name` (String) Used to verify the hostname for the targets.
+
+
+### Nested Schema for `spec.receivers.webhook_configs.http_config.oauth2.tls_config.ca`
+
+Optional:
+
+- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--webhook_configs--http_config--oauth2--tls_config--ca--config_map))
+- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--webhook_configs--http_config--oauth2--tls_config--ca--secret))
+
+
+### Nested Schema for `spec.receivers.webhook_configs.http_config.oauth2.tls_config.ca.config_map`
+
+Required:
+
+- `key` (String) The key to select.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
+
+
+
+### Nested Schema for `spec.receivers.webhook_configs.http_config.oauth2.tls_config.ca.secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
+
+### Nested Schema for `spec.receivers.webhook_configs.http_config.oauth2.tls_config.cert`
+
+Optional:
+
+- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--webhook_configs--http_config--oauth2--tls_config--cert--config_map))
+- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--webhook_configs--http_config--oauth2--tls_config--cert--secret))
+
+
+### Nested Schema for `spec.receivers.webhook_configs.http_config.oauth2.tls_config.cert.config_map`
+
+Required:
+
+- `key` (String) The key to select.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
+
+
+
+### Nested Schema for `spec.receivers.webhook_configs.http_config.oauth2.tls_config.cert.secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
+
+### Nested Schema for `spec.receivers.webhook_configs.http_config.oauth2.tls_config.key_secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
### Nested Schema for `spec.receivers.webhook_configs.http_config.tls_config`
@@ -3611,7 +4733,12 @@ Required:
Optional:
- `endpoint_params` (Map of String) 'endpointParams' configures the HTTP parameters to append to the tokenURL.
+- `no_proxy` (String) 'noProxy' is a comma-separated string that can contain IPs, CIDR notation, domain namesthat should be excluded from proxying. IP and domain names cancontain port numbers.It requires Prometheus >= v2.43.0.
+- `proxy_connect_header` (Map of String) ProxyConnectHeader optionally specifies headers to send toproxies during CONNECT requests.It requires Prometheus >= v2.43.0.
+- `proxy_from_environment` (Boolean) Whether to use the proxy configuration defined by environment variables (HTTP_PROXY, HTTPS_PROXY, and NO_PROXY).If unset, Prometheus uses its default value.It requires Prometheus >= v2.43.0.
+- `proxy_url` (String) 'proxyURL' defines the HTTP proxy server to use.It requires Prometheus >= v2.43.0.
- `scopes` (List of String) 'scopes' defines the OAuth2 scopes used for the token request.
+- `tls_config` (Attributes) TLS configuration to use when connecting to the OAuth2 server.It requires Prometheus >= v2.43.0. (see [below for nested schema](#nestedatt--spec--receivers--wechat_configs--http_config--oauth2--tls_config))
### Nested Schema for `spec.receivers.wechat_configs.http_config.oauth2.client_id`
@@ -3661,6 +4788,103 @@ Optional:
- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+### Nested Schema for `spec.receivers.wechat_configs.http_config.oauth2.tls_config`
+
+Optional:
+
+- `ca` (Attributes) Certificate authority used when verifying server certificates. (see [below for nested schema](#nestedatt--spec--receivers--wechat_configs--http_config--oauth2--tls_config--ca))
+- `cert` (Attributes) Client certificate to present when doing client-authentication. (see [below for nested schema](#nestedatt--spec--receivers--wechat_configs--http_config--oauth2--tls_config--cert))
+- `insecure_skip_verify` (Boolean) Disable target certificate validation.
+- `key_secret` (Attributes) Secret containing the client key file for the targets. (see [below for nested schema](#nestedatt--spec--receivers--wechat_configs--http_config--oauth2--tls_config--key_secret))
+- `max_version` (String) Maximum acceptable TLS version.It requires Prometheus >= v2.41.0.
+- `min_version` (String) Minimum acceptable TLS version.It requires Prometheus >= v2.35.0.
+- `server_name` (String) Used to verify the hostname for the targets.
+
+
+### Nested Schema for `spec.receivers.wechat_configs.http_config.oauth2.tls_config.ca`
+
+Optional:
+
+- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--wechat_configs--http_config--oauth2--tls_config--ca--config_map))
+- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--wechat_configs--http_config--oauth2--tls_config--ca--secret))
+
+
+### Nested Schema for `spec.receivers.wechat_configs.http_config.oauth2.tls_config.ca.config_map`
+
+Required:
+
+- `key` (String) The key to select.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
+
+
+
+### Nested Schema for `spec.receivers.wechat_configs.http_config.oauth2.tls_config.ca.secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
+
+### Nested Schema for `spec.receivers.wechat_configs.http_config.oauth2.tls_config.cert`
+
+Optional:
+
+- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--wechat_configs--http_config--oauth2--tls_config--cert--config_map))
+- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--wechat_configs--http_config--oauth2--tls_config--cert--secret))
+
+
+### Nested Schema for `spec.receivers.wechat_configs.http_config.oauth2.tls_config.cert.config_map`
+
+Required:
+
+- `key` (String) The key to select.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
+
+
+
+### Nested Schema for `spec.receivers.wechat_configs.http_config.oauth2.tls_config.cert.secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
+
+### Nested Schema for `spec.receivers.wechat_configs.http_config.oauth2.tls_config.key_secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
### Nested Schema for `spec.receivers.wechat_configs.http_config.tls_config`
diff --git a/docs/data-sources/monitoring_coreos_com_alertmanager_config_v1beta1_manifest.md b/docs/data-sources/monitoring_coreos_com_alertmanager_config_v1beta1_manifest.md
index c8dd488cf..226910406 100644
--- a/docs/data-sources/monitoring_coreos_com_alertmanager_config_v1beta1_manifest.md
+++ b/docs/data-sources/monitoring_coreos_com_alertmanager_config_v1beta1_manifest.md
@@ -232,7 +232,12 @@ Required:
Optional:
- `endpoint_params` (Map of String) 'endpointParams' configures the HTTP parameters to append to the tokenURL.
+- `no_proxy` (String) 'noProxy' is a comma-separated string that can contain IPs, CIDR notation, domain namesthat should be excluded from proxying. IP and domain names cancontain port numbers.It requires Prometheus >= v2.43.0.
+- `proxy_connect_header` (Map of String) ProxyConnectHeader optionally specifies headers to send toproxies during CONNECT requests.It requires Prometheus >= v2.43.0.
+- `proxy_from_environment` (Boolean) Whether to use the proxy configuration defined by environment variables (HTTP_PROXY, HTTPS_PROXY, and NO_PROXY).If unset, Prometheus uses its default value.It requires Prometheus >= v2.43.0.
+- `proxy_url` (String) 'proxyURL' defines the HTTP proxy server to use.It requires Prometheus >= v2.43.0.
- `scopes` (List of String) 'scopes' defines the OAuth2 scopes used for the token request.
+- `tls_config` (Attributes) TLS configuration to use when connecting to the OAuth2 server.It requires Prometheus >= v2.43.0. (see [below for nested schema](#nestedatt--spec--receivers--discord_configs--http_config--oauth2--tls_config))
### Nested Schema for `spec.receivers.discord_configs.http_config.oauth2.client_id`
@@ -282,6 +287,103 @@ Optional:
- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+### Nested Schema for `spec.receivers.discord_configs.http_config.oauth2.tls_config`
+
+Optional:
+
+- `ca` (Attributes) Certificate authority used when verifying server certificates. (see [below for nested schema](#nestedatt--spec--receivers--discord_configs--http_config--oauth2--tls_config--ca))
+- `cert` (Attributes) Client certificate to present when doing client-authentication. (see [below for nested schema](#nestedatt--spec--receivers--discord_configs--http_config--oauth2--tls_config--cert))
+- `insecure_skip_verify` (Boolean) Disable target certificate validation.
+- `key_secret` (Attributes) Secret containing the client key file for the targets. (see [below for nested schema](#nestedatt--spec--receivers--discord_configs--http_config--oauth2--tls_config--key_secret))
+- `max_version` (String) Maximum acceptable TLS version.It requires Prometheus >= v2.41.0.
+- `min_version` (String) Minimum acceptable TLS version.It requires Prometheus >= v2.35.0.
+- `server_name` (String) Used to verify the hostname for the targets.
+
+
+### Nested Schema for `spec.receivers.discord_configs.http_config.oauth2.tls_config.ca`
+
+Optional:
+
+- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--discord_configs--http_config--oauth2--tls_config--ca--config_map))
+- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--discord_configs--http_config--oauth2--tls_config--ca--secret))
+
+
+### Nested Schema for `spec.receivers.discord_configs.http_config.oauth2.tls_config.ca.config_map`
+
+Required:
+
+- `key` (String) The key to select.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
+
+
+
+### Nested Schema for `spec.receivers.discord_configs.http_config.oauth2.tls_config.ca.secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
+
+### Nested Schema for `spec.receivers.discord_configs.http_config.oauth2.tls_config.cert`
+
+Optional:
+
+- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--discord_configs--http_config--oauth2--tls_config--cert--config_map))
+- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--discord_configs--http_config--oauth2--tls_config--cert--secret))
+
+
+### Nested Schema for `spec.receivers.discord_configs.http_config.oauth2.tls_config.cert.config_map`
+
+Required:
+
+- `key` (String) The key to select.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
+
+
+
+### Nested Schema for `spec.receivers.discord_configs.http_config.oauth2.tls_config.cert.secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
+
+### Nested Schema for `spec.receivers.discord_configs.http_config.oauth2.tls_config.key_secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
### Nested Schema for `spec.receivers.discord_configs.http_config.tls_config`
@@ -646,7 +748,12 @@ Required:
Optional:
- `endpoint_params` (Map of String) 'endpointParams' configures the HTTP parameters to append to the tokenURL.
+- `no_proxy` (String) 'noProxy' is a comma-separated string that can contain IPs, CIDR notation, domain namesthat should be excluded from proxying. IP and domain names cancontain port numbers.It requires Prometheus >= v2.43.0.
+- `proxy_connect_header` (Map of String) ProxyConnectHeader optionally specifies headers to send toproxies during CONNECT requests.It requires Prometheus >= v2.43.0.
+- `proxy_from_environment` (Boolean) Whether to use the proxy configuration defined by environment variables (HTTP_PROXY, HTTPS_PROXY, and NO_PROXY).If unset, Prometheus uses its default value.It requires Prometheus >= v2.43.0.
+- `proxy_url` (String) 'proxyURL' defines the HTTP proxy server to use.It requires Prometheus >= v2.43.0.
- `scopes` (List of String) 'scopes' defines the OAuth2 scopes used for the token request.
+- `tls_config` (Attributes) TLS configuration to use when connecting to the OAuth2 server.It requires Prometheus >= v2.43.0. (see [below for nested schema](#nestedatt--spec--receivers--msteams_configs--http_config--oauth2--tls_config))
### Nested Schema for `spec.receivers.msteams_configs.http_config.oauth2.client_id`
@@ -696,6 +803,103 @@ Optional:
- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+### Nested Schema for `spec.receivers.msteams_configs.http_config.oauth2.tls_config`
+
+Optional:
+
+- `ca` (Attributes) Certificate authority used when verifying server certificates. (see [below for nested schema](#nestedatt--spec--receivers--msteams_configs--http_config--oauth2--tls_config--ca))
+- `cert` (Attributes) Client certificate to present when doing client-authentication. (see [below for nested schema](#nestedatt--spec--receivers--msteams_configs--http_config--oauth2--tls_config--cert))
+- `insecure_skip_verify` (Boolean) Disable target certificate validation.
+- `key_secret` (Attributes) Secret containing the client key file for the targets. (see [below for nested schema](#nestedatt--spec--receivers--msteams_configs--http_config--oauth2--tls_config--key_secret))
+- `max_version` (String) Maximum acceptable TLS version.It requires Prometheus >= v2.41.0.
+- `min_version` (String) Minimum acceptable TLS version.It requires Prometheus >= v2.35.0.
+- `server_name` (String) Used to verify the hostname for the targets.
+
+
+### Nested Schema for `spec.receivers.msteams_configs.http_config.oauth2.tls_config.ca`
+
+Optional:
+
+- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--msteams_configs--http_config--oauth2--tls_config--ca--config_map))
+- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--msteams_configs--http_config--oauth2--tls_config--ca--secret))
+
+
+### Nested Schema for `spec.receivers.msteams_configs.http_config.oauth2.tls_config.ca.config_map`
+
+Required:
+
+- `key` (String) The key to select.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
+
+
+
+### Nested Schema for `spec.receivers.msteams_configs.http_config.oauth2.tls_config.ca.secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
+
+### Nested Schema for `spec.receivers.msteams_configs.http_config.oauth2.tls_config.cert`
+
+Optional:
+
+- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--msteams_configs--http_config--oauth2--tls_config--cert--config_map))
+- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--msteams_configs--http_config--oauth2--tls_config--cert--secret))
+
+
+### Nested Schema for `spec.receivers.msteams_configs.http_config.oauth2.tls_config.cert.config_map`
+
+Required:
+
+- `key` (String) The key to select.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
+
+
+
+### Nested Schema for `spec.receivers.msteams_configs.http_config.oauth2.tls_config.cert.secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
+
+### Nested Schema for `spec.receivers.msteams_configs.http_config.oauth2.tls_config.key_secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
### Nested Schema for `spec.receivers.msteams_configs.http_config.tls_config`
@@ -925,7 +1129,12 @@ Required:
Optional:
- `endpoint_params` (Map of String) 'endpointParams' configures the HTTP parameters to append to the tokenURL.
+- `no_proxy` (String) 'noProxy' is a comma-separated string that can contain IPs, CIDR notation, domain namesthat should be excluded from proxying. IP and domain names cancontain port numbers.It requires Prometheus >= v2.43.0.
+- `proxy_connect_header` (Map of String) ProxyConnectHeader optionally specifies headers to send toproxies during CONNECT requests.It requires Prometheus >= v2.43.0.
+- `proxy_from_environment` (Boolean) Whether to use the proxy configuration defined by environment variables (HTTP_PROXY, HTTPS_PROXY, and NO_PROXY).If unset, Prometheus uses its default value.It requires Prometheus >= v2.43.0.
+- `proxy_url` (String) 'proxyURL' defines the HTTP proxy server to use.It requires Prometheus >= v2.43.0.
- `scopes` (List of String) 'scopes' defines the OAuth2 scopes used for the token request.
+- `tls_config` (Attributes) TLS configuration to use when connecting to the OAuth2 server.It requires Prometheus >= v2.43.0. (see [below for nested schema](#nestedatt--spec--receivers--opsgenie_configs--http_config--oauth2--tls_config))
### Nested Schema for `spec.receivers.opsgenie_configs.http_config.oauth2.client_id`
@@ -975,6 +1184,103 @@ Optional:
- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+### Nested Schema for `spec.receivers.opsgenie_configs.http_config.oauth2.tls_config`
+
+Optional:
+
+- `ca` (Attributes) Certificate authority used when verifying server certificates. (see [below for nested schema](#nestedatt--spec--receivers--opsgenie_configs--http_config--oauth2--tls_config--ca))
+- `cert` (Attributes) Client certificate to present when doing client-authentication. (see [below for nested schema](#nestedatt--spec--receivers--opsgenie_configs--http_config--oauth2--tls_config--cert))
+- `insecure_skip_verify` (Boolean) Disable target certificate validation.
+- `key_secret` (Attributes) Secret containing the client key file for the targets. (see [below for nested schema](#nestedatt--spec--receivers--opsgenie_configs--http_config--oauth2--tls_config--key_secret))
+- `max_version` (String) Maximum acceptable TLS version.It requires Prometheus >= v2.41.0.
+- `min_version` (String) Minimum acceptable TLS version.It requires Prometheus >= v2.35.0.
+- `server_name` (String) Used to verify the hostname for the targets.
+
+
+### Nested Schema for `spec.receivers.opsgenie_configs.http_config.oauth2.tls_config.ca`
+
+Optional:
+
+- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--opsgenie_configs--http_config--oauth2--tls_config--ca--config_map))
+- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--opsgenie_configs--http_config--oauth2--tls_config--ca--secret))
+
+
+### Nested Schema for `spec.receivers.opsgenie_configs.http_config.oauth2.tls_config.ca.config_map`
+
+Required:
+
+- `key` (String) The key to select.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
+
+
+
+### Nested Schema for `spec.receivers.opsgenie_configs.http_config.oauth2.tls_config.ca.secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
+
+### Nested Schema for `spec.receivers.opsgenie_configs.http_config.oauth2.tls_config.cert`
+
+Optional:
+
+- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--opsgenie_configs--http_config--oauth2--tls_config--cert--config_map))
+- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--opsgenie_configs--http_config--oauth2--tls_config--cert--secret))
+
+
+### Nested Schema for `spec.receivers.opsgenie_configs.http_config.oauth2.tls_config.cert.config_map`
+
+Required:
+
+- `key` (String) The key to select.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
+
+
+
+### Nested Schema for `spec.receivers.opsgenie_configs.http_config.oauth2.tls_config.cert.secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
+
+### Nested Schema for `spec.receivers.opsgenie_configs.http_config.oauth2.tls_config.key_secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
### Nested Schema for `spec.receivers.opsgenie_configs.http_config.tls_config`
@@ -1211,7 +1517,12 @@ Required:
Optional:
- `endpoint_params` (Map of String) 'endpointParams' configures the HTTP parameters to append to the tokenURL.
+- `no_proxy` (String) 'noProxy' is a comma-separated string that can contain IPs, CIDR notation, domain namesthat should be excluded from proxying. IP and domain names cancontain port numbers.It requires Prometheus >= v2.43.0.
+- `proxy_connect_header` (Map of String) ProxyConnectHeader optionally specifies headers to send toproxies during CONNECT requests.It requires Prometheus >= v2.43.0.
+- `proxy_from_environment` (Boolean) Whether to use the proxy configuration defined by environment variables (HTTP_PROXY, HTTPS_PROXY, and NO_PROXY).If unset, Prometheus uses its default value.It requires Prometheus >= v2.43.0.
+- `proxy_url` (String) 'proxyURL' defines the HTTP proxy server to use.It requires Prometheus >= v2.43.0.
- `scopes` (List of String) 'scopes' defines the OAuth2 scopes used for the token request.
+- `tls_config` (Attributes) TLS configuration to use when connecting to the OAuth2 server.It requires Prometheus >= v2.43.0. (see [below for nested schema](#nestedatt--spec--receivers--pagerduty_configs--http_config--oauth2--tls_config))
### Nested Schema for `spec.receivers.pagerduty_configs.http_config.oauth2.client_id`
@@ -1261,30 +1572,29 @@ Optional:
- `optional` (Boolean) Specify whether the Secret or its key must be defined
-
-
-### Nested Schema for `spec.receivers.pagerduty_configs.http_config.tls_config`
+
+### Nested Schema for `spec.receivers.pagerduty_configs.http_config.oauth2.tls_config`
Optional:
-- `ca` (Attributes) Certificate authority used when verifying server certificates. (see [below for nested schema](#nestedatt--spec--receivers--pagerduty_configs--http_config--tls_config--ca))
-- `cert` (Attributes) Client certificate to present when doing client-authentication. (see [below for nested schema](#nestedatt--spec--receivers--pagerduty_configs--http_config--tls_config--cert))
+- `ca` (Attributes) Certificate authority used when verifying server certificates. (see [below for nested schema](#nestedatt--spec--receivers--pagerduty_configs--http_config--oauth2--tls_config--ca))
+- `cert` (Attributes) Client certificate to present when doing client-authentication. (see [below for nested schema](#nestedatt--spec--receivers--pagerduty_configs--http_config--oauth2--tls_config--cert))
- `insecure_skip_verify` (Boolean) Disable target certificate validation.
-- `key_secret` (Attributes) Secret containing the client key file for the targets. (see [below for nested schema](#nestedatt--spec--receivers--pagerduty_configs--http_config--tls_config--key_secret))
+- `key_secret` (Attributes) Secret containing the client key file for the targets. (see [below for nested schema](#nestedatt--spec--receivers--pagerduty_configs--http_config--oauth2--tls_config--key_secret))
- `max_version` (String) Maximum acceptable TLS version.It requires Prometheus >= v2.41.0.
- `min_version` (String) Minimum acceptable TLS version.It requires Prometheus >= v2.35.0.
- `server_name` (String) Used to verify the hostname for the targets.
-
-### Nested Schema for `spec.receivers.pagerduty_configs.http_config.tls_config.ca`
+
+### Nested Schema for `spec.receivers.pagerduty_configs.http_config.oauth2.tls_config.ca`
Optional:
-- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--pagerduty_configs--http_config--tls_config--ca--config_map))
-- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--pagerduty_configs--http_config--tls_config--ca--secret))
+- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--pagerduty_configs--http_config--oauth2--tls_config--ca--config_map))
+- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--pagerduty_configs--http_config--oauth2--tls_config--ca--secret))
-
-### Nested Schema for `spec.receivers.pagerduty_configs.http_config.tls_config.ca.config_map`
+
+### Nested Schema for `spec.receivers.pagerduty_configs.http_config.oauth2.tls_config.ca.config_map`
Required:
@@ -1296,8 +1606,8 @@ Optional:
- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
-
-### Nested Schema for `spec.receivers.pagerduty_configs.http_config.tls_config.ca.secret`
+
+### Nested Schema for `spec.receivers.pagerduty_configs.http_config.oauth2.tls_config.ca.secret`
Required:
@@ -1310,16 +1620,16 @@ Optional:
-
-### Nested Schema for `spec.receivers.pagerduty_configs.http_config.tls_config.cert`
+
+### Nested Schema for `spec.receivers.pagerduty_configs.http_config.oauth2.tls_config.cert`
Optional:
-- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--pagerduty_configs--http_config--tls_config--cert--config_map))
-- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--pagerduty_configs--http_config--tls_config--cert--secret))
+- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--pagerduty_configs--http_config--oauth2--tls_config--cert--config_map))
+- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--pagerduty_configs--http_config--oauth2--tls_config--cert--secret))
-
-### Nested Schema for `spec.receivers.pagerduty_configs.http_config.tls_config.cert.config_map`
+
+### Nested Schema for `spec.receivers.pagerduty_configs.http_config.oauth2.tls_config.cert.config_map`
Required:
@@ -1331,8 +1641,8 @@ Optional:
- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
-
-### Nested Schema for `spec.receivers.pagerduty_configs.http_config.tls_config.cert.secret`
+
+### Nested Schema for `spec.receivers.pagerduty_configs.http_config.oauth2.tls_config.cert.secret`
Required:
@@ -1345,8 +1655,8 @@ Optional:
-
-### Nested Schema for `spec.receivers.pagerduty_configs.http_config.tls_config.key_secret`
+
+### Nested Schema for `spec.receivers.pagerduty_configs.http_config.oauth2.tls_config.key_secret`
Required:
@@ -1360,17 +1670,115 @@ Optional:
-
-### Nested Schema for `spec.receivers.pagerduty_configs.pager_duty_image_configs`
+
+### Nested Schema for `spec.receivers.pagerduty_configs.http_config.tls_config`
Optional:
-- `alt` (String) Alt is the optional alternative text for the image.
-- `href` (String) Optional URL; makes the image a clickable link.
-- `src` (String) Src of the image being attached to the incident
-
-
-
+- `ca` (Attributes) Certificate authority used when verifying server certificates. (see [below for nested schema](#nestedatt--spec--receivers--pagerduty_configs--http_config--tls_config--ca))
+- `cert` (Attributes) Client certificate to present when doing client-authentication. (see [below for nested schema](#nestedatt--spec--receivers--pagerduty_configs--http_config--tls_config--cert))
+- `insecure_skip_verify` (Boolean) Disable target certificate validation.
+- `key_secret` (Attributes) Secret containing the client key file for the targets. (see [below for nested schema](#nestedatt--spec--receivers--pagerduty_configs--http_config--tls_config--key_secret))
+- `max_version` (String) Maximum acceptable TLS version.It requires Prometheus >= v2.41.0.
+- `min_version` (String) Minimum acceptable TLS version.It requires Prometheus >= v2.35.0.
+- `server_name` (String) Used to verify the hostname for the targets.
+
+
+### Nested Schema for `spec.receivers.pagerduty_configs.http_config.tls_config.ca`
+
+Optional:
+
+- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--pagerduty_configs--http_config--tls_config--ca--config_map))
+- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--pagerduty_configs--http_config--tls_config--ca--secret))
+
+
+### Nested Schema for `spec.receivers.pagerduty_configs.http_config.tls_config.ca.config_map`
+
+Required:
+
+- `key` (String) The key to select.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
+
+
+
+### Nested Schema for `spec.receivers.pagerduty_configs.http_config.tls_config.ca.secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
+
+### Nested Schema for `spec.receivers.pagerduty_configs.http_config.tls_config.cert`
+
+Optional:
+
+- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--pagerduty_configs--http_config--tls_config--cert--config_map))
+- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--pagerduty_configs--http_config--tls_config--cert--secret))
+
+
+### Nested Schema for `spec.receivers.pagerduty_configs.http_config.tls_config.cert.config_map`
+
+Required:
+
+- `key` (String) The key to select.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
+
+
+
+### Nested Schema for `spec.receivers.pagerduty_configs.http_config.tls_config.cert.secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
+
+### Nested Schema for `spec.receivers.pagerduty_configs.http_config.tls_config.key_secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
+
+
+### Nested Schema for `spec.receivers.pagerduty_configs.pager_duty_image_configs`
+
+Optional:
+
+- `alt` (String) Alt is the optional alternative text for the image.
+- `href` (String) Optional URL; makes the image a clickable link.
+- `src` (String) Src of the image being attached to the incident
+
+
+
### Nested Schema for `spec.receivers.pagerduty_configs.pager_duty_link_configs`
Optional:
@@ -1512,7 +1920,12 @@ Required:
Optional:
- `endpoint_params` (Map of String) 'endpointParams' configures the HTTP parameters to append to the tokenURL.
+- `no_proxy` (String) 'noProxy' is a comma-separated string that can contain IPs, CIDR notation, domain namesthat should be excluded from proxying. IP and domain names cancontain port numbers.It requires Prometheus >= v2.43.0.
+- `proxy_connect_header` (Map of String) ProxyConnectHeader optionally specifies headers to send toproxies during CONNECT requests.It requires Prometheus >= v2.43.0.
+- `proxy_from_environment` (Boolean) Whether to use the proxy configuration defined by environment variables (HTTP_PROXY, HTTPS_PROXY, and NO_PROXY).If unset, Prometheus uses its default value.It requires Prometheus >= v2.43.0.
+- `proxy_url` (String) 'proxyURL' defines the HTTP proxy server to use.It requires Prometheus >= v2.43.0.
- `scopes` (List of String) 'scopes' defines the OAuth2 scopes used for the token request.
+- `tls_config` (Attributes) TLS configuration to use when connecting to the OAuth2 server.It requires Prometheus >= v2.43.0. (see [below for nested schema](#nestedatt--spec--receivers--pushover_configs--http_config--oauth2--tls_config))
### Nested Schema for `spec.receivers.pushover_configs.http_config.oauth2.client_id`
@@ -1562,6 +1975,103 @@ Optional:
- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+### Nested Schema for `spec.receivers.pushover_configs.http_config.oauth2.tls_config`
+
+Optional:
+
+- `ca` (Attributes) Certificate authority used when verifying server certificates. (see [below for nested schema](#nestedatt--spec--receivers--pushover_configs--http_config--oauth2--tls_config--ca))
+- `cert` (Attributes) Client certificate to present when doing client-authentication. (see [below for nested schema](#nestedatt--spec--receivers--pushover_configs--http_config--oauth2--tls_config--cert))
+- `insecure_skip_verify` (Boolean) Disable target certificate validation.
+- `key_secret` (Attributes) Secret containing the client key file for the targets. (see [below for nested schema](#nestedatt--spec--receivers--pushover_configs--http_config--oauth2--tls_config--key_secret))
+- `max_version` (String) Maximum acceptable TLS version.It requires Prometheus >= v2.41.0.
+- `min_version` (String) Minimum acceptable TLS version.It requires Prometheus >= v2.35.0.
+- `server_name` (String) Used to verify the hostname for the targets.
+
+
+### Nested Schema for `spec.receivers.pushover_configs.http_config.oauth2.tls_config.ca`
+
+Optional:
+
+- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--pushover_configs--http_config--oauth2--tls_config--ca--config_map))
+- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--pushover_configs--http_config--oauth2--tls_config--ca--secret))
+
+
+### Nested Schema for `spec.receivers.pushover_configs.http_config.oauth2.tls_config.ca.config_map`
+
+Required:
+
+- `key` (String) The key to select.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
+
+
+
+### Nested Schema for `spec.receivers.pushover_configs.http_config.oauth2.tls_config.ca.secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
+
+### Nested Schema for `spec.receivers.pushover_configs.http_config.oauth2.tls_config.cert`
+
+Optional:
+
+- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--pushover_configs--http_config--oauth2--tls_config--cert--config_map))
+- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--pushover_configs--http_config--oauth2--tls_config--cert--secret))
+
+
+### Nested Schema for `spec.receivers.pushover_configs.http_config.oauth2.tls_config.cert.config_map`
+
+Required:
+
+- `key` (String) The key to select.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
+
+
+
+### Nested Schema for `spec.receivers.pushover_configs.http_config.oauth2.tls_config.cert.secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
+
+### Nested Schema for `spec.receivers.pushover_configs.http_config.oauth2.tls_config.key_secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
### Nested Schema for `spec.receivers.pushover_configs.http_config.tls_config`
@@ -1852,7 +2362,12 @@ Required:
Optional:
- `endpoint_params` (Map of String) 'endpointParams' configures the HTTP parameters to append to the tokenURL.
+- `no_proxy` (String) 'noProxy' is a comma-separated string that can contain IPs, CIDR notation, domain namesthat should be excluded from proxying. IP and domain names cancontain port numbers.It requires Prometheus >= v2.43.0.
+- `proxy_connect_header` (Map of String) ProxyConnectHeader optionally specifies headers to send toproxies during CONNECT requests.It requires Prometheus >= v2.43.0.
+- `proxy_from_environment` (Boolean) Whether to use the proxy configuration defined by environment variables (HTTP_PROXY, HTTPS_PROXY, and NO_PROXY).If unset, Prometheus uses its default value.It requires Prometheus >= v2.43.0.
+- `proxy_url` (String) 'proxyURL' defines the HTTP proxy server to use.It requires Prometheus >= v2.43.0.
- `scopes` (List of String) 'scopes' defines the OAuth2 scopes used for the token request.
+- `tls_config` (Attributes) TLS configuration to use when connecting to the OAuth2 server.It requires Prometheus >= v2.43.0. (see [below for nested schema](#nestedatt--spec--receivers--slack_configs--http_config--oauth2--tls_config))
### Nested Schema for `spec.receivers.slack_configs.http_config.oauth2.client_id`
@@ -1902,6 +2417,103 @@ Optional:
- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+### Nested Schema for `spec.receivers.slack_configs.http_config.oauth2.tls_config`
+
+Optional:
+
+- `ca` (Attributes) Certificate authority used when verifying server certificates. (see [below for nested schema](#nestedatt--spec--receivers--slack_configs--http_config--oauth2--tls_config--ca))
+- `cert` (Attributes) Client certificate to present when doing client-authentication. (see [below for nested schema](#nestedatt--spec--receivers--slack_configs--http_config--oauth2--tls_config--cert))
+- `insecure_skip_verify` (Boolean) Disable target certificate validation.
+- `key_secret` (Attributes) Secret containing the client key file for the targets. (see [below for nested schema](#nestedatt--spec--receivers--slack_configs--http_config--oauth2--tls_config--key_secret))
+- `max_version` (String) Maximum acceptable TLS version.It requires Prometheus >= v2.41.0.
+- `min_version` (String) Minimum acceptable TLS version.It requires Prometheus >= v2.35.0.
+- `server_name` (String) Used to verify the hostname for the targets.
+
+
+### Nested Schema for `spec.receivers.slack_configs.http_config.oauth2.tls_config.ca`
+
+Optional:
+
+- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--slack_configs--http_config--oauth2--tls_config--ca--config_map))
+- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--slack_configs--http_config--oauth2--tls_config--ca--secret))
+
+
+### Nested Schema for `spec.receivers.slack_configs.http_config.oauth2.tls_config.ca.config_map`
+
+Required:
+
+- `key` (String) The key to select.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
+
+
+
+### Nested Schema for `spec.receivers.slack_configs.http_config.oauth2.tls_config.ca.secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
+
+### Nested Schema for `spec.receivers.slack_configs.http_config.oauth2.tls_config.cert`
+
+Optional:
+
+- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--slack_configs--http_config--oauth2--tls_config--cert--config_map))
+- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--slack_configs--http_config--oauth2--tls_config--cert--secret))
+
+
+### Nested Schema for `spec.receivers.slack_configs.http_config.oauth2.tls_config.cert.config_map`
+
+Required:
+
+- `key` (String) The key to select.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
+
+
+
+### Nested Schema for `spec.receivers.slack_configs.http_config.oauth2.tls_config.cert.secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
+
+### Nested Schema for `spec.receivers.slack_configs.http_config.oauth2.tls_config.key_secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
### Nested Schema for `spec.receivers.slack_configs.http_config.tls_config`
@@ -2109,7 +2721,12 @@ Required:
Optional:
- `endpoint_params` (Map of String) 'endpointParams' configures the HTTP parameters to append to the tokenURL.
+- `no_proxy` (String) 'noProxy' is a comma-separated string that can contain IPs, CIDR notation, domain namesthat should be excluded from proxying. IP and domain names cancontain port numbers.It requires Prometheus >= v2.43.0.
+- `proxy_connect_header` (Map of String) ProxyConnectHeader optionally specifies headers to send toproxies during CONNECT requests.It requires Prometheus >= v2.43.0.
+- `proxy_from_environment` (Boolean) Whether to use the proxy configuration defined by environment variables (HTTP_PROXY, HTTPS_PROXY, and NO_PROXY).If unset, Prometheus uses its default value.It requires Prometheus >= v2.43.0.
+- `proxy_url` (String) 'proxyURL' defines the HTTP proxy server to use.It requires Prometheus >= v2.43.0.
- `scopes` (List of String) 'scopes' defines the OAuth2 scopes used for the token request.
+- `tls_config` (Attributes) TLS configuration to use when connecting to the OAuth2 server.It requires Prometheus >= v2.43.0. (see [below for nested schema](#nestedatt--spec--receivers--sns_configs--http_config--oauth2--tls_config))
### Nested Schema for `spec.receivers.sns_configs.http_config.oauth2.client_id`
@@ -2159,6 +2776,103 @@ Optional:
- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+### Nested Schema for `spec.receivers.sns_configs.http_config.oauth2.tls_config`
+
+Optional:
+
+- `ca` (Attributes) Certificate authority used when verifying server certificates. (see [below for nested schema](#nestedatt--spec--receivers--sns_configs--http_config--oauth2--tls_config--ca))
+- `cert` (Attributes) Client certificate to present when doing client-authentication. (see [below for nested schema](#nestedatt--spec--receivers--sns_configs--http_config--oauth2--tls_config--cert))
+- `insecure_skip_verify` (Boolean) Disable target certificate validation.
+- `key_secret` (Attributes) Secret containing the client key file for the targets. (see [below for nested schema](#nestedatt--spec--receivers--sns_configs--http_config--oauth2--tls_config--key_secret))
+- `max_version` (String) Maximum acceptable TLS version.It requires Prometheus >= v2.41.0.
+- `min_version` (String) Minimum acceptable TLS version.It requires Prometheus >= v2.35.0.
+- `server_name` (String) Used to verify the hostname for the targets.
+
+
+### Nested Schema for `spec.receivers.sns_configs.http_config.oauth2.tls_config.ca`
+
+Optional:
+
+- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--sns_configs--http_config--oauth2--tls_config--ca--config_map))
+- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--sns_configs--http_config--oauth2--tls_config--ca--secret))
+
+
+### Nested Schema for `spec.receivers.sns_configs.http_config.oauth2.tls_config.ca.config_map`
+
+Required:
+
+- `key` (String) The key to select.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
+
+
+
+### Nested Schema for `spec.receivers.sns_configs.http_config.oauth2.tls_config.ca.secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
+
+### Nested Schema for `spec.receivers.sns_configs.http_config.oauth2.tls_config.cert`
+
+Optional:
+
+- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--sns_configs--http_config--oauth2--tls_config--cert--config_map))
+- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--sns_configs--http_config--oauth2--tls_config--cert--secret))
+
+
+### Nested Schema for `spec.receivers.sns_configs.http_config.oauth2.tls_config.cert.config_map`
+
+Required:
+
+- `key` (String) The key to select.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
+
+
+
+### Nested Schema for `spec.receivers.sns_configs.http_config.oauth2.tls_config.cert.secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
+
+### Nested Schema for `spec.receivers.sns_configs.http_config.oauth2.tls_config.key_secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
### Nested Schema for `spec.receivers.sns_configs.http_config.tls_config`
@@ -2412,7 +3126,12 @@ Required:
Optional:
- `endpoint_params` (Map of String) 'endpointParams' configures the HTTP parameters to append to the tokenURL.
+- `no_proxy` (String) 'noProxy' is a comma-separated string that can contain IPs, CIDR notation, domain namesthat should be excluded from proxying. IP and domain names cancontain port numbers.It requires Prometheus >= v2.43.0.
+- `proxy_connect_header` (Map of String) ProxyConnectHeader optionally specifies headers to send toproxies during CONNECT requests.It requires Prometheus >= v2.43.0.
+- `proxy_from_environment` (Boolean) Whether to use the proxy configuration defined by environment variables (HTTP_PROXY, HTTPS_PROXY, and NO_PROXY).If unset, Prometheus uses its default value.It requires Prometheus >= v2.43.0.
+- `proxy_url` (String) 'proxyURL' defines the HTTP proxy server to use.It requires Prometheus >= v2.43.0.
- `scopes` (List of String) 'scopes' defines the OAuth2 scopes used for the token request.
+- `tls_config` (Attributes) TLS configuration to use when connecting to the OAuth2 server.It requires Prometheus >= v2.43.0. (see [below for nested schema](#nestedatt--spec--receivers--telegram_configs--http_config--oauth2--tls_config))
### Nested Schema for `spec.receivers.telegram_configs.http_config.oauth2.client_id`
@@ -2462,6 +3181,103 @@ Optional:
- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+### Nested Schema for `spec.receivers.telegram_configs.http_config.oauth2.tls_config`
+
+Optional:
+
+- `ca` (Attributes) Certificate authority used when verifying server certificates. (see [below for nested schema](#nestedatt--spec--receivers--telegram_configs--http_config--oauth2--tls_config--ca))
+- `cert` (Attributes) Client certificate to present when doing client-authentication. (see [below for nested schema](#nestedatt--spec--receivers--telegram_configs--http_config--oauth2--tls_config--cert))
+- `insecure_skip_verify` (Boolean) Disable target certificate validation.
+- `key_secret` (Attributes) Secret containing the client key file for the targets. (see [below for nested schema](#nestedatt--spec--receivers--telegram_configs--http_config--oauth2--tls_config--key_secret))
+- `max_version` (String) Maximum acceptable TLS version.It requires Prometheus >= v2.41.0.
+- `min_version` (String) Minimum acceptable TLS version.It requires Prometheus >= v2.35.0.
+- `server_name` (String) Used to verify the hostname for the targets.
+
+
+### Nested Schema for `spec.receivers.telegram_configs.http_config.oauth2.tls_config.ca`
+
+Optional:
+
+- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--telegram_configs--http_config--oauth2--tls_config--ca--config_map))
+- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--telegram_configs--http_config--oauth2--tls_config--ca--secret))
+
+
+### Nested Schema for `spec.receivers.telegram_configs.http_config.oauth2.tls_config.ca.config_map`
+
+Required:
+
+- `key` (String) The key to select.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
+
+
+
+### Nested Schema for `spec.receivers.telegram_configs.http_config.oauth2.tls_config.ca.secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
+
+### Nested Schema for `spec.receivers.telegram_configs.http_config.oauth2.tls_config.cert`
+
+Optional:
+
+- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--telegram_configs--http_config--oauth2--tls_config--cert--config_map))
+- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--telegram_configs--http_config--oauth2--tls_config--cert--secret))
+
+
+### Nested Schema for `spec.receivers.telegram_configs.http_config.oauth2.tls_config.cert.config_map`
+
+Required:
+
+- `key` (String) The key to select.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
+
+
+
+### Nested Schema for `spec.receivers.telegram_configs.http_config.oauth2.tls_config.cert.secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
+
+### Nested Schema for `spec.receivers.telegram_configs.http_config.oauth2.tls_config.key_secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
### Nested Schema for `spec.receivers.telegram_configs.http_config.tls_config`
@@ -2657,48 +3473,149 @@ Optional:
Required:
-- `key` (String) The key of the secret to select from. Must be a valid secret key.
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
+
+### Nested Schema for `spec.receivers.victorops_configs.http_config.bearer_token_secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+- `name` (String) The name of the secret in the object's namespace to select from.
+
+
+
+### Nested Schema for `spec.receivers.victorops_configs.http_config.oauth2`
+
+Required:
+
+- `client_id` (Attributes) 'clientId' specifies a key of a Secret or ConfigMap containing theOAuth2 client's ID. (see [below for nested schema](#nestedatt--spec--receivers--victorops_configs--http_config--oauth2--client_id))
+- `client_secret` (Attributes) 'clientSecret' specifies a key of a Secret containing the OAuth2client's secret. (see [below for nested schema](#nestedatt--spec--receivers--victorops_configs--http_config--oauth2--client_secret))
+- `token_url` (String) 'tokenURL' configures the URL to fetch the token from.
+
+Optional:
+
+- `endpoint_params` (Map of String) 'endpointParams' configures the HTTP parameters to append to the tokenURL.
+- `no_proxy` (String) 'noProxy' is a comma-separated string that can contain IPs, CIDR notation, domain namesthat should be excluded from proxying. IP and domain names cancontain port numbers.It requires Prometheus >= v2.43.0.
+- `proxy_connect_header` (Map of String) ProxyConnectHeader optionally specifies headers to send toproxies during CONNECT requests.It requires Prometheus >= v2.43.0.
+- `proxy_from_environment` (Boolean) Whether to use the proxy configuration defined by environment variables (HTTP_PROXY, HTTPS_PROXY, and NO_PROXY).If unset, Prometheus uses its default value.It requires Prometheus >= v2.43.0.
+- `proxy_url` (String) 'proxyURL' defines the HTTP proxy server to use.It requires Prometheus >= v2.43.0.
+- `scopes` (List of String) 'scopes' defines the OAuth2 scopes used for the token request.
+- `tls_config` (Attributes) TLS configuration to use when connecting to the OAuth2 server.It requires Prometheus >= v2.43.0. (see [below for nested schema](#nestedatt--spec--receivers--victorops_configs--http_config--oauth2--tls_config))
+
+
+### Nested Schema for `spec.receivers.victorops_configs.http_config.oauth2.client_id`
+
+Optional:
+
+- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--victorops_configs--http_config--oauth2--client_id--config_map))
+- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--victorops_configs--http_config--oauth2--client_id--secret))
+
+
+### Nested Schema for `spec.receivers.victorops_configs.http_config.oauth2.client_id.config_map`
+
+Required:
+
+- `key` (String) The key to select.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
+
+
+
+### Nested Schema for `spec.receivers.victorops_configs.http_config.oauth2.client_id.secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
+
+### Nested Schema for `spec.receivers.victorops_configs.http_config.oauth2.client_secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
+### Nested Schema for `spec.receivers.victorops_configs.http_config.oauth2.tls_config`
+
+Optional:
+
+- `ca` (Attributes) Certificate authority used when verifying server certificates. (see [below for nested schema](#nestedatt--spec--receivers--victorops_configs--http_config--oauth2--tls_config--ca))
+- `cert` (Attributes) Client certificate to present when doing client-authentication. (see [below for nested schema](#nestedatt--spec--receivers--victorops_configs--http_config--oauth2--tls_config--cert))
+- `insecure_skip_verify` (Boolean) Disable target certificate validation.
+- `key_secret` (Attributes) Secret containing the client key file for the targets. (see [below for nested schema](#nestedatt--spec--receivers--victorops_configs--http_config--oauth2--tls_config--key_secret))
+- `max_version` (String) Maximum acceptable TLS version.It requires Prometheus >= v2.41.0.
+- `min_version` (String) Minimum acceptable TLS version.It requires Prometheus >= v2.35.0.
+- `server_name` (String) Used to verify the hostname for the targets.
+
+
+### Nested Schema for `spec.receivers.victorops_configs.http_config.oauth2.tls_config.ca`
+
+Optional:
+
+- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--victorops_configs--http_config--oauth2--tls_config--ca--config_map))
+- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--victorops_configs--http_config--oauth2--tls_config--ca--secret))
+
+
+### Nested Schema for `spec.receivers.victorops_configs.http_config.oauth2.tls_config.ca.config_map`
+
+Required:
+
+- `key` (String) The key to select.
Optional:
- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
-- `optional` (Boolean) Specify whether the Secret or its key must be defined
-
+- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
-
-### Nested Schema for `spec.receivers.victorops_configs.http_config.bearer_token_secret`
+
+### Nested Schema for `spec.receivers.victorops_configs.http_config.oauth2.tls_config.ca.secret`
Required:
- `key` (String) The key of the secret to select from. Must be a valid secret key.
-- `name` (String) The name of the secret in the object's namespace to select from.
-
-
-
-### Nested Schema for `spec.receivers.victorops_configs.http_config.oauth2`
-Required:
+Optional:
-- `client_id` (Attributes) 'clientId' specifies a key of a Secret or ConfigMap containing theOAuth2 client's ID. (see [below for nested schema](#nestedatt--spec--receivers--victorops_configs--http_config--oauth2--client_id))
-- `client_secret` (Attributes) 'clientSecret' specifies a key of a Secret containing the OAuth2client's secret. (see [below for nested schema](#nestedatt--spec--receivers--victorops_configs--http_config--oauth2--client_secret))
-- `token_url` (String) 'tokenURL' configures the URL to fetch the token from.
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
-Optional:
-- `endpoint_params` (Map of String) 'endpointParams' configures the HTTP parameters to append to the tokenURL.
-- `scopes` (List of String) 'scopes' defines the OAuth2 scopes used for the token request.
-
-### Nested Schema for `spec.receivers.victorops_configs.http_config.oauth2.client_id`
+
+### Nested Schema for `spec.receivers.victorops_configs.http_config.oauth2.tls_config.cert`
Optional:
-- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--victorops_configs--http_config--oauth2--client_id--config_map))
-- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--victorops_configs--http_config--oauth2--client_id--secret))
+- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--victorops_configs--http_config--oauth2--tls_config--cert--config_map))
+- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--victorops_configs--http_config--oauth2--tls_config--cert--secret))
-
-### Nested Schema for `spec.receivers.victorops_configs.http_config.oauth2.client_id.config_map`
+
+### Nested Schema for `spec.receivers.victorops_configs.http_config.oauth2.tls_config.cert.config_map`
Required:
@@ -2710,8 +3627,8 @@ Optional:
- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
-
-### Nested Schema for `spec.receivers.victorops_configs.http_config.oauth2.client_id.secret`
+
+### Nested Schema for `spec.receivers.victorops_configs.http_config.oauth2.tls_config.cert.secret`
Required:
@@ -2724,8 +3641,8 @@ Optional:
-
-### Nested Schema for `spec.receivers.victorops_configs.http_config.oauth2.client_secret`
+
+### Nested Schema for `spec.receivers.victorops_configs.http_config.oauth2.tls_config.key_secret`
Required:
@@ -2738,6 +3655,7 @@ Optional:
+
### Nested Schema for `spec.receivers.victorops_configs.http_config.tls_config`
@@ -2942,7 +3860,12 @@ Required:
Optional:
- `endpoint_params` (Map of String) 'endpointParams' configures the HTTP parameters to append to the tokenURL.
+- `no_proxy` (String) 'noProxy' is a comma-separated string that can contain IPs, CIDR notation, domain namesthat should be excluded from proxying. IP and domain names cancontain port numbers.It requires Prometheus >= v2.43.0.
+- `proxy_connect_header` (Map of String) ProxyConnectHeader optionally specifies headers to send toproxies during CONNECT requests.It requires Prometheus >= v2.43.0.
+- `proxy_from_environment` (Boolean) Whether to use the proxy configuration defined by environment variables (HTTP_PROXY, HTTPS_PROXY, and NO_PROXY).If unset, Prometheus uses its default value.It requires Prometheus >= v2.43.0.
+- `proxy_url` (String) 'proxyURL' defines the HTTP proxy server to use.It requires Prometheus >= v2.43.0.
- `scopes` (List of String) 'scopes' defines the OAuth2 scopes used for the token request.
+- `tls_config` (Attributes) TLS configuration to use when connecting to the OAuth2 server.It requires Prometheus >= v2.43.0. (see [below for nested schema](#nestedatt--spec--receivers--webex_configs--http_config--oauth2--tls_config))
### Nested Schema for `spec.receivers.webex_configs.http_config.oauth2.client_id`
@@ -2992,6 +3915,103 @@ Optional:
- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+### Nested Schema for `spec.receivers.webex_configs.http_config.oauth2.tls_config`
+
+Optional:
+
+- `ca` (Attributes) Certificate authority used when verifying server certificates. (see [below for nested schema](#nestedatt--spec--receivers--webex_configs--http_config--oauth2--tls_config--ca))
+- `cert` (Attributes) Client certificate to present when doing client-authentication. (see [below for nested schema](#nestedatt--spec--receivers--webex_configs--http_config--oauth2--tls_config--cert))
+- `insecure_skip_verify` (Boolean) Disable target certificate validation.
+- `key_secret` (Attributes) Secret containing the client key file for the targets. (see [below for nested schema](#nestedatt--spec--receivers--webex_configs--http_config--oauth2--tls_config--key_secret))
+- `max_version` (String) Maximum acceptable TLS version.It requires Prometheus >= v2.41.0.
+- `min_version` (String) Minimum acceptable TLS version.It requires Prometheus >= v2.35.0.
+- `server_name` (String) Used to verify the hostname for the targets.
+
+
+### Nested Schema for `spec.receivers.webex_configs.http_config.oauth2.tls_config.ca`
+
+Optional:
+
+- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--webex_configs--http_config--oauth2--tls_config--ca--config_map))
+- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--webex_configs--http_config--oauth2--tls_config--ca--secret))
+
+
+### Nested Schema for `spec.receivers.webex_configs.http_config.oauth2.tls_config.ca.config_map`
+
+Required:
+
+- `key` (String) The key to select.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
+
+
+
+### Nested Schema for `spec.receivers.webex_configs.http_config.oauth2.tls_config.ca.secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
+
+### Nested Schema for `spec.receivers.webex_configs.http_config.oauth2.tls_config.cert`
+
+Optional:
+
+- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--webex_configs--http_config--oauth2--tls_config--cert--config_map))
+- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--webex_configs--http_config--oauth2--tls_config--cert--secret))
+
+
+### Nested Schema for `spec.receivers.webex_configs.http_config.oauth2.tls_config.cert.config_map`
+
+Required:
+
+- `key` (String) The key to select.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
+
+
+
+### Nested Schema for `spec.receivers.webex_configs.http_config.oauth2.tls_config.cert.secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
+
+### Nested Schema for `spec.receivers.webex_configs.http_config.oauth2.tls_config.key_secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
### Nested Schema for `spec.receivers.webex_configs.http_config.tls_config`
@@ -3194,7 +4214,12 @@ Required:
Optional:
- `endpoint_params` (Map of String) 'endpointParams' configures the HTTP parameters to append to the tokenURL.
+- `no_proxy` (String) 'noProxy' is a comma-separated string that can contain IPs, CIDR notation, domain namesthat should be excluded from proxying. IP and domain names cancontain port numbers.It requires Prometheus >= v2.43.0.
+- `proxy_connect_header` (Map of String) ProxyConnectHeader optionally specifies headers to send toproxies during CONNECT requests.It requires Prometheus >= v2.43.0.
+- `proxy_from_environment` (Boolean) Whether to use the proxy configuration defined by environment variables (HTTP_PROXY, HTTPS_PROXY, and NO_PROXY).If unset, Prometheus uses its default value.It requires Prometheus >= v2.43.0.
+- `proxy_url` (String) 'proxyURL' defines the HTTP proxy server to use.It requires Prometheus >= v2.43.0.
- `scopes` (List of String) 'scopes' defines the OAuth2 scopes used for the token request.
+- `tls_config` (Attributes) TLS configuration to use when connecting to the OAuth2 server.It requires Prometheus >= v2.43.0. (see [below for nested schema](#nestedatt--spec--receivers--webhook_configs--http_config--oauth2--tls_config))
### Nested Schema for `spec.receivers.webhook_configs.http_config.oauth2.client_id`
@@ -3244,6 +4269,103 @@ Optional:
- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+### Nested Schema for `spec.receivers.webhook_configs.http_config.oauth2.tls_config`
+
+Optional:
+
+- `ca` (Attributes) Certificate authority used when verifying server certificates. (see [below for nested schema](#nestedatt--spec--receivers--webhook_configs--http_config--oauth2--tls_config--ca))
+- `cert` (Attributes) Client certificate to present when doing client-authentication. (see [below for nested schema](#nestedatt--spec--receivers--webhook_configs--http_config--oauth2--tls_config--cert))
+- `insecure_skip_verify` (Boolean) Disable target certificate validation.
+- `key_secret` (Attributes) Secret containing the client key file for the targets. (see [below for nested schema](#nestedatt--spec--receivers--webhook_configs--http_config--oauth2--tls_config--key_secret))
+- `max_version` (String) Maximum acceptable TLS version.It requires Prometheus >= v2.41.0.
+- `min_version` (String) Minimum acceptable TLS version.It requires Prometheus >= v2.35.0.
+- `server_name` (String) Used to verify the hostname for the targets.
+
+
+### Nested Schema for `spec.receivers.webhook_configs.http_config.oauth2.tls_config.ca`
+
+Optional:
+
+- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--webhook_configs--http_config--oauth2--tls_config--ca--config_map))
+- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--webhook_configs--http_config--oauth2--tls_config--ca--secret))
+
+
+### Nested Schema for `spec.receivers.webhook_configs.http_config.oauth2.tls_config.ca.config_map`
+
+Required:
+
+- `key` (String) The key to select.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
+
+
+
+### Nested Schema for `spec.receivers.webhook_configs.http_config.oauth2.tls_config.ca.secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
+
+### Nested Schema for `spec.receivers.webhook_configs.http_config.oauth2.tls_config.cert`
+
+Optional:
+
+- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--webhook_configs--http_config--oauth2--tls_config--cert--config_map))
+- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--webhook_configs--http_config--oauth2--tls_config--cert--secret))
+
+
+### Nested Schema for `spec.receivers.webhook_configs.http_config.oauth2.tls_config.cert.config_map`
+
+Required:
+
+- `key` (String) The key to select.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
+
+
+
+### Nested Schema for `spec.receivers.webhook_configs.http_config.oauth2.tls_config.cert.secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
+
+### Nested Schema for `spec.receivers.webhook_configs.http_config.oauth2.tls_config.key_secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
### Nested Schema for `spec.receivers.webhook_configs.http_config.tls_config`
@@ -3470,7 +4592,12 @@ Required:
Optional:
- `endpoint_params` (Map of String) 'endpointParams' configures the HTTP parameters to append to the tokenURL.
+- `no_proxy` (String) 'noProxy' is a comma-separated string that can contain IPs, CIDR notation, domain namesthat should be excluded from proxying. IP and domain names cancontain port numbers.It requires Prometheus >= v2.43.0.
+- `proxy_connect_header` (Map of String) ProxyConnectHeader optionally specifies headers to send toproxies during CONNECT requests.It requires Prometheus >= v2.43.0.
+- `proxy_from_environment` (Boolean) Whether to use the proxy configuration defined by environment variables (HTTP_PROXY, HTTPS_PROXY, and NO_PROXY).If unset, Prometheus uses its default value.It requires Prometheus >= v2.43.0.
+- `proxy_url` (String) 'proxyURL' defines the HTTP proxy server to use.It requires Prometheus >= v2.43.0.
- `scopes` (List of String) 'scopes' defines the OAuth2 scopes used for the token request.
+- `tls_config` (Attributes) TLS configuration to use when connecting to the OAuth2 server.It requires Prometheus >= v2.43.0. (see [below for nested schema](#nestedatt--spec--receivers--wechat_configs--http_config--oauth2--tls_config))
### Nested Schema for `spec.receivers.wechat_configs.http_config.oauth2.client_id`
@@ -3520,6 +4647,103 @@ Optional:
- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+### Nested Schema for `spec.receivers.wechat_configs.http_config.oauth2.tls_config`
+
+Optional:
+
+- `ca` (Attributes) Certificate authority used when verifying server certificates. (see [below for nested schema](#nestedatt--spec--receivers--wechat_configs--http_config--oauth2--tls_config--ca))
+- `cert` (Attributes) Client certificate to present when doing client-authentication. (see [below for nested schema](#nestedatt--spec--receivers--wechat_configs--http_config--oauth2--tls_config--cert))
+- `insecure_skip_verify` (Boolean) Disable target certificate validation.
+- `key_secret` (Attributes) Secret containing the client key file for the targets. (see [below for nested schema](#nestedatt--spec--receivers--wechat_configs--http_config--oauth2--tls_config--key_secret))
+- `max_version` (String) Maximum acceptable TLS version.It requires Prometheus >= v2.41.0.
+- `min_version` (String) Minimum acceptable TLS version.It requires Prometheus >= v2.35.0.
+- `server_name` (String) Used to verify the hostname for the targets.
+
+
+### Nested Schema for `spec.receivers.wechat_configs.http_config.oauth2.tls_config.ca`
+
+Optional:
+
+- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--wechat_configs--http_config--oauth2--tls_config--ca--config_map))
+- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--wechat_configs--http_config--oauth2--tls_config--ca--secret))
+
+
+### Nested Schema for `spec.receivers.wechat_configs.http_config.oauth2.tls_config.ca.config_map`
+
+Required:
+
+- `key` (String) The key to select.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
+
+
+
+### Nested Schema for `spec.receivers.wechat_configs.http_config.oauth2.tls_config.ca.secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
+
+### Nested Schema for `spec.receivers.wechat_configs.http_config.oauth2.tls_config.cert`
+
+Optional:
+
+- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--wechat_configs--http_config--oauth2--tls_config--cert--config_map))
+- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--receivers--wechat_configs--http_config--oauth2--tls_config--cert--secret))
+
+
+### Nested Schema for `spec.receivers.wechat_configs.http_config.oauth2.tls_config.cert.config_map`
+
+Required:
+
+- `key` (String) The key to select.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
+
+
+
+### Nested Schema for `spec.receivers.wechat_configs.http_config.oauth2.tls_config.cert.secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
+
+### Nested Schema for `spec.receivers.wechat_configs.http_config.oauth2.tls_config.key_secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
### Nested Schema for `spec.receivers.wechat_configs.http_config.tls_config`
diff --git a/docs/data-sources/monitoring_coreos_com_alertmanager_v1_manifest.md b/docs/data-sources/monitoring_coreos_com_alertmanager_v1_manifest.md
index a9c5bb387..ca1647589 100644
--- a/docs/data-sources/monitoring_coreos_com_alertmanager_v1_manifest.md
+++ b/docs/data-sources/monitoring_coreos_com_alertmanager_v1_manifest.md
@@ -654,7 +654,12 @@ Required:
Optional:
- `endpoint_params` (Map of String) 'endpointParams' configures the HTTP parameters to append to the tokenURL.
+- `no_proxy` (String) 'noProxy' is a comma-separated string that can contain IPs, CIDR notation, domain namesthat should be excluded from proxying. IP and domain names cancontain port numbers.It requires Prometheus >= v2.43.0.
+- `proxy_connect_header` (Map of String) ProxyConnectHeader optionally specifies headers to send toproxies during CONNECT requests.It requires Prometheus >= v2.43.0.
+- `proxy_from_environment` (Boolean) Whether to use the proxy configuration defined by environment variables (HTTP_PROXY, HTTPS_PROXY, and NO_PROXY).If unset, Prometheus uses its default value.It requires Prometheus >= v2.43.0.
+- `proxy_url` (String) 'proxyURL' defines the HTTP proxy server to use.It requires Prometheus >= v2.43.0.
- `scopes` (List of String) 'scopes' defines the OAuth2 scopes used for the token request.
+- `tls_config` (Attributes) TLS configuration to use when connecting to the OAuth2 server.It requires Prometheus >= v2.43.0. (see [below for nested schema](#nestedatt--spec--alertmanager_configuration--global--http_config--oauth2--tls_config))
### Nested Schema for `spec.alertmanager_configuration.global.http_config.oauth2.client_id`
@@ -704,6 +709,103 @@ Optional:
- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+### Nested Schema for `spec.alertmanager_configuration.global.http_config.oauth2.tls_config`
+
+Optional:
+
+- `ca` (Attributes) Certificate authority used when verifying server certificates. (see [below for nested schema](#nestedatt--spec--alertmanager_configuration--global--http_config--oauth2--tls_config--ca))
+- `cert` (Attributes) Client certificate to present when doing client-authentication. (see [below for nested schema](#nestedatt--spec--alertmanager_configuration--global--http_config--oauth2--tls_config--cert))
+- `insecure_skip_verify` (Boolean) Disable target certificate validation.
+- `key_secret` (Attributes) Secret containing the client key file for the targets. (see [below for nested schema](#nestedatt--spec--alertmanager_configuration--global--http_config--oauth2--tls_config--key_secret))
+- `max_version` (String) Maximum acceptable TLS version.It requires Prometheus >= v2.41.0.
+- `min_version` (String) Minimum acceptable TLS version.It requires Prometheus >= v2.35.0.
+- `server_name` (String) Used to verify the hostname for the targets.
+
+
+### Nested Schema for `spec.alertmanager_configuration.global.http_config.oauth2.tls_config.ca`
+
+Optional:
+
+- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--alertmanager_configuration--global--http_config--oauth2--tls_config--ca--config_map))
+- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--alertmanager_configuration--global--http_config--oauth2--tls_config--ca--secret))
+
+
+### Nested Schema for `spec.alertmanager_configuration.global.http_config.oauth2.tls_config.ca.config_map`
+
+Required:
+
+- `key` (String) The key to select.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
+
+
+
+### Nested Schema for `spec.alertmanager_configuration.global.http_config.oauth2.tls_config.ca.secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
+
+### Nested Schema for `spec.alertmanager_configuration.global.http_config.oauth2.tls_config.cert`
+
+Optional:
+
+- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--alertmanager_configuration--global--http_config--oauth2--tls_config--cert--config_map))
+- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--alertmanager_configuration--global--http_config--oauth2--tls_config--cert--secret))
+
+
+### Nested Schema for `spec.alertmanager_configuration.global.http_config.oauth2.tls_config.cert.config_map`
+
+Required:
+
+- `key` (String) The key to select.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
+
+
+
+### Nested Schema for `spec.alertmanager_configuration.global.http_config.oauth2.tls_config.cert.secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
+
+### Nested Schema for `spec.alertmanager_configuration.global.http_config.oauth2.tls_config.key_secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
### Nested Schema for `spec.alertmanager_configuration.global.http_config.tls_config`
diff --git a/docs/data-sources/monitoring_coreos_com_pod_monitor_v1_manifest.md b/docs/data-sources/monitoring_coreos_com_pod_monitor_v1_manifest.md
index f8edbc1fc..43df3a484 100644
--- a/docs/data-sources/monitoring_coreos_com_pod_monitor_v1_manifest.md
+++ b/docs/data-sources/monitoring_coreos_com_pod_monitor_v1_manifest.md
@@ -246,7 +246,12 @@ Required:
Optional:
- `endpoint_params` (Map of String) 'endpointParams' configures the HTTP parameters to append to the tokenURL.
+- `no_proxy` (String) 'noProxy' is a comma-separated string that can contain IPs, CIDR notation, domain namesthat should be excluded from proxying. IP and domain names cancontain port numbers.It requires Prometheus >= v2.43.0.
+- `proxy_connect_header` (Map of String) ProxyConnectHeader optionally specifies headers to send toproxies during CONNECT requests.It requires Prometheus >= v2.43.0.
+- `proxy_from_environment` (Boolean) Whether to use the proxy configuration defined by environment variables (HTTP_PROXY, HTTPS_PROXY, and NO_PROXY).If unset, Prometheus uses its default value.It requires Prometheus >= v2.43.0.
+- `proxy_url` (String) 'proxyURL' defines the HTTP proxy server to use.It requires Prometheus >= v2.43.0.
- `scopes` (List of String) 'scopes' defines the OAuth2 scopes used for the token request.
+- `tls_config` (Attributes) TLS configuration to use when connecting to the OAuth2 server.It requires Prometheus >= v2.43.0. (see [below for nested schema](#nestedatt--spec--pod_metrics_endpoints--oauth2--tls_config))
### Nested Schema for `spec.pod_metrics_endpoints.oauth2.client_id`
@@ -296,6 +301,103 @@ Optional:
- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+### Nested Schema for `spec.pod_metrics_endpoints.oauth2.tls_config`
+
+Optional:
+
+- `ca` (Attributes) Certificate authority used when verifying server certificates. (see [below for nested schema](#nestedatt--spec--pod_metrics_endpoints--oauth2--tls_config--ca))
+- `cert` (Attributes) Client certificate to present when doing client-authentication. (see [below for nested schema](#nestedatt--spec--pod_metrics_endpoints--oauth2--tls_config--cert))
+- `insecure_skip_verify` (Boolean) Disable target certificate validation.
+- `key_secret` (Attributes) Secret containing the client key file for the targets. (see [below for nested schema](#nestedatt--spec--pod_metrics_endpoints--oauth2--tls_config--key_secret))
+- `max_version` (String) Maximum acceptable TLS version.It requires Prometheus >= v2.41.0.
+- `min_version` (String) Minimum acceptable TLS version.It requires Prometheus >= v2.35.0.
+- `server_name` (String) Used to verify the hostname for the targets.
+
+
+### Nested Schema for `spec.pod_metrics_endpoints.oauth2.tls_config.ca`
+
+Optional:
+
+- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--pod_metrics_endpoints--oauth2--tls_config--ca--config_map))
+- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--pod_metrics_endpoints--oauth2--tls_config--ca--secret))
+
+
+### Nested Schema for `spec.pod_metrics_endpoints.oauth2.tls_config.ca.config_map`
+
+Required:
+
+- `key` (String) The key to select.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
+
+
+
+### Nested Schema for `spec.pod_metrics_endpoints.oauth2.tls_config.ca.secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
+
+### Nested Schema for `spec.pod_metrics_endpoints.oauth2.tls_config.cert`
+
+Optional:
+
+- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--pod_metrics_endpoints--oauth2--tls_config--cert--config_map))
+- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--pod_metrics_endpoints--oauth2--tls_config--cert--secret))
+
+
+### Nested Schema for `spec.pod_metrics_endpoints.oauth2.tls_config.cert.config_map`
+
+Required:
+
+- `key` (String) The key to select.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
+
+
+
+### Nested Schema for `spec.pod_metrics_endpoints.oauth2.tls_config.cert.secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
+
+### Nested Schema for `spec.pod_metrics_endpoints.oauth2.tls_config.key_secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
### Nested Schema for `spec.pod_metrics_endpoints.relabelings`
diff --git a/docs/data-sources/monitoring_coreos_com_probe_v1_manifest.md b/docs/data-sources/monitoring_coreos_com_probe_v1_manifest.md
index 1e7a28c9c..288e9442f 100644
--- a/docs/data-sources/monitoring_coreos_com_probe_v1_manifest.md
+++ b/docs/data-sources/monitoring_coreos_com_probe_v1_manifest.md
@@ -170,7 +170,12 @@ Required:
Optional:
- `endpoint_params` (Map of String) 'endpointParams' configures the HTTP parameters to append to the tokenURL.
+- `no_proxy` (String) 'noProxy' is a comma-separated string that can contain IPs, CIDR notation, domain namesthat should be excluded from proxying. IP and domain names cancontain port numbers.It requires Prometheus >= v2.43.0.
+- `proxy_connect_header` (Map of String) ProxyConnectHeader optionally specifies headers to send toproxies during CONNECT requests.It requires Prometheus >= v2.43.0.
+- `proxy_from_environment` (Boolean) Whether to use the proxy configuration defined by environment variables (HTTP_PROXY, HTTPS_PROXY, and NO_PROXY).If unset, Prometheus uses its default value.It requires Prometheus >= v2.43.0.
+- `proxy_url` (String) 'proxyURL' defines the HTTP proxy server to use.It requires Prometheus >= v2.43.0.
- `scopes` (List of String) 'scopes' defines the OAuth2 scopes used for the token request.
+- `tls_config` (Attributes) TLS configuration to use when connecting to the OAuth2 server.It requires Prometheus >= v2.43.0. (see [below for nested schema](#nestedatt--spec--oauth2--tls_config))
### Nested Schema for `spec.oauth2.client_id`
@@ -220,6 +225,103 @@ Optional:
- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+### Nested Schema for `spec.oauth2.tls_config`
+
+Optional:
+
+- `ca` (Attributes) Certificate authority used when verifying server certificates. (see [below for nested schema](#nestedatt--spec--oauth2--tls_config--ca))
+- `cert` (Attributes) Client certificate to present when doing client-authentication. (see [below for nested schema](#nestedatt--spec--oauth2--tls_config--cert))
+- `insecure_skip_verify` (Boolean) Disable target certificate validation.
+- `key_secret` (Attributes) Secret containing the client key file for the targets. (see [below for nested schema](#nestedatt--spec--oauth2--tls_config--key_secret))
+- `max_version` (String) Maximum acceptable TLS version.It requires Prometheus >= v2.41.0.
+- `min_version` (String) Minimum acceptable TLS version.It requires Prometheus >= v2.35.0.
+- `server_name` (String) Used to verify the hostname for the targets.
+
+
+### Nested Schema for `spec.oauth2.tls_config.ca`
+
+Optional:
+
+- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--oauth2--tls_config--ca--config_map))
+- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--oauth2--tls_config--ca--secret))
+
+
+### Nested Schema for `spec.oauth2.tls_config.ca.config_map`
+
+Required:
+
+- `key` (String) The key to select.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
+
+
+
+### Nested Schema for `spec.oauth2.tls_config.ca.secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
+
+### Nested Schema for `spec.oauth2.tls_config.cert`
+
+Optional:
+
+- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--oauth2--tls_config--cert--config_map))
+- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--oauth2--tls_config--cert--secret))
+
+
+### Nested Schema for `spec.oauth2.tls_config.cert.config_map`
+
+Required:
+
+- `key` (String) The key to select.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
+
+
+
+### Nested Schema for `spec.oauth2.tls_config.cert.secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
+
+### Nested Schema for `spec.oauth2.tls_config.key_secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
### Nested Schema for `spec.prober`
diff --git a/docs/data-sources/monitoring_coreos_com_prometheus_agent_v1alpha1_manifest.md b/docs/data-sources/monitoring_coreos_com_prometheus_agent_v1alpha1_manifest.md
index bfffb3f52..81374a746 100644
--- a/docs/data-sources/monitoring_coreos_com_prometheus_agent_v1alpha1_manifest.md
+++ b/docs/data-sources/monitoring_coreos_com_prometheus_agent_v1alpha1_manifest.md
@@ -122,7 +122,7 @@ Optional:
- `secrets` (List of String) Secrets is a list of Secrets in the same namespace as the Prometheusobject, which shall be mounted into the Prometheus Pods.Each Secret is added to the StatefulSet definition as a volume named 'secret-'.The Secrets are mounted into /etc/prometheus/secrets/ in the 'prometheus' container.
- `security_context` (Attributes) SecurityContext holds pod-level security attributes and common container settings.This defaults to the default PodSecurityContext. (see [below for nested schema](#nestedatt--spec--security_context))
- `service_account_name` (String) ServiceAccountName is the name of the ServiceAccount to use to run thePrometheus Pods.
-- `service_discovery_role` (String) Defines the service discovery role used to discover targets from 'ServiceMonitor' objects.If set, the value should be either 'Endpoints' or 'EndpointSlice'.If unset, the operator assumes the 'Endpoints' role.
+- `service_discovery_role` (String) Defines the service discovery role used to discover targets from'ServiceMonitor' objects and Alertmanager endpoints.If set, the value should be either 'Endpoints' or 'EndpointSlice'.If unset, the operator assumes the 'Endpoints' role.
- `service_monitor_namespace_selector` (Attributes) Namespaces to match for ServicedMonitors discovery. An empty label selectormatches all namespaces. A null label selector (default value) matches the currentnamespace only. (see [below for nested schema](#nestedatt--spec--service_monitor_namespace_selector))
- `service_monitor_selector` (Attributes) ServiceMonitors to be selected for target discovery. An empty labelselector matches all objects. A null label selector matches no objects.If 'spec.serviceMonitorSelector', 'spec.podMonitorSelector', 'spec.probeSelector'and 'spec.scrapeConfigSelector' are null, the Prometheus configuration is unmanaged.The Prometheus operator will ensure that the Prometheus configuration'sSecret exists, but it is the responsibility of the user to provide the rawgzipped Prometheus configuration under the 'prometheus.yaml.gz' key.This behavior is *deprecated* and will be removed in the next major versionof the custom resource definition. It is recommended to use'spec.additionalScrapeConfigs' instead. (see [below for nested schema](#nestedatt--spec--service_monitor_selector))
- `shards` (Number) Number of shards to distribute targets onto. 'spec.replicas'multiplied by 'spec.shards' is the total number of Pods created.Note that scaling down shards will not reshard data onto remaininginstances, it must be manually moved. Increasing shards will not resharddata either but it will continue to be available from the sameinstances. To query globally, use Thanos sidecar and Thanos querier orremote write data to a central location.Sharding is performed on the content of the '__address__' target meta-labelfor PodMonitors and ServiceMonitors and '__param_target__' for Probes.Default: 1
@@ -2291,7 +2291,12 @@ Required:
Optional:
- `endpoint_params` (Map of String) 'endpointParams' configures the HTTP parameters to append to the tokenURL.
+- `no_proxy` (String) 'noProxy' is a comma-separated string that can contain IPs, CIDR notation, domain namesthat should be excluded from proxying. IP and domain names cancontain port numbers.It requires Prometheus >= v2.43.0.
+- `proxy_connect_header` (Map of String) ProxyConnectHeader optionally specifies headers to send toproxies during CONNECT requests.It requires Prometheus >= v2.43.0.
+- `proxy_from_environment` (Boolean) Whether to use the proxy configuration defined by environment variables (HTTP_PROXY, HTTPS_PROXY, and NO_PROXY).If unset, Prometheus uses its default value.It requires Prometheus >= v2.43.0.
+- `proxy_url` (String) 'proxyURL' defines the HTTP proxy server to use.It requires Prometheus >= v2.43.0.
- `scopes` (List of String) 'scopes' defines the OAuth2 scopes used for the token request.
+- `tls_config` (Attributes) TLS configuration to use when connecting to the OAuth2 server.It requires Prometheus >= v2.43.0. (see [below for nested schema](#nestedatt--spec--remote_write--oauth2--tls_config))
### Nested Schema for `spec.remote_write.oauth2.client_id`
@@ -2341,6 +2346,103 @@ Optional:
- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+### Nested Schema for `spec.remote_write.oauth2.tls_config`
+
+Optional:
+
+- `ca` (Attributes) Certificate authority used when verifying server certificates. (see [below for nested schema](#nestedatt--spec--remote_write--oauth2--tls_config--ca))
+- `cert` (Attributes) Client certificate to present when doing client-authentication. (see [below for nested schema](#nestedatt--spec--remote_write--oauth2--tls_config--cert))
+- `insecure_skip_verify` (Boolean) Disable target certificate validation.
+- `key_secret` (Attributes) Secret containing the client key file for the targets. (see [below for nested schema](#nestedatt--spec--remote_write--oauth2--tls_config--key_secret))
+- `max_version` (String) Maximum acceptable TLS version.It requires Prometheus >= v2.41.0.
+- `min_version` (String) Minimum acceptable TLS version.It requires Prometheus >= v2.35.0.
+- `server_name` (String) Used to verify the hostname for the targets.
+
+
+### Nested Schema for `spec.remote_write.oauth2.tls_config.ca`
+
+Optional:
+
+- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--remote_write--oauth2--tls_config--ca--config_map))
+- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--remote_write--oauth2--tls_config--ca--secret))
+
+
+### Nested Schema for `spec.remote_write.oauth2.tls_config.ca.config_map`
+
+Required:
+
+- `key` (String) The key to select.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
+
+
+
+### Nested Schema for `spec.remote_write.oauth2.tls_config.ca.secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
+
+### Nested Schema for `spec.remote_write.oauth2.tls_config.cert`
+
+Optional:
+
+- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--remote_write--oauth2--tls_config--cert--config_map))
+- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--remote_write--oauth2--tls_config--cert--secret))
+
+
+### Nested Schema for `spec.remote_write.oauth2.tls_config.cert.config_map`
+
+Required:
+
+- `key` (String) The key to select.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
+
+
+
+### Nested Schema for `spec.remote_write.oauth2.tls_config.cert.secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
+
+### Nested Schema for `spec.remote_write.oauth2.tls_config.key_secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
### Nested Schema for `spec.remote_write.queue_config`
diff --git a/docs/data-sources/monitoring_coreos_com_prometheus_v1_manifest.md b/docs/data-sources/monitoring_coreos_com_prometheus_v1_manifest.md
index 7f5c5f244..a1382dbd0 100644
--- a/docs/data-sources/monitoring_coreos_com_prometheus_v1_manifest.md
+++ b/docs/data-sources/monitoring_coreos_com_prometheus_v1_manifest.md
@@ -139,7 +139,7 @@ Optional:
- `secrets` (List of String) Secrets is a list of Secrets in the same namespace as the Prometheusobject, which shall be mounted into the Prometheus Pods.Each Secret is added to the StatefulSet definition as a volume named 'secret-'.The Secrets are mounted into /etc/prometheus/secrets/ in the 'prometheus' container.
- `security_context` (Attributes) SecurityContext holds pod-level security attributes and common container settings.This defaults to the default PodSecurityContext. (see [below for nested schema](#nestedatt--spec--security_context))
- `service_account_name` (String) ServiceAccountName is the name of the ServiceAccount to use to run thePrometheus Pods.
-- `service_discovery_role` (String) Defines the service discovery role used to discover targets from 'ServiceMonitor' objects.If set, the value should be either 'Endpoints' or 'EndpointSlice'.If unset, the operator assumes the 'Endpoints' role.
+- `service_discovery_role` (String) Defines the service discovery role used to discover targets from'ServiceMonitor' objects and Alertmanager endpoints.If set, the value should be either 'Endpoints' or 'EndpointSlice'.If unset, the operator assumes the 'Endpoints' role.
- `service_monitor_namespace_selector` (Attributes) Namespaces to match for ServicedMonitors discovery. An empty label selectormatches all namespaces. A null label selector (default value) matches the currentnamespace only. (see [below for nested schema](#nestedatt--spec--service_monitor_namespace_selector))
- `service_monitor_selector` (Attributes) ServiceMonitors to be selected for target discovery. An empty labelselector matches all objects. A null label selector matches no objects.If 'spec.serviceMonitorSelector', 'spec.podMonitorSelector', 'spec.probeSelector'and 'spec.scrapeConfigSelector' are null, the Prometheus configuration is unmanaged.The Prometheus operator will ensure that the Prometheus configuration'sSecret exists, but it is the responsibility of the user to provide the rawgzipped Prometheus configuration under the 'prometheus.yaml.gz' key.This behavior is *deprecated* and will be removed in the next major versionof the custom resource definition. It is recommended to use'spec.additionalScrapeConfigs' instead. (see [below for nested schema](#nestedatt--spec--service_monitor_selector))
- `sha` (String) Deprecated: use 'spec.image' instead. The image's digest can be specified as part of the image name.
@@ -596,7 +596,7 @@ Optional:
Required:
-- `alertmanagers` (Attributes List) AlertmanagerEndpoints Prometheus should fire alerts against. (see [below for nested schema](#nestedatt--spec--alerting--alertmanagers))
+- `alertmanagers` (Attributes List) Alertmanager endpoints where Prometheus should send alerts to. (see [below for nested schema](#nestedatt--spec--alerting--alertmanagers))
### Nested Schema for `spec.alerting.alertmanagers`
@@ -2558,7 +2558,12 @@ Required:
Optional:
- `endpoint_params` (Map of String) 'endpointParams' configures the HTTP parameters to append to the tokenURL.
+- `no_proxy` (String) 'noProxy' is a comma-separated string that can contain IPs, CIDR notation, domain namesthat should be excluded from proxying. IP and domain names cancontain port numbers.It requires Prometheus >= v2.43.0.
+- `proxy_connect_header` (Map of String) ProxyConnectHeader optionally specifies headers to send toproxies during CONNECT requests.It requires Prometheus >= v2.43.0.
+- `proxy_from_environment` (Boolean) Whether to use the proxy configuration defined by environment variables (HTTP_PROXY, HTTPS_PROXY, and NO_PROXY).If unset, Prometheus uses its default value.It requires Prometheus >= v2.43.0.
+- `proxy_url` (String) 'proxyURL' defines the HTTP proxy server to use.It requires Prometheus >= v2.43.0.
- `scopes` (List of String) 'scopes' defines the OAuth2 scopes used for the token request.
+- `tls_config` (Attributes) TLS configuration to use when connecting to the OAuth2 server.It requires Prometheus >= v2.43.0. (see [below for nested schema](#nestedatt--spec--remote_read--oauth2--tls_config))
### Nested Schema for `spec.remote_read.oauth2.client_id`
@@ -2608,6 +2613,103 @@ Optional:
- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+### Nested Schema for `spec.remote_read.oauth2.tls_config`
+
+Optional:
+
+- `ca` (Attributes) Certificate authority used when verifying server certificates. (see [below for nested schema](#nestedatt--spec--remote_read--oauth2--tls_config--ca))
+- `cert` (Attributes) Client certificate to present when doing client-authentication. (see [below for nested schema](#nestedatt--spec--remote_read--oauth2--tls_config--cert))
+- `insecure_skip_verify` (Boolean) Disable target certificate validation.
+- `key_secret` (Attributes) Secret containing the client key file for the targets. (see [below for nested schema](#nestedatt--spec--remote_read--oauth2--tls_config--key_secret))
+- `max_version` (String) Maximum acceptable TLS version.It requires Prometheus >= v2.41.0.
+- `min_version` (String) Minimum acceptable TLS version.It requires Prometheus >= v2.35.0.
+- `server_name` (String) Used to verify the hostname for the targets.
+
+
+### Nested Schema for `spec.remote_read.oauth2.tls_config.ca`
+
+Optional:
+
+- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--remote_read--oauth2--tls_config--ca--config_map))
+- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--remote_read--oauth2--tls_config--ca--secret))
+
+
+### Nested Schema for `spec.remote_read.oauth2.tls_config.ca.config_map`
+
+Required:
+
+- `key` (String) The key to select.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
+
+
+
+### Nested Schema for `spec.remote_read.oauth2.tls_config.ca.secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
+
+### Nested Schema for `spec.remote_read.oauth2.tls_config.cert`
+
+Optional:
+
+- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--remote_read--oauth2--tls_config--cert--config_map))
+- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--remote_read--oauth2--tls_config--cert--secret))
+
+
+### Nested Schema for `spec.remote_read.oauth2.tls_config.cert.config_map`
+
+Required:
+
+- `key` (String) The key to select.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
+
+
+
+### Nested Schema for `spec.remote_read.oauth2.tls_config.cert.secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
+
+### Nested Schema for `spec.remote_read.oauth2.tls_config.key_secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
### Nested Schema for `spec.remote_read.tls_config`
@@ -2871,7 +2973,12 @@ Required:
Optional:
- `endpoint_params` (Map of String) 'endpointParams' configures the HTTP parameters to append to the tokenURL.
+- `no_proxy` (String) 'noProxy' is a comma-separated string that can contain IPs, CIDR notation, domain namesthat should be excluded from proxying. IP and domain names cancontain port numbers.It requires Prometheus >= v2.43.0.
+- `proxy_connect_header` (Map of String) ProxyConnectHeader optionally specifies headers to send toproxies during CONNECT requests.It requires Prometheus >= v2.43.0.
+- `proxy_from_environment` (Boolean) Whether to use the proxy configuration defined by environment variables (HTTP_PROXY, HTTPS_PROXY, and NO_PROXY).If unset, Prometheus uses its default value.It requires Prometheus >= v2.43.0.
+- `proxy_url` (String) 'proxyURL' defines the HTTP proxy server to use.It requires Prometheus >= v2.43.0.
- `scopes` (List of String) 'scopes' defines the OAuth2 scopes used for the token request.
+- `tls_config` (Attributes) TLS configuration to use when connecting to the OAuth2 server.It requires Prometheus >= v2.43.0. (see [below for nested schema](#nestedatt--spec--remote_write--oauth2--tls_config))
### Nested Schema for `spec.remote_write.oauth2.client_id`
@@ -2921,6 +3028,103 @@ Optional:
- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+### Nested Schema for `spec.remote_write.oauth2.tls_config`
+
+Optional:
+
+- `ca` (Attributes) Certificate authority used when verifying server certificates. (see [below for nested schema](#nestedatt--spec--remote_write--oauth2--tls_config--ca))
+- `cert` (Attributes) Client certificate to present when doing client-authentication. (see [below for nested schema](#nestedatt--spec--remote_write--oauth2--tls_config--cert))
+- `insecure_skip_verify` (Boolean) Disable target certificate validation.
+- `key_secret` (Attributes) Secret containing the client key file for the targets. (see [below for nested schema](#nestedatt--spec--remote_write--oauth2--tls_config--key_secret))
+- `max_version` (String) Maximum acceptable TLS version.It requires Prometheus >= v2.41.0.
+- `min_version` (String) Minimum acceptable TLS version.It requires Prometheus >= v2.35.0.
+- `server_name` (String) Used to verify the hostname for the targets.
+
+
+### Nested Schema for `spec.remote_write.oauth2.tls_config.ca`
+
+Optional:
+
+- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--remote_write--oauth2--tls_config--ca--config_map))
+- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--remote_write--oauth2--tls_config--ca--secret))
+
+
+### Nested Schema for `spec.remote_write.oauth2.tls_config.ca.config_map`
+
+Required:
+
+- `key` (String) The key to select.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
+
+
+
+### Nested Schema for `spec.remote_write.oauth2.tls_config.ca.secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
+
+### Nested Schema for `spec.remote_write.oauth2.tls_config.cert`
+
+Optional:
+
+- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--remote_write--oauth2--tls_config--cert--config_map))
+- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--remote_write--oauth2--tls_config--cert--secret))
+
+
+### Nested Schema for `spec.remote_write.oauth2.tls_config.cert.config_map`
+
+Required:
+
+- `key` (String) The key to select.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
+
+
+
+### Nested Schema for `spec.remote_write.oauth2.tls_config.cert.secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
+
+### Nested Schema for `spec.remote_write.oauth2.tls_config.key_secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
### Nested Schema for `spec.remote_write.queue_config`
diff --git a/docs/data-sources/monitoring_coreos_com_scrape_config_v1alpha1_manifest.md b/docs/data-sources/monitoring_coreos_com_scrape_config_v1alpha1_manifest.md
index 24bf7f3c2..19cac0f28 100644
--- a/docs/data-sources/monitoring_coreos_com_scrape_config_v1alpha1_manifest.md
+++ b/docs/data-sources/monitoring_coreos_com_scrape_config_v1alpha1_manifest.md
@@ -83,6 +83,7 @@ Optional:
- `metrics_path` (String) MetricsPath HTTP path to scrape for metrics. If empty, Prometheus uses the default value (e.g. /metrics).
- `no_proxy` (String) 'noProxy' is a comma-separated string that can contain IPs, CIDR notation, domain namesthat should be excluded from proxying. IP and domain names cancontain port numbers.It requires Prometheus >= v2.43.0.
- `nomad_sd_configs` (Attributes List) NomadSDConfigs defines a list of Nomad service discovery configurations. (see [below for nested schema](#nestedatt--spec--nomad_sd_configs))
+- `oauth2` (Attributes) OAuth2 client credentials used to fetch a token for the targets. (see [below for nested schema](#nestedatt--spec--oauth2))
- `openstack_sd_configs` (Attributes List) OpenStackSDConfigs defines a list of OpenStack service discovery configurations. (see [below for nested schema](#nestedatt--spec--openstack_sd_configs))
- `ovhcloud_sd_configs` (Attributes List) OVHCloudSDConfigs defines a list of OVHcloud service discovery configurations. (see [below for nested schema](#nestedatt--spec--ovhcloud_sd_configs))
- `params` (Map of List of String) Optional HTTP URL parameters
@@ -292,7 +293,12 @@ Required:
Optional:
- `endpoint_params` (Map of String) 'endpointParams' configures the HTTP parameters to append to the tokenURL.
+- `no_proxy` (String) 'noProxy' is a comma-separated string that can contain IPs, CIDR notation, domain namesthat should be excluded from proxying. IP and domain names cancontain port numbers.It requires Prometheus >= v2.43.0.
+- `proxy_connect_header` (Map of String) ProxyConnectHeader optionally specifies headers to send toproxies during CONNECT requests.It requires Prometheus >= v2.43.0.
+- `proxy_from_environment` (Boolean) Whether to use the proxy configuration defined by environment variables (HTTP_PROXY, HTTPS_PROXY, and NO_PROXY).If unset, Prometheus uses its default value.It requires Prometheus >= v2.43.0.
+- `proxy_url` (String) 'proxyURL' defines the HTTP proxy server to use.It requires Prometheus >= v2.43.0.
- `scopes` (List of String) 'scopes' defines the OAuth2 scopes used for the token request.
+- `tls_config` (Attributes) TLS configuration to use when connecting to the OAuth2 server.It requires Prometheus >= v2.43.0. (see [below for nested schema](#nestedatt--spec--consul_sd_configs--oauth2--tls_config))
### Nested Schema for `spec.consul_sd_configs.oauth2.client_id`
@@ -342,6 +348,103 @@ Optional:
- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+### Nested Schema for `spec.consul_sd_configs.oauth2.tls_config`
+
+Optional:
+
+- `ca` (Attributes) Certificate authority used when verifying server certificates. (see [below for nested schema](#nestedatt--spec--consul_sd_configs--oauth2--tls_config--ca))
+- `cert` (Attributes) Client certificate to present when doing client-authentication. (see [below for nested schema](#nestedatt--spec--consul_sd_configs--oauth2--tls_config--cert))
+- `insecure_skip_verify` (Boolean) Disable target certificate validation.
+- `key_secret` (Attributes) Secret containing the client key file for the targets. (see [below for nested schema](#nestedatt--spec--consul_sd_configs--oauth2--tls_config--key_secret))
+- `max_version` (String) Maximum acceptable TLS version.It requires Prometheus >= v2.41.0.
+- `min_version` (String) Minimum acceptable TLS version.It requires Prometheus >= v2.35.0.
+- `server_name` (String) Used to verify the hostname for the targets.
+
+
+### Nested Schema for `spec.consul_sd_configs.oauth2.tls_config.ca`
+
+Optional:
+
+- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--consul_sd_configs--oauth2--tls_config--ca--config_map))
+- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--consul_sd_configs--oauth2--tls_config--ca--secret))
+
+
+### Nested Schema for `spec.consul_sd_configs.oauth2.tls_config.ca.config_map`
+
+Required:
+
+- `key` (String) The key to select.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
+
+
+
+### Nested Schema for `spec.consul_sd_configs.oauth2.tls_config.ca.secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
+
+### Nested Schema for `spec.consul_sd_configs.oauth2.tls_config.cert`
+
+Optional:
+
+- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--consul_sd_configs--oauth2--tls_config--cert--config_map))
+- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--consul_sd_configs--oauth2--tls_config--cert--secret))
+
+
+### Nested Schema for `spec.consul_sd_configs.oauth2.tls_config.cert.config_map`
+
+Required:
+
+- `key` (String) The key to select.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
+
+
+
+### Nested Schema for `spec.consul_sd_configs.oauth2.tls_config.cert.secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
+
+### Nested Schema for `spec.consul_sd_configs.oauth2.tls_config.key_secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
### Nested Schema for `spec.consul_sd_configs.tls_config`
@@ -505,7 +608,12 @@ Required:
Optional:
- `endpoint_params` (Map of String) 'endpointParams' configures the HTTP parameters to append to the tokenURL.
+- `no_proxy` (String) 'noProxy' is a comma-separated string that can contain IPs, CIDR notation, domain namesthat should be excluded from proxying. IP and domain names cancontain port numbers.It requires Prometheus >= v2.43.0.
+- `proxy_connect_header` (Map of String) ProxyConnectHeader optionally specifies headers to send toproxies during CONNECT requests.It requires Prometheus >= v2.43.0.
+- `proxy_from_environment` (Boolean) Whether to use the proxy configuration defined by environment variables (HTTP_PROXY, HTTPS_PROXY, and NO_PROXY).If unset, Prometheus uses its default value.It requires Prometheus >= v2.43.0.
+- `proxy_url` (String) 'proxyURL' defines the HTTP proxy server to use.It requires Prometheus >= v2.43.0.
- `scopes` (List of String) 'scopes' defines the OAuth2 scopes used for the token request.
+- `tls_config` (Attributes) TLS configuration to use when connecting to the OAuth2 server.It requires Prometheus >= v2.43.0. (see [below for nested schema](#nestedatt--spec--digital_ocean_sd_configs--oauth2--tls_config))
### Nested Schema for `spec.digital_ocean_sd_configs.oauth2.client_id`
@@ -555,6 +663,103 @@ Optional:
- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+### Nested Schema for `spec.digital_ocean_sd_configs.oauth2.tls_config`
+
+Optional:
+
+- `ca` (Attributes) Certificate authority used when verifying server certificates. (see [below for nested schema](#nestedatt--spec--digital_ocean_sd_configs--oauth2--tls_config--ca))
+- `cert` (Attributes) Client certificate to present when doing client-authentication. (see [below for nested schema](#nestedatt--spec--digital_ocean_sd_configs--oauth2--tls_config--cert))
+- `insecure_skip_verify` (Boolean) Disable target certificate validation.
+- `key_secret` (Attributes) Secret containing the client key file for the targets. (see [below for nested schema](#nestedatt--spec--digital_ocean_sd_configs--oauth2--tls_config--key_secret))
+- `max_version` (String) Maximum acceptable TLS version.It requires Prometheus >= v2.41.0.
+- `min_version` (String) Minimum acceptable TLS version.It requires Prometheus >= v2.35.0.
+- `server_name` (String) Used to verify the hostname for the targets.
+
+
+### Nested Schema for `spec.digital_ocean_sd_configs.oauth2.tls_config.ca`
+
+Optional:
+
+- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--digital_ocean_sd_configs--oauth2--tls_config--ca--config_map))
+- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--digital_ocean_sd_configs--oauth2--tls_config--ca--secret))
+
+
+### Nested Schema for `spec.digital_ocean_sd_configs.oauth2.tls_config.ca.config_map`
+
+Required:
+
+- `key` (String) The key to select.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
+
+
+
+### Nested Schema for `spec.digital_ocean_sd_configs.oauth2.tls_config.ca.secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
+
+### Nested Schema for `spec.digital_ocean_sd_configs.oauth2.tls_config.cert`
+
+Optional:
+
+- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--digital_ocean_sd_configs--oauth2--tls_config--cert--config_map))
+- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--digital_ocean_sd_configs--oauth2--tls_config--cert--secret))
+
+
+### Nested Schema for `spec.digital_ocean_sd_configs.oauth2.tls_config.cert.config_map`
+
+Required:
+
+- `key` (String) The key to select.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
+
+
+
+### Nested Schema for `spec.digital_ocean_sd_configs.oauth2.tls_config.cert.secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
+
+### Nested Schema for `spec.digital_ocean_sd_configs.oauth2.tls_config.key_secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
### Nested Schema for `spec.digital_ocean_sd_configs.tls_config`
@@ -665,7 +870,7 @@ Optional:
- `port` (Number) The port number used if the query type is not SRVIgnored for SRV records
- `refresh_interval` (String) RefreshInterval configures the time after which the provided names are refreshed.If not set, Prometheus uses its default value.
-- `type` (String) The type of DNS query to perform. One of SRV, A, AAAA, MX or NS.If not set, Prometheus uses its default value.When set to NS, It requires Prometheus >= 2.49.0.
+- `type` (String) The type of DNS query to perform. One of SRV, A, AAAA, MX or NS.If not set, Prometheus uses its default value.When set to NS, it requires Prometheus >= v2.49.0.When set to MX, it requires Prometheus >= v2.38.0
@@ -770,7 +975,12 @@ Required:
Optional:
- `endpoint_params` (Map of String) 'endpointParams' configures the HTTP parameters to append to the tokenURL.
+- `no_proxy` (String) 'noProxy' is a comma-separated string that can contain IPs, CIDR notation, domain namesthat should be excluded from proxying. IP and domain names cancontain port numbers.It requires Prometheus >= v2.43.0.
+- `proxy_connect_header` (Map of String) ProxyConnectHeader optionally specifies headers to send toproxies during CONNECT requests.It requires Prometheus >= v2.43.0.
+- `proxy_from_environment` (Boolean) Whether to use the proxy configuration defined by environment variables (HTTP_PROXY, HTTPS_PROXY, and NO_PROXY).If unset, Prometheus uses its default value.It requires Prometheus >= v2.43.0.
+- `proxy_url` (String) 'proxyURL' defines the HTTP proxy server to use.It requires Prometheus >= v2.43.0.
- `scopes` (List of String) 'scopes' defines the OAuth2 scopes used for the token request.
+- `tls_config` (Attributes) TLS configuration to use when connecting to the OAuth2 server.It requires Prometheus >= v2.43.0. (see [below for nested schema](#nestedatt--spec--docker_sd_configs--oauth2--tls_config))
### Nested Schema for `spec.docker_sd_configs.oauth2.client_id`
@@ -820,6 +1030,103 @@ Optional:
- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+### Nested Schema for `spec.docker_sd_configs.oauth2.tls_config`
+
+Optional:
+
+- `ca` (Attributes) Certificate authority used when verifying server certificates. (see [below for nested schema](#nestedatt--spec--docker_sd_configs--oauth2--tls_config--ca))
+- `cert` (Attributes) Client certificate to present when doing client-authentication. (see [below for nested schema](#nestedatt--spec--docker_sd_configs--oauth2--tls_config--cert))
+- `insecure_skip_verify` (Boolean) Disable target certificate validation.
+- `key_secret` (Attributes) Secret containing the client key file for the targets. (see [below for nested schema](#nestedatt--spec--docker_sd_configs--oauth2--tls_config--key_secret))
+- `max_version` (String) Maximum acceptable TLS version.It requires Prometheus >= v2.41.0.
+- `min_version` (String) Minimum acceptable TLS version.It requires Prometheus >= v2.35.0.
+- `server_name` (String) Used to verify the hostname for the targets.
+
+
+### Nested Schema for `spec.docker_sd_configs.oauth2.tls_config.ca`
+
+Optional:
+
+- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--docker_sd_configs--oauth2--tls_config--ca--config_map))
+- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--docker_sd_configs--oauth2--tls_config--ca--secret))
+
+
+### Nested Schema for `spec.docker_sd_configs.oauth2.tls_config.ca.config_map`
+
+Required:
+
+- `key` (String) The key to select.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
+
+
+
+### Nested Schema for `spec.docker_sd_configs.oauth2.tls_config.ca.secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
+
+### Nested Schema for `spec.docker_sd_configs.oauth2.tls_config.cert`
+
+Optional:
+
+- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--docker_sd_configs--oauth2--tls_config--cert--config_map))
+- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--docker_sd_configs--oauth2--tls_config--cert--secret))
+
+
+### Nested Schema for `spec.docker_sd_configs.oauth2.tls_config.cert.config_map`
+
+Required:
+
+- `key` (String) The key to select.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
+
+
+
+### Nested Schema for `spec.docker_sd_configs.oauth2.tls_config.cert.secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
+
+### Nested Schema for `spec.docker_sd_configs.oauth2.tls_config.key_secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
### Nested Schema for `spec.docker_sd_configs.tls_config`
@@ -1021,7 +1328,12 @@ Required:
Optional:
- `endpoint_params` (Map of String) 'endpointParams' configures the HTTP parameters to append to the tokenURL.
+- `no_proxy` (String) 'noProxy' is a comma-separated string that can contain IPs, CIDR notation, domain namesthat should be excluded from proxying. IP and domain names cancontain port numbers.It requires Prometheus >= v2.43.0.
+- `proxy_connect_header` (Map of String) ProxyConnectHeader optionally specifies headers to send toproxies during CONNECT requests.It requires Prometheus >= v2.43.0.
+- `proxy_from_environment` (Boolean) Whether to use the proxy configuration defined by environment variables (HTTP_PROXY, HTTPS_PROXY, and NO_PROXY).If unset, Prometheus uses its default value.It requires Prometheus >= v2.43.0.
+- `proxy_url` (String) 'proxyURL' defines the HTTP proxy server to use.It requires Prometheus >= v2.43.0.
- `scopes` (List of String) 'scopes' defines the OAuth2 scopes used for the token request.
+- `tls_config` (Attributes) TLS configuration to use when connecting to the OAuth2 server.It requires Prometheus >= v2.43.0. (see [below for nested schema](#nestedatt--spec--docker_swarm_sd_configs--oauth2--tls_config))
### Nested Schema for `spec.docker_swarm_sd_configs.oauth2.client_id`
@@ -1071,30 +1383,29 @@ Optional:
- `optional` (Boolean) Specify whether the Secret or its key must be defined
-
-
-### Nested Schema for `spec.docker_swarm_sd_configs.tls_config`
+
+### Nested Schema for `spec.docker_swarm_sd_configs.oauth2.tls_config`
Optional:
-- `ca` (Attributes) Certificate authority used when verifying server certificates. (see [below for nested schema](#nestedatt--spec--docker_swarm_sd_configs--tls_config--ca))
-- `cert` (Attributes) Client certificate to present when doing client-authentication. (see [below for nested schema](#nestedatt--spec--docker_swarm_sd_configs--tls_config--cert))
+- `ca` (Attributes) Certificate authority used when verifying server certificates. (see [below for nested schema](#nestedatt--spec--docker_swarm_sd_configs--oauth2--tls_config--ca))
+- `cert` (Attributes) Client certificate to present when doing client-authentication. (see [below for nested schema](#nestedatt--spec--docker_swarm_sd_configs--oauth2--tls_config--cert))
- `insecure_skip_verify` (Boolean) Disable target certificate validation.
-- `key_secret` (Attributes) Secret containing the client key file for the targets. (see [below for nested schema](#nestedatt--spec--docker_swarm_sd_configs--tls_config--key_secret))
+- `key_secret` (Attributes) Secret containing the client key file for the targets. (see [below for nested schema](#nestedatt--spec--docker_swarm_sd_configs--oauth2--tls_config--key_secret))
- `max_version` (String) Maximum acceptable TLS version.It requires Prometheus >= v2.41.0.
- `min_version` (String) Minimum acceptable TLS version.It requires Prometheus >= v2.35.0.
- `server_name` (String) Used to verify the hostname for the targets.
-
-### Nested Schema for `spec.docker_swarm_sd_configs.tls_config.ca`
+
+### Nested Schema for `spec.docker_swarm_sd_configs.oauth2.tls_config.ca`
Optional:
-- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--docker_swarm_sd_configs--tls_config--ca--config_map))
-- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--docker_swarm_sd_configs--tls_config--ca--secret))
+- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--docker_swarm_sd_configs--oauth2--tls_config--ca--config_map))
+- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--docker_swarm_sd_configs--oauth2--tls_config--ca--secret))
-
-### Nested Schema for `spec.docker_swarm_sd_configs.tls_config.ca.config_map`
+
+### Nested Schema for `spec.docker_swarm_sd_configs.oauth2.tls_config.ca.config_map`
Required:
@@ -1106,8 +1417,8 @@ Optional:
- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
-
-### Nested Schema for `spec.docker_swarm_sd_configs.tls_config.ca.secret`
+
+### Nested Schema for `spec.docker_swarm_sd_configs.oauth2.tls_config.ca.secret`
Required:
@@ -1120,13 +1431,111 @@ Optional:
-
-### Nested Schema for `spec.docker_swarm_sd_configs.tls_config.cert`
+
+### Nested Schema for `spec.docker_swarm_sd_configs.oauth2.tls_config.cert`
Optional:
-- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--docker_swarm_sd_configs--tls_config--cert--config_map))
-- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--docker_swarm_sd_configs--tls_config--cert--secret))
+- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--docker_swarm_sd_configs--oauth2--tls_config--cert--config_map))
+- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--docker_swarm_sd_configs--oauth2--tls_config--cert--secret))
+
+
+### Nested Schema for `spec.docker_swarm_sd_configs.oauth2.tls_config.cert.config_map`
+
+Required:
+
+- `key` (String) The key to select.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
+
+
+
+### Nested Schema for `spec.docker_swarm_sd_configs.oauth2.tls_config.cert.secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
+
+### Nested Schema for `spec.docker_swarm_sd_configs.oauth2.tls_config.key_secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
+
+
+### Nested Schema for `spec.docker_swarm_sd_configs.tls_config`
+
+Optional:
+
+- `ca` (Attributes) Certificate authority used when verifying server certificates. (see [below for nested schema](#nestedatt--spec--docker_swarm_sd_configs--tls_config--ca))
+- `cert` (Attributes) Client certificate to present when doing client-authentication. (see [below for nested schema](#nestedatt--spec--docker_swarm_sd_configs--tls_config--cert))
+- `insecure_skip_verify` (Boolean) Disable target certificate validation.
+- `key_secret` (Attributes) Secret containing the client key file for the targets. (see [below for nested schema](#nestedatt--spec--docker_swarm_sd_configs--tls_config--key_secret))
+- `max_version` (String) Maximum acceptable TLS version.It requires Prometheus >= v2.41.0.
+- `min_version` (String) Minimum acceptable TLS version.It requires Prometheus >= v2.35.0.
+- `server_name` (String) Used to verify the hostname for the targets.
+
+
+### Nested Schema for `spec.docker_swarm_sd_configs.tls_config.ca`
+
+Optional:
+
+- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--docker_swarm_sd_configs--tls_config--ca--config_map))
+- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--docker_swarm_sd_configs--tls_config--ca--secret))
+
+
+### Nested Schema for `spec.docker_swarm_sd_configs.tls_config.ca.config_map`
+
+Required:
+
+- `key` (String) The key to select.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
+
+
+
+### Nested Schema for `spec.docker_swarm_sd_configs.tls_config.ca.secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
+
+### Nested Schema for `spec.docker_swarm_sd_configs.tls_config.cert`
+
+Optional:
+
+- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--docker_swarm_sd_configs--tls_config--cert--config_map))
+- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--docker_swarm_sd_configs--tls_config--cert--secret))
### Nested Schema for `spec.docker_swarm_sd_configs.tls_config.cert.config_map`
@@ -1309,7 +1718,12 @@ Required:
Optional:
- `endpoint_params` (Map of String) 'endpointParams' configures the HTTP parameters to append to the tokenURL.
+- `no_proxy` (String) 'noProxy' is a comma-separated string that can contain IPs, CIDR notation, domain namesthat should be excluded from proxying. IP and domain names cancontain port numbers.It requires Prometheus >= v2.43.0.
+- `proxy_connect_header` (Map of String) ProxyConnectHeader optionally specifies headers to send toproxies during CONNECT requests.It requires Prometheus >= v2.43.0.
+- `proxy_from_environment` (Boolean) Whether to use the proxy configuration defined by environment variables (HTTP_PROXY, HTTPS_PROXY, and NO_PROXY).If unset, Prometheus uses its default value.It requires Prometheus >= v2.43.0.
+- `proxy_url` (String) 'proxyURL' defines the HTTP proxy server to use.It requires Prometheus >= v2.43.0.
- `scopes` (List of String) 'scopes' defines the OAuth2 scopes used for the token request.
+- `tls_config` (Attributes) TLS configuration to use when connecting to the OAuth2 server.It requires Prometheus >= v2.43.0. (see [below for nested schema](#nestedatt--spec--eureka_sd_configs--oauth2--tls_config))
### Nested Schema for `spec.eureka_sd_configs.oauth2.client_id`
@@ -1359,6 +1773,103 @@ Optional:
- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+### Nested Schema for `spec.eureka_sd_configs.oauth2.tls_config`
+
+Optional:
+
+- `ca` (Attributes) Certificate authority used when verifying server certificates. (see [below for nested schema](#nestedatt--spec--eureka_sd_configs--oauth2--tls_config--ca))
+- `cert` (Attributes) Client certificate to present when doing client-authentication. (see [below for nested schema](#nestedatt--spec--eureka_sd_configs--oauth2--tls_config--cert))
+- `insecure_skip_verify` (Boolean) Disable target certificate validation.
+- `key_secret` (Attributes) Secret containing the client key file for the targets. (see [below for nested schema](#nestedatt--spec--eureka_sd_configs--oauth2--tls_config--key_secret))
+- `max_version` (String) Maximum acceptable TLS version.It requires Prometheus >= v2.41.0.
+- `min_version` (String) Minimum acceptable TLS version.It requires Prometheus >= v2.35.0.
+- `server_name` (String) Used to verify the hostname for the targets.
+
+
+### Nested Schema for `spec.eureka_sd_configs.oauth2.tls_config.ca`
+
+Optional:
+
+- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--eureka_sd_configs--oauth2--tls_config--ca--config_map))
+- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--eureka_sd_configs--oauth2--tls_config--ca--secret))
+
+
+### Nested Schema for `spec.eureka_sd_configs.oauth2.tls_config.ca.config_map`
+
+Required:
+
+- `key` (String) The key to select.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
+
+
+
+### Nested Schema for `spec.eureka_sd_configs.oauth2.tls_config.ca.secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
+
+### Nested Schema for `spec.eureka_sd_configs.oauth2.tls_config.cert`
+
+Optional:
+
+- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--eureka_sd_configs--oauth2--tls_config--cert--config_map))
+- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--eureka_sd_configs--oauth2--tls_config--cert--secret))
+
+
+### Nested Schema for `spec.eureka_sd_configs.oauth2.tls_config.cert.config_map`
+
+Required:
+
+- `key` (String) The key to select.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
+
+
+
+### Nested Schema for `spec.eureka_sd_configs.oauth2.tls_config.cert.secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
+
+### Nested Schema for `spec.eureka_sd_configs.oauth2.tls_config.key_secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
### Nested Schema for `spec.eureka_sd_configs.tls_config`
@@ -1577,7 +2088,12 @@ Required:
Optional:
- `endpoint_params` (Map of String) 'endpointParams' configures the HTTP parameters to append to the tokenURL.
+- `no_proxy` (String) 'noProxy' is a comma-separated string that can contain IPs, CIDR notation, domain namesthat should be excluded from proxying. IP and domain names cancontain port numbers.It requires Prometheus >= v2.43.0.
+- `proxy_connect_header` (Map of String) ProxyConnectHeader optionally specifies headers to send toproxies during CONNECT requests.It requires Prometheus >= v2.43.0.
+- `proxy_from_environment` (Boolean) Whether to use the proxy configuration defined by environment variables (HTTP_PROXY, HTTPS_PROXY, and NO_PROXY).If unset, Prometheus uses its default value.It requires Prometheus >= v2.43.0.
+- `proxy_url` (String) 'proxyURL' defines the HTTP proxy server to use.It requires Prometheus >= v2.43.0.
- `scopes` (List of String) 'scopes' defines the OAuth2 scopes used for the token request.
+- `tls_config` (Attributes) TLS configuration to use when connecting to the OAuth2 server.It requires Prometheus >= v2.43.0. (see [below for nested schema](#nestedatt--spec--hetzner_sd_configs--oauth2--tls_config))
### Nested Schema for `spec.hetzner_sd_configs.oauth2.client_id`
@@ -1627,6 +2143,103 @@ Optional:
- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+### Nested Schema for `spec.hetzner_sd_configs.oauth2.tls_config`
+
+Optional:
+
+- `ca` (Attributes) Certificate authority used when verifying server certificates. (see [below for nested schema](#nestedatt--spec--hetzner_sd_configs--oauth2--tls_config--ca))
+- `cert` (Attributes) Client certificate to present when doing client-authentication. (see [below for nested schema](#nestedatt--spec--hetzner_sd_configs--oauth2--tls_config--cert))
+- `insecure_skip_verify` (Boolean) Disable target certificate validation.
+- `key_secret` (Attributes) Secret containing the client key file for the targets. (see [below for nested schema](#nestedatt--spec--hetzner_sd_configs--oauth2--tls_config--key_secret))
+- `max_version` (String) Maximum acceptable TLS version.It requires Prometheus >= v2.41.0.
+- `min_version` (String) Minimum acceptable TLS version.It requires Prometheus >= v2.35.0.
+- `server_name` (String) Used to verify the hostname for the targets.
+
+
+### Nested Schema for `spec.hetzner_sd_configs.oauth2.tls_config.ca`
+
+Optional:
+
+- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--hetzner_sd_configs--oauth2--tls_config--ca--config_map))
+- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--hetzner_sd_configs--oauth2--tls_config--ca--secret))
+
+
+### Nested Schema for `spec.hetzner_sd_configs.oauth2.tls_config.ca.config_map`
+
+Required:
+
+- `key` (String) The key to select.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
+
+
+
+### Nested Schema for `spec.hetzner_sd_configs.oauth2.tls_config.ca.secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
+
+### Nested Schema for `spec.hetzner_sd_configs.oauth2.tls_config.cert`
+
+Optional:
+
+- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--hetzner_sd_configs--oauth2--tls_config--cert--config_map))
+- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--hetzner_sd_configs--oauth2--tls_config--cert--secret))
+
+
+### Nested Schema for `spec.hetzner_sd_configs.oauth2.tls_config.cert.config_map`
+
+Required:
+
+- `key` (String) The key to select.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
+
+
+
+### Nested Schema for `spec.hetzner_sd_configs.oauth2.tls_config.cert.secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
+
+### Nested Schema for `spec.hetzner_sd_configs.oauth2.tls_config.key_secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
### Nested Schema for `spec.hetzner_sd_configs.tls_config`
@@ -1904,12 +2517,12 @@ Optional:
Required:
-- `role` (String) Role of the Kubernetes entities that should be discovered.
+- `role` (String) Role of the Kubernetes entities that should be discovered.Role 'Endpointslice' requires Prometheus >= v2.21.0
Optional:
- `api_server` (String) The API server address consisting of a hostname or IP address followedby an optional port number.If left empty, Prometheus is assumed to run insideof the cluster. It will discover API servers automatically and use the pod'sCA certificate and bearer token file at /var/run/secrets/kubernetes.io/serviceaccount/.
-- `attach_metadata` (Attributes) Optional metadata to attach to discovered targets.It requires Prometheus >= v2.35.0 for 'pod' role andPrometheus >= v2.37.0 for 'endpoints' and 'endpointslice' roles. (see [below for nested schema](#nestedatt--spec--kubernetes_sd_configs--attach_metadata))
+- `attach_metadata` (Attributes) Optional metadata to attach to discovered targets.It requires Prometheus >= v2.35.0 when using the 'Pod' role andPrometheus >= v2.37.0 for 'Endpoints' and 'Endpointslice' roles. (see [below for nested schema](#nestedatt--spec--kubernetes_sd_configs--attach_metadata))
- `authorization` (Attributes) Authorization header to use on every scrape request.Cannot be set at the same time as 'basicAuth', or 'oauth2'. (see [below for nested schema](#nestedatt--spec--kubernetes_sd_configs--authorization))
- `basic_auth` (Attributes) BasicAuth information to use on every scrape request.Cannot be set at the same time as 'authorization', or 'oauth2'. (see [below for nested schema](#nestedatt--spec--kubernetes_sd_configs--basic_auth))
- `enable_http2` (Boolean) Whether to enable HTTP2.
@@ -1920,8 +2533,8 @@ Optional:
- `proxy_connect_header` (Map of String) ProxyConnectHeader optionally specifies headers to send toproxies during CONNECT requests.It requires Prometheus >= v2.43.0.
- `proxy_from_environment` (Boolean) Whether to use the proxy configuration defined by environment variables (HTTP_PROXY, HTTPS_PROXY, and NO_PROXY).If unset, Prometheus uses its default value.It requires Prometheus >= v2.43.0.
- `proxy_url` (String) 'proxyURL' defines the HTTP proxy server to use.It requires Prometheus >= v2.43.0.
-- `selectors` (Attributes List) Selector to select objects. (see [below for nested schema](#nestedatt--spec--kubernetes_sd_configs--selectors))
-- `tls_config` (Attributes) TLS configuration to use on every scrape request. (see [below for nested schema](#nestedatt--spec--kubernetes_sd_configs--tls_config))
+- `selectors` (Attributes List) Selector to select objects.It requires Prometheus >= v2.17.0 (see [below for nested schema](#nestedatt--spec--kubernetes_sd_configs--selectors))
+- `tls_config` (Attributes) TLS configuration to connect to the Kubernetes API. (see [below for nested schema](#nestedatt--spec--kubernetes_sd_configs--tls_config))
### Nested Schema for `spec.kubernetes_sd_configs.attach_metadata`
@@ -1994,7 +2607,7 @@ Optional:
Optional:
- `names` (List of String) List of namespaces where to watch for resources.If empty and 'ownNamespace' isn't true, Prometheus watches for resources in all namespaces.
-- `own_namespace` (Boolean) Includes the namespace in which the Prometheus pod exists to the list of watched namesapces.
+- `own_namespace` (Boolean) Includes the namespace in which the Prometheus pod runs to the list of watched namespaces.
@@ -2009,7 +2622,12 @@ Required:
Optional:
- `endpoint_params` (Map of String) 'endpointParams' configures the HTTP parameters to append to the tokenURL.
+- `no_proxy` (String) 'noProxy' is a comma-separated string that can contain IPs, CIDR notation, domain namesthat should be excluded from proxying. IP and domain names cancontain port numbers.It requires Prometheus >= v2.43.0.
+- `proxy_connect_header` (Map of String) ProxyConnectHeader optionally specifies headers to send toproxies during CONNECT requests.It requires Prometheus >= v2.43.0.
+- `proxy_from_environment` (Boolean) Whether to use the proxy configuration defined by environment variables (HTTP_PROXY, HTTPS_PROXY, and NO_PROXY).If unset, Prometheus uses its default value.It requires Prometheus >= v2.43.0.
+- `proxy_url` (String) 'proxyURL' defines the HTTP proxy server to use.It requires Prometheus >= v2.43.0.
- `scopes` (List of String) 'scopes' defines the OAuth2 scopes used for the token request.
+- `tls_config` (Attributes) TLS configuration to use when connecting to the OAuth2 server.It requires Prometheus >= v2.43.0. (see [below for nested schema](#nestedatt--spec--kubernetes_sd_configs--oauth2--tls_config))
### Nested Schema for `spec.kubernetes_sd_configs.oauth2.client_id`
@@ -2059,18 +2677,115 @@ Optional:
- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+### Nested Schema for `spec.kubernetes_sd_configs.oauth2.tls_config`
-
-### Nested Schema for `spec.kubernetes_sd_configs.selectors`
+Optional:
-Required:
+- `ca` (Attributes) Certificate authority used when verifying server certificates. (see [below for nested schema](#nestedatt--spec--kubernetes_sd_configs--oauth2--tls_config--ca))
+- `cert` (Attributes) Client certificate to present when doing client-authentication. (see [below for nested schema](#nestedatt--spec--kubernetes_sd_configs--oauth2--tls_config--cert))
+- `insecure_skip_verify` (Boolean) Disable target certificate validation.
+- `key_secret` (Attributes) Secret containing the client key file for the targets. (see [below for nested schema](#nestedatt--spec--kubernetes_sd_configs--oauth2--tls_config--key_secret))
+- `max_version` (String) Maximum acceptable TLS version.It requires Prometheus >= v2.41.0.
+- `min_version` (String) Minimum acceptable TLS version.It requires Prometheus >= v2.35.0.
+- `server_name` (String) Used to verify the hostname for the targets.
+
+
+### Nested Schema for `spec.kubernetes_sd_configs.oauth2.tls_config.ca`
+
+Optional:
+
+- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--kubernetes_sd_configs--oauth2--tls_config--ca--config_map))
+- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--kubernetes_sd_configs--oauth2--tls_config--ca--secret))
+
+
+### Nested Schema for `spec.kubernetes_sd_configs.oauth2.tls_config.ca.config_map`
+
+Required:
+
+- `key` (String) The key to select.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
+
+
+
+### Nested Schema for `spec.kubernetes_sd_configs.oauth2.tls_config.ca.secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
+
+### Nested Schema for `spec.kubernetes_sd_configs.oauth2.tls_config.cert`
+
+Optional:
+
+- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--kubernetes_sd_configs--oauth2--tls_config--cert--config_map))
+- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--kubernetes_sd_configs--oauth2--tls_config--cert--secret))
+
+
+### Nested Schema for `spec.kubernetes_sd_configs.oauth2.tls_config.cert.config_map`
+
+Required:
+
+- `key` (String) The key to select.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
+
+
+
+### Nested Schema for `spec.kubernetes_sd_configs.oauth2.tls_config.cert.secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
+
+### Nested Schema for `spec.kubernetes_sd_configs.oauth2.tls_config.key_secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
+
+
+### Nested Schema for `spec.kubernetes_sd_configs.selectors`
+
+Required:
-- `role` (String) Role is role of the service in Kubernetes.
+- `role` (String) Role specifies the type of Kubernetes resource to limit the service discovery to.Accepted values are: Node, Pod, Endpoints, EndpointSlice, Service, Ingress.
Optional:
-- `field` (String)
-- `label` (String)
+- `field` (String) An optional field selector to limit the service discovery to resources which have fields with specific values.e.g: 'metadata.name=foobar'
+- `label` (String) An optional label selector to limit the service discovery to resources with specific labels and label values.e.g: 'node.kubernetes.io/instance-type=master'
@@ -2263,7 +2978,12 @@ Required:
Optional:
- `endpoint_params` (Map of String) 'endpointParams' configures the HTTP parameters to append to the tokenURL.
+- `no_proxy` (String) 'noProxy' is a comma-separated string that can contain IPs, CIDR notation, domain namesthat should be excluded from proxying. IP and domain names cancontain port numbers.It requires Prometheus >= v2.43.0.
+- `proxy_connect_header` (Map of String) ProxyConnectHeader optionally specifies headers to send toproxies during CONNECT requests.It requires Prometheus >= v2.43.0.
+- `proxy_from_environment` (Boolean) Whether to use the proxy configuration defined by environment variables (HTTP_PROXY, HTTPS_PROXY, and NO_PROXY).If unset, Prometheus uses its default value.It requires Prometheus >= v2.43.0.
+- `proxy_url` (String) 'proxyURL' defines the HTTP proxy server to use.It requires Prometheus >= v2.43.0.
- `scopes` (List of String) 'scopes' defines the OAuth2 scopes used for the token request.
+- `tls_config` (Attributes) TLS configuration to use when connecting to the OAuth2 server.It requires Prometheus >= v2.43.0. (see [below for nested schema](#nestedatt--spec--kuma_sd_configs--oauth2--tls_config))
### Nested Schema for `spec.kuma_sd_configs.oauth2.client_id`
@@ -2313,6 +3033,103 @@ Optional:
- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+### Nested Schema for `spec.kuma_sd_configs.oauth2.tls_config`
+
+Optional:
+
+- `ca` (Attributes) Certificate authority used when verifying server certificates. (see [below for nested schema](#nestedatt--spec--kuma_sd_configs--oauth2--tls_config--ca))
+- `cert` (Attributes) Client certificate to present when doing client-authentication. (see [below for nested schema](#nestedatt--spec--kuma_sd_configs--oauth2--tls_config--cert))
+- `insecure_skip_verify` (Boolean) Disable target certificate validation.
+- `key_secret` (Attributes) Secret containing the client key file for the targets. (see [below for nested schema](#nestedatt--spec--kuma_sd_configs--oauth2--tls_config--key_secret))
+- `max_version` (String) Maximum acceptable TLS version.It requires Prometheus >= v2.41.0.
+- `min_version` (String) Minimum acceptable TLS version.It requires Prometheus >= v2.35.0.
+- `server_name` (String) Used to verify the hostname for the targets.
+
+
+### Nested Schema for `spec.kuma_sd_configs.oauth2.tls_config.ca`
+
+Optional:
+
+- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--kuma_sd_configs--oauth2--tls_config--ca--config_map))
+- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--kuma_sd_configs--oauth2--tls_config--ca--secret))
+
+
+### Nested Schema for `spec.kuma_sd_configs.oauth2.tls_config.ca.config_map`
+
+Required:
+
+- `key` (String) The key to select.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
+
+
+
+### Nested Schema for `spec.kuma_sd_configs.oauth2.tls_config.ca.secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
+
+### Nested Schema for `spec.kuma_sd_configs.oauth2.tls_config.cert`
+
+Optional:
+
+- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--kuma_sd_configs--oauth2--tls_config--cert--config_map))
+- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--kuma_sd_configs--oauth2--tls_config--cert--secret))
+
+
+### Nested Schema for `spec.kuma_sd_configs.oauth2.tls_config.cert.config_map`
+
+Required:
+
+- `key` (String) The key to select.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
+
+
+
+### Nested Schema for `spec.kuma_sd_configs.oauth2.tls_config.cert.secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
+
+### Nested Schema for `spec.kuma_sd_configs.oauth2.tls_config.key_secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
### Nested Schema for `spec.kuma_sd_configs.tls_config`
@@ -2517,7 +3334,12 @@ Required:
Optional:
- `endpoint_params` (Map of String) 'endpointParams' configures the HTTP parameters to append to the tokenURL.
+- `no_proxy` (String) 'noProxy' is a comma-separated string that can contain IPs, CIDR notation, domain namesthat should be excluded from proxying. IP and domain names cancontain port numbers.It requires Prometheus >= v2.43.0.
+- `proxy_connect_header` (Map of String) ProxyConnectHeader optionally specifies headers to send toproxies during CONNECT requests.It requires Prometheus >= v2.43.0.
+- `proxy_from_environment` (Boolean) Whether to use the proxy configuration defined by environment variables (HTTP_PROXY, HTTPS_PROXY, and NO_PROXY).If unset, Prometheus uses its default value.It requires Prometheus >= v2.43.0.
+- `proxy_url` (String) 'proxyURL' defines the HTTP proxy server to use.It requires Prometheus >= v2.43.0.
- `scopes` (List of String) 'scopes' defines the OAuth2 scopes used for the token request.
+- `tls_config` (Attributes) TLS configuration to use when connecting to the OAuth2 server.It requires Prometheus >= v2.43.0. (see [below for nested schema](#nestedatt--spec--light_sail_sd_configs--oauth2--tls_config))
### Nested Schema for `spec.light_sail_sd_configs.oauth2.client_id`
@@ -2567,6 +3389,103 @@ Optional:
- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+### Nested Schema for `spec.light_sail_sd_configs.oauth2.tls_config`
+
+Optional:
+
+- `ca` (Attributes) Certificate authority used when verifying server certificates. (see [below for nested schema](#nestedatt--spec--light_sail_sd_configs--oauth2--tls_config--ca))
+- `cert` (Attributes) Client certificate to present when doing client-authentication. (see [below for nested schema](#nestedatt--spec--light_sail_sd_configs--oauth2--tls_config--cert))
+- `insecure_skip_verify` (Boolean) Disable target certificate validation.
+- `key_secret` (Attributes) Secret containing the client key file for the targets. (see [below for nested schema](#nestedatt--spec--light_sail_sd_configs--oauth2--tls_config--key_secret))
+- `max_version` (String) Maximum acceptable TLS version.It requires Prometheus >= v2.41.0.
+- `min_version` (String) Minimum acceptable TLS version.It requires Prometheus >= v2.35.0.
+- `server_name` (String) Used to verify the hostname for the targets.
+
+
+### Nested Schema for `spec.light_sail_sd_configs.oauth2.tls_config.ca`
+
+Optional:
+
+- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--light_sail_sd_configs--oauth2--tls_config--ca--config_map))
+- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--light_sail_sd_configs--oauth2--tls_config--ca--secret))
+
+
+### Nested Schema for `spec.light_sail_sd_configs.oauth2.tls_config.ca.config_map`
+
+Required:
+
+- `key` (String) The key to select.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
+
+
+
+### Nested Schema for `spec.light_sail_sd_configs.oauth2.tls_config.ca.secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
+
+### Nested Schema for `spec.light_sail_sd_configs.oauth2.tls_config.cert`
+
+Optional:
+
+- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--light_sail_sd_configs--oauth2--tls_config--cert--config_map))
+- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--light_sail_sd_configs--oauth2--tls_config--cert--secret))
+
+
+### Nested Schema for `spec.light_sail_sd_configs.oauth2.tls_config.cert.config_map`
+
+Required:
+
+- `key` (String) The key to select.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
+
+
+
+### Nested Schema for `spec.light_sail_sd_configs.oauth2.tls_config.cert.secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
+
+### Nested Schema for `spec.light_sail_sd_configs.oauth2.tls_config.key_secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
### Nested Schema for `spec.light_sail_sd_configs.secret_key`
@@ -2732,7 +3651,12 @@ Required:
Optional:
- `endpoint_params` (Map of String) 'endpointParams' configures the HTTP parameters to append to the tokenURL.
+- `no_proxy` (String) 'noProxy' is a comma-separated string that can contain IPs, CIDR notation, domain namesthat should be excluded from proxying. IP and domain names cancontain port numbers.It requires Prometheus >= v2.43.0.
+- `proxy_connect_header` (Map of String) ProxyConnectHeader optionally specifies headers to send toproxies during CONNECT requests.It requires Prometheus >= v2.43.0.
+- `proxy_from_environment` (Boolean) Whether to use the proxy configuration defined by environment variables (HTTP_PROXY, HTTPS_PROXY, and NO_PROXY).If unset, Prometheus uses its default value.It requires Prometheus >= v2.43.0.
+- `proxy_url` (String) 'proxyURL' defines the HTTP proxy server to use.It requires Prometheus >= v2.43.0.
- `scopes` (List of String) 'scopes' defines the OAuth2 scopes used for the token request.
+- `tls_config` (Attributes) TLS configuration to use when connecting to the OAuth2 server.It requires Prometheus >= v2.43.0. (see [below for nested schema](#nestedatt--spec--linode_sd_configs--oauth2--tls_config))
### Nested Schema for `spec.linode_sd_configs.oauth2.client_id`
@@ -2782,30 +3706,29 @@ Optional:
- `optional` (Boolean) Specify whether the Secret or its key must be defined
-
-
-### Nested Schema for `spec.linode_sd_configs.tls_config`
+
+### Nested Schema for `spec.linode_sd_configs.oauth2.tls_config`
Optional:
-- `ca` (Attributes) Certificate authority used when verifying server certificates. (see [below for nested schema](#nestedatt--spec--linode_sd_configs--tls_config--ca))
-- `cert` (Attributes) Client certificate to present when doing client-authentication. (see [below for nested schema](#nestedatt--spec--linode_sd_configs--tls_config--cert))
+- `ca` (Attributes) Certificate authority used when verifying server certificates. (see [below for nested schema](#nestedatt--spec--linode_sd_configs--oauth2--tls_config--ca))
+- `cert` (Attributes) Client certificate to present when doing client-authentication. (see [below for nested schema](#nestedatt--spec--linode_sd_configs--oauth2--tls_config--cert))
- `insecure_skip_verify` (Boolean) Disable target certificate validation.
-- `key_secret` (Attributes) Secret containing the client key file for the targets. (see [below for nested schema](#nestedatt--spec--linode_sd_configs--tls_config--key_secret))
+- `key_secret` (Attributes) Secret containing the client key file for the targets. (see [below for nested schema](#nestedatt--spec--linode_sd_configs--oauth2--tls_config--key_secret))
- `max_version` (String) Maximum acceptable TLS version.It requires Prometheus >= v2.41.0.
- `min_version` (String) Minimum acceptable TLS version.It requires Prometheus >= v2.35.0.
- `server_name` (String) Used to verify the hostname for the targets.
-
-### Nested Schema for `spec.linode_sd_configs.tls_config.ca`
+
+### Nested Schema for `spec.linode_sd_configs.oauth2.tls_config.ca`
Optional:
-- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--linode_sd_configs--tls_config--ca--config_map))
-- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--linode_sd_configs--tls_config--ca--secret))
+- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--linode_sd_configs--oauth2--tls_config--ca--config_map))
+- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--linode_sd_configs--oauth2--tls_config--ca--secret))
-
-### Nested Schema for `spec.linode_sd_configs.tls_config.ca.config_map`
+
+### Nested Schema for `spec.linode_sd_configs.oauth2.tls_config.ca.config_map`
Required:
@@ -2817,8 +3740,8 @@ Optional:
- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
-
-### Nested Schema for `spec.linode_sd_configs.tls_config.ca.secret`
+
+### Nested Schema for `spec.linode_sd_configs.oauth2.tls_config.ca.secret`
Required:
@@ -2831,16 +3754,114 @@ Optional:
-
-### Nested Schema for `spec.linode_sd_configs.tls_config.cert`
+
+### Nested Schema for `spec.linode_sd_configs.oauth2.tls_config.cert`
Optional:
-- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--linode_sd_configs--tls_config--cert--config_map))
-- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--linode_sd_configs--tls_config--cert--secret))
+- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--linode_sd_configs--oauth2--tls_config--cert--config_map))
+- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--linode_sd_configs--oauth2--tls_config--cert--secret))
-
-### Nested Schema for `spec.linode_sd_configs.tls_config.cert.config_map`
+
+### Nested Schema for `spec.linode_sd_configs.oauth2.tls_config.cert.config_map`
+
+Required:
+
+- `key` (String) The key to select.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
+
+
+
+### Nested Schema for `spec.linode_sd_configs.oauth2.tls_config.cert.secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
+
+### Nested Schema for `spec.linode_sd_configs.oauth2.tls_config.key_secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
+
+
+### Nested Schema for `spec.linode_sd_configs.tls_config`
+
+Optional:
+
+- `ca` (Attributes) Certificate authority used when verifying server certificates. (see [below for nested schema](#nestedatt--spec--linode_sd_configs--tls_config--ca))
+- `cert` (Attributes) Client certificate to present when doing client-authentication. (see [below for nested schema](#nestedatt--spec--linode_sd_configs--tls_config--cert))
+- `insecure_skip_verify` (Boolean) Disable target certificate validation.
+- `key_secret` (Attributes) Secret containing the client key file for the targets. (see [below for nested schema](#nestedatt--spec--linode_sd_configs--tls_config--key_secret))
+- `max_version` (String) Maximum acceptable TLS version.It requires Prometheus >= v2.41.0.
+- `min_version` (String) Minimum acceptable TLS version.It requires Prometheus >= v2.35.0.
+- `server_name` (String) Used to verify the hostname for the targets.
+
+
+### Nested Schema for `spec.linode_sd_configs.tls_config.ca`
+
+Optional:
+
+- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--linode_sd_configs--tls_config--ca--config_map))
+- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--linode_sd_configs--tls_config--ca--secret))
+
+
+### Nested Schema for `spec.linode_sd_configs.tls_config.ca.config_map`
+
+Required:
+
+- `key` (String) The key to select.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
+
+
+
+### Nested Schema for `spec.linode_sd_configs.tls_config.ca.secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
+
+### Nested Schema for `spec.linode_sd_configs.tls_config.cert`
+
+Optional:
+
+- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--linode_sd_configs--tls_config--cert--config_map))
+- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--linode_sd_configs--tls_config--cert--secret))
+
+
+### Nested Schema for `spec.linode_sd_configs.tls_config.cert.config_map`
Required:
@@ -2989,7 +4010,12 @@ Required:
Optional:
- `endpoint_params` (Map of String) 'endpointParams' configures the HTTP parameters to append to the tokenURL.
+- `no_proxy` (String) 'noProxy' is a comma-separated string that can contain IPs, CIDR notation, domain namesthat should be excluded from proxying. IP and domain names cancontain port numbers.It requires Prometheus >= v2.43.0.
+- `proxy_connect_header` (Map of String) ProxyConnectHeader optionally specifies headers to send toproxies during CONNECT requests.It requires Prometheus >= v2.43.0.
+- `proxy_from_environment` (Boolean) Whether to use the proxy configuration defined by environment variables (HTTP_PROXY, HTTPS_PROXY, and NO_PROXY).If unset, Prometheus uses its default value.It requires Prometheus >= v2.43.0.
+- `proxy_url` (String) 'proxyURL' defines the HTTP proxy server to use.It requires Prometheus >= v2.43.0.
- `scopes` (List of String) 'scopes' defines the OAuth2 scopes used for the token request.
+- `tls_config` (Attributes) TLS configuration to use when connecting to the OAuth2 server.It requires Prometheus >= v2.43.0. (see [below for nested schema](#nestedatt--spec--nomad_sd_configs--oauth2--tls_config))
### Nested Schema for `spec.nomad_sd_configs.oauth2.client_id`
@@ -3039,6 +4065,103 @@ Optional:
- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+### Nested Schema for `spec.nomad_sd_configs.oauth2.tls_config`
+
+Optional:
+
+- `ca` (Attributes) Certificate authority used when verifying server certificates. (see [below for nested schema](#nestedatt--spec--nomad_sd_configs--oauth2--tls_config--ca))
+- `cert` (Attributes) Client certificate to present when doing client-authentication. (see [below for nested schema](#nestedatt--spec--nomad_sd_configs--oauth2--tls_config--cert))
+- `insecure_skip_verify` (Boolean) Disable target certificate validation.
+- `key_secret` (Attributes) Secret containing the client key file for the targets. (see [below for nested schema](#nestedatt--spec--nomad_sd_configs--oauth2--tls_config--key_secret))
+- `max_version` (String) Maximum acceptable TLS version.It requires Prometheus >= v2.41.0.
+- `min_version` (String) Minimum acceptable TLS version.It requires Prometheus >= v2.35.0.
+- `server_name` (String) Used to verify the hostname for the targets.
+
+
+### Nested Schema for `spec.nomad_sd_configs.oauth2.tls_config.ca`
+
+Optional:
+
+- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--nomad_sd_configs--oauth2--tls_config--ca--config_map))
+- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--nomad_sd_configs--oauth2--tls_config--ca--secret))
+
+
+### Nested Schema for `spec.nomad_sd_configs.oauth2.tls_config.ca.config_map`
+
+Required:
+
+- `key` (String) The key to select.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
+
+
+
+### Nested Schema for `spec.nomad_sd_configs.oauth2.tls_config.ca.secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
+
+### Nested Schema for `spec.nomad_sd_configs.oauth2.tls_config.cert`
+
+Optional:
+
+- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--nomad_sd_configs--oauth2--tls_config--cert--config_map))
+- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--nomad_sd_configs--oauth2--tls_config--cert--secret))
+
+
+### Nested Schema for `spec.nomad_sd_configs.oauth2.tls_config.cert.config_map`
+
+Required:
+
+- `key` (String) The key to select.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
+
+
+
+### Nested Schema for `spec.nomad_sd_configs.oauth2.tls_config.cert.secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
+
+### Nested Schema for `spec.nomad_sd_configs.oauth2.tls_config.key_secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
### Nested Schema for `spec.nomad_sd_configs.tls_config`
@@ -3138,6 +4261,171 @@ Optional:
+
+### Nested Schema for `spec.oauth2`
+
+Required:
+
+- `client_id` (Attributes) 'clientId' specifies a key of a Secret or ConfigMap containing theOAuth2 client's ID. (see [below for nested schema](#nestedatt--spec--oauth2--client_id))
+- `client_secret` (Attributes) 'clientSecret' specifies a key of a Secret containing the OAuth2client's secret. (see [below for nested schema](#nestedatt--spec--oauth2--client_secret))
+- `token_url` (String) 'tokenURL' configures the URL to fetch the token from.
+
+Optional:
+
+- `endpoint_params` (Map of String) 'endpointParams' configures the HTTP parameters to append to the tokenURL.
+- `no_proxy` (String) 'noProxy' is a comma-separated string that can contain IPs, CIDR notation, domain namesthat should be excluded from proxying. IP and domain names cancontain port numbers.It requires Prometheus >= v2.43.0.
+- `proxy_connect_header` (Map of String) ProxyConnectHeader optionally specifies headers to send toproxies during CONNECT requests.It requires Prometheus >= v2.43.0.
+- `proxy_from_environment` (Boolean) Whether to use the proxy configuration defined by environment variables (HTTP_PROXY, HTTPS_PROXY, and NO_PROXY).If unset, Prometheus uses its default value.It requires Prometheus >= v2.43.0.
+- `proxy_url` (String) 'proxyURL' defines the HTTP proxy server to use.It requires Prometheus >= v2.43.0.
+- `scopes` (List of String) 'scopes' defines the OAuth2 scopes used for the token request.
+- `tls_config` (Attributes) TLS configuration to use when connecting to the OAuth2 server.It requires Prometheus >= v2.43.0. (see [below for nested schema](#nestedatt--spec--oauth2--tls_config))
+
+
+### Nested Schema for `spec.oauth2.client_id`
+
+Optional:
+
+- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--oauth2--client_id--config_map))
+- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--oauth2--client_id--secret))
+
+
+### Nested Schema for `spec.oauth2.client_id.config_map`
+
+Required:
+
+- `key` (String) The key to select.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
+
+
+
+### Nested Schema for `spec.oauth2.client_id.secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
+
+### Nested Schema for `spec.oauth2.client_secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
+### Nested Schema for `spec.oauth2.tls_config`
+
+Optional:
+
+- `ca` (Attributes) Certificate authority used when verifying server certificates. (see [below for nested schema](#nestedatt--spec--oauth2--tls_config--ca))
+- `cert` (Attributes) Client certificate to present when doing client-authentication. (see [below for nested schema](#nestedatt--spec--oauth2--tls_config--cert))
+- `insecure_skip_verify` (Boolean) Disable target certificate validation.
+- `key_secret` (Attributes) Secret containing the client key file for the targets. (see [below for nested schema](#nestedatt--spec--oauth2--tls_config--key_secret))
+- `max_version` (String) Maximum acceptable TLS version.It requires Prometheus >= v2.41.0.
+- `min_version` (String) Minimum acceptable TLS version.It requires Prometheus >= v2.35.0.
+- `server_name` (String) Used to verify the hostname for the targets.
+
+
+### Nested Schema for `spec.oauth2.tls_config.ca`
+
+Optional:
+
+- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--oauth2--tls_config--ca--config_map))
+- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--oauth2--tls_config--ca--secret))
+
+
+### Nested Schema for `spec.oauth2.tls_config.ca.config_map`
+
+Required:
+
+- `key` (String) The key to select.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
+
+
+
+### Nested Schema for `spec.oauth2.tls_config.ca.secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
+
+### Nested Schema for `spec.oauth2.tls_config.cert`
+
+Optional:
+
+- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--oauth2--tls_config--cert--config_map))
+- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--oauth2--tls_config--cert--secret))
+
+
+### Nested Schema for `spec.oauth2.tls_config.cert.config_map`
+
+Required:
+
+- `key` (String) The key to select.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
+
+
+
+### Nested Schema for `spec.oauth2.tls_config.cert.secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
+
+### Nested Schema for `spec.oauth2.tls_config.key_secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
+
### Nested Schema for `spec.openstack_sd_configs`
@@ -3424,7 +4712,12 @@ Required:
Optional:
- `endpoint_params` (Map of String) 'endpointParams' configures the HTTP parameters to append to the tokenURL.
+- `no_proxy` (String) 'noProxy' is a comma-separated string that can contain IPs, CIDR notation, domain namesthat should be excluded from proxying. IP and domain names cancontain port numbers.It requires Prometheus >= v2.43.0.
+- `proxy_connect_header` (Map of String) ProxyConnectHeader optionally specifies headers to send toproxies during CONNECT requests.It requires Prometheus >= v2.43.0.
+- `proxy_from_environment` (Boolean) Whether to use the proxy configuration defined by environment variables (HTTP_PROXY, HTTPS_PROXY, and NO_PROXY).If unset, Prometheus uses its default value.It requires Prometheus >= v2.43.0.
+- `proxy_url` (String) 'proxyURL' defines the HTTP proxy server to use.It requires Prometheus >= v2.43.0.
- `scopes` (List of String) 'scopes' defines the OAuth2 scopes used for the token request.
+- `tls_config` (Attributes) TLS configuration to use when connecting to the OAuth2 server.It requires Prometheus >= v2.43.0. (see [below for nested schema](#nestedatt--spec--puppet_dbsd_configs--oauth2--tls_config))
### Nested Schema for `spec.puppet_dbsd_configs.oauth2.client_id`
@@ -3474,6 +4767,103 @@ Optional:
- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+### Nested Schema for `spec.puppet_dbsd_configs.oauth2.tls_config`
+
+Optional:
+
+- `ca` (Attributes) Certificate authority used when verifying server certificates. (see [below for nested schema](#nestedatt--spec--puppet_dbsd_configs--oauth2--tls_config--ca))
+- `cert` (Attributes) Client certificate to present when doing client-authentication. (see [below for nested schema](#nestedatt--spec--puppet_dbsd_configs--oauth2--tls_config--cert))
+- `insecure_skip_verify` (Boolean) Disable target certificate validation.
+- `key_secret` (Attributes) Secret containing the client key file for the targets. (see [below for nested schema](#nestedatt--spec--puppet_dbsd_configs--oauth2--tls_config--key_secret))
+- `max_version` (String) Maximum acceptable TLS version.It requires Prometheus >= v2.41.0.
+- `min_version` (String) Minimum acceptable TLS version.It requires Prometheus >= v2.35.0.
+- `server_name` (String) Used to verify the hostname for the targets.
+
+
+### Nested Schema for `spec.puppet_dbsd_configs.oauth2.tls_config.ca`
+
+Optional:
+
+- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--puppet_dbsd_configs--oauth2--tls_config--ca--config_map))
+- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--puppet_dbsd_configs--oauth2--tls_config--ca--secret))
+
+
+### Nested Schema for `spec.puppet_dbsd_configs.oauth2.tls_config.ca.config_map`
+
+Required:
+
+- `key` (String) The key to select.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
+
+
+
+### Nested Schema for `spec.puppet_dbsd_configs.oauth2.tls_config.ca.secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
+
+### Nested Schema for `spec.puppet_dbsd_configs.oauth2.tls_config.cert`
+
+Optional:
+
+- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--puppet_dbsd_configs--oauth2--tls_config--cert--config_map))
+- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--puppet_dbsd_configs--oauth2--tls_config--cert--secret))
+
+
+### Nested Schema for `spec.puppet_dbsd_configs.oauth2.tls_config.cert.config_map`
+
+Required:
+
+- `key` (String) The key to select.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
+
+
+
+### Nested Schema for `spec.puppet_dbsd_configs.oauth2.tls_config.cert.secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
+
+### Nested Schema for `spec.puppet_dbsd_configs.oauth2.tls_config.key_secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
### Nested Schema for `spec.puppet_dbsd_configs.tls_config`
diff --git a/docs/data-sources/monitoring_coreos_com_service_monitor_v1_manifest.md b/docs/data-sources/monitoring_coreos_com_service_monitor_v1_manifest.md
index 16d716c3c..59f548531 100644
--- a/docs/data-sources/monitoring_coreos_com_service_monitor_v1_manifest.md
+++ b/docs/data-sources/monitoring_coreos_com_service_monitor_v1_manifest.md
@@ -209,7 +209,12 @@ Required:
Optional:
- `endpoint_params` (Map of String) 'endpointParams' configures the HTTP parameters to append to the tokenURL.
+- `no_proxy` (String) 'noProxy' is a comma-separated string that can contain IPs, CIDR notation, domain namesthat should be excluded from proxying. IP and domain names cancontain port numbers.It requires Prometheus >= v2.43.0.
+- `proxy_connect_header` (Map of String) ProxyConnectHeader optionally specifies headers to send toproxies during CONNECT requests.It requires Prometheus >= v2.43.0.
+- `proxy_from_environment` (Boolean) Whether to use the proxy configuration defined by environment variables (HTTP_PROXY, HTTPS_PROXY, and NO_PROXY).If unset, Prometheus uses its default value.It requires Prometheus >= v2.43.0.
+- `proxy_url` (String) 'proxyURL' defines the HTTP proxy server to use.It requires Prometheus >= v2.43.0.
- `scopes` (List of String) 'scopes' defines the OAuth2 scopes used for the token request.
+- `tls_config` (Attributes) TLS configuration to use when connecting to the OAuth2 server.It requires Prometheus >= v2.43.0. (see [below for nested schema](#nestedatt--spec--endpoints--oauth2--tls_config))
### Nested Schema for `spec.endpoints.oauth2.client_id`
@@ -259,6 +264,103 @@ Optional:
- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+### Nested Schema for `spec.endpoints.oauth2.tls_config`
+
+Optional:
+
+- `ca` (Attributes) Certificate authority used when verifying server certificates. (see [below for nested schema](#nestedatt--spec--endpoints--oauth2--tls_config--ca))
+- `cert` (Attributes) Client certificate to present when doing client-authentication. (see [below for nested schema](#nestedatt--spec--endpoints--oauth2--tls_config--cert))
+- `insecure_skip_verify` (Boolean) Disable target certificate validation.
+- `key_secret` (Attributes) Secret containing the client key file for the targets. (see [below for nested schema](#nestedatt--spec--endpoints--oauth2--tls_config--key_secret))
+- `max_version` (String) Maximum acceptable TLS version.It requires Prometheus >= v2.41.0.
+- `min_version` (String) Minimum acceptable TLS version.It requires Prometheus >= v2.35.0.
+- `server_name` (String) Used to verify the hostname for the targets.
+
+
+### Nested Schema for `spec.endpoints.oauth2.tls_config.ca`
+
+Optional:
+
+- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--endpoints--oauth2--tls_config--ca--config_map))
+- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--endpoints--oauth2--tls_config--ca--secret))
+
+
+### Nested Schema for `spec.endpoints.oauth2.tls_config.ca.config_map`
+
+Required:
+
+- `key` (String) The key to select.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
+
+
+
+### Nested Schema for `spec.endpoints.oauth2.tls_config.ca.secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
+
+### Nested Schema for `spec.endpoints.oauth2.tls_config.cert`
+
+Optional:
+
+- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--endpoints--oauth2--tls_config--cert--config_map))
+- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--endpoints--oauth2--tls_config--cert--secret))
+
+
+### Nested Schema for `spec.endpoints.oauth2.tls_config.cert.config_map`
+
+Required:
+
+- `key` (String) The key to select.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined
+
+
+
+### Nested Schema for `spec.endpoints.oauth2.tls_config.cert.secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
+
+### Nested Schema for `spec.endpoints.oauth2.tls_config.key_secret`
+
+Required:
+
+- `key` (String) The key of the secret to select from. Must be a valid secret key.
+
+Optional:
+
+- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.
+- `optional` (Boolean) Specify whether the Secret or its key must be defined
+
+
+
### Nested Schema for `spec.endpoints.relabelings`
diff --git a/docs/data-sources/mq_services_k8s_aws_broker_v1alpha1_manifest.md b/docs/data-sources/mq_services_k8s_aws_broker_v1alpha1_manifest.md
index 9773ee559..43e21e325 100644
--- a/docs/data-sources/mq_services_k8s_aws_broker_v1alpha1_manifest.md
+++ b/docs/data-sources/mq_services_k8s_aws_broker_v1alpha1_manifest.md
@@ -172,6 +172,7 @@ Optional:
Optional:
- `name` (String)
+- `namespace` (String)
@@ -188,3 +189,4 @@ Optional:
Optional:
- `name` (String)
+- `namespace` (String)
diff --git a/docs/data-sources/networkfirewall_services_k8s_aws_firewall_v1alpha1_manifest.md b/docs/data-sources/networkfirewall_services_k8s_aws_firewall_v1alpha1_manifest.md
index 0f81e5cd6..87409575e 100644
--- a/docs/data-sources/networkfirewall_services_k8s_aws_firewall_v1alpha1_manifest.md
+++ b/docs/data-sources/networkfirewall_services_k8s_aws_firewall_v1alpha1_manifest.md
@@ -74,7 +74,7 @@ Optional:
Optional:
-- `i_p_address_type` (String)
+- `ip_address_type` (String)
- `subnet_id` (String)
diff --git a/docs/data-sources/opensearchservice_services_k8s_aws_domain_v1alpha1_manifest.md b/docs/data-sources/opensearchservice_services_k8s_aws_domain_v1alpha1_manifest.md
index a155e30a3..627c68677 100644
--- a/docs/data-sources/opensearchservice_services_k8s_aws_domain_v1alpha1_manifest.md
+++ b/docs/data-sources/opensearchservice_services_k8s_aws_domain_v1alpha1_manifest.md
@@ -55,24 +55,28 @@ Optional:
Required:
-- `name` (String) The name of the Amazon OpenSearch Service domain you're creating. Domainnames are unique across the domains owned by an account within an AWS region.Domain names must start with a lowercase letter and can contain the followingcharacters: a-z (lowercase), 0-9, and - (hyphen).
+- `name` (String) Name of the OpenSearch Service domain to create. Domain names are uniqueacross the domains owned by an account within an Amazon Web Services Region.
Optional:
-- `access_policies` (String) IAM access policy as a JSON-formatted string.
-- `advanced_options` (Map of String) Option to allow references to indices in an HTTP request body. Must be falsewhen configuring access to individual sub-resources. By default, the valueis true. See Advanced cluster parameters (http://docs.aws.amazon.com/opensearch-service/latest/developerguide/createupdatedomains.html#createdomain-configure-advanced-options)for more information.
-- `advanced_security_options` (Attributes) Specifies advanced security options. (see [below for nested schema](#nestedatt--spec--advanced_security_options))
-- `auto_tune_options` (Attributes) Specifies Auto-Tune options. (see [below for nested schema](#nestedatt--spec--auto_tune_options))
-- `cluster_config` (Attributes) Configuration options for a domain. Specifies the instance type and numberof instances in the domain. (see [below for nested schema](#nestedatt--spec--cluster_config))
-- `cognito_options` (Attributes) Options to specify the Cognito user and identity pools for OpenSearch Dashboardsauthentication. For more information, see Configuring Amazon Cognito authenticationfor OpenSearch Dashboards (http://docs.aws.amazon.com/opensearch-service/latest/developerguide/cognito-auth.html). (see [below for nested schema](#nestedatt--spec--cognito_options))
-- `domain_endpoint_options` (Attributes) Options to specify configurations that will be applied to the domain endpoint. (see [below for nested schema](#nestedatt--spec--domain_endpoint_options))
-- `ebs_options` (Attributes) Options to enable, disable, and specify the type and size of EBS storagevolumes. (see [below for nested schema](#nestedatt--spec--ebs_options))
-- `encryption_at_rest_options` (Attributes) Options for encryption of data at rest. (see [below for nested schema](#nestedatt--spec--encryption_at_rest_options))
-- `engine_version` (String) String of format Elasticsearch_X.Y or OpenSearch_X.Y to specify the engineversion for the Amazon OpenSearch Service domain. For example, 'OpenSearch_1.0'or 'Elasticsearch_7.9'. For more information, see Creating and managing AmazonOpenSearch Service domains (http://docs.aws.amazon.com/opensearch-service/latest/developerguide/createupdatedomains.html#createdomains).
-- `log_publishing_options` (Attributes) Map of LogType and LogPublishingOption, each containing options to publisha given type of OpenSearch log. (see [below for nested schema](#nestedatt--spec--log_publishing_options))
-- `node_to_node_encryption_options` (Attributes) Node-to-node encryption options. (see [below for nested schema](#nestedatt--spec--node_to_node_encryption_options))
-- `tags` (Attributes List) A list of Tag added during domain creation. (see [below for nested schema](#nestedatt--spec--tags))
-- `vpc_options` (Attributes) Options to specify the subnets and security groups for a VPC endpoint. Formore information, see Launching your Amazon OpenSearch Service domains usinga VPC (http://docs.aws.amazon.com/opensearch-service/latest/developerguide/vpc.html). (see [below for nested schema](#nestedatt--spec--vpc_options))
+- `access_policies` (String) Identity and Access Management (IAM) policy document specifying the accesspolicies for the new domain.
+- `advanced_options` (Map of String) Key-value pairs to specify advanced configuration options. The followingkey-value pairs are supported: * 'rest.action.multi.allow_explicit_index': 'true' | 'false' - Note the use of a string rather than a boolean. Specifies whether explicit references to indexes are allowed inside the body of HTTP requests. If you want to configure access policies for domain sub-resources, such as specific indexes and domain APIs, you must disable this property. Default is true. * 'indices.fielddata.cache.size': '80' - Note the use of a string rather than a boolean. Specifies the percentage of heap space allocated to field data. Default is unbounded. * 'indices.query.bool.max_clause_count': '1024' - Note the use of a string rather than a boolean. Specifies the maximum number of clauses allowed in a Lucene boolean query. Default is 1,024. Queries with more than the permitted number of clauses result in a TooManyClauses error. * 'override_main_response_version': 'true' | 'false' - Note the use of a string rather than a boolean. Specifies whether the domain reports its version as 7.10 to allow Elasticsearch OSS clients and plugins to continue working with it. Default is false when creating a domain and true when upgrading a domain.For more information, see Advanced cluster parameters (https://docs.aws.amazon.com/opensearch-service/latest/developerguide/createupdatedomains.html#createdomain-configure-advanced-options).
+- `advanced_security_options` (Attributes) Options for fine-grained access control. (see [below for nested schema](#nestedatt--spec--advanced_security_options))
+- `aiml_options` (Attributes) Options for all machine learning features for the specified domain. (see [below for nested schema](#nestedatt--spec--aiml_options))
+- `auto_tune_options` (Attributes) Options for Auto-Tune. (see [below for nested schema](#nestedatt--spec--auto_tune_options))
+- `cluster_config` (Attributes) Container for the cluster configuration of a domain. (see [below for nested schema](#nestedatt--spec--cluster_config))
+- `cognito_options` (Attributes) Key-value pairs to configure Amazon Cognito authentication. For more information,see Configuring Amazon Cognito authentication for OpenSearch Dashboards (https://docs.aws.amazon.com/opensearch-service/latest/developerguide/cognito-auth.html). (see [below for nested schema](#nestedatt--spec--cognito_options))
+- `domain_endpoint_options` (Attributes) Additional options for the domain endpoint, such as whether to require HTTPSfor all traffic. (see [below for nested schema](#nestedatt--spec--domain_endpoint_options))
+- `ebs_options` (Attributes) Container for the parameters required to enable EBS-based storage for anOpenSearch Service domain. (see [below for nested schema](#nestedatt--spec--ebs_options))
+- `encryption_at_rest_options` (Attributes) Key-value pairs to enable encryption at rest. (see [below for nested schema](#nestedatt--spec--encryption_at_rest_options))
+- `engine_version` (String) String of format Elasticsearch_X.Y or OpenSearch_X.Y to specify the engineversion for the OpenSearch Service domain. For example, OpenSearch_1.0 orElasticsearch_7.9. For more information, see Creating and managing AmazonOpenSearch Service domains (https://docs.aws.amazon.com/opensearch-service/latest/developerguide/createupdatedomains.html#createdomains).
+- `ip_address_type` (String) Specify either dual stack or IPv4 as your IP address type. Dual stack allowsyou to share domain resources across IPv4 and IPv6 address types, and isthe recommended option. If you set your IP address type to dual stack, youcan't change your address type later.
+- `log_publishing_options` (Attributes) Key-value pairs to configure log publishing. (see [below for nested schema](#nestedatt--spec--log_publishing_options))
+- `node_to_node_encryption_options` (Attributes) Enables node-to-node encryption. (see [below for nested schema](#nestedatt--spec--node_to_node_encryption_options))
+- `off_peak_window_options` (Attributes) Specifies a daily 10-hour time block during which OpenSearch Service canperform configuration changes on the domain, including service software updatesand Auto-Tune enhancements that require a blue/green deployment. If no optionsare specified, the default start time of 10:00 P.M. local time (for the Regionthat the domain is created in) is used. (see [below for nested schema](#nestedatt--spec--off_peak_window_options))
+- `software_update_options` (Attributes) Software update options for the domain. (see [below for nested schema](#nestedatt--spec--software_update_options))
+- `tags` (Attributes List) List of tags to add to the domain upon creation. (see [below for nested schema](#nestedatt--spec--tags))
+- `vpc_options` (Attributes) Container for the values required to configure VPC access domains. If youdon't specify these values, OpenSearch Service creates the domain with apublic endpoint. For more information, see Launching your Amazon OpenSearchService domains using a VPC (https://docs.aws.amazon.com/opensearch-service/latest/developerguide/vpc.html). (see [below for nested schema](#nestedatt--spec--vpc_options))
### Nested Schema for `spec.advanced_security_options`
@@ -82,15 +86,27 @@ Optional:
- `anonymous_auth_enabled` (Boolean)
- `enabled` (Boolean)
- `internal_user_database_enabled` (Boolean)
-- `master_user_options` (Attributes) Credentials for the master user: username and password, ARN, or both. (see [below for nested schema](#nestedatt--spec--advanced_security_options--master_user_options))
-- `s_aml_options` (Attributes) The SAML application configuration for the domain. (see [below for nested schema](#nestedatt--spec--advanced_security_options--s_aml_options))
+- `jwt_options` (Attributes) The JWT authentication and authorization configuration for an Amazon OpenSearchService domain. (see [below for nested schema](#nestedatt--spec--advanced_security_options--jwt_options))
+- `master_user_options` (Attributes) Credentials for the master user for a domain. (see [below for nested schema](#nestedatt--spec--advanced_security_options--master_user_options))
+- `s_aml_options` (Attributes) The SAML authentication configuration for an Amazon OpenSearch Service domain. (see [below for nested schema](#nestedatt--spec--advanced_security_options--s_aml_options))
+
+
+### Nested Schema for `spec.advanced_security_options.jwt_options`
+
+Optional:
+
+- `enabled` (Boolean)
+- `public_key` (String)
+- `roles_key` (String)
+- `subject_key` (String)
+
### Nested Schema for `spec.advanced_security_options.master_user_options`
Optional:
-- `master_user_arn` (String) The Amazon Resource Name (ARN) of the domain. See Identifiers for IAM Entities(http://docs.aws.amazon.com/IAM/latest/UserGuide/index.html) in Using AWSIdentity and Access Management for more information.
+- `master_user_arn` (String) The Amazon Resource Name (ARN) of the domain. See Identifiers for IAM Entities(https://docs.aws.amazon.com/IAM/latest/UserGuide/index.html) in Using AmazonWeb Services Identity and Access Management for more information.
- `master_user_name` (String)
- `master_user_password` (Attributes) SecretKeyReference combines a k8s corev1.SecretReference with aspecific key within the referred-to Secret (see [below for nested schema](#nestedatt--spec--advanced_security_options--master_user_options--master_user_password))
@@ -114,7 +130,7 @@ Optional:
Optional:
- `enabled` (Boolean)
-- `idp` (Attributes) The SAML identity povider's information. (see [below for nested schema](#nestedatt--spec--advanced_security_options--s_aml_options--idp))
+- `idp` (Attributes) The SAML identity povider information. (see [below for nested schema](#nestedatt--spec--advanced_security_options--s_aml_options--idp))
- `master_backend_role` (String)
- `master_user_name` (String)
- `roles_key` (String)
@@ -132,6 +148,22 @@ Optional:
+
+### Nested Schema for `spec.aiml_options`
+
+Optional:
+
+- `natural_language_query_generation_options` (Attributes) Container for parameters required to enable the natural language query generationfeature. (see [below for nested schema](#nestedatt--spec--aiml_options--natural_language_query_generation_options))
+
+
+### Nested Schema for `spec.aiml_options.natural_language_query_generation_options`
+
+Optional:
+
+- `desired_state` (String)
+
+
+
### Nested Schema for `spec.auto_tune_options`
@@ -139,6 +171,7 @@ Optional:
- `desired_state` (String) The Auto-Tune desired state. Valid values are ENABLED and DISABLED.
- `maintenance_schedules` (Attributes List) (see [below for nested schema](#nestedatt--spec--auto_tune_options--maintenance_schedules))
+- `use_off_peak_window` (Boolean)
### Nested Schema for `spec.auto_tune_options.maintenance_schedules`
@@ -146,7 +179,7 @@ Optional:
Optional:
- `cron_expression_for_recurrence` (String)
-- `duration` (Attributes) The maintenance schedule duration: duration value and duration unit. SeeAuto-Tune for Amazon OpenSearch Service (https://docs.aws.amazon.com/opensearch-service/latest/developerguide/auto-tune.html)for more information. (see [below for nested schema](#nestedatt--spec--auto_tune_options--maintenance_schedules--duration))
+- `duration` (Attributes) The duration of a maintenance schedule. For more information, see Auto-Tunefor Amazon OpenSearch Service (https://docs.aws.amazon.com/opensearch-service/latest/developerguide/auto-tune.html). (see [below for nested schema](#nestedatt--spec--auto_tune_options--maintenance_schedules--duration))
- `start_at` (String)
@@ -154,8 +187,8 @@ Optional:
Optional:
-- `unit` (String) The unit of a maintenance schedule duration. Valid value is HOUR. See Auto-Tunefor Amazon OpenSearch Service (https://docs.aws.amazon.com/opensearch-service/latest/developerguide/auto-tune.html)for more information.
-- `value` (Number) Integer to specify the value of a maintenance schedule duration. See Auto-Tunefor Amazon OpenSearch Service (https://docs.aws.amazon.com/opensearch-service/latest/developerguide/auto-tune.html)for more information.
+- `unit` (String) The unit of a maintenance schedule duration. Valid value is HOUR.
+- `value` (Number) Integer that specifies the value of a maintenance schedule duration.
@@ -165,16 +198,17 @@ Optional:
Optional:
-- `cold_storage_options` (Attributes) Specifies the configuration for cold storage options such as enabled (see [below for nested schema](#nestedatt--spec--cluster_config--cold_storage_options))
+- `cold_storage_options` (Attributes) Container for the parameters required to enable cold storage for an OpenSearchService domain. For more information, see Cold storage for Amazon OpenSearchService (https://docs.aws.amazon.com/opensearch-service/latest/developerguide/cold-storage.html). (see [below for nested schema](#nestedatt--spec--cluster_config--cold_storage_options))
- `dedicated_master_count` (Number)
- `dedicated_master_enabled` (Boolean)
- `dedicated_master_type` (String)
- `instance_count` (Number)
- `instance_type` (String)
+- `multi_az_with_standby_enabled` (Boolean)
- `warm_count` (Number)
- `warm_enabled` (Boolean)
- `warm_type` (String)
-- `zone_awareness_config` (Attributes) The zone awareness configuration for the domain cluster, such as the numberof availability zones. (see [below for nested schema](#nestedatt--spec--cluster_config--zone_awareness_config))
+- `zone_awareness_config` (Attributes) The zone awareness configuration for an Amazon OpenSearch Service domain. (see [below for nested schema](#nestedatt--spec--cluster_config--zone_awareness_config))
- `zone_awareness_enabled` (Boolean)
@@ -211,7 +245,7 @@ Optional:
Optional:
- `custom_endpoint` (String)
-- `custom_endpoint_certificate_arn` (String) The Amazon Resource Name (ARN) of the domain. See Identifiers for IAM Entities(http://docs.aws.amazon.com/IAM/latest/UserGuide/index.html) in Using AWSIdentity and Access Management for more information.
+- `custom_endpoint_certificate_arn` (String) The Amazon Resource Name (ARN) of the domain. See Identifiers for IAM Entities(https://docs.aws.amazon.com/IAM/latest/UserGuide/index.html) in Using AmazonWeb Services Identity and Access Management for more information.
- `custom_endpoint_enabled` (Boolean)
- `enforce_https` (Boolean)
- `tls_security_policy` (String)
@@ -226,7 +260,7 @@ Optional:
- `iops` (Number)
- `throughput` (Number)
- `volume_size` (Number)
-- `volume_type` (String) The type of EBS volume, standard, gp2, gp3 or io1. See Configuring EBS-basedStorage (http://docs.aws.amazon.com/opensearch-service/latest/developerguide/opensearch-createupdatedomains.html#opensearch-createdomain-configure-ebs)for more information.
+- `volume_type` (String) The type of EBS volume that a domain uses. For more information, see ConfiguringEBS-based storage (https://docs.aws.amazon.com/opensearch-service/latest/developerguide/opensearch-createupdatedomains.html#opensearch-createdomain-configure-ebs).
@@ -255,13 +289,47 @@ Optional:
- `enabled` (Boolean)
+
+### Nested Schema for `spec.off_peak_window_options`
+
+Optional:
+
+- `enabled` (Boolean)
+- `off_peak_window` (Attributes) A custom 10-hour, low-traffic window during which OpenSearch Service canperform mandatory configuration changes on the domain. These actions caninclude scheduled service software updates and blue/green Auto-Tune enhancements.OpenSearch Service will schedule these actions during the window that youspecify.If you don't specify a window start time, it defaults to 10:00 P.M. localtime.For more information, see Defining off-peak maintenance windows for AmazonOpenSearch Service (https://docs.aws.amazon.com/opensearch-service/latest/developerguide/off-peak.html). (see [below for nested schema](#nestedatt--spec--off_peak_window_options--off_peak_window))
+
+
+### Nested Schema for `spec.off_peak_window_options.off_peak_window`
+
+Optional:
+
+- `window_start_time` (Attributes) The desired start time for an off-peak maintenance window (https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_OffPeakWindow.html). (see [below for nested schema](#nestedatt--spec--off_peak_window_options--off_peak_window--window_start_time))
+
+
+### Nested Schema for `spec.off_peak_window_options.off_peak_window.window_start_time`
+
+Optional:
+
+- `hours` (Number)
+- `minutes` (Number)
+
+
+
+
+
+### Nested Schema for `spec.software_update_options`
+
+Optional:
+
+- `auto_software_update_enabled` (Boolean)
+
+
### Nested Schema for `spec.tags`
Optional:
-- `key` (String) A string of length from 1 to 128 characters that specifies the key for atag. Tag keys must be unique for the domain to which they're attached.
-- `value` (String) A string of length from 0 to 256 characters that specifies the value fora tag. Tag values can be null and don't have to be unique in a tag set.
+- `key` (String) A string between 1 to 128 characters that specifies the key for a tag. Tagkeys must be unique for the domain to which they're attached.
+- `value` (String) A string between 0 to 256 characters that specifies the value for a tag.Tag values can be null and don't have to be unique in a tag set.
diff --git a/docs/data-sources/org_eclipse_che_che_cluster_v2_manifest.md b/docs/data-sources/org_eclipse_che_che_cluster_v2_manifest.md
index cd946b49b..4e0166c17 100644
--- a/docs/data-sources/org_eclipse_che_che_cluster_v2_manifest.md
+++ b/docs/data-sources/org_eclipse_che_che_cluster_v2_manifest.md
@@ -3,12 +3,12 @@
page_title: "k8s_org_eclipse_che_che_cluster_v2_manifest Data Source - terraform-provider-k8s"
subcategory: "org.eclipse.che"
description: |-
- The 'CheCluster' custom resource allows defining and managing Eclipse Che server installation.Based on these settings, the Operator automatically creates and maintains several ConfigMaps:'che', 'plugin-registry', 'devfile-registry' that will contain the appropriate environment variablesof the various components of the installation. These generated ConfigMaps must NOT be updated manually.
+ The 'CheCluster' custom resource allows defining and managing Eclipse Che server installation.Based on these settings, the Operator automatically creates and maintains several ConfigMaps:'che', 'plugin-registry' that will contain the appropriate environment variablesof the various components of the installation. These generated ConfigMaps must NOT be updated manually.
---
# k8s_org_eclipse_che_che_cluster_v2_manifest (Data Source)
-The 'CheCluster' custom resource allows defining and managing Eclipse Che server installation.Based on these settings, the Operator automatically creates and maintains several ConfigMaps:'che', 'plugin-registry', 'devfile-registry' that will contain the appropriate environment variablesof the various components of the installation. These generated ConfigMaps must NOT be updated manually.
+The 'CheCluster' custom resource allows defining and managing Eclipse Che server installation.Based on these settings, the Operator automatically creates and maintains several ConfigMaps:'che', 'plugin-registry' that will contain the appropriate environment variablesof the various components of the installation. These generated ConfigMaps must NOT be updated manually.
## Example Usage
@@ -412,7 +412,7 @@ Optional:
Optional:
-- `deployment` (Attributes) Deployment override options. (see [below for nested schema](#nestedatt--spec--components--devfile_registry--deployment))
+- `deployment` (Attributes) Deprecated deployment override options. (see [below for nested schema](#nestedatt--spec--components--devfile_registry--deployment))
- `disable_internal_registry` (Boolean) Disables internal devfile registry.
- `external_devfile_registries` (Attributes List) External devfile registries serving sample ready-to-use devfiles. (see [below for nested schema](#nestedatt--spec--components--devfile_registry--external_devfile_registries))
diff --git a/docs/data-sources/policy_karmada_io_cluster_propagation_policy_v1alpha1_manifest.md b/docs/data-sources/policy_karmada_io_cluster_propagation_policy_v1alpha1_manifest.md
index 37fe2eb13..af3229e6f 100644
--- a/docs/data-sources/policy_karmada_io_cluster_propagation_policy_v1alpha1_manifest.md
+++ b/docs/data-sources/policy_karmada_io_cluster_propagation_policy_v1alpha1_manifest.md
@@ -67,6 +67,7 @@ Optional:
- `priority` (Number) Priority indicates the importance of a policy(PropagationPolicy or ClusterPropagationPolicy).A policy will be applied for the matched resource templates if there isno other policies with higher priority at the point of the resourcetemplate be processed.Once a resource template has been claimed by a policy, by default it willnot be preempted by following policies even with a higher priority.See Preemption for more details.In case of two policies have the same priority, the one with a more precisematching rules in ResourceSelectors wins:- matching by name(resourceSelector.name) has higher priority than by selector(resourceSelector.labelSelector)- matching by selector(resourceSelector.labelSelector) has higher priority than by APIVersion(resourceSelector.apiVersion) and Kind(resourceSelector.kind).If there is still no winner at this point, the one with the lower alphabeticorder wins, e.g. policy 'bar' has higher priority than 'foo'.The higher the value, the higher the priority. Defaults to zero.
- `propagate_deps` (Boolean) PropagateDeps tells if relevant resources should be propagated automatically.Take 'Deployment' which referencing 'ConfigMap' and 'Secret' as an example, when 'propagateDeps' is 'true',the referencing resources could be omitted(for saving config effort) from 'resourceSelectors' as they will bepropagated along with the Deployment. In addition to the propagating process, the referencing resources will bemigrated along with the Deployment in the fail-over scenario.Defaults to false.
- `scheduler_name` (String) SchedulerName represents which scheduler to proceed the scheduling.If specified, the policy will be dispatched by specified scheduler.If not specified, the policy will be dispatched by default scheduler.
+- `suspension` (Attributes) Suspension declares the policy for suspending different aspects of propagation.nil means no suspension. no default values. (see [below for nested schema](#nestedatt--spec--suspension))
### Nested Schema for `spec.resource_selectors`
@@ -360,3 +361,20 @@ Optional:
- `min_groups` (Number) MinGroups restricts the minimum number of cluster groups to be selected.Defaults to 1.
- `spread_by_field` (String) SpreadByField represents the fields on Karmada cluster API used fordynamically grouping member clusters into different groups.Resources will be spread among different cluster groups.Available fields for spreading are: cluster, region, zone, and provider.SpreadByField should not co-exist with SpreadByLabel.If both SpreadByField and SpreadByLabel are empty, SpreadByField will be set to 'cluster' by system.
- `spread_by_label` (String) SpreadByLabel represents the label key used forgrouping member clusters into different groups.Resources will be spread among different cluster groups.SpreadByLabel should not co-exist with SpreadByField.
+
+
+
+
+### Nested Schema for `spec.suspension`
+
+Optional:
+
+- `dispatching` (Boolean) Dispatching controls whether dispatching should be suspended.nil means not suspend, no default value, only accepts 'true'.Note: true means stop propagating to all clusters. Can not co-existwith DispatchingOnClusters which is used to suspend particular clusters.
+- `dispatching_on_clusters` (Attributes) DispatchingOnClusters declares a list of clusters to which the dispatchingshould be suspended.Note: Can not co-exist with Dispatching which is used to suspend all. (see [below for nested schema](#nestedatt--spec--suspension--dispatching_on_clusters))
+
+
+### Nested Schema for `spec.suspension.dispatching_on_clusters`
+
+Optional:
+
+- `cluster_names` (List of String) ClusterNames is the list of clusters to be selected.
diff --git a/docs/data-sources/policy_karmada_io_propagation_policy_v1alpha1_manifest.md b/docs/data-sources/policy_karmada_io_propagation_policy_v1alpha1_manifest.md
index 908af7954..73b959d53 100644
--- a/docs/data-sources/policy_karmada_io_propagation_policy_v1alpha1_manifest.md
+++ b/docs/data-sources/policy_karmada_io_propagation_policy_v1alpha1_manifest.md
@@ -69,6 +69,7 @@ Optional:
- `priority` (Number) Priority indicates the importance of a policy(PropagationPolicy or ClusterPropagationPolicy).A policy will be applied for the matched resource templates if there isno other policies with higher priority at the point of the resourcetemplate be processed.Once a resource template has been claimed by a policy, by default it willnot be preempted by following policies even with a higher priority.See Preemption for more details.In case of two policies have the same priority, the one with a more precisematching rules in ResourceSelectors wins:- matching by name(resourceSelector.name) has higher priority than by selector(resourceSelector.labelSelector)- matching by selector(resourceSelector.labelSelector) has higher priority than by APIVersion(resourceSelector.apiVersion) and Kind(resourceSelector.kind).If there is still no winner at this point, the one with the lower alphabeticorder wins, e.g. policy 'bar' has higher priority than 'foo'.The higher the value, the higher the priority. Defaults to zero.
- `propagate_deps` (Boolean) PropagateDeps tells if relevant resources should be propagated automatically.Take 'Deployment' which referencing 'ConfigMap' and 'Secret' as an example, when 'propagateDeps' is 'true',the referencing resources could be omitted(for saving config effort) from 'resourceSelectors' as they will bepropagated along with the Deployment. In addition to the propagating process, the referencing resources will bemigrated along with the Deployment in the fail-over scenario.Defaults to false.
- `scheduler_name` (String) SchedulerName represents which scheduler to proceed the scheduling.If specified, the policy will be dispatched by specified scheduler.If not specified, the policy will be dispatched by default scheduler.
+- `suspension` (Attributes) Suspension declares the policy for suspending different aspects of propagation.nil means no suspension. no default values. (see [below for nested schema](#nestedatt--spec--suspension))
### Nested Schema for `spec.resource_selectors`
@@ -362,3 +363,20 @@ Optional:
- `min_groups` (Number) MinGroups restricts the minimum number of cluster groups to be selected.Defaults to 1.
- `spread_by_field` (String) SpreadByField represents the fields on Karmada cluster API used fordynamically grouping member clusters into different groups.Resources will be spread among different cluster groups.Available fields for spreading are: cluster, region, zone, and provider.SpreadByField should not co-exist with SpreadByLabel.If both SpreadByField and SpreadByLabel are empty, SpreadByField will be set to 'cluster' by system.
- `spread_by_label` (String) SpreadByLabel represents the label key used forgrouping member clusters into different groups.Resources will be spread among different cluster groups.SpreadByLabel should not co-exist with SpreadByField.
+
+
+
+
+### Nested Schema for `spec.suspension`
+
+Optional:
+
+- `dispatching` (Boolean) Dispatching controls whether dispatching should be suspended.nil means not suspend, no default value, only accepts 'true'.Note: true means stop propagating to all clusters. Can not co-existwith DispatchingOnClusters which is used to suspend particular clusters.
+- `dispatching_on_clusters` (Attributes) DispatchingOnClusters declares a list of clusters to which the dispatchingshould be suspended.Note: Can not co-exist with Dispatching which is used to suspend all. (see [below for nested schema](#nestedatt--spec--suspension--dispatching_on_clusters))
+
+
+### Nested Schema for `spec.suspension.dispatching_on_clusters`
+
+Optional:
+
+- `cluster_names` (List of String) ClusterNames is the list of clusters to be selected.
diff --git a/docs/data-sources/prometheusservice_services_k8s_aws_alert_manager_definition_v1alpha1_manifest.md b/docs/data-sources/prometheusservice_services_k8s_aws_alert_manager_definition_v1alpha1_manifest.md
index 342730e9a..90df7b1d8 100644
--- a/docs/data-sources/prometheusservice_services_k8s_aws_alert_manager_definition_v1alpha1_manifest.md
+++ b/docs/data-sources/prometheusservice_services_k8s_aws_alert_manager_definition_v1alpha1_manifest.md
@@ -75,3 +75,4 @@ Optional:
Optional:
- `name` (String)
+- `namespace` (String)
diff --git a/docs/data-sources/prometheusservice_services_k8s_aws_logging_configuration_v1alpha1_manifest.md b/docs/data-sources/prometheusservice_services_k8s_aws_logging_configuration_v1alpha1_manifest.md
index a0f3a77b9..a88ce92d9 100644
--- a/docs/data-sources/prometheusservice_services_k8s_aws_logging_configuration_v1alpha1_manifest.md
+++ b/docs/data-sources/prometheusservice_services_k8s_aws_logging_configuration_v1alpha1_manifest.md
@@ -75,3 +75,4 @@ Optional:
Optional:
- `name` (String)
+- `namespace` (String)
diff --git a/docs/data-sources/prometheusservice_services_k8s_aws_rule_groups_namespace_v1alpha1_manifest.md b/docs/data-sources/prometheusservice_services_k8s_aws_rule_groups_namespace_v1alpha1_manifest.md
index 6d880e244..8876a9555 100644
--- a/docs/data-sources/prometheusservice_services_k8s_aws_rule_groups_namespace_v1alpha1_manifest.md
+++ b/docs/data-sources/prometheusservice_services_k8s_aws_rule_groups_namespace_v1alpha1_manifest.md
@@ -77,3 +77,4 @@ Optional:
Optional:
- `name` (String)
+- `namespace` (String)
diff --git a/docs/data-sources/rds_services_k8s_aws_db_cluster_v1alpha1_manifest.md b/docs/data-sources/rds_services_k8s_aws_db_cluster_v1alpha1_manifest.md
index e8c75946e..97460be80 100644
--- a/docs/data-sources/rds_services_k8s_aws_db_cluster_v1alpha1_manifest.md
+++ b/docs/data-sources/rds_services_k8s_aws_db_cluster_v1alpha1_manifest.md
@@ -129,6 +129,7 @@ Optional:
Optional:
- `name` (String)
+- `namespace` (String)
@@ -145,6 +146,7 @@ Optional:
Optional:
- `name` (String)
+- `namespace` (String)
@@ -161,6 +163,7 @@ Optional:
Optional:
- `name` (String)
+- `namespace` (String)
@@ -190,6 +193,7 @@ Optional:
Optional:
- `name` (String)
+- `namespace` (String)
@@ -237,3 +241,4 @@ Optional:
Optional:
- `name` (String)
+- `namespace` (String)
diff --git a/docs/data-sources/rds_services_k8s_aws_db_instance_v1alpha1_manifest.md b/docs/data-sources/rds_services_k8s_aws_db_instance_v1alpha1_manifest.md
index b3de07077..bd0626bd2 100644
--- a/docs/data-sources/rds_services_k8s_aws_db_instance_v1alpha1_manifest.md
+++ b/docs/data-sources/rds_services_k8s_aws_db_instance_v1alpha1_manifest.md
@@ -139,6 +139,7 @@ Optional:
Optional:
- `name` (String)
+- `namespace` (String)
@@ -155,6 +156,7 @@ Optional:
Optional:
- `name` (String)
+- `namespace` (String)
@@ -171,6 +173,7 @@ Optional:
Optional:
- `name` (String)
+- `namespace` (String)
@@ -200,6 +203,7 @@ Optional:
Optional:
- `name` (String)
+- `namespace` (String)
@@ -234,3 +238,4 @@ Optional:
Optional:
- `name` (String)
+- `namespace` (String)
diff --git a/docs/data-sources/rds_services_k8s_aws_db_subnet_group_v1alpha1_manifest.md b/docs/data-sources/rds_services_k8s_aws_db_subnet_group_v1alpha1_manifest.md
index 3f011d166..ebe03718a 100644
--- a/docs/data-sources/rds_services_k8s_aws_db_subnet_group_v1alpha1_manifest.md
+++ b/docs/data-sources/rds_services_k8s_aws_db_subnet_group_v1alpha1_manifest.md
@@ -77,6 +77,7 @@ Optional:
Optional:
- `name` (String)
+- `namespace` (String)
diff --git a/docs/data-sources/route53_services_k8s_aws_record_set_v1alpha1_manifest.md b/docs/data-sources/route53_services_k8s_aws_record_set_v1alpha1_manifest.md
index 4abe05aa6..43756b77b 100644
--- a/docs/data-sources/route53_services_k8s_aws_record_set_v1alpha1_manifest.md
+++ b/docs/data-sources/route53_services_k8s_aws_record_set_v1alpha1_manifest.md
@@ -193,6 +193,7 @@ Optional:
Optional:
- `name` (String)
+- `namespace` (String)
diff --git a/docs/data-sources/route53resolver_services_k8s_aws_resolver_endpoint_v1alpha1_manifest.md b/docs/data-sources/route53resolver_services_k8s_aws_resolver_endpoint_v1alpha1_manifest.md
index f4bb520bd..24b823aa5 100644
--- a/docs/data-sources/route53resolver_services_k8s_aws_resolver_endpoint_v1alpha1_manifest.md
+++ b/docs/data-sources/route53resolver_services_k8s_aws_resolver_endpoint_v1alpha1_manifest.md
@@ -89,6 +89,7 @@ Optional:
Optional:
- `name` (String)
+- `namespace` (String)
@@ -106,6 +107,7 @@ Optional:
Optional:
- `name` (String)
+- `namespace` (String)
diff --git a/docs/data-sources/sns_services_k8s_aws_platform_application_v1alpha1_manifest.md b/docs/data-sources/sns_services_k8s_aws_platform_application_v1alpha1_manifest.md
index 4dd18e5ca..dfc3bdbf4 100644
--- a/docs/data-sources/sns_services_k8s_aws_platform_application_v1alpha1_manifest.md
+++ b/docs/data-sources/sns_services_k8s_aws_platform_application_v1alpha1_manifest.md
@@ -88,6 +88,7 @@ Optional:
Optional:
- `name` (String)
+- `namespace` (String)
@@ -104,6 +105,7 @@ Optional:
Optional:
- `name` (String)
+- `namespace` (String)
@@ -120,6 +122,7 @@ Optional:
Optional:
- `name` (String)
+- `namespace` (String)
@@ -136,6 +139,7 @@ Optional:
Optional:
- `name` (String)
+- `namespace` (String)
@@ -152,3 +156,4 @@ Optional:
Optional:
- `name` (String)
+- `namespace` (String)
diff --git a/docs/data-sources/sns_services_k8s_aws_platform_endpoint_v1alpha1_manifest.md b/docs/data-sources/sns_services_k8s_aws_platform_endpoint_v1alpha1_manifest.md
index 92ddf64df..57944cd71 100644
--- a/docs/data-sources/sns_services_k8s_aws_platform_endpoint_v1alpha1_manifest.md
+++ b/docs/data-sources/sns_services_k8s_aws_platform_endpoint_v1alpha1_manifest.md
@@ -56,9 +56,9 @@ Optional:
Required:
- `platform_application_arn` (String) PlatformApplicationArn returned from CreatePlatformApplication is used tocreate a an endpoint.
-- `token` (String) Unique identifier created by the notification service for an app on a device.The specific name for Token will vary, depending on which notification serviceis being used. For example, when using APNS as the notification service,you need the device token. Alternatively, when using GCM (Firebase CloudMessaging) or ADM, the device token equivalent is called the registrationID.
+- `token` (String)
Optional:
-- `custom_user_data` (String) Arbitrary user data to associate with the endpoint. Amazon SNS does not usethis data. The data must be in UTF-8 format and less than 2KB.
+- `custom_user_data` (String)
- `enabled` (String)
diff --git a/docs/data-sources/sns_services_k8s_aws_subscription_v1alpha1_manifest.md b/docs/data-sources/sns_services_k8s_aws_subscription_v1alpha1_manifest.md
index a4d84c7de..390a2a272 100644
--- a/docs/data-sources/sns_services_k8s_aws_subscription_v1alpha1_manifest.md
+++ b/docs/data-sources/sns_services_k8s_aws_subscription_v1alpha1_manifest.md
@@ -82,3 +82,4 @@ Optional:
Optional:
- `name` (String)
+- `namespace` (String)
diff --git a/docs/data-sources/sns_services_k8s_aws_topic_v1alpha1_manifest.md b/docs/data-sources/sns_services_k8s_aws_topic_v1alpha1_manifest.md
index bb873939d..25b39e9b4 100644
--- a/docs/data-sources/sns_services_k8s_aws_topic_v1alpha1_manifest.md
+++ b/docs/data-sources/sns_services_k8s_aws_topic_v1alpha1_manifest.md
@@ -85,6 +85,7 @@ Optional:
Optional:
- `name` (String)
+- `namespace` (String)
@@ -101,6 +102,7 @@ Optional:
Optional:
- `name` (String)
+- `namespace` (String)
diff --git a/docs/data-sources/source_toolkit_fluxcd_io_bucket_v1beta2_manifest.md b/docs/data-sources/source_toolkit_fluxcd_io_bucket_v1beta2_manifest.md
index 014a045ef..2f63b94f7 100644
--- a/docs/data-sources/source_toolkit_fluxcd_io_bucket_v1beta2_manifest.md
+++ b/docs/data-sources/source_toolkit_fluxcd_io_bucket_v1beta2_manifest.md
@@ -70,6 +70,7 @@ Optional:
- `proxy_secret_ref` (Attributes) ProxySecretRef specifies the Secret containing the proxy configurationto use while communicating with the Bucket server.Only supported for the generic provider. (see [below for nested schema](#nestedatt--spec--proxy_secret_ref))
- `region` (String) Region of the Endpoint where the BucketName is located in.
- `secret_ref` (Attributes) SecretRef specifies the Secret containing authentication credentialsfor the Bucket. (see [below for nested schema](#nestedatt--spec--secret_ref))
+- `sts` (Attributes) STS specifies the required configuration to use a Security TokenService for fetching temporary credentials to authenticate in aBucket provider.This field is only supported for the 'aws' provider. (see [below for nested schema](#nestedatt--spec--sts))
- `suspend` (Boolean) Suspend tells the controller to suspend the reconciliation of thisBucket.
- `timeout` (String) Timeout for fetch operations, defaults to 60s.
@@ -111,3 +112,12 @@ Required:
Required:
- `name` (String) Name of the referent.
+
+
+
+### Nested Schema for `spec.sts`
+
+Required:
+
+- `endpoint` (String) Endpoint is the HTTP/S endpoint of the Security Token Service fromwhere temporary credentials will be fetched.
+- `provider` (String) Provider of the Security Token Service.
diff --git a/docs/data-sources/sqs_services_k8s_aws_queue_v1alpha1_manifest.md b/docs/data-sources/sqs_services_k8s_aws_queue_v1alpha1_manifest.md
index dab1dab1e..f172cfae3 100644
--- a/docs/data-sources/sqs_services_k8s_aws_queue_v1alpha1_manifest.md
+++ b/docs/data-sources/sqs_services_k8s_aws_queue_v1alpha1_manifest.md
@@ -88,6 +88,7 @@ Optional:
Optional:
- `name` (String)
+- `namespace` (String)
@@ -104,3 +105,4 @@ Optional:
Optional:
- `name` (String)
+- `namespace` (String)
diff --git a/docs/data-sources/traefik_io_middleware_v1alpha1_manifest.md b/docs/data-sources/traefik_io_middleware_v1alpha1_manifest.md
index b795ee503..dfbec54fe 100644
--- a/docs/data-sources/traefik_io_middleware_v1alpha1_manifest.md
+++ b/docs/data-sources/traefik_io_middleware_v1alpha1_manifest.md
@@ -60,7 +60,7 @@ Optional:
- `buffering` (Attributes) Buffering holds the buffering middleware configuration.This middleware retries or limits the size of requests that can be forwarded to backends.More info: https://doc.traefik.io/traefik/v3.1/middlewares/http/buffering/#maxrequestbodybytes (see [below for nested schema](#nestedatt--spec--buffering))
- `chain` (Attributes) Chain holds the configuration of the chain middleware.This middleware enables to define reusable combinations of other pieces of middleware.More info: https://doc.traefik.io/traefik/v3.1/middlewares/http/chain/ (see [below for nested schema](#nestedatt--spec--chain))
- `circuit_breaker` (Attributes) CircuitBreaker holds the circuit breaker configuration. (see [below for nested schema](#nestedatt--spec--circuit_breaker))
-- `compress` (Attributes) Compress holds the compress middleware configuration.This middleware compresses responses before sending them to the client, using gzip compression.More info: https://doc.traefik.io/traefik/v3.1/middlewares/http/compress/ (see [below for nested schema](#nestedatt--spec--compress))
+- `compress` (Attributes) Compress holds the compress middleware configuration.This middleware compresses responses before sending them to the client, using gzip, brotli, or zstd compression.More info: https://doc.traefik.io/traefik/v3.1/middlewares/http/compress/ (see [below for nested schema](#nestedatt--spec--compress))
- `content_type` (Attributes) ContentType holds the content-type middleware configuration.This middleware exists to enable the correct behavior until at least the default one can be changed in a future version. (see [below for nested schema](#nestedatt--spec--content_type))
- `digest_auth` (Attributes) DigestAuth holds the digest auth middleware configuration.This middleware restricts access to your services to known users.More info: https://doc.traefik.io/traefik/v3.1/middlewares/http/digestauth/ (see [below for nested schema](#nestedatt--spec--digest_auth))
- `errors` (Attributes) ErrorPage holds the custom error middleware configuration.This middleware returns a custom page in lieu of the default, according to configured ranges of HTTP Status codes.More info: https://doc.traefik.io/traefik/v3.1/middlewares/http/errorpages/ (see [below for nested schema](#nestedatt--spec--errors))
@@ -150,6 +150,7 @@ Optional:
Optional:
- `default_encoding` (String) DefaultEncoding specifies the default encoding if the 'Accept-Encoding' header is not in the request or contains a wildcard ('*').
+- `encodings` (List of String) Encodings defines the list of supported compression algorithms.
- `excluded_content_types` (List of String) ExcludedContentTypes defines the list of content types to compare the Content-Type header of the incoming requests and responses before compressing.'application/grpc' is always excluded.
- `included_content_types` (List of String) IncludedContentTypes defines the list of content types to compare the Content-Type header of the responses before compressing.
- `min_response_body_bytes` (Number) MinResponseBodyBytes defines the minimum amount of bytes a response body must have to be compressed.Default: 1024.
diff --git a/docs/data-sources/work_karmada_io_cluster_resource_binding_v1alpha2_manifest.md b/docs/data-sources/work_karmada_io_cluster_resource_binding_v1alpha2_manifest.md
index b7dcb3c51..540c0a8cb 100644
--- a/docs/data-sources/work_karmada_io_cluster_resource_binding_v1alpha2_manifest.md
+++ b/docs/data-sources/work_karmada_io_cluster_resource_binding_v1alpha2_manifest.md
@@ -72,6 +72,7 @@ Optional:
- `required_by` (Attributes List) RequiredBy represents the list of Bindings that depend on the referencing resource. (see [below for nested schema](#nestedatt--spec--required_by))
- `reschedule_triggered_at` (String) RescheduleTriggeredAt is a timestamp representing when the referenced resource is triggered rescheduling.When this field is updated, it means a rescheduling is manually triggered by user, and the expected behaviorof this action is to do a complete recalculation without referring to last scheduling results.It works with the status.lastScheduledTime field, and only when this timestamp is later than timestamp instatus.lastScheduledTime will the rescheduling actually execute, otherwise, ignored.It is represented in RFC3339 form (like '2006-01-02T15:04:05Z') and is in UTC.
- `scheduler_name` (String) SchedulerName represents which scheduler to proceed the scheduling.It inherits directly from the associated PropagationPolicy(or ClusterPropagationPolicy).
+- `suspension` (Attributes) Suspension declares the policy for suspending different aspects of propagation.nil means no suspension. no default values. (see [below for nested schema](#nestedatt--spec--suspension))
### Nested Schema for `spec.resource`
@@ -475,3 +476,20 @@ Required:
Optional:
- `replicas` (Number) Replicas in target cluster
+
+
+
+
+### Nested Schema for `spec.suspension`
+
+Optional:
+
+- `dispatching` (Boolean) Dispatching controls whether dispatching should be suspended.nil means not suspend, no default value, only accepts 'true'.Note: true means stop propagating to all clusters. Can not co-existwith DispatchingOnClusters which is used to suspend particular clusters.
+- `dispatching_on_clusters` (Attributes) DispatchingOnClusters declares a list of clusters to which the dispatchingshould be suspended.Note: Can not co-exist with Dispatching which is used to suspend all. (see [below for nested schema](#nestedatt--spec--suspension--dispatching_on_clusters))
+
+
+### Nested Schema for `spec.suspension.dispatching_on_clusters`
+
+Optional:
+
+- `cluster_names` (List of String) ClusterNames is the list of clusters to be selected.
diff --git a/docs/data-sources/work_karmada_io_resource_binding_v1alpha2_manifest.md b/docs/data-sources/work_karmada_io_resource_binding_v1alpha2_manifest.md
index d97ee06f1..07c3ff569 100644
--- a/docs/data-sources/work_karmada_io_resource_binding_v1alpha2_manifest.md
+++ b/docs/data-sources/work_karmada_io_resource_binding_v1alpha2_manifest.md
@@ -74,6 +74,7 @@ Optional:
- `required_by` (Attributes List) RequiredBy represents the list of Bindings that depend on the referencing resource. (see [below for nested schema](#nestedatt--spec--required_by))
- `reschedule_triggered_at` (String) RescheduleTriggeredAt is a timestamp representing when the referenced resource is triggered rescheduling.When this field is updated, it means a rescheduling is manually triggered by user, and the expected behaviorof this action is to do a complete recalculation without referring to last scheduling results.It works with the status.lastScheduledTime field, and only when this timestamp is later than timestamp instatus.lastScheduledTime will the rescheduling actually execute, otherwise, ignored.It is represented in RFC3339 form (like '2006-01-02T15:04:05Z') and is in UTC.
- `scheduler_name` (String) SchedulerName represents which scheduler to proceed the scheduling.It inherits directly from the associated PropagationPolicy(or ClusterPropagationPolicy).
+- `suspension` (Attributes) Suspension declares the policy for suspending different aspects of propagation.nil means no suspension. no default values. (see [below for nested schema](#nestedatt--spec--suspension))
### Nested Schema for `spec.resource`
@@ -477,3 +478,20 @@ Required:
Optional:
- `replicas` (Number) Replicas in target cluster
+
+
+
+
+### Nested Schema for `spec.suspension`
+
+Optional:
+
+- `dispatching` (Boolean) Dispatching controls whether dispatching should be suspended.nil means not suspend, no default value, only accepts 'true'.Note: true means stop propagating to all clusters. Can not co-existwith DispatchingOnClusters which is used to suspend particular clusters.
+- `dispatching_on_clusters` (Attributes) DispatchingOnClusters declares a list of clusters to which the dispatchingshould be suspended.Note: Can not co-exist with Dispatching which is used to suspend all. (see [below for nested schema](#nestedatt--spec--suspension--dispatching_on_clusters))
+
+
+### Nested Schema for `spec.suspension.dispatching_on_clusters`
+
+Optional:
+
+- `cluster_names` (List of String) ClusterNames is the list of clusters to be selected.
diff --git a/docs/data-sources/work_karmada_io_work_v1alpha1_manifest.md b/docs/data-sources/work_karmada_io_work_v1alpha1_manifest.md
index 7b77a9f7b..f0b020f91 100644
--- a/docs/data-sources/work_karmada_io_work_v1alpha1_manifest.md
+++ b/docs/data-sources/work_karmada_io_work_v1alpha1_manifest.md
@@ -52,6 +52,7 @@ Optional:
Optional:
+- `suspend_dispatching` (Boolean) SuspendDispatching controls whether dispatching shouldbe suspended, nil means not suspend.Note: true means stop propagating to all clusters.
- `workload` (Attributes) Workload represents the manifest workload to be deployed on managed cluster. (see [below for nested schema](#nestedatt--spec--workload))
diff --git a/docs/data-sources/workloads_kubeblocks_io_instance_set_v1alpha1_manifest.md b/docs/data-sources/workloads_kubeblocks_io_instance_set_v1alpha1_manifest.md
index 363431a6c..83cc21c4f 100644
--- a/docs/data-sources/workloads_kubeblocks_io_instance_set_v1alpha1_manifest.md
+++ b/docs/data-sources/workloads_kubeblocks_io_instance_set_v1alpha1_manifest.md
@@ -319,6 +319,7 @@ Optional:
- `exec` (Attributes) Exec specifies the action to take. (see [below for nested schema](#nestedatt--spec--template--spec--containers--lifecycle--post_start--exec))
- `http_get` (Attributes) HTTPGet specifies the http request to perform. (see [below for nested schema](#nestedatt--spec--template--spec--containers--lifecycle--post_start--http_get))
+- `sleep` (Attributes) Sleep represents the duration that the container should sleep before being terminated. (see [below for nested schema](#nestedatt--spec--template--spec--containers--lifecycle--post_start--sleep))
- `tcp_socket` (Attributes) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and keptfor the backward compatibility. There are no validation of this field andlifecycle hooks will fail in runtime when tcp handler is specified. (see [below for nested schema](#nestedatt--spec--template--spec--containers--lifecycle--post_start--tcp_socket))
@@ -353,6 +354,14 @@ Required:
+
+### Nested Schema for `spec.template.spec.containers.lifecycle.post_start.sleep`
+
+Required:
+
+- `seconds` (Number) Seconds is the number of seconds to sleep.
+
+
### Nested Schema for `spec.template.spec.containers.lifecycle.post_start.tcp_socket`
@@ -373,6 +382,7 @@ Optional:
- `exec` (Attributes) Exec specifies the action to take. (see [below for nested schema](#nestedatt--spec--template--spec--containers--lifecycle--pre_stop--exec))
- `http_get` (Attributes) HTTPGet specifies the http request to perform. (see [below for nested schema](#nestedatt--spec--template--spec--containers--lifecycle--pre_stop--http_get))
+- `sleep` (Attributes) Sleep represents the duration that the container should sleep before being terminated. (see [below for nested schema](#nestedatt--spec--template--spec--containers--lifecycle--pre_stop--sleep))
- `tcp_socket` (Attributes) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and keptfor the backward compatibility. There are no validation of this field andlifecycle hooks will fail in runtime when tcp handler is specified. (see [below for nested schema](#nestedatt--spec--template--spec--containers--lifecycle--pre_stop--tcp_socket))
@@ -407,6 +417,14 @@ Required:
+
+### Nested Schema for `spec.template.spec.containers.lifecycle.pre_stop.sleep`
+
+Required:
+
+- `seconds` (Number) Seconds is the number of seconds to sleep.
+
+
### Nested Schema for `spec.template.spec.containers.lifecycle.pre_stop.tcp_socket`
@@ -899,7 +917,9 @@ Required:
Optional:
-- `label_selector` (Attributes) A label query over a set of resources, in this case pods. (see [below for nested schema](#nestedatt--spec--template--spec--affinity--pod_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--label_selector))
+- `label_selector` (Attributes) A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods. (see [below for nested schema](#nestedatt--spec--template--spec--affinity--pod_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--label_selector))
+- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
+- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
- `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--template--spec--affinity--pod_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--namespace_selector))
- `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.
@@ -958,7 +978,9 @@ Required:
Optional:
-- `label_selector` (Attributes) A label query over a set of resources, in this case pods. (see [below for nested schema](#nestedatt--spec--template--spec--affinity--pod_affinity--required_during_scheduling_ignored_during_execution--label_selector))
+- `label_selector` (Attributes) A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods. (see [below for nested schema](#nestedatt--spec--template--spec--affinity--pod_affinity--required_during_scheduling_ignored_during_execution--label_selector))
+- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
+- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
- `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--template--spec--affinity--pod_affinity--required_during_scheduling_ignored_during_execution--namespace_selector))
- `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.
@@ -1033,7 +1055,9 @@ Required:
Optional:
-- `label_selector` (Attributes) A label query over a set of resources, in this case pods. (see [below for nested schema](#nestedatt--spec--template--spec--affinity--pod_anti_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--label_selector))
+- `label_selector` (Attributes) A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods. (see [below for nested schema](#nestedatt--spec--template--spec--affinity--pod_anti_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--label_selector))
+- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
+- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
- `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--template--spec--affinity--pod_anti_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--namespace_selector))
- `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.
@@ -1092,7 +1116,9 @@ Required:
Optional:
-- `label_selector` (Attributes) A label query over a set of resources, in this case pods. (see [below for nested schema](#nestedatt--spec--template--spec--affinity--pod_anti_affinity--required_during_scheduling_ignored_during_execution--label_selector))
+- `label_selector` (Attributes) A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods. (see [below for nested schema](#nestedatt--spec--template--spec--affinity--pod_anti_affinity--required_during_scheduling_ignored_during_execution--label_selector))
+- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
+- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
- `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--template--spec--affinity--pod_anti_affinity--required_during_scheduling_ignored_during_execution--namespace_selector))
- `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.
@@ -1314,6 +1340,7 @@ Optional:
- `exec` (Attributes) Exec specifies the action to take. (see [below for nested schema](#nestedatt--spec--template--spec--ephemeral_containers--lifecycle--post_start--exec))
- `http_get` (Attributes) HTTPGet specifies the http request to perform. (see [below for nested schema](#nestedatt--spec--template--spec--ephemeral_containers--lifecycle--post_start--http_get))
+- `sleep` (Attributes) Sleep represents the duration that the container should sleep before being terminated. (see [below for nested schema](#nestedatt--spec--template--spec--ephemeral_containers--lifecycle--post_start--sleep))
- `tcp_socket` (Attributes) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and keptfor the backward compatibility. There are no validation of this field andlifecycle hooks will fail in runtime when tcp handler is specified. (see [below for nested schema](#nestedatt--spec--template--spec--ephemeral_containers--lifecycle--post_start--tcp_socket))
@@ -1348,6 +1375,14 @@ Required:
+
+### Nested Schema for `spec.template.spec.ephemeral_containers.lifecycle.post_start.sleep`
+
+Required:
+
+- `seconds` (Number) Seconds is the number of seconds to sleep.
+
+
### Nested Schema for `spec.template.spec.ephemeral_containers.lifecycle.post_start.tcp_socket`
@@ -1368,6 +1403,7 @@ Optional:
- `exec` (Attributes) Exec specifies the action to take. (see [below for nested schema](#nestedatt--spec--template--spec--ephemeral_containers--lifecycle--pre_stop--exec))
- `http_get` (Attributes) HTTPGet specifies the http request to perform. (see [below for nested schema](#nestedatt--spec--template--spec--ephemeral_containers--lifecycle--pre_stop--http_get))
+- `sleep` (Attributes) Sleep represents the duration that the container should sleep before being terminated. (see [below for nested schema](#nestedatt--spec--template--spec--ephemeral_containers--lifecycle--pre_stop--sleep))
- `tcp_socket` (Attributes) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and keptfor the backward compatibility. There are no validation of this field andlifecycle hooks will fail in runtime when tcp handler is specified. (see [below for nested schema](#nestedatt--spec--template--spec--ephemeral_containers--lifecycle--pre_stop--tcp_socket))
@@ -1402,6 +1438,14 @@ Required:
+
+### Nested Schema for `spec.template.spec.ephemeral_containers.lifecycle.pre_stop.sleep`
+
+Required:
+
+- `seconds` (Number) Seconds is the number of seconds to sleep.
+
+
### Nested Schema for `spec.template.spec.ephemeral_containers.lifecycle.pre_stop.tcp_socket`
@@ -1932,6 +1976,7 @@ Optional:
- `exec` (Attributes) Exec specifies the action to take. (see [below for nested schema](#nestedatt--spec--template--spec--init_containers--lifecycle--post_start--exec))
- `http_get` (Attributes) HTTPGet specifies the http request to perform. (see [below for nested schema](#nestedatt--spec--template--spec--init_containers--lifecycle--post_start--http_get))
+- `sleep` (Attributes) Sleep represents the duration that the container should sleep before being terminated. (see [below for nested schema](#nestedatt--spec--template--spec--init_containers--lifecycle--post_start--sleep))
- `tcp_socket` (Attributes) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and keptfor the backward compatibility. There are no validation of this field andlifecycle hooks will fail in runtime when tcp handler is specified. (see [below for nested schema](#nestedatt--spec--template--spec--init_containers--lifecycle--post_start--tcp_socket))
@@ -1966,6 +2011,14 @@ Required:
+
+### Nested Schema for `spec.template.spec.init_containers.lifecycle.post_start.sleep`
+
+Required:
+
+- `seconds` (Number) Seconds is the number of seconds to sleep.
+
+
### Nested Schema for `spec.template.spec.init_containers.lifecycle.post_start.tcp_socket`
@@ -1986,6 +2039,7 @@ Optional:
- `exec` (Attributes) Exec specifies the action to take. (see [below for nested schema](#nestedatt--spec--template--spec--init_containers--lifecycle--pre_stop--exec))
- `http_get` (Attributes) HTTPGet specifies the http request to perform. (see [below for nested schema](#nestedatt--spec--template--spec--init_containers--lifecycle--pre_stop--http_get))
+- `sleep` (Attributes) Sleep represents the duration that the container should sleep before being terminated. (see [below for nested schema](#nestedatt--spec--template--spec--init_containers--lifecycle--pre_stop--sleep))
- `tcp_socket` (Attributes) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and keptfor the backward compatibility. There are no validation of this field andlifecycle hooks will fail in runtime when tcp handler is specified. (see [below for nested schema](#nestedatt--spec--template--spec--init_containers--lifecycle--pre_stop--tcp_socket))
@@ -2020,6 +2074,14 @@ Required:
+
+### Nested Schema for `spec.template.spec.init_containers.lifecycle.pre_stop.sleep`
+
+Required:
+
+- `seconds` (Number) Seconds is the number of seconds to sleep.
+
+
### Nested Schema for `spec.template.spec.init_containers.lifecycle.pre_stop.tcp_socket`
@@ -2800,6 +2862,7 @@ Optional:
- `resources` (Attributes) resources represents the minimum resources the volume should have.If RecoverVolumeExpansionFailure feature is enabled users are allowed to specify resource requirementsthat are lower than previous value but must still be higher than capacity recorded in thestatus field of the claim.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources (see [below for nested schema](#nestedatt--spec--template--spec--volumes--ephemeral--volume_claim_template--spec--resources))
- `selector` (Attributes) selector is a label query over volumes to consider for binding. (see [below for nested schema](#nestedatt--spec--template--spec--volumes--ephemeral--volume_claim_template--spec--selector))
- `storage_class_name` (String) storageClassName is the name of the StorageClass required by the claim.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#class-1
+- `volume_attributes_class_name` (String) volumeAttributesClassName may be used to set the VolumeAttributesClass used by this claim.If specified, the CSI driver will create or update the volume with the attributes definedin the corresponding VolumeAttributesClass. This has a different purpose than storageClassName,it can be changed after the claim is created. An empty string value means that no VolumeAttributesClasswill be applied to the claim but it's not allowed to reset this field to empty string once it is set.If unspecified and the PersistentVolumeClaim is unbound, the default VolumeAttributesClasswill be set by the persistentvolume controller if it exists.If the resource referred to by volumeAttributesClass does not exist, this PersistentVolumeClaim will beset to a Pending state, as reflected by the modifyVolumeStatus field, until such as a resourceexists.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#volumeattributesclass(Alpha) Using this field requires the VolumeAttributesClass feature gate to be enabled.
- `volume_mode` (String) volumeMode defines what type of volume is required by the claim.Value of Filesystem is implied when not included in claim spec.
- `volume_name` (String) volumeName is the binding reference to the PersistentVolume backing this claim.
@@ -2835,18 +2898,9 @@ Optional:
Optional:
-- `claims` (Attributes List) Claims lists the names of resources, defined in spec.resourceClaims,that are used by this container.This is an alpha field and requires enabling theDynamicResourceAllocation feature gate.This field is immutable. It can only be set for containers. (see [below for nested schema](#nestedatt--spec--template--spec--volumes--ephemeral--volume_claim_template--spec--resources--claims))
- `limits` (Map of String) Limits describes the maximum amount of compute resources allowed.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
- `requests` (Map of String) Requests describes the minimum amount of compute resources required.If Requests is omitted for a container, it defaults to Limits if that is explicitly specified,otherwise to an implementation-defined value. Requests cannot exceed Limits.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-
-### Nested Schema for `spec.template.spec.volumes.ephemeral.volume_claim_template.spec.resources.claims`
-
-Required:
-
-- `name` (String) Name must match the name of one entry in pod.spec.resourceClaims ofthe Pod where this field is used. It makes that resource availableinside a container.
-
-
### Nested Schema for `spec.template.spec.volumes.ephemeral.volume_claim_template.spec.selector`
@@ -3073,11 +3127,49 @@ Optional:
Optional:
+- `cluster_trust_bundle` (Attributes) ClusterTrustBundle allows a pod to access the '.spec.trustBundle' fieldof ClusterTrustBundle objects in an auto-updating file.Alpha, gated by the ClusterTrustBundleProjection feature gate.ClusterTrustBundle objects can either be selected by name, or by thecombination of signer name and a label selector.Kubelet performs aggressive normalization of the PEM contents writteninto the pod filesystem. Esoteric PEM features such as inter-blockcomments and block headers are stripped. Certificates are deduplicated.The ordering of certificates within the file is arbitrary, and Kubeletmay change the order over time. (see [below for nested schema](#nestedatt--spec--template--spec--volumes--projected--sources--cluster_trust_bundle))
- `config_map` (Attributes) configMap information about the configMap data to project (see [below for nested schema](#nestedatt--spec--template--spec--volumes--projected--sources--config_map))
- `downward_api` (Attributes) downwardAPI information about the downwardAPI data to project (see [below for nested schema](#nestedatt--spec--template--spec--volumes--projected--sources--downward_api))
- `secret` (Attributes) secret information about the secret data to project (see [below for nested schema](#nestedatt--spec--template--spec--volumes--projected--sources--secret))
- `service_account_token` (Attributes) serviceAccountToken is information about the serviceAccountToken data to project (see [below for nested schema](#nestedatt--spec--template--spec--volumes--projected--sources--service_account_token))
+
+### Nested Schema for `spec.template.spec.volumes.projected.sources.cluster_trust_bundle`
+
+Required:
+
+- `path` (String) Relative path from the volume root to write the bundle.
+
+Optional:
+
+- `label_selector` (Attributes) Select all ClusterTrustBundles that match this label selector. Only haseffect if signerName is set. Mutually-exclusive with name. If unset,interpreted as 'match nothing'. If set but empty, interpreted as 'matcheverything'. (see [below for nested schema](#nestedatt--spec--template--spec--volumes--projected--sources--cluster_trust_bundle--label_selector))
+- `name` (String) Select a single ClusterTrustBundle by object name. Mutually-exclusivewith signerName and labelSelector.
+- `optional` (Boolean) If true, don't block pod startup if the referenced ClusterTrustBundle(s)aren't available. If using name, then the named ClusterTrustBundle isallowed not to exist. If using signerName, then the combination ofsignerName and labelSelector is allowed to match zeroClusterTrustBundles.
+- `signer_name` (String) Select all ClusterTrustBundles that match this signer name.Mutually-exclusive with name. The contents of all selectedClusterTrustBundles will be unified and deduplicated.
+
+
+### Nested Schema for `spec.template.spec.volumes.projected.sources.cluster_trust_bundle.label_selector`
+
+Optional:
+
+- `match_expressions` (Attributes List) matchExpressions is a list of label selector requirements. The requirements are ANDed. (see [below for nested schema](#nestedatt--spec--template--spec--volumes--projected--sources--cluster_trust_bundle--label_selector--match_expressions))
+- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.
+
+
+### Nested Schema for `spec.template.spec.volumes.projected.sources.cluster_trust_bundle.label_selector.match_expressions`
+
+Required:
+
+- `key` (String) key is the label key that the selector applies to.
+- `operator` (String) operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.
+
+Optional:
+
+- `values` (List of String) values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.
+
+
+
+
### Nested Schema for `spec.template.spec.volumes.projected.sources.config_map`
@@ -3760,7 +3852,9 @@ Required:
Optional:
-- `label_selector` (Attributes) A label query over a set of resources, in this case pods. (see [below for nested schema](#nestedatt--spec--instances--scheduling_policy--affinity--pod_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--label_selector))
+- `label_selector` (Attributes) A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods. (see [below for nested schema](#nestedatt--spec--instances--scheduling_policy--affinity--pod_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--label_selector))
+- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
+- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
- `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--instances--scheduling_policy--affinity--pod_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--namespace_selector))
- `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.
@@ -3819,7 +3913,9 @@ Required:
Optional:
-- `label_selector` (Attributes) A label query over a set of resources, in this case pods. (see [below for nested schema](#nestedatt--spec--instances--scheduling_policy--affinity--pod_affinity--required_during_scheduling_ignored_during_execution--label_selector))
+- `label_selector` (Attributes) A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods. (see [below for nested schema](#nestedatt--spec--instances--scheduling_policy--affinity--pod_affinity--required_during_scheduling_ignored_during_execution--label_selector))
+- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
+- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
- `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--instances--scheduling_policy--affinity--pod_affinity--required_during_scheduling_ignored_during_execution--namespace_selector))
- `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.
@@ -3894,7 +3990,9 @@ Required:
Optional:
-- `label_selector` (Attributes) A label query over a set of resources, in this case pods. (see [below for nested schema](#nestedatt--spec--instances--scheduling_policy--affinity--pod_anti_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--label_selector))
+- `label_selector` (Attributes) A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods. (see [below for nested schema](#nestedatt--spec--instances--scheduling_policy--affinity--pod_anti_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--label_selector))
+- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
+- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
- `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--instances--scheduling_policy--affinity--pod_anti_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--namespace_selector))
- `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.
@@ -3953,7 +4051,9 @@ Required:
Optional:
-- `label_selector` (Attributes) A label query over a set of resources, in this case pods. (see [below for nested schema](#nestedatt--spec--instances--scheduling_policy--affinity--pod_anti_affinity--required_during_scheduling_ignored_during_execution--label_selector))
+- `label_selector` (Attributes) A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods. (see [below for nested schema](#nestedatt--spec--instances--scheduling_policy--affinity--pod_anti_affinity--required_during_scheduling_ignored_during_execution--label_selector))
+- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
+- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.
- `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--instances--scheduling_policy--affinity--pod_anti_affinity--required_during_scheduling_ignored_during_execution--namespace_selector))
- `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.
@@ -4091,6 +4191,7 @@ Optional:
- `resources` (Attributes) resources represents the minimum resources the volume should have.If RecoverVolumeExpansionFailure feature is enabled users are allowed to specify resource requirementsthat are lower than previous value but must still be higher than capacity recorded in thestatus field of the claim.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources (see [below for nested schema](#nestedatt--spec--instances--volume_claim_templates--spec--resources))
- `selector` (Attributes) selector is a label query over volumes to consider for binding. (see [below for nested schema](#nestedatt--spec--instances--volume_claim_templates--spec--selector))
- `storage_class_name` (String) storageClassName is the name of the StorageClass required by the claim.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#class-1
+- `volume_attributes_class_name` (String) volumeAttributesClassName may be used to set the VolumeAttributesClass used by this claim.If specified, the CSI driver will create or update the volume with the attributes definedin the corresponding VolumeAttributesClass. This has a different purpose than storageClassName,it can be changed after the claim is created. An empty string value means that no VolumeAttributesClasswill be applied to the claim but it's not allowed to reset this field to empty string once it is set.If unspecified and the PersistentVolumeClaim is unbound, the default VolumeAttributesClasswill be set by the persistentvolume controller if it exists.If the resource referred to by volumeAttributesClass does not exist, this PersistentVolumeClaim will beset to a Pending state, as reflected by the modifyVolumeStatus field, until such as a resourceexists.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#volumeattributesclass(Alpha) Using this field requires the VolumeAttributesClass feature gate to be enabled.
- `volume_mode` (String) volumeMode defines what type of volume is required by the claim.Value of Filesystem is implied when not included in claim spec.
- `volume_name` (String) volumeName is the binding reference to the PersistentVolume backing this claim.
@@ -4126,18 +4227,9 @@ Optional:
Optional:
-- `claims` (Attributes List) Claims lists the names of resources, defined in spec.resourceClaims,that are used by this container.This is an alpha field and requires enabling theDynamicResourceAllocation feature gate.This field is immutable. It can only be set for containers. (see [below for nested schema](#nestedatt--spec--instances--volume_claim_templates--spec--resources--claims))
- `limits` (Map of String) Limits describes the maximum amount of compute resources allowed.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
- `requests` (Map of String) Requests describes the minimum amount of compute resources required.If Requests is omitted for a container, it defaults to Limits if that is explicitly specified,otherwise to an implementation-defined value. Requests cannot exceed Limits.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-
-### Nested Schema for `spec.instances.volume_claim_templates.spec.resources.claims`
-
-Required:
-
-- `name` (String) Name must match the name of one entry in pod.spec.resourceClaims ofthe Pod where this field is used. It makes that resource availableinside a container.
-
-
### Nested Schema for `spec.instances.volume_claim_templates.spec.selector`
@@ -4172,6 +4264,8 @@ Optional:
- `allocated_resources` (Map of String) allocatedResources tracks the resources allocated to a PVC including its capacity.Key names follow standard Kubernetes label syntax. Valid values are either: * Un-prefixed keys: - storage - the capacity of the volume. * Custom resources must use implementation-defined prefixed names such as 'example.com/my-custom-resource'Apart from above values - keys that are unprefixed or have kubernetes.io prefix are consideredreserved and hence may not be used.Capacity reported here may be larger than the actual capacity when a volume expansion operationis requested.For storage quota, the larger value from allocatedResources and PVC.spec.resources is used.If allocatedResources is not set, PVC.spec.resources alone is used for quota calculation.If a volume expansion capacity request is lowered, allocatedResources is onlylowered if there are no expansion operations in progress and if the actual volume capacityis equal or lower than the requested capacity.A controller that receives PVC update with previously unknown resourceNameshould ignore the update for the purpose it was designed. For example - a controller thatonly is responsible for resizing capacity of the volume, should ignore PVC updates that change other validresources associated with PVC.This is an alpha field and requires enabling RecoverVolumeExpansionFailure feature.
- `capacity` (Map of String) capacity represents the actual resources of the underlying volume.
- `conditions` (Attributes List) conditions is the current Condition of persistent volume claim. If underlying persistent volume is beingresized then the Condition will be set to 'ResizeStarted'. (see [below for nested schema](#nestedatt--spec--instances--volume_claim_templates--status--conditions))
+- `current_volume_attributes_class_name` (String) currentVolumeAttributesClassName is the current name of the VolumeAttributesClass the PVC is using.When unset, there is no VolumeAttributeClass applied to this PersistentVolumeClaimThis is an alpha field and requires enabling VolumeAttributesClass feature.
+- `modify_volume_status` (Attributes) ModifyVolumeStatus represents the status object of ControllerModifyVolume operation.When this is unset, there is no ModifyVolume operation being attempted.This is an alpha field and requires enabling VolumeAttributesClass feature. (see [below for nested schema](#nestedatt--spec--instances--volume_claim_templates--status--modify_volume_status))
- `phase` (String) phase represents the current phase of PersistentVolumeClaim.
@@ -4190,6 +4284,18 @@ Optional:
- `reason` (String) reason is a unique, this should be a short, machine understandable string that gives the reasonfor condition's last transition. If it reports 'ResizeStarted' that means the underlyingpersistent volume is being resized.
+
+### Nested Schema for `spec.instances.volume_claim_templates.status.modify_volume_status`
+
+Required:
+
+- `status` (String) status is the status of the ControllerModifyVolume operation. It can be in any of following states: - Pending Pending indicates that the PersistentVolumeClaim cannot be modified due to unmet requirements, such as the specified VolumeAttributesClass not existing. - InProgress InProgress indicates that the volume is being modified. - Infeasible Infeasible indicates that the request has been rejected as invalid by the CSI driver. To resolve the error, a valid VolumeAttributesClass needs to be specified.Note: New statuses can be added in the future. Consumers should check for unknown statuses and fail appropriately.
+
+Optional:
+
+- `target_volume_attributes_class_name` (String) targetVolumeAttributesClassName is the name of the VolumeAttributesClass the PVC currently being reconciled
+
+
@@ -4469,6 +4575,7 @@ Optional:
- `resources` (Attributes) resources represents the minimum resources the volume should have.If RecoverVolumeExpansionFailure feature is enabled users are allowed to specify resource requirementsthat are lower than previous value but must still be higher than capacity recorded in thestatus field of the claim.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources (see [below for nested schema](#nestedatt--spec--instances--volumes--ephemeral--volume_claim_template--spec--resources))
- `selector` (Attributes) selector is a label query over volumes to consider for binding. (see [below for nested schema](#nestedatt--spec--instances--volumes--ephemeral--volume_claim_template--spec--selector))
- `storage_class_name` (String) storageClassName is the name of the StorageClass required by the claim.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#class-1
+- `volume_attributes_class_name` (String) volumeAttributesClassName may be used to set the VolumeAttributesClass used by this claim.If specified, the CSI driver will create or update the volume with the attributes definedin the corresponding VolumeAttributesClass. This has a different purpose than storageClassName,it can be changed after the claim is created. An empty string value means that no VolumeAttributesClasswill be applied to the claim but it's not allowed to reset this field to empty string once it is set.If unspecified and the PersistentVolumeClaim is unbound, the default VolumeAttributesClasswill be set by the persistentvolume controller if it exists.If the resource referred to by volumeAttributesClass does not exist, this PersistentVolumeClaim will beset to a Pending state, as reflected by the modifyVolumeStatus field, until such as a resourceexists.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#volumeattributesclass(Alpha) Using this field requires the VolumeAttributesClass feature gate to be enabled.
- `volume_mode` (String) volumeMode defines what type of volume is required by the claim.Value of Filesystem is implied when not included in claim spec.
- `volume_name` (String) volumeName is the binding reference to the PersistentVolume backing this claim.
@@ -4504,18 +4611,9 @@ Optional:
Optional:
-- `claims` (Attributes List) Claims lists the names of resources, defined in spec.resourceClaims,that are used by this container.This is an alpha field and requires enabling theDynamicResourceAllocation feature gate.This field is immutable. It can only be set for containers. (see [below for nested schema](#nestedatt--spec--instances--volumes--ephemeral--volume_claim_template--spec--resources--claims))
- `limits` (Map of String) Limits describes the maximum amount of compute resources allowed.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
- `requests` (Map of String) Requests describes the minimum amount of compute resources required.If Requests is omitted for a container, it defaults to Limits if that is explicitly specified,otherwise to an implementation-defined value. Requests cannot exceed Limits.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-
-### Nested Schema for `spec.instances.volumes.ephemeral.volume_claim_template.spec.resources.claims`
-
-Required:
-
-- `name` (String) Name must match the name of one entry in pod.spec.resourceClaims ofthe Pod where this field is used. It makes that resource availableinside a container.
-
-
### Nested Schema for `spec.instances.volumes.ephemeral.volume_claim_template.spec.selector`
@@ -4742,11 +4840,49 @@ Optional:
Optional:
+- `cluster_trust_bundle` (Attributes) ClusterTrustBundle allows a pod to access the '.spec.trustBundle' fieldof ClusterTrustBundle objects in an auto-updating file.Alpha, gated by the ClusterTrustBundleProjection feature gate.ClusterTrustBundle objects can either be selected by name, or by thecombination of signer name and a label selector.Kubelet performs aggressive normalization of the PEM contents writteninto the pod filesystem. Esoteric PEM features such as inter-blockcomments and block headers are stripped. Certificates are deduplicated.The ordering of certificates within the file is arbitrary, and Kubeletmay change the order over time. (see [below for nested schema](#nestedatt--spec--instances--volumes--projected--sources--cluster_trust_bundle))
- `config_map` (Attributes) configMap information about the configMap data to project (see [below for nested schema](#nestedatt--spec--instances--volumes--projected--sources--config_map))
- `downward_api` (Attributes) downwardAPI information about the downwardAPI data to project (see [below for nested schema](#nestedatt--spec--instances--volumes--projected--sources--downward_api))
- `secret` (Attributes) secret information about the secret data to project (see [below for nested schema](#nestedatt--spec--instances--volumes--projected--sources--secret))
- `service_account_token` (Attributes) serviceAccountToken is information about the serviceAccountToken data to project (see [below for nested schema](#nestedatt--spec--instances--volumes--projected--sources--service_account_token))
+
+### Nested Schema for `spec.instances.volumes.projected.sources.cluster_trust_bundle`
+
+Required:
+
+- `path` (String) Relative path from the volume root to write the bundle.
+
+Optional:
+
+- `label_selector` (Attributes) Select all ClusterTrustBundles that match this label selector. Only haseffect if signerName is set. Mutually-exclusive with name. If unset,interpreted as 'match nothing'. If set but empty, interpreted as 'matcheverything'. (see [below for nested schema](#nestedatt--spec--instances--volumes--projected--sources--cluster_trust_bundle--label_selector))
+- `name` (String) Select a single ClusterTrustBundle by object name. Mutually-exclusivewith signerName and labelSelector.
+- `optional` (Boolean) If true, don't block pod startup if the referenced ClusterTrustBundle(s)aren't available. If using name, then the named ClusterTrustBundle isallowed not to exist. If using signerName, then the combination ofsignerName and labelSelector is allowed to match zeroClusterTrustBundles.
+- `signer_name` (String) Select all ClusterTrustBundles that match this signer name.Mutually-exclusive with name. The contents of all selectedClusterTrustBundles will be unified and deduplicated.
+
+
+### Nested Schema for `spec.instances.volumes.projected.sources.cluster_trust_bundle.label_selector`
+
+Optional:
+
+- `match_expressions` (Attributes List) matchExpressions is a list of label selector requirements. The requirements are ANDed. (see [below for nested schema](#nestedatt--spec--instances--volumes--projected--sources--cluster_trust_bundle--label_selector--match_expressions))
+- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.
+
+
+### Nested Schema for `spec.instances.volumes.projected.sources.cluster_trust_bundle.label_selector.match_expressions`
+
+Required:
+
+- `key` (String) key is the label key that the selector applies to.
+- `operator` (String) operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.
+
+Optional:
+
+- `values` (List of String) values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.
+
+
+
+
### Nested Schema for `spec.instances.volumes.projected.sources.config_map`
@@ -5161,7 +5297,7 @@ Required:
Optional:
-- `app_protocol` (String) The application protocol for this port.This is used as a hint for implementations to offer richer behavior for protocols that they understand.This field follows standard Kubernetes label syntax.Valid values are either:* Un-prefixed protocol names - reserved for IANA standard service names (as perRFC-6335 and https://www.iana.org/assignments/service-names).* Kubernetes-defined prefixed names: * 'kubernetes.io/h2c' - HTTP/2 over cleartext as described in https://www.rfc-editor.org/rfc/rfc7540 * 'kubernetes.io/ws' - WebSocket over cleartext as described in https://www.rfc-editor.org/rfc/rfc6455 * 'kubernetes.io/wss' - WebSocket over TLS as described in https://www.rfc-editor.org/rfc/rfc6455* Other protocols should use implementation-defined prefixed names such asmycompany.com/my-custom-protocol.
+- `app_protocol` (String) The application protocol for this port.This is used as a hint for implementations to offer richer behavior for protocols that they understand.This field follows standard Kubernetes label syntax.Valid values are either:* Un-prefixed protocol names - reserved for IANA standard service names (as perRFC-6335 and https://www.iana.org/assignments/service-names).* Kubernetes-defined prefixed names: * 'kubernetes.io/h2c' - HTTP/2 prior knowledge over cleartext as described in https://www.rfc-editor.org/rfc/rfc9113.html#name-starting-http-2-with-prior- * 'kubernetes.io/ws' - WebSocket over cleartext as described in https://www.rfc-editor.org/rfc/rfc6455 * 'kubernetes.io/wss' - WebSocket over TLS as described in https://www.rfc-editor.org/rfc/rfc6455* Other protocols should use implementation-defined prefixed names such asmycompany.com/my-custom-protocol.
- `name` (String) The name of this port within the service. This must be a DNS_LABEL.All ports within a ServiceSpec must have unique names. When consideringthe endpoints for a Service, this must match the 'name' field in theEndpointPort.Optional if only one ServicePort is defined on this service.
- `node_port` (Number) The port on each node on which this service is exposed when type isNodePort or LoadBalancer. Usually assigned by the system. If a value isspecified, in-range, and not in use it will be used, otherwise theoperation will fail. If not specified, a port will be allocated if thisService requires one. If this field is specified when creating aService which does not need it, creation will fail. This field will bewiped when updating a Service to no longer need it (e.g. changing typefrom NodePort to ClusterIP).More info: https://kubernetes.io/docs/concepts/services-networking/service/#type-nodeport
- `protocol` (String) The IP protocol for this port. Supports 'TCP', 'UDP', and 'SCTP'.Default is TCP.
@@ -5223,6 +5359,7 @@ Optional:
- `hostname` (String) Hostname is set for load-balancer ingress points that are DNS based(typically AWS load-balancers)
- `ip` (String) IP is set for load-balancer ingress points that are IP based(typically GCE or OpenStack load-balancers)
+- `ip_mode` (String) IPMode specifies how the load-balancer IP behaves, and may only be specified when the ip field is specified.Setting this to 'VIP' indicates that traffic is delivered to the node withthe destination set to the load-balancer's IP and port.Setting this to 'Proxy' indicates that traffic is delivered to the node or pod withthe destination set to the node's IP and node port or the pod's IP and port.Service implementations may use this information to adjust traffic routing.
- `ports` (Attributes List) Ports is a list of records of service portsIf used, every port defined in the service should have an entry in it (see [below for nested schema](#nestedatt--spec--service--status--load_balancer--ingress--ports))
@@ -5294,6 +5431,7 @@ Optional:
- `resources` (Attributes) resources represents the minimum resources the volume should have.If RecoverVolumeExpansionFailure feature is enabled users are allowed to specify resource requirementsthat are lower than previous value but must still be higher than capacity recorded in thestatus field of the claim.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources (see [below for nested schema](#nestedatt--spec--volume_claim_templates--spec--resources))
- `selector` (Attributes) selector is a label query over volumes to consider for binding. (see [below for nested schema](#nestedatt--spec--volume_claim_templates--spec--selector))
- `storage_class_name` (String) storageClassName is the name of the StorageClass required by the claim.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#class-1
+- `volume_attributes_class_name` (String) volumeAttributesClassName may be used to set the VolumeAttributesClass used by this claim.If specified, the CSI driver will create or update the volume with the attributes definedin the corresponding VolumeAttributesClass. This has a different purpose than storageClassName,it can be changed after the claim is created. An empty string value means that no VolumeAttributesClasswill be applied to the claim but it's not allowed to reset this field to empty string once it is set.If unspecified and the PersistentVolumeClaim is unbound, the default VolumeAttributesClasswill be set by the persistentvolume controller if it exists.If the resource referred to by volumeAttributesClass does not exist, this PersistentVolumeClaim will beset to a Pending state, as reflected by the modifyVolumeStatus field, until such as a resourceexists.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#volumeattributesclass(Alpha) Using this field requires the VolumeAttributesClass feature gate to be enabled.
- `volume_mode` (String) volumeMode defines what type of volume is required by the claim.Value of Filesystem is implied when not included in claim spec.
- `volume_name` (String) volumeName is the binding reference to the PersistentVolume backing this claim.
@@ -5329,18 +5467,9 @@ Optional:
Optional:
-- `claims` (Attributes List) Claims lists the names of resources, defined in spec.resourceClaims,that are used by this container.This is an alpha field and requires enabling theDynamicResourceAllocation feature gate.This field is immutable. It can only be set for containers. (see [below for nested schema](#nestedatt--spec--volume_claim_templates--spec--resources--claims))
- `limits` (Map of String) Limits describes the maximum amount of compute resources allowed.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
- `requests` (Map of String) Requests describes the minimum amount of compute resources required.If Requests is omitted for a container, it defaults to Limits if that is explicitly specified,otherwise to an implementation-defined value. Requests cannot exceed Limits.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-
-### Nested Schema for `spec.volume_claim_templates.spec.resources.claims`
-
-Required:
-
-- `name` (String) Name must match the name of one entry in pod.spec.resourceClaims ofthe Pod where this field is used. It makes that resource availableinside a container.
-
-
### Nested Schema for `spec.volume_claim_templates.spec.selector`
@@ -5375,6 +5504,8 @@ Optional:
- `allocated_resources` (Map of String) allocatedResources tracks the resources allocated to a PVC including its capacity.Key names follow standard Kubernetes label syntax. Valid values are either: * Un-prefixed keys: - storage - the capacity of the volume. * Custom resources must use implementation-defined prefixed names such as 'example.com/my-custom-resource'Apart from above values - keys that are unprefixed or have kubernetes.io prefix are consideredreserved and hence may not be used.Capacity reported here may be larger than the actual capacity when a volume expansion operationis requested.For storage quota, the larger value from allocatedResources and PVC.spec.resources is used.If allocatedResources is not set, PVC.spec.resources alone is used for quota calculation.If a volume expansion capacity request is lowered, allocatedResources is onlylowered if there are no expansion operations in progress and if the actual volume capacityis equal or lower than the requested capacity.A controller that receives PVC update with previously unknown resourceNameshould ignore the update for the purpose it was designed. For example - a controller thatonly is responsible for resizing capacity of the volume, should ignore PVC updates that change other validresources associated with PVC.This is an alpha field and requires enabling RecoverVolumeExpansionFailure feature.
- `capacity` (Map of String) capacity represents the actual resources of the underlying volume.
- `conditions` (Attributes List) conditions is the current Condition of persistent volume claim. If underlying persistent volume is beingresized then the Condition will be set to 'ResizeStarted'. (see [below for nested schema](#nestedatt--spec--volume_claim_templates--status--conditions))
+- `current_volume_attributes_class_name` (String) currentVolumeAttributesClassName is the current name of the VolumeAttributesClass the PVC is using.When unset, there is no VolumeAttributeClass applied to this PersistentVolumeClaimThis is an alpha field and requires enabling VolumeAttributesClass feature.
+- `modify_volume_status` (Attributes) ModifyVolumeStatus represents the status object of ControllerModifyVolume operation.When this is unset, there is no ModifyVolume operation being attempted.This is an alpha field and requires enabling VolumeAttributesClass feature. (see [below for nested schema](#nestedatt--spec--volume_claim_templates--status--modify_volume_status))
- `phase` (String) phase represents the current phase of PersistentVolumeClaim.
@@ -5391,3 +5522,15 @@ Optional:
- `last_transition_time` (String) lastTransitionTime is the time the condition transitioned from one status to another.
- `message` (String) message is the human-readable message indicating details about last transition.
- `reason` (String) reason is a unique, this should be a short, machine understandable string that gives the reasonfor condition's last transition. If it reports 'ResizeStarted' that means the underlyingpersistent volume is being resized.
+
+
+
+### Nested Schema for `spec.volume_claim_templates.status.modify_volume_status`
+
+Required:
+
+- `status` (String) status is the status of the ControllerModifyVolume operation. It can be in any of following states: - Pending Pending indicates that the PersistentVolumeClaim cannot be modified due to unmet requirements, such as the specified VolumeAttributesClass not existing. - InProgress InProgress indicates that the volume is being modified. - Infeasible Infeasible indicates that the request has been rejected as invalid by the CSI driver. To resolve the error, a valid VolumeAttributesClass needs to be specified.Note: New statuses can be added in the future. Consumers should check for unknown statuses and fail appropriately.
+
+Optional:
+
+- `target_volume_attributes_class_name` (String) targetVolumeAttributesClassName is the name of the VolumeAttributesClass the PVC currently being reconciled
diff --git a/internal/provider/acme_cert_manager_io_v1/acme_cert_manager_io_challenge_v1_manifest.go b/internal/provider/acme_cert_manager_io_v1/acme_cert_manager_io_challenge_v1_manifest.go
index c5d524f72..471fb708e 100644
--- a/internal/provider/acme_cert_manager_io_v1/acme_cert_manager_io_challenge_v1_manifest.go
+++ b/internal/provider/acme_cert_manager_io_v1/acme_cert_manager_io_challenge_v1_manifest.go
@@ -167,6 +167,180 @@ type AcmeCertManagerIoChallengeV1ManifestData struct {
Port *int64 `tfsdk:"port" json:"port,omitempty"`
SectionName *string `tfsdk:"section_name" json:"sectionName,omitempty"`
} `tfsdk:"parent_refs" json:"parentRefs,omitempty"`
+ PodTemplate *struct {
+ Metadata *struct {
+ Annotations *map[string]string `tfsdk:"annotations" json:"annotations,omitempty"`
+ Labels *map[string]string `tfsdk:"labels" json:"labels,omitempty"`
+ } `tfsdk:"metadata" json:"metadata,omitempty"`
+ Spec *struct {
+ Affinity *struct {
+ NodeAffinity *struct {
+ PreferredDuringSchedulingIgnoredDuringExecution *[]struct {
+ Preference *struct {
+ MatchExpressions *[]struct {
+ Key *string `tfsdk:"key" json:"key,omitempty"`
+ Operator *string `tfsdk:"operator" json:"operator,omitempty"`
+ Values *[]string `tfsdk:"values" json:"values,omitempty"`
+ } `tfsdk:"match_expressions" json:"matchExpressions,omitempty"`
+ MatchFields *[]struct {
+ Key *string `tfsdk:"key" json:"key,omitempty"`
+ Operator *string `tfsdk:"operator" json:"operator,omitempty"`
+ Values *[]string `tfsdk:"values" json:"values,omitempty"`
+ } `tfsdk:"match_fields" json:"matchFields,omitempty"`
+ } `tfsdk:"preference" json:"preference,omitempty"`
+ Weight *int64 `tfsdk:"weight" json:"weight,omitempty"`
+ } `tfsdk:"preferred_during_scheduling_ignored_during_execution" json:"preferredDuringSchedulingIgnoredDuringExecution,omitempty"`
+ RequiredDuringSchedulingIgnoredDuringExecution *struct {
+ NodeSelectorTerms *[]struct {
+ MatchExpressions *[]struct {
+ Key *string `tfsdk:"key" json:"key,omitempty"`
+ Operator *string `tfsdk:"operator" json:"operator,omitempty"`
+ Values *[]string `tfsdk:"values" json:"values,omitempty"`
+ } `tfsdk:"match_expressions" json:"matchExpressions,omitempty"`
+ MatchFields *[]struct {
+ Key *string `tfsdk:"key" json:"key,omitempty"`
+ Operator *string `tfsdk:"operator" json:"operator,omitempty"`
+ Values *[]string `tfsdk:"values" json:"values,omitempty"`
+ } `tfsdk:"match_fields" json:"matchFields,omitempty"`
+ } `tfsdk:"node_selector_terms" json:"nodeSelectorTerms,omitempty"`
+ } `tfsdk:"required_during_scheduling_ignored_during_execution" json:"requiredDuringSchedulingIgnoredDuringExecution,omitempty"`
+ } `tfsdk:"node_affinity" json:"nodeAffinity,omitempty"`
+ PodAffinity *struct {
+ PreferredDuringSchedulingIgnoredDuringExecution *[]struct {
+ PodAffinityTerm *struct {
+ LabelSelector *struct {
+ MatchExpressions *[]struct {
+ Key *string `tfsdk:"key" json:"key,omitempty"`
+ Operator *string `tfsdk:"operator" json:"operator,omitempty"`
+ Values *[]string `tfsdk:"values" json:"values,omitempty"`
+ } `tfsdk:"match_expressions" json:"matchExpressions,omitempty"`
+ MatchLabels *map[string]string `tfsdk:"match_labels" json:"matchLabels,omitempty"`
+ } `tfsdk:"label_selector" json:"labelSelector,omitempty"`
+ MatchLabelKeys *[]string `tfsdk:"match_label_keys" json:"matchLabelKeys,omitempty"`
+ MismatchLabelKeys *[]string `tfsdk:"mismatch_label_keys" json:"mismatchLabelKeys,omitempty"`
+ NamespaceSelector *struct {
+ MatchExpressions *[]struct {
+ Key *string `tfsdk:"key" json:"key,omitempty"`
+ Operator *string `tfsdk:"operator" json:"operator,omitempty"`
+ Values *[]string `tfsdk:"values" json:"values,omitempty"`
+ } `tfsdk:"match_expressions" json:"matchExpressions,omitempty"`
+ MatchLabels *map[string]string `tfsdk:"match_labels" json:"matchLabels,omitempty"`
+ } `tfsdk:"namespace_selector" json:"namespaceSelector,omitempty"`
+ Namespaces *[]string `tfsdk:"namespaces" json:"namespaces,omitempty"`
+ TopologyKey *string `tfsdk:"topology_key" json:"topologyKey,omitempty"`
+ } `tfsdk:"pod_affinity_term" json:"podAffinityTerm,omitempty"`
+ Weight *int64 `tfsdk:"weight" json:"weight,omitempty"`
+ } `tfsdk:"preferred_during_scheduling_ignored_during_execution" json:"preferredDuringSchedulingIgnoredDuringExecution,omitempty"`
+ RequiredDuringSchedulingIgnoredDuringExecution *[]struct {
+ LabelSelector *struct {
+ MatchExpressions *[]struct {
+ Key *string `tfsdk:"key" json:"key,omitempty"`
+ Operator *string `tfsdk:"operator" json:"operator,omitempty"`
+ Values *[]string `tfsdk:"values" json:"values,omitempty"`
+ } `tfsdk:"match_expressions" json:"matchExpressions,omitempty"`
+ MatchLabels *map[string]string `tfsdk:"match_labels" json:"matchLabels,omitempty"`
+ } `tfsdk:"label_selector" json:"labelSelector,omitempty"`
+ MatchLabelKeys *[]string `tfsdk:"match_label_keys" json:"matchLabelKeys,omitempty"`
+ MismatchLabelKeys *[]string `tfsdk:"mismatch_label_keys" json:"mismatchLabelKeys,omitempty"`
+ NamespaceSelector *struct {
+ MatchExpressions *[]struct {
+ Key *string `tfsdk:"key" json:"key,omitempty"`
+ Operator *string `tfsdk:"operator" json:"operator,omitempty"`
+ Values *[]string `tfsdk:"values" json:"values,omitempty"`
+ } `tfsdk:"match_expressions" json:"matchExpressions,omitempty"`
+ MatchLabels *map[string]string `tfsdk:"match_labels" json:"matchLabels,omitempty"`
+ } `tfsdk:"namespace_selector" json:"namespaceSelector,omitempty"`
+ Namespaces *[]string `tfsdk:"namespaces" json:"namespaces,omitempty"`
+ TopologyKey *string `tfsdk:"topology_key" json:"topologyKey,omitempty"`
+ } `tfsdk:"required_during_scheduling_ignored_during_execution" json:"requiredDuringSchedulingIgnoredDuringExecution,omitempty"`
+ } `tfsdk:"pod_affinity" json:"podAffinity,omitempty"`
+ PodAntiAffinity *struct {
+ PreferredDuringSchedulingIgnoredDuringExecution *[]struct {
+ PodAffinityTerm *struct {
+ LabelSelector *struct {
+ MatchExpressions *[]struct {
+ Key *string `tfsdk:"key" json:"key,omitempty"`
+ Operator *string `tfsdk:"operator" json:"operator,omitempty"`
+ Values *[]string `tfsdk:"values" json:"values,omitempty"`
+ } `tfsdk:"match_expressions" json:"matchExpressions,omitempty"`
+ MatchLabels *map[string]string `tfsdk:"match_labels" json:"matchLabels,omitempty"`
+ } `tfsdk:"label_selector" json:"labelSelector,omitempty"`
+ MatchLabelKeys *[]string `tfsdk:"match_label_keys" json:"matchLabelKeys,omitempty"`
+ MismatchLabelKeys *[]string `tfsdk:"mismatch_label_keys" json:"mismatchLabelKeys,omitempty"`
+ NamespaceSelector *struct {
+ MatchExpressions *[]struct {
+ Key *string `tfsdk:"key" json:"key,omitempty"`
+ Operator *string `tfsdk:"operator" json:"operator,omitempty"`
+ Values *[]string `tfsdk:"values" json:"values,omitempty"`
+ } `tfsdk:"match_expressions" json:"matchExpressions,omitempty"`
+ MatchLabels *map[string]string `tfsdk:"match_labels" json:"matchLabels,omitempty"`
+ } `tfsdk:"namespace_selector" json:"namespaceSelector,omitempty"`
+ Namespaces *[]string `tfsdk:"namespaces" json:"namespaces,omitempty"`
+ TopologyKey *string `tfsdk:"topology_key" json:"topologyKey,omitempty"`
+ } `tfsdk:"pod_affinity_term" json:"podAffinityTerm,omitempty"`
+ Weight *int64 `tfsdk:"weight" json:"weight,omitempty"`
+ } `tfsdk:"preferred_during_scheduling_ignored_during_execution" json:"preferredDuringSchedulingIgnoredDuringExecution,omitempty"`
+ RequiredDuringSchedulingIgnoredDuringExecution *[]struct {
+ LabelSelector *struct {
+ MatchExpressions *[]struct {
+ Key *string `tfsdk:"key" json:"key,omitempty"`
+ Operator *string `tfsdk:"operator" json:"operator,omitempty"`
+ Values *[]string `tfsdk:"values" json:"values,omitempty"`
+ } `tfsdk:"match_expressions" json:"matchExpressions,omitempty"`
+ MatchLabels *map[string]string `tfsdk:"match_labels" json:"matchLabels,omitempty"`
+ } `tfsdk:"label_selector" json:"labelSelector,omitempty"`
+ MatchLabelKeys *[]string `tfsdk:"match_label_keys" json:"matchLabelKeys,omitempty"`
+ MismatchLabelKeys *[]string `tfsdk:"mismatch_label_keys" json:"mismatchLabelKeys,omitempty"`
+ NamespaceSelector *struct {
+ MatchExpressions *[]struct {
+ Key *string `tfsdk:"key" json:"key,omitempty"`
+ Operator *string `tfsdk:"operator" json:"operator,omitempty"`
+ Values *[]string `tfsdk:"values" json:"values,omitempty"`
+ } `tfsdk:"match_expressions" json:"matchExpressions,omitempty"`
+ MatchLabels *map[string]string `tfsdk:"match_labels" json:"matchLabels,omitempty"`
+ } `tfsdk:"namespace_selector" json:"namespaceSelector,omitempty"`
+ Namespaces *[]string `tfsdk:"namespaces" json:"namespaces,omitempty"`
+ TopologyKey *string `tfsdk:"topology_key" json:"topologyKey,omitempty"`
+ } `tfsdk:"required_during_scheduling_ignored_during_execution" json:"requiredDuringSchedulingIgnoredDuringExecution,omitempty"`
+ } `tfsdk:"pod_anti_affinity" json:"podAntiAffinity,omitempty"`
+ } `tfsdk:"affinity" json:"affinity,omitempty"`
+ ImagePullSecrets *[]struct {
+ Name *string `tfsdk:"name" json:"name,omitempty"`
+ } `tfsdk:"image_pull_secrets" json:"imagePullSecrets,omitempty"`
+ NodeSelector *map[string]string `tfsdk:"node_selector" json:"nodeSelector,omitempty"`
+ PriorityClassName *string `tfsdk:"priority_class_name" json:"priorityClassName,omitempty"`
+ SecurityContext *struct {
+ FsGroup *int64 `tfsdk:"fs_group" json:"fsGroup,omitempty"`
+ FsGroupChangePolicy *string `tfsdk:"fs_group_change_policy" json:"fsGroupChangePolicy,omitempty"`
+ RunAsGroup *int64 `tfsdk:"run_as_group" json:"runAsGroup,omitempty"`
+ RunAsNonRoot *bool `tfsdk:"run_as_non_root" json:"runAsNonRoot,omitempty"`
+ RunAsUser *int64 `tfsdk:"run_as_user" json:"runAsUser,omitempty"`
+ SeLinuxOptions *struct {
+ Level *string `tfsdk:"level" json:"level,omitempty"`
+ Role *string `tfsdk:"role" json:"role,omitempty"`
+ Type *string `tfsdk:"type" json:"type,omitempty"`
+ User *string `tfsdk:"user" json:"user,omitempty"`
+ } `tfsdk:"se_linux_options" json:"seLinuxOptions,omitempty"`
+ SeccompProfile *struct {
+ LocalhostProfile *string `tfsdk:"localhost_profile" json:"localhostProfile,omitempty"`
+ Type *string `tfsdk:"type" json:"type,omitempty"`
+ } `tfsdk:"seccomp_profile" json:"seccompProfile,omitempty"`
+ SupplementalGroups *[]string `tfsdk:"supplemental_groups" json:"supplementalGroups,omitempty"`
+ Sysctls *[]struct {
+ Name *string `tfsdk:"name" json:"name,omitempty"`
+ Value *string `tfsdk:"value" json:"value,omitempty"`
+ } `tfsdk:"sysctls" json:"sysctls,omitempty"`
+ } `tfsdk:"security_context" json:"securityContext,omitempty"`
+ ServiceAccountName *string `tfsdk:"service_account_name" json:"serviceAccountName,omitempty"`
+ Tolerations *[]struct {
+ Effect *string `tfsdk:"effect" json:"effect,omitempty"`
+ Key *string `tfsdk:"key" json:"key,omitempty"`
+ Operator *string `tfsdk:"operator" json:"operator,omitempty"`
+ TolerationSeconds *int64 `tfsdk:"toleration_seconds" json:"tolerationSeconds,omitempty"`
+ Value *string `tfsdk:"value" json:"value,omitempty"`
+ } `tfsdk:"tolerations" json:"tolerations,omitempty"`
+ } `tfsdk:"spec" json:"spec,omitempty"`
+ } `tfsdk:"pod_template" json:"podTemplate,omitempty"`
ServiceType *string `tfsdk:"service_type" json:"serviceType,omitempty"`
} `tfsdk:"gateway_http_route" json:"gatewayHTTPRoute,omitempty"`
Ingress *struct {
@@ -319,9 +493,31 @@ type AcmeCertManagerIoChallengeV1ManifestData struct {
ImagePullSecrets *[]struct {
Name *string `tfsdk:"name" json:"name,omitempty"`
} `tfsdk:"image_pull_secrets" json:"imagePullSecrets,omitempty"`
- NodeSelector *map[string]string `tfsdk:"node_selector" json:"nodeSelector,omitempty"`
- PriorityClassName *string `tfsdk:"priority_class_name" json:"priorityClassName,omitempty"`
- ServiceAccountName *string `tfsdk:"service_account_name" json:"serviceAccountName,omitempty"`
+ NodeSelector *map[string]string `tfsdk:"node_selector" json:"nodeSelector,omitempty"`
+ PriorityClassName *string `tfsdk:"priority_class_name" json:"priorityClassName,omitempty"`
+ SecurityContext *struct {
+ FsGroup *int64 `tfsdk:"fs_group" json:"fsGroup,omitempty"`
+ FsGroupChangePolicy *string `tfsdk:"fs_group_change_policy" json:"fsGroupChangePolicy,omitempty"`
+ RunAsGroup *int64 `tfsdk:"run_as_group" json:"runAsGroup,omitempty"`
+ RunAsNonRoot *bool `tfsdk:"run_as_non_root" json:"runAsNonRoot,omitempty"`
+ RunAsUser *int64 `tfsdk:"run_as_user" json:"runAsUser,omitempty"`
+ SeLinuxOptions *struct {
+ Level *string `tfsdk:"level" json:"level,omitempty"`
+ Role *string `tfsdk:"role" json:"role,omitempty"`
+ Type *string `tfsdk:"type" json:"type,omitempty"`
+ User *string `tfsdk:"user" json:"user,omitempty"`
+ } `tfsdk:"se_linux_options" json:"seLinuxOptions,omitempty"`
+ SeccompProfile *struct {
+ LocalhostProfile *string `tfsdk:"localhost_profile" json:"localhostProfile,omitempty"`
+ Type *string `tfsdk:"type" json:"type,omitempty"`
+ } `tfsdk:"seccomp_profile" json:"seccompProfile,omitempty"`
+ SupplementalGroups *[]string `tfsdk:"supplemental_groups" json:"supplementalGroups,omitempty"`
+ Sysctls *[]struct {
+ Name *string `tfsdk:"name" json:"name,omitempty"`
+ Value *string `tfsdk:"value" json:"value,omitempty"`
+ } `tfsdk:"sysctls" json:"sysctls,omitempty"`
+ } `tfsdk:"security_context" json:"securityContext,omitempty"`
+ ServiceAccountName *string `tfsdk:"service_account_name" json:"serviceAccountName,omitempty"`
Tolerations *[]struct {
Effect *string `tfsdk:"effect" json:"effect,omitempty"`
Key *string `tfsdk:"key" json:"key,omitempty"`
@@ -1230,83 +1426,6 @@ func (r *AcmeCertManagerIoChallengeV1Manifest) Schema(_ context.Context, _ datas
Computed: false,
},
- "service_type": schema.StringAttribute{
- Description: "Optional service type for Kubernetes solver service. Supported valuesare NodePort or ClusterIP. If unset, defaults to NodePort.",
- MarkdownDescription: "Optional service type for Kubernetes solver service. Supported valuesare NodePort or ClusterIP. If unset, defaults to NodePort.",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "ingress": schema.SingleNestedAttribute{
- Description: "The ingress based HTTP01 challenge solver will solve challenges bycreating or modifying Ingress resources in order to route requests for'/.well-known/acme-challenge/XYZ' to 'challenge solver' pods that areprovisioned by cert-manager for each Challenge to be completed.",
- MarkdownDescription: "The ingress based HTTP01 challenge solver will solve challenges bycreating or modifying Ingress resources in order to route requests for'/.well-known/acme-challenge/XYZ' to 'challenge solver' pods that areprovisioned by cert-manager for each Challenge to be completed.",
- Attributes: map[string]schema.Attribute{
- "class": schema.StringAttribute{
- Description: "This field configures the annotation 'kubernetes.io/ingress.class' whencreating Ingress resources to solve ACME challenges that use thischallenge solver. Only one of 'class', 'name' or 'ingressClassName' maybe specified.",
- MarkdownDescription: "This field configures the annotation 'kubernetes.io/ingress.class' whencreating Ingress resources to solve ACME challenges that use thischallenge solver. Only one of 'class', 'name' or 'ingressClassName' maybe specified.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "ingress_class_name": schema.StringAttribute{
- Description: "This field configures the field 'ingressClassName' on the created Ingressresources used to solve ACME challenges that use this challenge solver.This is the recommended way of configuring the ingress class. Only one of'class', 'name' or 'ingressClassName' may be specified.",
- MarkdownDescription: "This field configures the field 'ingressClassName' on the created Ingressresources used to solve ACME challenges that use this challenge solver.This is the recommended way of configuring the ingress class. Only one of'class', 'name' or 'ingressClassName' may be specified.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "ingress_template": schema.SingleNestedAttribute{
- Description: "Optional ingress template used to configure the ACME challenge solveringress used for HTTP01 challenges.",
- MarkdownDescription: "Optional ingress template used to configure the ACME challenge solveringress used for HTTP01 challenges.",
- Attributes: map[string]schema.Attribute{
- "metadata": schema.SingleNestedAttribute{
- Description: "ObjectMeta overrides for the ingress used to solve HTTP01 challenges.Only the 'labels' and 'annotations' fields may be set.If labels or annotations overlap with in-built values, the values herewill override the in-built values.",
- MarkdownDescription: "ObjectMeta overrides for the ingress used to solve HTTP01 challenges.Only the 'labels' and 'annotations' fields may be set.If labels or annotations overlap with in-built values, the values herewill override the in-built values.",
- Attributes: map[string]schema.Attribute{
- "annotations": schema.MapAttribute{
- Description: "Annotations that should be added to the created ACME HTTP01 solver ingress.",
- MarkdownDescription: "Annotations that should be added to the created ACME HTTP01 solver ingress.",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "labels": schema.MapAttribute{
- Description: "Labels that should be added to the created ACME HTTP01 solver ingress.",
- MarkdownDescription: "Labels that should be added to the created ACME HTTP01 solver ingress.",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "name": schema.StringAttribute{
- Description: "The name of the ingress resource that should have ACME challenge solvingroutes inserted into it in order to solve HTTP01 challenges.This is typically used in conjunction with ingress controllers likeingress-gce, which maintains a 1:1 mapping between external IPs andingress resources. Only one of 'class', 'name' or 'ingressClassName' maybe specified.",
- MarkdownDescription: "The name of the ingress resource that should have ACME challenge solvingroutes inserted into it in order to solve HTTP01 challenges.This is typically used in conjunction with ingress controllers likeingress-gce, which maintains a 1:1 mapping between external IPs andingress resources. Only one of 'class', 'name' or 'ingressClassName' maybe specified.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
"pod_template": schema.SingleNestedAttribute{
Description: "Optional pod template used to configure the ACME challenge solver podsused for HTTP01 challenges.",
MarkdownDescription: "Optional pod template used to configure the ACME challenge solver podsused for HTTP01 challenges.",
@@ -2256,6 +2375,1403 @@ func (r *AcmeCertManagerIoChallengeV1Manifest) Schema(_ context.Context, _ datas
Computed: false,
},
+ "security_context": schema.SingleNestedAttribute{
+ Description: "If specified, the pod's security context",
+ MarkdownDescription: "If specified, the pod's security context",
+ Attributes: map[string]schema.Attribute{
+ "fs_group": schema.Int64Attribute{
+ Description: "A special supplemental group that applies to all containers in a pod.Some volume types allow the Kubelet to change the ownership of that volumeto be owned by the pod:1. The owning GID will be the FSGroup2. The setgid bit is set (new files created in the volume will be owned by FSGroup)3. The permission bits are OR'd with rw-rw----If unset, the Kubelet will not modify the ownership and permissions of any volume.Note that this field cannot be set when spec.os.name is windows.",
+ MarkdownDescription: "A special supplemental group that applies to all containers in a pod.Some volume types allow the Kubelet to change the ownership of that volumeto be owned by the pod:1. The owning GID will be the FSGroup2. The setgid bit is set (new files created in the volume will be owned by FSGroup)3. The permission bits are OR'd with rw-rw----If unset, the Kubelet will not modify the ownership and permissions of any volume.Note that this field cannot be set when spec.os.name is windows.",
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "fs_group_change_policy": schema.StringAttribute{
+ Description: "fsGroupChangePolicy defines behavior of changing ownership and permission of the volumebefore being exposed inside Pod. This field will only apply tovolume types which support fsGroup based ownership(and permissions).It will have no effect on ephemeral volume types such as: secret, configmapsand emptydir.Valid values are 'OnRootMismatch' and 'Always'. If not specified, 'Always' is used.Note that this field cannot be set when spec.os.name is windows.",
+ MarkdownDescription: "fsGroupChangePolicy defines behavior of changing ownership and permission of the volumebefore being exposed inside Pod. This field will only apply tovolume types which support fsGroup based ownership(and permissions).It will have no effect on ephemeral volume types such as: secret, configmapsand emptydir.Valid values are 'OnRootMismatch' and 'Always'. If not specified, 'Always' is used.Note that this field cannot be set when spec.os.name is windows.",
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "run_as_group": schema.Int64Attribute{
+ Description: "The GID to run the entrypoint of the container process.Uses runtime default if unset.May also be set in SecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedencefor that container.Note that this field cannot be set when spec.os.name is windows.",
+ MarkdownDescription: "The GID to run the entrypoint of the container process.Uses runtime default if unset.May also be set in SecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedencefor that container.Note that this field cannot be set when spec.os.name is windows.",
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "run_as_non_root": schema.BoolAttribute{
+ Description: "Indicates that the container must run as a non-root user.If true, the Kubelet will validate the image at runtime to ensure that itdoes not run as UID 0 (root) and fail to start the container if it does.If unset or false, no such validation will be performed.May also be set in SecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.",
+ MarkdownDescription: "Indicates that the container must run as a non-root user.If true, the Kubelet will validate the image at runtime to ensure that itdoes not run as UID 0 (root) and fail to start the container if it does.If unset or false, no such validation will be performed.May also be set in SecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.",
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "run_as_user": schema.Int64Attribute{
+ Description: "The UID to run the entrypoint of the container process.Defaults to user specified in image metadata if unspecified.May also be set in SecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedencefor that container.Note that this field cannot be set when spec.os.name is windows.",
+ MarkdownDescription: "The UID to run the entrypoint of the container process.Defaults to user specified in image metadata if unspecified.May also be set in SecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedencefor that container.Note that this field cannot be set when spec.os.name is windows.",
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "se_linux_options": schema.SingleNestedAttribute{
+ Description: "The SELinux context to be applied to all containers.If unspecified, the container runtime will allocate a random SELinux context for eachcontainer. May also be set in SecurityContext. If set inboth SecurityContext and PodSecurityContext, the value specified in SecurityContexttakes precedence for that container.Note that this field cannot be set when spec.os.name is windows.",
+ MarkdownDescription: "The SELinux context to be applied to all containers.If unspecified, the container runtime will allocate a random SELinux context for eachcontainer. May also be set in SecurityContext. If set inboth SecurityContext and PodSecurityContext, the value specified in SecurityContexttakes precedence for that container.Note that this field cannot be set when spec.os.name is windows.",
+ Attributes: map[string]schema.Attribute{
+ "level": schema.StringAttribute{
+ Description: "Level is SELinux level label that applies to the container.",
+ MarkdownDescription: "Level is SELinux level label that applies to the container.",
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "role": schema.StringAttribute{
+ Description: "Role is a SELinux role label that applies to the container.",
+ MarkdownDescription: "Role is a SELinux role label that applies to the container.",
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "type": schema.StringAttribute{
+ Description: "Type is a SELinux type label that applies to the container.",
+ MarkdownDescription: "Type is a SELinux type label that applies to the container.",
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "user": schema.StringAttribute{
+ Description: "User is a SELinux user label that applies to the container.",
+ MarkdownDescription: "User is a SELinux user label that applies to the container.",
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+ },
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "seccomp_profile": schema.SingleNestedAttribute{
+ Description: "The seccomp options to use by the containers in this pod.Note that this field cannot be set when spec.os.name is windows.",
+ MarkdownDescription: "The seccomp options to use by the containers in this pod.Note that this field cannot be set when spec.os.name is windows.",
+ Attributes: map[string]schema.Attribute{
+ "localhost_profile": schema.StringAttribute{
+ Description: "localhostProfile indicates a profile defined in a file on the node should be used.The profile must be preconfigured on the node to work.Must be a descending path, relative to the kubelet's configured seccomp profile location.Must be set if type is 'Localhost'. Must NOT be set for any other type.",
+ MarkdownDescription: "localhostProfile indicates a profile defined in a file on the node should be used.The profile must be preconfigured on the node to work.Must be a descending path, relative to the kubelet's configured seccomp profile location.Must be set if type is 'Localhost'. Must NOT be set for any other type.",
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "type": schema.StringAttribute{
+ Description: "type indicates which kind of seccomp profile will be applied.Valid options are:Localhost - a profile defined in a file on the node should be used.RuntimeDefault - the container runtime default profile should be used.Unconfined - no profile should be applied.",
+ MarkdownDescription: "type indicates which kind of seccomp profile will be applied.Valid options are:Localhost - a profile defined in a file on the node should be used.RuntimeDefault - the container runtime default profile should be used.Unconfined - no profile should be applied.",
+ Required: true,
+ Optional: false,
+ Computed: false,
+ },
+ },
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "supplemental_groups": schema.ListAttribute{
+ Description: "A list of groups applied to the first process run in each container, in additionto the container's primary GID, the fsGroup (if specified), and group membershipsdefined in the container image for the uid of the container process. If unspecified,no additional groups are added to any container. Note that group membershipsdefined in the container image for the uid of the container process are still effective,even if they are not included in this list.Note that this field cannot be set when spec.os.name is windows.",
+ MarkdownDescription: "A list of groups applied to the first process run in each container, in additionto the container's primary GID, the fsGroup (if specified), and group membershipsdefined in the container image for the uid of the container process. If unspecified,no additional groups are added to any container. Note that group membershipsdefined in the container image for the uid of the container process are still effective,even if they are not included in this list.Note that this field cannot be set when spec.os.name is windows.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "sysctls": schema.ListNestedAttribute{
+ Description: "Sysctls hold a list of namespaced sysctls used for the pod. Pods with unsupportedsysctls (by the container runtime) might fail to launch.Note that this field cannot be set when spec.os.name is windows.",
+ MarkdownDescription: "Sysctls hold a list of namespaced sysctls used for the pod. Pods with unsupportedsysctls (by the container runtime) might fail to launch.Note that this field cannot be set when spec.os.name is windows.",
+ NestedObject: schema.NestedAttributeObject{
+ Attributes: map[string]schema.Attribute{
+ "name": schema.StringAttribute{
+ Description: "Name of a property to set",
+ MarkdownDescription: "Name of a property to set",
+ Required: true,
+ Optional: false,
+ Computed: false,
+ },
+
+ "value": schema.StringAttribute{
+ Description: "Value of a property to set",
+ MarkdownDescription: "Value of a property to set",
+ Required: true,
+ Optional: false,
+ Computed: false,
+ },
+ },
+ },
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+ },
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "service_account_name": schema.StringAttribute{
+ Description: "If specified, the pod's service account",
+ MarkdownDescription: "If specified, the pod's service account",
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "tolerations": schema.ListNestedAttribute{
+ Description: "If specified, the pod's tolerations.",
+ MarkdownDescription: "If specified, the pod's tolerations.",
+ NestedObject: schema.NestedAttributeObject{
+ Attributes: map[string]schema.Attribute{
+ "effect": schema.StringAttribute{
+ Description: "Effect indicates the taint effect to match. Empty means match all taint effects.When specified, allowed values are NoSchedule, PreferNoSchedule and NoExecute.",
+ MarkdownDescription: "Effect indicates the taint effect to match. Empty means match all taint effects.When specified, allowed values are NoSchedule, PreferNoSchedule and NoExecute.",
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "key": schema.StringAttribute{
+ Description: "Key is the taint key that the toleration applies to. Empty means match all taint keys.If the key is empty, operator must be Exists; this combination means to match all values and all keys.",
+ MarkdownDescription: "Key is the taint key that the toleration applies to. Empty means match all taint keys.If the key is empty, operator must be Exists; this combination means to match all values and all keys.",
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "operator": schema.StringAttribute{
+ Description: "Operator represents a key's relationship to the value.Valid operators are Exists and Equal. Defaults to Equal.Exists is equivalent to wildcard for value, so that a pod cantolerate all taints of a particular category.",
+ MarkdownDescription: "Operator represents a key's relationship to the value.Valid operators are Exists and Equal. Defaults to Equal.Exists is equivalent to wildcard for value, so that a pod cantolerate all taints of a particular category.",
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "toleration_seconds": schema.Int64Attribute{
+ Description: "TolerationSeconds represents the period of time the toleration (which must beof effect NoExecute, otherwise this field is ignored) tolerates the taint. By default,it is not set, which means tolerate the taint forever (do not evict). Zero andnegative values will be treated as 0 (evict immediately) by the system.",
+ MarkdownDescription: "TolerationSeconds represents the period of time the toleration (which must beof effect NoExecute, otherwise this field is ignored) tolerates the taint. By default,it is not set, which means tolerate the taint forever (do not evict). Zero andnegative values will be treated as 0 (evict immediately) by the system.",
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "value": schema.StringAttribute{
+ Description: "Value is the taint value the toleration matches to.If the operator is Exists, the value should be empty, otherwise just a regular string.",
+ MarkdownDescription: "Value is the taint value the toleration matches to.If the operator is Exists, the value should be empty, otherwise just a regular string.",
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+ },
+ },
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+ },
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+ },
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "service_type": schema.StringAttribute{
+ Description: "Optional service type for Kubernetes solver service. Supported valuesare NodePort or ClusterIP. If unset, defaults to NodePort.",
+ MarkdownDescription: "Optional service type for Kubernetes solver service. Supported valuesare NodePort or ClusterIP. If unset, defaults to NodePort.",
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+ },
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "ingress": schema.SingleNestedAttribute{
+ Description: "The ingress based HTTP01 challenge solver will solve challenges bycreating or modifying Ingress resources in order to route requests for'/.well-known/acme-challenge/XYZ' to 'challenge solver' pods that areprovisioned by cert-manager for each Challenge to be completed.",
+ MarkdownDescription: "The ingress based HTTP01 challenge solver will solve challenges bycreating or modifying Ingress resources in order to route requests for'/.well-known/acme-challenge/XYZ' to 'challenge solver' pods that areprovisioned by cert-manager for each Challenge to be completed.",
+ Attributes: map[string]schema.Attribute{
+ "class": schema.StringAttribute{
+ Description: "This field configures the annotation 'kubernetes.io/ingress.class' whencreating Ingress resources to solve ACME challenges that use thischallenge solver. Only one of 'class', 'name' or 'ingressClassName' maybe specified.",
+ MarkdownDescription: "This field configures the annotation 'kubernetes.io/ingress.class' whencreating Ingress resources to solve ACME challenges that use thischallenge solver. Only one of 'class', 'name' or 'ingressClassName' maybe specified.",
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "ingress_class_name": schema.StringAttribute{
+ Description: "This field configures the field 'ingressClassName' on the created Ingressresources used to solve ACME challenges that use this challenge solver.This is the recommended way of configuring the ingress class. Only one of'class', 'name' or 'ingressClassName' may be specified.",
+ MarkdownDescription: "This field configures the field 'ingressClassName' on the created Ingressresources used to solve ACME challenges that use this challenge solver.This is the recommended way of configuring the ingress class. Only one of'class', 'name' or 'ingressClassName' may be specified.",
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "ingress_template": schema.SingleNestedAttribute{
+ Description: "Optional ingress template used to configure the ACME challenge solveringress used for HTTP01 challenges.",
+ MarkdownDescription: "Optional ingress template used to configure the ACME challenge solveringress used for HTTP01 challenges.",
+ Attributes: map[string]schema.Attribute{
+ "metadata": schema.SingleNestedAttribute{
+ Description: "ObjectMeta overrides for the ingress used to solve HTTP01 challenges.Only the 'labels' and 'annotations' fields may be set.If labels or annotations overlap with in-built values, the values herewill override the in-built values.",
+ MarkdownDescription: "ObjectMeta overrides for the ingress used to solve HTTP01 challenges.Only the 'labels' and 'annotations' fields may be set.If labels or annotations overlap with in-built values, the values herewill override the in-built values.",
+ Attributes: map[string]schema.Attribute{
+ "annotations": schema.MapAttribute{
+ Description: "Annotations that should be added to the created ACME HTTP01 solver ingress.",
+ MarkdownDescription: "Annotations that should be added to the created ACME HTTP01 solver ingress.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "labels": schema.MapAttribute{
+ Description: "Labels that should be added to the created ACME HTTP01 solver ingress.",
+ MarkdownDescription: "Labels that should be added to the created ACME HTTP01 solver ingress.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+ },
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+ },
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "name": schema.StringAttribute{
+ Description: "The name of the ingress resource that should have ACME challenge solvingroutes inserted into it in order to solve HTTP01 challenges.This is typically used in conjunction with ingress controllers likeingress-gce, which maintains a 1:1 mapping between external IPs andingress resources. Only one of 'class', 'name' or 'ingressClassName' maybe specified.",
+ MarkdownDescription: "The name of the ingress resource that should have ACME challenge solvingroutes inserted into it in order to solve HTTP01 challenges.This is typically used in conjunction with ingress controllers likeingress-gce, which maintains a 1:1 mapping between external IPs andingress resources. Only one of 'class', 'name' or 'ingressClassName' maybe specified.",
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "pod_template": schema.SingleNestedAttribute{
+ Description: "Optional pod template used to configure the ACME challenge solver podsused for HTTP01 challenges.",
+ MarkdownDescription: "Optional pod template used to configure the ACME challenge solver podsused for HTTP01 challenges.",
+ Attributes: map[string]schema.Attribute{
+ "metadata": schema.SingleNestedAttribute{
+ Description: "ObjectMeta overrides for the pod used to solve HTTP01 challenges.Only the 'labels' and 'annotations' fields may be set.If labels or annotations overlap with in-built values, the values herewill override the in-built values.",
+ MarkdownDescription: "ObjectMeta overrides for the pod used to solve HTTP01 challenges.Only the 'labels' and 'annotations' fields may be set.If labels or annotations overlap with in-built values, the values herewill override the in-built values.",
+ Attributes: map[string]schema.Attribute{
+ "annotations": schema.MapAttribute{
+ Description: "Annotations that should be added to the create ACME HTTP01 solver pods.",
+ MarkdownDescription: "Annotations that should be added to the create ACME HTTP01 solver pods.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "labels": schema.MapAttribute{
+ Description: "Labels that should be added to the created ACME HTTP01 solver pods.",
+ MarkdownDescription: "Labels that should be added to the created ACME HTTP01 solver pods.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+ },
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "spec": schema.SingleNestedAttribute{
+ Description: "PodSpec defines overrides for the HTTP01 challenge solver pod.Check ACMEChallengeSolverHTTP01IngressPodSpec to find out currently supported fields.All other fields will be ignored.",
+ MarkdownDescription: "PodSpec defines overrides for the HTTP01 challenge solver pod.Check ACMEChallengeSolverHTTP01IngressPodSpec to find out currently supported fields.All other fields will be ignored.",
+ Attributes: map[string]schema.Attribute{
+ "affinity": schema.SingleNestedAttribute{
+ Description: "If specified, the pod's scheduling constraints",
+ MarkdownDescription: "If specified, the pod's scheduling constraints",
+ Attributes: map[string]schema.Attribute{
+ "node_affinity": schema.SingleNestedAttribute{
+ Description: "Describes node affinity scheduling rules for the pod.",
+ MarkdownDescription: "Describes node affinity scheduling rules for the pod.",
+ Attributes: map[string]schema.Attribute{
+ "preferred_during_scheduling_ignored_during_execution": schema.ListNestedAttribute{
+ Description: "The scheduler will prefer to schedule pods to nodes that satisfythe affinity expressions specified by this field, but it may choosea node that violates one or more of the expressions. The node that ismost preferred is the one with the greatest sum of weights, i.e.for each node that meets all of the scheduling requirements (resourcerequest, requiredDuringScheduling affinity expressions, etc.),compute a sum by iterating through the elements of this field and adding'weight' to the sum if the node matches the corresponding matchExpressions; thenode(s) with the highest sum are the most preferred.",
+ MarkdownDescription: "The scheduler will prefer to schedule pods to nodes that satisfythe affinity expressions specified by this field, but it may choosea node that violates one or more of the expressions. The node that ismost preferred is the one with the greatest sum of weights, i.e.for each node that meets all of the scheduling requirements (resourcerequest, requiredDuringScheduling affinity expressions, etc.),compute a sum by iterating through the elements of this field and adding'weight' to the sum if the node matches the corresponding matchExpressions; thenode(s) with the highest sum are the most preferred.",
+ NestedObject: schema.NestedAttributeObject{
+ Attributes: map[string]schema.Attribute{
+ "preference": schema.SingleNestedAttribute{
+ Description: "A node selector term, associated with the corresponding weight.",
+ MarkdownDescription: "A node selector term, associated with the corresponding weight.",
+ Attributes: map[string]schema.Attribute{
+ "match_expressions": schema.ListNestedAttribute{
+ Description: "A list of node selector requirements by node's labels.",
+ MarkdownDescription: "A list of node selector requirements by node's labels.",
+ NestedObject: schema.NestedAttributeObject{
+ Attributes: map[string]schema.Attribute{
+ "key": schema.StringAttribute{
+ Description: "The label key that the selector applies to.",
+ MarkdownDescription: "The label key that the selector applies to.",
+ Required: true,
+ Optional: false,
+ Computed: false,
+ },
+
+ "operator": schema.StringAttribute{
+ Description: "Represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt.",
+ MarkdownDescription: "Represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt.",
+ Required: true,
+ Optional: false,
+ Computed: false,
+ },
+
+ "values": schema.ListAttribute{
+ Description: "An array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. If the operator is Gt or Lt, the valuesarray must have a single element, which will be interpreted as an integer.This array is replaced during a strategic merge patch.",
+ MarkdownDescription: "An array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. If the operator is Gt or Lt, the valuesarray must have a single element, which will be interpreted as an integer.This array is replaced during a strategic merge patch.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+ },
+ },
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "match_fields": schema.ListNestedAttribute{
+ Description: "A list of node selector requirements by node's fields.",
+ MarkdownDescription: "A list of node selector requirements by node's fields.",
+ NestedObject: schema.NestedAttributeObject{
+ Attributes: map[string]schema.Attribute{
+ "key": schema.StringAttribute{
+ Description: "The label key that the selector applies to.",
+ MarkdownDescription: "The label key that the selector applies to.",
+ Required: true,
+ Optional: false,
+ Computed: false,
+ },
+
+ "operator": schema.StringAttribute{
+ Description: "Represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt.",
+ MarkdownDescription: "Represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt.",
+ Required: true,
+ Optional: false,
+ Computed: false,
+ },
+
+ "values": schema.ListAttribute{
+ Description: "An array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. If the operator is Gt or Lt, the valuesarray must have a single element, which will be interpreted as an integer.This array is replaced during a strategic merge patch.",
+ MarkdownDescription: "An array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. If the operator is Gt or Lt, the valuesarray must have a single element, which will be interpreted as an integer.This array is replaced during a strategic merge patch.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+ },
+ },
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+ },
+ Required: true,
+ Optional: false,
+ Computed: false,
+ },
+
+ "weight": schema.Int64Attribute{
+ Description: "Weight associated with matching the corresponding nodeSelectorTerm, in the range 1-100.",
+ MarkdownDescription: "Weight associated with matching the corresponding nodeSelectorTerm, in the range 1-100.",
+ Required: true,
+ Optional: false,
+ Computed: false,
+ },
+ },
+ },
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "required_during_scheduling_ignored_during_execution": schema.SingleNestedAttribute{
+ Description: "If the affinity requirements specified by this field are not met atscheduling time, the pod will not be scheduled onto the node.If the affinity requirements specified by this field cease to be metat some point during pod execution (e.g. due to an update), the systemmay or may not try to eventually evict the pod from its node.",
+ MarkdownDescription: "If the affinity requirements specified by this field are not met atscheduling time, the pod will not be scheduled onto the node.If the affinity requirements specified by this field cease to be metat some point during pod execution (e.g. due to an update), the systemmay or may not try to eventually evict the pod from its node.",
+ Attributes: map[string]schema.Attribute{
+ "node_selector_terms": schema.ListNestedAttribute{
+ Description: "Required. A list of node selector terms. The terms are ORed.",
+ MarkdownDescription: "Required. A list of node selector terms. The terms are ORed.",
+ NestedObject: schema.NestedAttributeObject{
+ Attributes: map[string]schema.Attribute{
+ "match_expressions": schema.ListNestedAttribute{
+ Description: "A list of node selector requirements by node's labels.",
+ MarkdownDescription: "A list of node selector requirements by node's labels.",
+ NestedObject: schema.NestedAttributeObject{
+ Attributes: map[string]schema.Attribute{
+ "key": schema.StringAttribute{
+ Description: "The label key that the selector applies to.",
+ MarkdownDescription: "The label key that the selector applies to.",
+ Required: true,
+ Optional: false,
+ Computed: false,
+ },
+
+ "operator": schema.StringAttribute{
+ Description: "Represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt.",
+ MarkdownDescription: "Represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt.",
+ Required: true,
+ Optional: false,
+ Computed: false,
+ },
+
+ "values": schema.ListAttribute{
+ Description: "An array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. If the operator is Gt or Lt, the valuesarray must have a single element, which will be interpreted as an integer.This array is replaced during a strategic merge patch.",
+ MarkdownDescription: "An array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. If the operator is Gt or Lt, the valuesarray must have a single element, which will be interpreted as an integer.This array is replaced during a strategic merge patch.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+ },
+ },
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "match_fields": schema.ListNestedAttribute{
+ Description: "A list of node selector requirements by node's fields.",
+ MarkdownDescription: "A list of node selector requirements by node's fields.",
+ NestedObject: schema.NestedAttributeObject{
+ Attributes: map[string]schema.Attribute{
+ "key": schema.StringAttribute{
+ Description: "The label key that the selector applies to.",
+ MarkdownDescription: "The label key that the selector applies to.",
+ Required: true,
+ Optional: false,
+ Computed: false,
+ },
+
+ "operator": schema.StringAttribute{
+ Description: "Represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt.",
+ MarkdownDescription: "Represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt.",
+ Required: true,
+ Optional: false,
+ Computed: false,
+ },
+
+ "values": schema.ListAttribute{
+ Description: "An array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. If the operator is Gt or Lt, the valuesarray must have a single element, which will be interpreted as an integer.This array is replaced during a strategic merge patch.",
+ MarkdownDescription: "An array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. If the operator is Gt or Lt, the valuesarray must have a single element, which will be interpreted as an integer.This array is replaced during a strategic merge patch.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+ },
+ },
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+ },
+ },
+ Required: true,
+ Optional: false,
+ Computed: false,
+ },
+ },
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+ },
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "pod_affinity": schema.SingleNestedAttribute{
+ Description: "Describes pod affinity scheduling rules (e.g. co-locate this pod in the same node, zone, etc. as some other pod(s)).",
+ MarkdownDescription: "Describes pod affinity scheduling rules (e.g. co-locate this pod in the same node, zone, etc. as some other pod(s)).",
+ Attributes: map[string]schema.Attribute{
+ "preferred_during_scheduling_ignored_during_execution": schema.ListNestedAttribute{
+ Description: "The scheduler will prefer to schedule pods to nodes that satisfythe affinity expressions specified by this field, but it may choosea node that violates one or more of the expressions. The node that ismost preferred is the one with the greatest sum of weights, i.e.for each node that meets all of the scheduling requirements (resourcerequest, requiredDuringScheduling affinity expressions, etc.),compute a sum by iterating through the elements of this field and adding'weight' to the sum if the node has pods which matches the corresponding podAffinityTerm; thenode(s) with the highest sum are the most preferred.",
+ MarkdownDescription: "The scheduler will prefer to schedule pods to nodes that satisfythe affinity expressions specified by this field, but it may choosea node that violates one or more of the expressions. The node that ismost preferred is the one with the greatest sum of weights, i.e.for each node that meets all of the scheduling requirements (resourcerequest, requiredDuringScheduling affinity expressions, etc.),compute a sum by iterating through the elements of this field and adding'weight' to the sum if the node has pods which matches the corresponding podAffinityTerm; thenode(s) with the highest sum are the most preferred.",
+ NestedObject: schema.NestedAttributeObject{
+ Attributes: map[string]schema.Attribute{
+ "pod_affinity_term": schema.SingleNestedAttribute{
+ Description: "Required. A pod affinity term, associated with the corresponding weight.",
+ MarkdownDescription: "Required. A pod affinity term, associated with the corresponding weight.",
+ Attributes: map[string]schema.Attribute{
+ "label_selector": schema.SingleNestedAttribute{
+ Description: "A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods.",
+ MarkdownDescription: "A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods.",
+ Attributes: map[string]schema.Attribute{
+ "match_expressions": schema.ListNestedAttribute{
+ Description: "matchExpressions is a list of label selector requirements. The requirements are ANDed.",
+ MarkdownDescription: "matchExpressions is a list of label selector requirements. The requirements are ANDed.",
+ NestedObject: schema.NestedAttributeObject{
+ Attributes: map[string]schema.Attribute{
+ "key": schema.StringAttribute{
+ Description: "key is the label key that the selector applies to.",
+ MarkdownDescription: "key is the label key that the selector applies to.",
+ Required: true,
+ Optional: false,
+ Computed: false,
+ },
+
+ "operator": schema.StringAttribute{
+ Description: "operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.",
+ MarkdownDescription: "operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.",
+ Required: true,
+ Optional: false,
+ Computed: false,
+ },
+
+ "values": schema.ListAttribute{
+ Description: "values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.",
+ MarkdownDescription: "values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+ },
+ },
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "match_labels": schema.MapAttribute{
+ Description: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.",
+ MarkdownDescription: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+ },
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "match_label_keys": schema.ListAttribute{
+ Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "mismatch_label_keys": schema.ListAttribute{
+ Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "namespace_selector": schema.SingleNestedAttribute{
+ Description: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.",
+ MarkdownDescription: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.",
+ Attributes: map[string]schema.Attribute{
+ "match_expressions": schema.ListNestedAttribute{
+ Description: "matchExpressions is a list of label selector requirements. The requirements are ANDed.",
+ MarkdownDescription: "matchExpressions is a list of label selector requirements. The requirements are ANDed.",
+ NestedObject: schema.NestedAttributeObject{
+ Attributes: map[string]schema.Attribute{
+ "key": schema.StringAttribute{
+ Description: "key is the label key that the selector applies to.",
+ MarkdownDescription: "key is the label key that the selector applies to.",
+ Required: true,
+ Optional: false,
+ Computed: false,
+ },
+
+ "operator": schema.StringAttribute{
+ Description: "operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.",
+ MarkdownDescription: "operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.",
+ Required: true,
+ Optional: false,
+ Computed: false,
+ },
+
+ "values": schema.ListAttribute{
+ Description: "values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.",
+ MarkdownDescription: "values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+ },
+ },
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "match_labels": schema.MapAttribute{
+ Description: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.",
+ MarkdownDescription: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+ },
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "namespaces": schema.ListAttribute{
+ Description: "namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.",
+ MarkdownDescription: "namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "topology_key": schema.StringAttribute{
+ Description: "This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matchingthe labelSelector in the specified namespaces, where co-located is defined as running on a nodewhose value of the label with key topologyKey matches that of any node on which any of theselected pods is running.Empty topologyKey is not allowed.",
+ MarkdownDescription: "This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matchingthe labelSelector in the specified namespaces, where co-located is defined as running on a nodewhose value of the label with key topologyKey matches that of any node on which any of theselected pods is running.Empty topologyKey is not allowed.",
+ Required: true,
+ Optional: false,
+ Computed: false,
+ },
+ },
+ Required: true,
+ Optional: false,
+ Computed: false,
+ },
+
+ "weight": schema.Int64Attribute{
+ Description: "weight associated with matching the corresponding podAffinityTerm,in the range 1-100.",
+ MarkdownDescription: "weight associated with matching the corresponding podAffinityTerm,in the range 1-100.",
+ Required: true,
+ Optional: false,
+ Computed: false,
+ },
+ },
+ },
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "required_during_scheduling_ignored_during_execution": schema.ListNestedAttribute{
+ Description: "If the affinity requirements specified by this field are not met atscheduling time, the pod will not be scheduled onto the node.If the affinity requirements specified by this field cease to be metat some point during pod execution (e.g. due to a pod label update), thesystem may or may not try to eventually evict the pod from its node.When there are multiple elements, the lists of nodes corresponding to eachpodAffinityTerm are intersected, i.e. all terms must be satisfied.",
+ MarkdownDescription: "If the affinity requirements specified by this field are not met atscheduling time, the pod will not be scheduled onto the node.If the affinity requirements specified by this field cease to be metat some point during pod execution (e.g. due to a pod label update), thesystem may or may not try to eventually evict the pod from its node.When there are multiple elements, the lists of nodes corresponding to eachpodAffinityTerm are intersected, i.e. all terms must be satisfied.",
+ NestedObject: schema.NestedAttributeObject{
+ Attributes: map[string]schema.Attribute{
+ "label_selector": schema.SingleNestedAttribute{
+ Description: "A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods.",
+ MarkdownDescription: "A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods.",
+ Attributes: map[string]schema.Attribute{
+ "match_expressions": schema.ListNestedAttribute{
+ Description: "matchExpressions is a list of label selector requirements. The requirements are ANDed.",
+ MarkdownDescription: "matchExpressions is a list of label selector requirements. The requirements are ANDed.",
+ NestedObject: schema.NestedAttributeObject{
+ Attributes: map[string]schema.Attribute{
+ "key": schema.StringAttribute{
+ Description: "key is the label key that the selector applies to.",
+ MarkdownDescription: "key is the label key that the selector applies to.",
+ Required: true,
+ Optional: false,
+ Computed: false,
+ },
+
+ "operator": schema.StringAttribute{
+ Description: "operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.",
+ MarkdownDescription: "operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.",
+ Required: true,
+ Optional: false,
+ Computed: false,
+ },
+
+ "values": schema.ListAttribute{
+ Description: "values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.",
+ MarkdownDescription: "values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+ },
+ },
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "match_labels": schema.MapAttribute{
+ Description: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.",
+ MarkdownDescription: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+ },
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "match_label_keys": schema.ListAttribute{
+ Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "mismatch_label_keys": schema.ListAttribute{
+ Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "namespace_selector": schema.SingleNestedAttribute{
+ Description: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.",
+ MarkdownDescription: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.",
+ Attributes: map[string]schema.Attribute{
+ "match_expressions": schema.ListNestedAttribute{
+ Description: "matchExpressions is a list of label selector requirements. The requirements are ANDed.",
+ MarkdownDescription: "matchExpressions is a list of label selector requirements. The requirements are ANDed.",
+ NestedObject: schema.NestedAttributeObject{
+ Attributes: map[string]schema.Attribute{
+ "key": schema.StringAttribute{
+ Description: "key is the label key that the selector applies to.",
+ MarkdownDescription: "key is the label key that the selector applies to.",
+ Required: true,
+ Optional: false,
+ Computed: false,
+ },
+
+ "operator": schema.StringAttribute{
+ Description: "operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.",
+ MarkdownDescription: "operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.",
+ Required: true,
+ Optional: false,
+ Computed: false,
+ },
+
+ "values": schema.ListAttribute{
+ Description: "values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.",
+ MarkdownDescription: "values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+ },
+ },
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "match_labels": schema.MapAttribute{
+ Description: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.",
+ MarkdownDescription: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+ },
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "namespaces": schema.ListAttribute{
+ Description: "namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.",
+ MarkdownDescription: "namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "topology_key": schema.StringAttribute{
+ Description: "This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matchingthe labelSelector in the specified namespaces, where co-located is defined as running on a nodewhose value of the label with key topologyKey matches that of any node on which any of theselected pods is running.Empty topologyKey is not allowed.",
+ MarkdownDescription: "This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matchingthe labelSelector in the specified namespaces, where co-located is defined as running on a nodewhose value of the label with key topologyKey matches that of any node on which any of theselected pods is running.Empty topologyKey is not allowed.",
+ Required: true,
+ Optional: false,
+ Computed: false,
+ },
+ },
+ },
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+ },
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "pod_anti_affinity": schema.SingleNestedAttribute{
+ Description: "Describes pod anti-affinity scheduling rules (e.g. avoid putting this pod in the same node, zone, etc. as some other pod(s)).",
+ MarkdownDescription: "Describes pod anti-affinity scheduling rules (e.g. avoid putting this pod in the same node, zone, etc. as some other pod(s)).",
+ Attributes: map[string]schema.Attribute{
+ "preferred_during_scheduling_ignored_during_execution": schema.ListNestedAttribute{
+ Description: "The scheduler will prefer to schedule pods to nodes that satisfythe anti-affinity expressions specified by this field, but it may choosea node that violates one or more of the expressions. The node that ismost preferred is the one with the greatest sum of weights, i.e.for each node that meets all of the scheduling requirements (resourcerequest, requiredDuringScheduling anti-affinity expressions, etc.),compute a sum by iterating through the elements of this field and adding'weight' to the sum if the node has pods which matches the corresponding podAffinityTerm; thenode(s) with the highest sum are the most preferred.",
+ MarkdownDescription: "The scheduler will prefer to schedule pods to nodes that satisfythe anti-affinity expressions specified by this field, but it may choosea node that violates one or more of the expressions. The node that ismost preferred is the one with the greatest sum of weights, i.e.for each node that meets all of the scheduling requirements (resourcerequest, requiredDuringScheduling anti-affinity expressions, etc.),compute a sum by iterating through the elements of this field and adding'weight' to the sum if the node has pods which matches the corresponding podAffinityTerm; thenode(s) with the highest sum are the most preferred.",
+ NestedObject: schema.NestedAttributeObject{
+ Attributes: map[string]schema.Attribute{
+ "pod_affinity_term": schema.SingleNestedAttribute{
+ Description: "Required. A pod affinity term, associated with the corresponding weight.",
+ MarkdownDescription: "Required. A pod affinity term, associated with the corresponding weight.",
+ Attributes: map[string]schema.Attribute{
+ "label_selector": schema.SingleNestedAttribute{
+ Description: "A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods.",
+ MarkdownDescription: "A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods.",
+ Attributes: map[string]schema.Attribute{
+ "match_expressions": schema.ListNestedAttribute{
+ Description: "matchExpressions is a list of label selector requirements. The requirements are ANDed.",
+ MarkdownDescription: "matchExpressions is a list of label selector requirements. The requirements are ANDed.",
+ NestedObject: schema.NestedAttributeObject{
+ Attributes: map[string]schema.Attribute{
+ "key": schema.StringAttribute{
+ Description: "key is the label key that the selector applies to.",
+ MarkdownDescription: "key is the label key that the selector applies to.",
+ Required: true,
+ Optional: false,
+ Computed: false,
+ },
+
+ "operator": schema.StringAttribute{
+ Description: "operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.",
+ MarkdownDescription: "operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.",
+ Required: true,
+ Optional: false,
+ Computed: false,
+ },
+
+ "values": schema.ListAttribute{
+ Description: "values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.",
+ MarkdownDescription: "values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+ },
+ },
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "match_labels": schema.MapAttribute{
+ Description: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.",
+ MarkdownDescription: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+ },
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "match_label_keys": schema.ListAttribute{
+ Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "mismatch_label_keys": schema.ListAttribute{
+ Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "namespace_selector": schema.SingleNestedAttribute{
+ Description: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.",
+ MarkdownDescription: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.",
+ Attributes: map[string]schema.Attribute{
+ "match_expressions": schema.ListNestedAttribute{
+ Description: "matchExpressions is a list of label selector requirements. The requirements are ANDed.",
+ MarkdownDescription: "matchExpressions is a list of label selector requirements. The requirements are ANDed.",
+ NestedObject: schema.NestedAttributeObject{
+ Attributes: map[string]schema.Attribute{
+ "key": schema.StringAttribute{
+ Description: "key is the label key that the selector applies to.",
+ MarkdownDescription: "key is the label key that the selector applies to.",
+ Required: true,
+ Optional: false,
+ Computed: false,
+ },
+
+ "operator": schema.StringAttribute{
+ Description: "operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.",
+ MarkdownDescription: "operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.",
+ Required: true,
+ Optional: false,
+ Computed: false,
+ },
+
+ "values": schema.ListAttribute{
+ Description: "values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.",
+ MarkdownDescription: "values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+ },
+ },
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "match_labels": schema.MapAttribute{
+ Description: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.",
+ MarkdownDescription: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+ },
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "namespaces": schema.ListAttribute{
+ Description: "namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.",
+ MarkdownDescription: "namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "topology_key": schema.StringAttribute{
+ Description: "This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matchingthe labelSelector in the specified namespaces, where co-located is defined as running on a nodewhose value of the label with key topologyKey matches that of any node on which any of theselected pods is running.Empty topologyKey is not allowed.",
+ MarkdownDescription: "This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matchingthe labelSelector in the specified namespaces, where co-located is defined as running on a nodewhose value of the label with key topologyKey matches that of any node on which any of theselected pods is running.Empty topologyKey is not allowed.",
+ Required: true,
+ Optional: false,
+ Computed: false,
+ },
+ },
+ Required: true,
+ Optional: false,
+ Computed: false,
+ },
+
+ "weight": schema.Int64Attribute{
+ Description: "weight associated with matching the corresponding podAffinityTerm,in the range 1-100.",
+ MarkdownDescription: "weight associated with matching the corresponding podAffinityTerm,in the range 1-100.",
+ Required: true,
+ Optional: false,
+ Computed: false,
+ },
+ },
+ },
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "required_during_scheduling_ignored_during_execution": schema.ListNestedAttribute{
+ Description: "If the anti-affinity requirements specified by this field are not met atscheduling time, the pod will not be scheduled onto the node.If the anti-affinity requirements specified by this field cease to be metat some point during pod execution (e.g. due to a pod label update), thesystem may or may not try to eventually evict the pod from its node.When there are multiple elements, the lists of nodes corresponding to eachpodAffinityTerm are intersected, i.e. all terms must be satisfied.",
+ MarkdownDescription: "If the anti-affinity requirements specified by this field are not met atscheduling time, the pod will not be scheduled onto the node.If the anti-affinity requirements specified by this field cease to be metat some point during pod execution (e.g. due to a pod label update), thesystem may or may not try to eventually evict the pod from its node.When there are multiple elements, the lists of nodes corresponding to eachpodAffinityTerm are intersected, i.e. all terms must be satisfied.",
+ NestedObject: schema.NestedAttributeObject{
+ Attributes: map[string]schema.Attribute{
+ "label_selector": schema.SingleNestedAttribute{
+ Description: "A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods.",
+ MarkdownDescription: "A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods.",
+ Attributes: map[string]schema.Attribute{
+ "match_expressions": schema.ListNestedAttribute{
+ Description: "matchExpressions is a list of label selector requirements. The requirements are ANDed.",
+ MarkdownDescription: "matchExpressions is a list of label selector requirements. The requirements are ANDed.",
+ NestedObject: schema.NestedAttributeObject{
+ Attributes: map[string]schema.Attribute{
+ "key": schema.StringAttribute{
+ Description: "key is the label key that the selector applies to.",
+ MarkdownDescription: "key is the label key that the selector applies to.",
+ Required: true,
+ Optional: false,
+ Computed: false,
+ },
+
+ "operator": schema.StringAttribute{
+ Description: "operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.",
+ MarkdownDescription: "operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.",
+ Required: true,
+ Optional: false,
+ Computed: false,
+ },
+
+ "values": schema.ListAttribute{
+ Description: "values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.",
+ MarkdownDescription: "values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+ },
+ },
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "match_labels": schema.MapAttribute{
+ Description: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.",
+ MarkdownDescription: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+ },
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "match_label_keys": schema.ListAttribute{
+ Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "mismatch_label_keys": schema.ListAttribute{
+ Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "namespace_selector": schema.SingleNestedAttribute{
+ Description: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.",
+ MarkdownDescription: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.",
+ Attributes: map[string]schema.Attribute{
+ "match_expressions": schema.ListNestedAttribute{
+ Description: "matchExpressions is a list of label selector requirements. The requirements are ANDed.",
+ MarkdownDescription: "matchExpressions is a list of label selector requirements. The requirements are ANDed.",
+ NestedObject: schema.NestedAttributeObject{
+ Attributes: map[string]schema.Attribute{
+ "key": schema.StringAttribute{
+ Description: "key is the label key that the selector applies to.",
+ MarkdownDescription: "key is the label key that the selector applies to.",
+ Required: true,
+ Optional: false,
+ Computed: false,
+ },
+
+ "operator": schema.StringAttribute{
+ Description: "operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.",
+ MarkdownDescription: "operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.",
+ Required: true,
+ Optional: false,
+ Computed: false,
+ },
+
+ "values": schema.ListAttribute{
+ Description: "values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.",
+ MarkdownDescription: "values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+ },
+ },
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "match_labels": schema.MapAttribute{
+ Description: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.",
+ MarkdownDescription: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+ },
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "namespaces": schema.ListAttribute{
+ Description: "namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.",
+ MarkdownDescription: "namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "topology_key": schema.StringAttribute{
+ Description: "This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matchingthe labelSelector in the specified namespaces, where co-located is defined as running on a nodewhose value of the label with key topologyKey matches that of any node on which any of theselected pods is running.Empty topologyKey is not allowed.",
+ MarkdownDescription: "This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matchingthe labelSelector in the specified namespaces, where co-located is defined as running on a nodewhose value of the label with key topologyKey matches that of any node on which any of theselected pods is running.Empty topologyKey is not allowed.",
+ Required: true,
+ Optional: false,
+ Computed: false,
+ },
+ },
+ },
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+ },
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+ },
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "image_pull_secrets": schema.ListNestedAttribute{
+ Description: "If specified, the pod's imagePullSecrets",
+ MarkdownDescription: "If specified, the pod's imagePullSecrets",
+ NestedObject: schema.NestedAttributeObject{
+ Attributes: map[string]schema.Attribute{
+ "name": schema.StringAttribute{
+ Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.",
+ MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.",
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+ },
+ },
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "node_selector": schema.MapAttribute{
+ Description: "NodeSelector is a selector which must be true for the pod to fit on a node.Selector which must match a node's labels for the pod to be scheduled on that node.More info: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/",
+ MarkdownDescription: "NodeSelector is a selector which must be true for the pod to fit on a node.Selector which must match a node's labels for the pod to be scheduled on that node.More info: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "priority_class_name": schema.StringAttribute{
+ Description: "If specified, the pod's priorityClassName.",
+ MarkdownDescription: "If specified, the pod's priorityClassName.",
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "security_context": schema.SingleNestedAttribute{
+ Description: "If specified, the pod's security context",
+ MarkdownDescription: "If specified, the pod's security context",
+ Attributes: map[string]schema.Attribute{
+ "fs_group": schema.Int64Attribute{
+ Description: "A special supplemental group that applies to all containers in a pod.Some volume types allow the Kubelet to change the ownership of that volumeto be owned by the pod:1. The owning GID will be the FSGroup2. The setgid bit is set (new files created in the volume will be owned by FSGroup)3. The permission bits are OR'd with rw-rw----If unset, the Kubelet will not modify the ownership and permissions of any volume.Note that this field cannot be set when spec.os.name is windows.",
+ MarkdownDescription: "A special supplemental group that applies to all containers in a pod.Some volume types allow the Kubelet to change the ownership of that volumeto be owned by the pod:1. The owning GID will be the FSGroup2. The setgid bit is set (new files created in the volume will be owned by FSGroup)3. The permission bits are OR'd with rw-rw----If unset, the Kubelet will not modify the ownership and permissions of any volume.Note that this field cannot be set when spec.os.name is windows.",
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "fs_group_change_policy": schema.StringAttribute{
+ Description: "fsGroupChangePolicy defines behavior of changing ownership and permission of the volumebefore being exposed inside Pod. This field will only apply tovolume types which support fsGroup based ownership(and permissions).It will have no effect on ephemeral volume types such as: secret, configmapsand emptydir.Valid values are 'OnRootMismatch' and 'Always'. If not specified, 'Always' is used.Note that this field cannot be set when spec.os.name is windows.",
+ MarkdownDescription: "fsGroupChangePolicy defines behavior of changing ownership and permission of the volumebefore being exposed inside Pod. This field will only apply tovolume types which support fsGroup based ownership(and permissions).It will have no effect on ephemeral volume types such as: secret, configmapsand emptydir.Valid values are 'OnRootMismatch' and 'Always'. If not specified, 'Always' is used.Note that this field cannot be set when spec.os.name is windows.",
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "run_as_group": schema.Int64Attribute{
+ Description: "The GID to run the entrypoint of the container process.Uses runtime default if unset.May also be set in SecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedencefor that container.Note that this field cannot be set when spec.os.name is windows.",
+ MarkdownDescription: "The GID to run the entrypoint of the container process.Uses runtime default if unset.May also be set in SecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedencefor that container.Note that this field cannot be set when spec.os.name is windows.",
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "run_as_non_root": schema.BoolAttribute{
+ Description: "Indicates that the container must run as a non-root user.If true, the Kubelet will validate the image at runtime to ensure that itdoes not run as UID 0 (root) and fail to start the container if it does.If unset or false, no such validation will be performed.May also be set in SecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.",
+ MarkdownDescription: "Indicates that the container must run as a non-root user.If true, the Kubelet will validate the image at runtime to ensure that itdoes not run as UID 0 (root) and fail to start the container if it does.If unset or false, no such validation will be performed.May also be set in SecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.",
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "run_as_user": schema.Int64Attribute{
+ Description: "The UID to run the entrypoint of the container process.Defaults to user specified in image metadata if unspecified.May also be set in SecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedencefor that container.Note that this field cannot be set when spec.os.name is windows.",
+ MarkdownDescription: "The UID to run the entrypoint of the container process.Defaults to user specified in image metadata if unspecified.May also be set in SecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedencefor that container.Note that this field cannot be set when spec.os.name is windows.",
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "se_linux_options": schema.SingleNestedAttribute{
+ Description: "The SELinux context to be applied to all containers.If unspecified, the container runtime will allocate a random SELinux context for eachcontainer. May also be set in SecurityContext. If set inboth SecurityContext and PodSecurityContext, the value specified in SecurityContexttakes precedence for that container.Note that this field cannot be set when spec.os.name is windows.",
+ MarkdownDescription: "The SELinux context to be applied to all containers.If unspecified, the container runtime will allocate a random SELinux context for eachcontainer. May also be set in SecurityContext. If set inboth SecurityContext and PodSecurityContext, the value specified in SecurityContexttakes precedence for that container.Note that this field cannot be set when spec.os.name is windows.",
+ Attributes: map[string]schema.Attribute{
+ "level": schema.StringAttribute{
+ Description: "Level is SELinux level label that applies to the container.",
+ MarkdownDescription: "Level is SELinux level label that applies to the container.",
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "role": schema.StringAttribute{
+ Description: "Role is a SELinux role label that applies to the container.",
+ MarkdownDescription: "Role is a SELinux role label that applies to the container.",
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "type": schema.StringAttribute{
+ Description: "Type is a SELinux type label that applies to the container.",
+ MarkdownDescription: "Type is a SELinux type label that applies to the container.",
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "user": schema.StringAttribute{
+ Description: "User is a SELinux user label that applies to the container.",
+ MarkdownDescription: "User is a SELinux user label that applies to the container.",
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+ },
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "seccomp_profile": schema.SingleNestedAttribute{
+ Description: "The seccomp options to use by the containers in this pod.Note that this field cannot be set when spec.os.name is windows.",
+ MarkdownDescription: "The seccomp options to use by the containers in this pod.Note that this field cannot be set when spec.os.name is windows.",
+ Attributes: map[string]schema.Attribute{
+ "localhost_profile": schema.StringAttribute{
+ Description: "localhostProfile indicates a profile defined in a file on the node should be used.The profile must be preconfigured on the node to work.Must be a descending path, relative to the kubelet's configured seccomp profile location.Must be set if type is 'Localhost'. Must NOT be set for any other type.",
+ MarkdownDescription: "localhostProfile indicates a profile defined in a file on the node should be used.The profile must be preconfigured on the node to work.Must be a descending path, relative to the kubelet's configured seccomp profile location.Must be set if type is 'Localhost'. Must NOT be set for any other type.",
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "type": schema.StringAttribute{
+ Description: "type indicates which kind of seccomp profile will be applied.Valid options are:Localhost - a profile defined in a file on the node should be used.RuntimeDefault - the container runtime default profile should be used.Unconfined - no profile should be applied.",
+ MarkdownDescription: "type indicates which kind of seccomp profile will be applied.Valid options are:Localhost - a profile defined in a file on the node should be used.RuntimeDefault - the container runtime default profile should be used.Unconfined - no profile should be applied.",
+ Required: true,
+ Optional: false,
+ Computed: false,
+ },
+ },
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "supplemental_groups": schema.ListAttribute{
+ Description: "A list of groups applied to the first process run in each container, in additionto the container's primary GID, the fsGroup (if specified), and group membershipsdefined in the container image for the uid of the container process. If unspecified,no additional groups are added to any container. Note that group membershipsdefined in the container image for the uid of the container process are still effective,even if they are not included in this list.Note that this field cannot be set when spec.os.name is windows.",
+ MarkdownDescription: "A list of groups applied to the first process run in each container, in additionto the container's primary GID, the fsGroup (if specified), and group membershipsdefined in the container image for the uid of the container process. If unspecified,no additional groups are added to any container. Note that group membershipsdefined in the container image for the uid of the container process are still effective,even if they are not included in this list.Note that this field cannot be set when spec.os.name is windows.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "sysctls": schema.ListNestedAttribute{
+ Description: "Sysctls hold a list of namespaced sysctls used for the pod. Pods with unsupportedsysctls (by the container runtime) might fail to launch.Note that this field cannot be set when spec.os.name is windows.",
+ MarkdownDescription: "Sysctls hold a list of namespaced sysctls used for the pod. Pods with unsupportedsysctls (by the container runtime) might fail to launch.Note that this field cannot be set when spec.os.name is windows.",
+ NestedObject: schema.NestedAttributeObject{
+ Attributes: map[string]schema.Attribute{
+ "name": schema.StringAttribute{
+ Description: "Name of a property to set",
+ MarkdownDescription: "Name of a property to set",
+ Required: true,
+ Optional: false,
+ Computed: false,
+ },
+
+ "value": schema.StringAttribute{
+ Description: "Value of a property to set",
+ MarkdownDescription: "Value of a property to set",
+ Required: true,
+ Optional: false,
+ Computed: false,
+ },
+ },
+ },
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+ },
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
"service_account_name": schema.StringAttribute{
Description: "If specified, the pod's service account",
MarkdownDescription: "If specified, the pod's service account",
diff --git a/internal/provider/acmpca_services_k8s_aws_v1alpha1/acmpca_services_k8s_aws_certificate_authority_activation_v1alpha1_manifest.go b/internal/provider/acmpca_services_k8s_aws_v1alpha1/acmpca_services_k8s_aws_certificate_authority_activation_v1alpha1_manifest.go
index f0f58357d..3a167815b 100644
--- a/internal/provider/acmpca_services_k8s_aws_v1alpha1/acmpca_services_k8s_aws_certificate_authority_activation_v1alpha1_manifest.go
+++ b/internal/provider/acmpca_services_k8s_aws_v1alpha1/acmpca_services_k8s_aws_certificate_authority_activation_v1alpha1_manifest.go
@@ -51,7 +51,8 @@ type AcmpcaServicesK8SAwsCertificateAuthorityActivationV1Alpha1ManifestData stru
CertificateAuthorityARN *string `tfsdk:"certificate_authority_arn" json:"certificateAuthorityARN,omitempty"`
CertificateAuthorityRef *struct {
From *struct {
- Name *string `tfsdk:"name" json:"name,omitempty"`
+ Name *string `tfsdk:"name" json:"name,omitempty"`
+ Namespace *string `tfsdk:"namespace" json:"namespace,omitempty"`
} `tfsdk:"from" json:"from,omitempty"`
} `tfsdk:"certificate_authority_ref" json:"certificateAuthorityRef,omitempty"`
CertificateChain *struct {
@@ -196,6 +197,14 @@ func (r *AcmpcaServicesK8SAwsCertificateAuthorityActivationV1Alpha1Manifest) Sch
Optional: true,
Computed: false,
},
+
+ "namespace": schema.StringAttribute{
+ Description: "",
+ MarkdownDescription: "",
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
},
Required: false,
Optional: true,
diff --git a/internal/provider/acmpca_services_k8s_aws_v1alpha1/acmpca_services_k8s_aws_certificate_v1alpha1_manifest.go b/internal/provider/acmpca_services_k8s_aws_v1alpha1/acmpca_services_k8s_aws_certificate_v1alpha1_manifest.go
index f148f8c40..65ecd0eb5 100644
--- a/internal/provider/acmpca_services_k8s_aws_v1alpha1/acmpca_services_k8s_aws_certificate_v1alpha1_manifest.go
+++ b/internal/provider/acmpca_services_k8s_aws_v1alpha1/acmpca_services_k8s_aws_certificate_v1alpha1_manifest.go
@@ -134,13 +134,15 @@ type AcmpcaServicesK8SAwsCertificateV1Alpha1ManifestData struct {
CertificateAuthorityARN *string `tfsdk:"certificate_authority_arn" json:"certificateAuthorityARN,omitempty"`
CertificateAuthorityRef *struct {
From *struct {
- Name *string `tfsdk:"name" json:"name,omitempty"`
+ Name *string `tfsdk:"name" json:"name,omitempty"`
+ Namespace *string `tfsdk:"namespace" json:"namespace,omitempty"`
} `tfsdk:"from" json:"from,omitempty"`
} `tfsdk:"certificate_authority_ref" json:"certificateAuthorityRef,omitempty"`
CertificateSigningRequest *string `tfsdk:"certificate_signing_request" json:"certificateSigningRequest,omitempty"`
CertificateSigningRequestRef *struct {
From *struct {
- Name *string `tfsdk:"name" json:"name,omitempty"`
+ Name *string `tfsdk:"name" json:"name,omitempty"`
+ Namespace *string `tfsdk:"namespace" json:"namespace,omitempty"`
} `tfsdk:"from" json:"from,omitempty"`
} `tfsdk:"certificate_signing_request_ref" json:"certificateSigningRequestRef,omitempty"`
SigningAlgorithm *string `tfsdk:"signing_algorithm" json:"signingAlgorithm,omitempty"`
@@ -869,6 +871,14 @@ func (r *AcmpcaServicesK8SAwsCertificateV1Alpha1Manifest) Schema(_ context.Conte
Optional: true,
Computed: false,
},
+
+ "namespace": schema.StringAttribute{
+ Description: "",
+ MarkdownDescription: "",
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
},
Required: false,
Optional: true,
@@ -903,6 +913,14 @@ func (r *AcmpcaServicesK8SAwsCertificateV1Alpha1Manifest) Schema(_ context.Conte
Optional: true,
Computed: false,
},
+
+ "namespace": schema.StringAttribute{
+ Description: "",
+ MarkdownDescription: "",
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
},
Required: false,
Optional: true,
diff --git a/internal/provider/anywhere_eks_amazonaws_com_v1alpha1/anywhere_eks_amazonaws_com_bundles_v1alpha1_manifest.go b/internal/provider/anywhere_eks_amazonaws_com_v1alpha1/anywhere_eks_amazonaws_com_bundles_v1alpha1_manifest.go
index e83ca4b4e..c095d3b75 100644
--- a/internal/provider/anywhere_eks_amazonaws_com_v1alpha1/anywhere_eks_amazonaws_com_bundles_v1alpha1_manifest.go
+++ b/internal/provider/anywhere_eks_amazonaws_com_v1alpha1/anywhere_eks_amazonaws_com_bundles_v1alpha1_manifest.go
@@ -910,6 +910,24 @@ type AnywhereEksAmazonawsComBundlesV1Alpha1ManifestData struct {
OsName *string `tfsdk:"os_name" json:"osName,omitempty"`
Uri *string `tfsdk:"uri" json:"uri,omitempty"`
} `tfsdk:"tink_controller" json:"tinkController,omitempty"`
+ TinkRelay *struct {
+ Arch *[]string `tfsdk:"arch" json:"arch,omitempty"`
+ Description *string `tfsdk:"description" json:"description,omitempty"`
+ ImageDigest *string `tfsdk:"image_digest" json:"imageDigest,omitempty"`
+ Name *string `tfsdk:"name" json:"name,omitempty"`
+ Os *string `tfsdk:"os" json:"os,omitempty"`
+ OsName *string `tfsdk:"os_name" json:"osName,omitempty"`
+ Uri *string `tfsdk:"uri" json:"uri,omitempty"`
+ } `tfsdk:"tink_relay" json:"tinkRelay,omitempty"`
+ TinkRelayInit *struct {
+ Arch *[]string `tfsdk:"arch" json:"arch,omitempty"`
+ Description *string `tfsdk:"description" json:"description,omitempty"`
+ ImageDigest *string `tfsdk:"image_digest" json:"imageDigest,omitempty"`
+ Name *string `tfsdk:"name" json:"name,omitempty"`
+ Os *string `tfsdk:"os" json:"os,omitempty"`
+ OsName *string `tfsdk:"os_name" json:"osName,omitempty"`
+ Uri *string `tfsdk:"uri" json:"uri,omitempty"`
+ } `tfsdk:"tink_relay_init" json:"tinkRelayInit,omitempty"`
TinkServer *struct {
Arch *[]string `tfsdk:"arch" json:"arch,omitempty"`
Description *string `tfsdk:"description" json:"description,omitempty"`
@@ -7409,6 +7427,144 @@ func (r *AnywhereEksAmazonawsComBundlesV1Alpha1Manifest) Schema(_ context.Contex
Computed: false,
},
+ "tink_relay": schema.SingleNestedAttribute{
+ Description: "",
+ MarkdownDescription: "",
+ Attributes: map[string]schema.Attribute{
+ "arch": schema.ListAttribute{
+ Description: "Architectures of the asset",
+ MarkdownDescription: "Architectures of the asset",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "description": schema.StringAttribute{
+ Description: "",
+ MarkdownDescription: "",
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "image_digest": schema.StringAttribute{
+ Description: "The SHA256 digest of the image manifest",
+ MarkdownDescription: "The SHA256 digest of the image manifest",
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "name": schema.StringAttribute{
+ Description: "The asset name",
+ MarkdownDescription: "The asset name",
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "os": schema.StringAttribute{
+ Description: "Operating system of the asset",
+ MarkdownDescription: "Operating system of the asset",
+ Required: false,
+ Optional: true,
+ Computed: false,
+ Validators: []validator.String{
+ stringvalidator.OneOf("linux", "darwin", "windows"),
+ },
+ },
+
+ "os_name": schema.StringAttribute{
+ Description: "Name of the OS like ubuntu, bottlerocket",
+ MarkdownDescription: "Name of the OS like ubuntu, bottlerocket",
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "uri": schema.StringAttribute{
+ Description: "The image repository, name, and tag",
+ MarkdownDescription: "The image repository, name, and tag",
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+ },
+ Required: true,
+ Optional: false,
+ Computed: false,
+ },
+
+ "tink_relay_init": schema.SingleNestedAttribute{
+ Description: "",
+ MarkdownDescription: "",
+ Attributes: map[string]schema.Attribute{
+ "arch": schema.ListAttribute{
+ Description: "Architectures of the asset",
+ MarkdownDescription: "Architectures of the asset",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "description": schema.StringAttribute{
+ Description: "",
+ MarkdownDescription: "",
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "image_digest": schema.StringAttribute{
+ Description: "The SHA256 digest of the image manifest",
+ MarkdownDescription: "The SHA256 digest of the image manifest",
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "name": schema.StringAttribute{
+ Description: "The asset name",
+ MarkdownDescription: "The asset name",
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "os": schema.StringAttribute{
+ Description: "Operating system of the asset",
+ MarkdownDescription: "Operating system of the asset",
+ Required: false,
+ Optional: true,
+ Computed: false,
+ Validators: []validator.String{
+ stringvalidator.OneOf("linux", "darwin", "windows"),
+ },
+ },
+
+ "os_name": schema.StringAttribute{
+ Description: "Name of the OS like ubuntu, bottlerocket",
+ MarkdownDescription: "Name of the OS like ubuntu, bottlerocket",
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "uri": schema.StringAttribute{
+ Description: "The image repository, name, and tag",
+ MarkdownDescription: "The image repository, name, and tag",
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+ },
+ Required: true,
+ Optional: false,
+ Computed: false,
+ },
+
"tink_server": schema.SingleNestedAttribute{
Description: "",
MarkdownDescription: "",
diff --git a/internal/provider/apigatewayv2_services_k8s_aws_v1alpha1/apigatewayv2_services_k8s_aws_authorizer_v1alpha1_manifest.go b/internal/provider/apigatewayv2_services_k8s_aws_v1alpha1/apigatewayv2_services_k8s_aws_authorizer_v1alpha1_manifest.go
index 2d9832502..a9714b8cb 100644
--- a/internal/provider/apigatewayv2_services_k8s_aws_v1alpha1/apigatewayv2_services_k8s_aws_authorizer_v1alpha1_manifest.go
+++ b/internal/provider/apigatewayv2_services_k8s_aws_v1alpha1/apigatewayv2_services_k8s_aws_authorizer_v1alpha1_manifest.go
@@ -46,7 +46,8 @@ type Apigatewayv2ServicesK8SAwsAuthorizerV1Alpha1ManifestData struct {
ApiID *string `tfsdk:"api_id" json:"apiID,omitempty"`
ApiRef *struct {
From *struct {
- Name *string `tfsdk:"name" json:"name,omitempty"`
+ Name *string `tfsdk:"name" json:"name,omitempty"`
+ Namespace *string `tfsdk:"namespace" json:"namespace,omitempty"`
} `tfsdk:"from" json:"from,omitempty"`
} `tfsdk:"api_ref" json:"apiRef,omitempty"`
AuthorizerCredentialsARN *string `tfsdk:"authorizer_credentials_arn" json:"authorizerCredentialsARN,omitempty"`
@@ -165,6 +166,14 @@ func (r *Apigatewayv2ServicesK8SAwsAuthorizerV1Alpha1Manifest) Schema(_ context.
Optional: true,
Computed: false,
},
+
+ "namespace": schema.StringAttribute{
+ Description: "",
+ MarkdownDescription: "",
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
},
Required: false,
Optional: true,
diff --git a/internal/provider/apigatewayv2_services_k8s_aws_v1alpha1/apigatewayv2_services_k8s_aws_deployment_v1alpha1_manifest.go b/internal/provider/apigatewayv2_services_k8s_aws_v1alpha1/apigatewayv2_services_k8s_aws_deployment_v1alpha1_manifest.go
index 90595680d..946653c6b 100644
--- a/internal/provider/apigatewayv2_services_k8s_aws_v1alpha1/apigatewayv2_services_k8s_aws_deployment_v1alpha1_manifest.go
+++ b/internal/provider/apigatewayv2_services_k8s_aws_v1alpha1/apigatewayv2_services_k8s_aws_deployment_v1alpha1_manifest.go
@@ -46,7 +46,8 @@ type Apigatewayv2ServicesK8SAwsDeploymentV1Alpha1ManifestData struct {
ApiID *string `tfsdk:"api_id" json:"apiID,omitempty"`
ApiRef *struct {
From *struct {
- Name *string `tfsdk:"name" json:"name,omitempty"`
+ Name *string `tfsdk:"name" json:"name,omitempty"`
+ Namespace *string `tfsdk:"namespace" json:"namespace,omitempty"`
} `tfsdk:"from" json:"from,omitempty"`
} `tfsdk:"api_ref" json:"apiRef,omitempty"`
Description *string `tfsdk:"description" json:"description,omitempty"`
@@ -154,6 +155,14 @@ func (r *Apigatewayv2ServicesK8SAwsDeploymentV1Alpha1Manifest) Schema(_ context.
Optional: true,
Computed: false,
},
+
+ "namespace": schema.StringAttribute{
+ Description: "",
+ MarkdownDescription: "",
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
},
Required: false,
Optional: true,
diff --git a/internal/provider/apigatewayv2_services_k8s_aws_v1alpha1/apigatewayv2_services_k8s_aws_integration_v1alpha1_manifest.go b/internal/provider/apigatewayv2_services_k8s_aws_v1alpha1/apigatewayv2_services_k8s_aws_integration_v1alpha1_manifest.go
index 19c970f9b..db1b62a96 100644
--- a/internal/provider/apigatewayv2_services_k8s_aws_v1alpha1/apigatewayv2_services_k8s_aws_integration_v1alpha1_manifest.go
+++ b/internal/provider/apigatewayv2_services_k8s_aws_v1alpha1/apigatewayv2_services_k8s_aws_integration_v1alpha1_manifest.go
@@ -46,13 +46,15 @@ type Apigatewayv2ServicesK8SAwsIntegrationV1Alpha1ManifestData struct {
ApiID *string `tfsdk:"api_id" json:"apiID,omitempty"`
ApiRef *struct {
From *struct {
- Name *string `tfsdk:"name" json:"name,omitempty"`
+ Name *string `tfsdk:"name" json:"name,omitempty"`
+ Namespace *string `tfsdk:"namespace" json:"namespace,omitempty"`
} `tfsdk:"from" json:"from,omitempty"`
} `tfsdk:"api_ref" json:"apiRef,omitempty"`
ConnectionID *string `tfsdk:"connection_id" json:"connectionID,omitempty"`
ConnectionRef *struct {
From *struct {
- Name *string `tfsdk:"name" json:"name,omitempty"`
+ Name *string `tfsdk:"name" json:"name,omitempty"`
+ Namespace *string `tfsdk:"namespace" json:"namespace,omitempty"`
} `tfsdk:"from" json:"from,omitempty"`
} `tfsdk:"connection_ref" json:"connectionRef,omitempty"`
ConnectionType *string `tfsdk:"connection_type" json:"connectionType,omitempty"`
@@ -176,6 +178,14 @@ func (r *Apigatewayv2ServicesK8SAwsIntegrationV1Alpha1Manifest) Schema(_ context
Optional: true,
Computed: false,
},
+
+ "namespace": schema.StringAttribute{
+ Description: "",
+ MarkdownDescription: "",
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
},
Required: false,
Optional: true,
@@ -210,6 +220,14 @@ func (r *Apigatewayv2ServicesK8SAwsIntegrationV1Alpha1Manifest) Schema(_ context
Optional: true,
Computed: false,
},
+
+ "namespace": schema.StringAttribute{
+ Description: "",
+ MarkdownDescription: "",
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
},
Required: false,
Optional: true,
diff --git a/internal/provider/apigatewayv2_services_k8s_aws_v1alpha1/apigatewayv2_services_k8s_aws_route_v1alpha1_manifest.go b/internal/provider/apigatewayv2_services_k8s_aws_v1alpha1/apigatewayv2_services_k8s_aws_route_v1alpha1_manifest.go
index 5408534bb..80f332870 100644
--- a/internal/provider/apigatewayv2_services_k8s_aws_v1alpha1/apigatewayv2_services_k8s_aws_route_v1alpha1_manifest.go
+++ b/internal/provider/apigatewayv2_services_k8s_aws_v1alpha1/apigatewayv2_services_k8s_aws_route_v1alpha1_manifest.go
@@ -47,7 +47,8 @@ type Apigatewayv2ServicesK8SAwsRouteV1Alpha1ManifestData struct {
ApiKeyRequired *bool `tfsdk:"api_key_required" json:"apiKeyRequired,omitempty"`
ApiRef *struct {
From *struct {
- Name *string `tfsdk:"name" json:"name,omitempty"`
+ Name *string `tfsdk:"name" json:"name,omitempty"`
+ Namespace *string `tfsdk:"namespace" json:"namespace,omitempty"`
} `tfsdk:"from" json:"from,omitempty"`
} `tfsdk:"api_ref" json:"apiRef,omitempty"`
AuthorizationScopes *[]string `tfsdk:"authorization_scopes" json:"authorizationScopes,omitempty"`
@@ -55,7 +56,8 @@ type Apigatewayv2ServicesK8SAwsRouteV1Alpha1ManifestData struct {
AuthorizerID *string `tfsdk:"authorizer_id" json:"authorizerID,omitempty"`
AuthorizerRef *struct {
From *struct {
- Name *string `tfsdk:"name" json:"name,omitempty"`
+ Name *string `tfsdk:"name" json:"name,omitempty"`
+ Namespace *string `tfsdk:"namespace" json:"namespace,omitempty"`
} `tfsdk:"from" json:"from,omitempty"`
} `tfsdk:"authorizer_ref" json:"authorizerRef,omitempty"`
ModelSelectionExpression *string `tfsdk:"model_selection_expression" json:"modelSelectionExpression,omitempty"`
@@ -69,7 +71,8 @@ type Apigatewayv2ServicesK8SAwsRouteV1Alpha1ManifestData struct {
Target *string `tfsdk:"target" json:"target,omitempty"`
TargetRef *struct {
From *struct {
- Name *string `tfsdk:"name" json:"name,omitempty"`
+ Name *string `tfsdk:"name" json:"name,omitempty"`
+ Namespace *string `tfsdk:"namespace" json:"namespace,omitempty"`
} `tfsdk:"from" json:"from,omitempty"`
} `tfsdk:"target_ref" json:"targetRef,omitempty"`
} `tfsdk:"spec" json:"spec,omitempty"`
@@ -183,6 +186,14 @@ func (r *Apigatewayv2ServicesK8SAwsRouteV1Alpha1Manifest) Schema(_ context.Conte
Optional: true,
Computed: false,
},
+
+ "namespace": schema.StringAttribute{
+ Description: "",
+ MarkdownDescription: "",
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
},
Required: false,
Optional: true,
@@ -234,6 +245,14 @@ func (r *Apigatewayv2ServicesK8SAwsRouteV1Alpha1Manifest) Schema(_ context.Conte
Optional: true,
Computed: false,
},
+
+ "namespace": schema.StringAttribute{
+ Description: "",
+ MarkdownDescription: "",
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
},
Required: false,
Optional: true,
@@ -326,6 +345,14 @@ func (r *Apigatewayv2ServicesK8SAwsRouteV1Alpha1Manifest) Schema(_ context.Conte
Optional: true,
Computed: false,
},
+
+ "namespace": schema.StringAttribute{
+ Description: "",
+ MarkdownDescription: "",
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
},
Required: false,
Optional: true,
diff --git a/internal/provider/apigatewayv2_services_k8s_aws_v1alpha1/apigatewayv2_services_k8s_aws_stage_v1alpha1_manifest.go b/internal/provider/apigatewayv2_services_k8s_aws_v1alpha1/apigatewayv2_services_k8s_aws_stage_v1alpha1_manifest.go
index 430e41e80..417e413b7 100644
--- a/internal/provider/apigatewayv2_services_k8s_aws_v1alpha1/apigatewayv2_services_k8s_aws_stage_v1alpha1_manifest.go
+++ b/internal/provider/apigatewayv2_services_k8s_aws_v1alpha1/apigatewayv2_services_k8s_aws_stage_v1alpha1_manifest.go
@@ -50,7 +50,8 @@ type Apigatewayv2ServicesK8SAwsStageV1Alpha1ManifestData struct {
ApiID *string `tfsdk:"api_id" json:"apiID,omitempty"`
ApiRef *struct {
From *struct {
- Name *string `tfsdk:"name" json:"name,omitempty"`
+ Name *string `tfsdk:"name" json:"name,omitempty"`
+ Namespace *string `tfsdk:"namespace" json:"namespace,omitempty"`
} `tfsdk:"from" json:"from,omitempty"`
} `tfsdk:"api_ref" json:"apiRef,omitempty"`
AutoDeploy *bool `tfsdk:"auto_deploy" json:"autoDeploy,omitempty"`
@@ -65,7 +66,8 @@ type Apigatewayv2ServicesK8SAwsStageV1Alpha1ManifestData struct {
DeploymentID *string `tfsdk:"deployment_id" json:"deploymentID,omitempty"`
DeploymentRef *struct {
From *struct {
- Name *string `tfsdk:"name" json:"name,omitempty"`
+ Name *string `tfsdk:"name" json:"name,omitempty"`
+ Namespace *string `tfsdk:"namespace" json:"namespace,omitempty"`
} `tfsdk:"from" json:"from,omitempty"`
} `tfsdk:"deployment_ref" json:"deploymentRef,omitempty"`
Description *string `tfsdk:"description" json:"description,omitempty"`
@@ -207,6 +209,14 @@ func (r *Apigatewayv2ServicesK8SAwsStageV1Alpha1Manifest) Schema(_ context.Conte
Optional: true,
Computed: false,
},
+
+ "namespace": schema.StringAttribute{
+ Description: "",
+ MarkdownDescription: "",
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
},
Required: false,
Optional: true,
@@ -306,6 +316,14 @@ func (r *Apigatewayv2ServicesK8SAwsStageV1Alpha1Manifest) Schema(_ context.Conte
Optional: true,
Computed: false,
},
+
+ "namespace": schema.StringAttribute{
+ Description: "",
+ MarkdownDescription: "",
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
},
Required: false,
Optional: true,
diff --git a/internal/provider/apps_kubeblocks_io_v1alpha1/apps_kubeblocks_io_backup_policy_template_v1alpha1_manifest.go b/internal/provider/apps_kubeblocks_io_v1alpha1/apps_kubeblocks_io_backup_policy_template_v1alpha1_manifest.go
index e1a4746d0..2c18e1b62 100644
--- a/internal/provider/apps_kubeblocks_io_v1alpha1/apps_kubeblocks_io_backup_policy_template_v1alpha1_manifest.go
+++ b/internal/provider/apps_kubeblocks_io_v1alpha1/apps_kubeblocks_io_backup_policy_template_v1alpha1_manifest.go
@@ -106,14 +106,17 @@ type AppsKubeblocksIoBackupPolicyTemplateV1Alpha1ManifestData struct {
SecretName *string `tfsdk:"secret_name" json:"secretName,omitempty"`
UsernameKey *string `tfsdk:"username_key" json:"usernameKey,omitempty"`
} `tfsdk:"connection_credential" json:"connectionCredential,omitempty"`
- ConnectionCredentialKey *struct {
- HostKey *string `tfsdk:"host_key" json:"hostKey,omitempty"`
- PasswordKey *string `tfsdk:"password_key" json:"passwordKey,omitempty"`
- PortKey *string `tfsdk:"port_key" json:"portKey,omitempty"`
- UsernameKey *string `tfsdk:"username_key" json:"usernameKey,omitempty"`
- } `tfsdk:"connection_credential_key" json:"connectionCredentialKey,omitempty"`
- Name *string `tfsdk:"name" json:"name,omitempty"`
- PodSelector *struct {
+ FallbackRole *string `tfsdk:"fallback_role" json:"fallbackRole,omitempty"`
+ Name *string `tfsdk:"name" json:"name,omitempty"`
+ PodSelector *struct {
+ FallbackLabelSelector *struct {
+ MatchExpressions *[]struct {
+ Key *string `tfsdk:"key" json:"key,omitempty"`
+ Operator *string `tfsdk:"operator" json:"operator,omitempty"`
+ Values *[]string `tfsdk:"values" json:"values,omitempty"`
+ } `tfsdk:"match_expressions" json:"matchExpressions,omitempty"`
+ MatchLabels *map[string]string `tfsdk:"match_labels" json:"matchLabels,omitempty"`
+ } `tfsdk:"fallback_label_selector" json:"fallbackLabelSelector,omitempty"`
MatchExpressions *[]struct {
Key *string `tfsdk:"key" json:"key,omitempty"`
Operator *string `tfsdk:"operator" json:"operator,omitempty"`
@@ -159,6 +162,14 @@ type AppsKubeblocksIoBackupPolicyTemplateV1Alpha1ManifestData struct {
} `tfsdk:"connection_credential" json:"connectionCredential,omitempty"`
Name *string `tfsdk:"name" json:"name,omitempty"`
PodSelector *struct {
+ FallbackLabelSelector *struct {
+ MatchExpressions *[]struct {
+ Key *string `tfsdk:"key" json:"key,omitempty"`
+ Operator *string `tfsdk:"operator" json:"operator,omitempty"`
+ Values *[]string `tfsdk:"values" json:"values,omitempty"`
+ } `tfsdk:"match_expressions" json:"matchExpressions,omitempty"`
+ MatchLabels *map[string]string `tfsdk:"match_labels" json:"matchLabels,omitempty"`
+ } `tfsdk:"fallback_label_selector" json:"fallbackLabelSelector,omitempty"`
MatchExpressions *[]struct {
Key *string `tfsdk:"key" json:"key,omitempty"`
Operator *string `tfsdk:"operator" json:"operator,omitempty"`
@@ -182,28 +193,21 @@ type AppsKubeblocksIoBackupPolicyTemplateV1Alpha1ManifestData struct {
ServiceAccountName *string `tfsdk:"service_account_name" json:"serviceAccountName,omitempty"`
} `tfsdk:"targets" json:"targets,omitempty"`
} `tfsdk:"backup_methods" json:"backupMethods,omitempty"`
- ComponentDefRef *string `tfsdk:"component_def_ref" json:"componentDefRef,omitempty"`
- ComponentDefs *[]string `tfsdk:"component_defs" json:"componentDefs,omitempty"`
- Schedules *[]struct {
+ ComponentDefs *[]string `tfsdk:"component_defs" json:"componentDefs,omitempty"`
+ Schedules *[]struct {
BackupMethod *string `tfsdk:"backup_method" json:"backupMethod,omitempty"`
CronExpression *string `tfsdk:"cron_expression" json:"cronExpression,omitempty"`
Enabled *bool `tfsdk:"enabled" json:"enabled,omitempty"`
RetentionPeriod *string `tfsdk:"retention_period" json:"retentionPeriod,omitempty"`
} `tfsdk:"schedules" json:"schedules,omitempty"`
Target *struct {
- Account *string `tfsdk:"account" json:"account,omitempty"`
- ConnectionCredentialKey *struct {
- HostKey *string `tfsdk:"host_key" json:"hostKey,omitempty"`
- PasswordKey *string `tfsdk:"password_key" json:"passwordKey,omitempty"`
- PortKey *string `tfsdk:"port_key" json:"portKey,omitempty"`
- UsernameKey *string `tfsdk:"username_key" json:"usernameKey,omitempty"`
- } `tfsdk:"connection_credential_key" json:"connectionCredentialKey,omitempty"`
- Role *string `tfsdk:"role" json:"role,omitempty"`
- Strategy *string `tfsdk:"strategy" json:"strategy,omitempty"`
+ Account *string `tfsdk:"account" json:"account,omitempty"`
+ FallbackRole *string `tfsdk:"fallback_role" json:"fallbackRole,omitempty"`
+ Role *string `tfsdk:"role" json:"role,omitempty"`
+ Strategy *string `tfsdk:"strategy" json:"strategy,omitempty"`
} `tfsdk:"target" json:"target,omitempty"`
} `tfsdk:"backup_policies" json:"backupPolicies,omitempty"`
- ClusterDefinitionRef *string `tfsdk:"cluster_definition_ref" json:"clusterDefinitionRef,omitempty"`
- Identifier *string `tfsdk:"identifier" json:"identifier,omitempty"`
+ Identifier *string `tfsdk:"identifier" json:"identifier,omitempty"`
} `tfsdk:"spec" json:"spec,omitempty"`
}
@@ -625,8 +629,8 @@ func (r *AppsKubeblocksIoBackupPolicyTemplateV1Alpha1Manifest) Schema(_ context.
MarkdownDescription: "Specifies the target information to back up, it will override the target in backup policy.",
Attributes: map[string]schema.Attribute{
"account": schema.StringAttribute{
- Description: "If 'backupPolicy.componentDefs' is set, this field is required to specify the system account name.This account must match one listed in 'componentDefinition.spec.systemAccounts[*].name'.The corresponding secret created by this account is used to connect to the database.If 'backupPolicy.componentDefRef' (a legacy and deprecated API) is set, the secret defined in'clusterDefinition.spec.ConnectionCredential' is used instead.",
- MarkdownDescription: "If 'backupPolicy.componentDefs' is set, this field is required to specify the system account name.This account must match one listed in 'componentDefinition.spec.systemAccounts[*].name'.The corresponding secret created by this account is used to connect to the database.If 'backupPolicy.componentDefRef' (a legacy and deprecated API) is set, the secret defined in'clusterDefinition.spec.ConnectionCredential' is used instead.",
+ Description: "If 'backupPolicy.componentDefs' is set, this field is required to specify the system account name.This account must match one listed in 'componentDefinition.spec.systemAccounts[*].name'.The corresponding secret created by this account is used to connect to the database.",
+ MarkdownDescription: "If 'backupPolicy.componentDefs' is set, this field is required to specify the system account name.This account must match one listed in 'componentDefinition.spec.systemAccounts[*].name'.The corresponding secret created by this account is used to connect to the database.",
Required: false,
Optional: true,
Computed: false,
@@ -684,45 +688,12 @@ func (r *AppsKubeblocksIoBackupPolicyTemplateV1Alpha1Manifest) Schema(_ context.
Computed: false,
},
- "connection_credential_key": schema.SingleNestedAttribute{
- Description: "Specifies the keys of the connection credential secret defined in 'clusterDefinition.spec.ConnectionCredential'.It will be ignored when the 'account' is set.",
- MarkdownDescription: "Specifies the keys of the connection credential secret defined in 'clusterDefinition.spec.ConnectionCredential'.It will be ignored when the 'account' is set.",
- Attributes: map[string]schema.Attribute{
- "host_key": schema.StringAttribute{
- Description: "Defines the key of the host in the connection credential secret.",
- MarkdownDescription: "Defines the key of the host in the connection credential secret.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "password_key": schema.StringAttribute{
- Description: "Represents the key of the password in the connection credential secret.If not specified, the default key 'password' is used.",
- MarkdownDescription: "Represents the key of the password in the connection credential secret.If not specified, the default key 'password' is used.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "port_key": schema.StringAttribute{
- Description: "Indicates map key of the port in the connection credential secret.",
- MarkdownDescription: "Indicates map key of the port in the connection credential secret.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "username_key": schema.StringAttribute{
- Description: "Represents the key of the username in the connection credential secret.If not specified, the default key 'username' is used.",
- MarkdownDescription: "Represents the key of the username in the connection credential secret.If not specified, the default key 'username' is used.",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
+ "fallback_role": schema.StringAttribute{
+ Description: "Specifies the fallback role to select one replica for backup, this only takes effect when the'strategy' field below is set to 'Any'.",
+ MarkdownDescription: "Specifies the fallback role to select one replica for backup, this only takes effect when the'strategy' field below is set to 'Any'.",
+ Required: false,
+ Optional: true,
+ Computed: false,
},
"name": schema.StringAttribute{
@@ -737,6 +708,60 @@ func (r *AppsKubeblocksIoBackupPolicyTemplateV1Alpha1Manifest) Schema(_ context.
Description: "Used to find the target pod. The volumes of the target pod will be backed up.",
MarkdownDescription: "Used to find the target pod. The volumes of the target pod will be backed up.",
Attributes: map[string]schema.Attribute{
+ "fallback_label_selector": schema.SingleNestedAttribute{
+ Description: "fallbackLabelSelector is used to filter available pods when the labelSelector fails.This only takes effect when the 'strategy' field below is set to 'Any'.",
+ MarkdownDescription: "fallbackLabelSelector is used to filter available pods when the labelSelector fails.This only takes effect when the 'strategy' field below is set to 'Any'.",
+ Attributes: map[string]schema.Attribute{
+ "match_expressions": schema.ListNestedAttribute{
+ Description: "matchExpressions is a list of label selector requirements. The requirements are ANDed.",
+ MarkdownDescription: "matchExpressions is a list of label selector requirements. The requirements are ANDed.",
+ NestedObject: schema.NestedAttributeObject{
+ Attributes: map[string]schema.Attribute{
+ "key": schema.StringAttribute{
+ Description: "key is the label key that the selector applies to.",
+ MarkdownDescription: "key is the label key that the selector applies to.",
+ Required: true,
+ Optional: false,
+ Computed: false,
+ },
+
+ "operator": schema.StringAttribute{
+ Description: "operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.",
+ MarkdownDescription: "operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.",
+ Required: true,
+ Optional: false,
+ Computed: false,
+ },
+
+ "values": schema.ListAttribute{
+ Description: "values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.",
+ MarkdownDescription: "values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+ },
+ },
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "match_labels": schema.MapAttribute{
+ Description: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.",
+ MarkdownDescription: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+ },
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
"match_expressions": schema.ListNestedAttribute{
Description: "matchExpressions is a list of label selector requirements. The requirements are ANDed.",
MarkdownDescription: "matchExpressions is a list of label selector requirements. The requirements are ANDed.",
@@ -1057,6 +1082,60 @@ func (r *AppsKubeblocksIoBackupPolicyTemplateV1Alpha1Manifest) Schema(_ context.
Description: "Used to find the target pod. The volumes of the target pod will be backed up.",
MarkdownDescription: "Used to find the target pod. The volumes of the target pod will be backed up.",
Attributes: map[string]schema.Attribute{
+ "fallback_label_selector": schema.SingleNestedAttribute{
+ Description: "fallbackLabelSelector is used to filter available pods when the labelSelector fails.This only takes effect when the 'strategy' field below is set to 'Any'.",
+ MarkdownDescription: "fallbackLabelSelector is used to filter available pods when the labelSelector fails.This only takes effect when the 'strategy' field below is set to 'Any'.",
+ Attributes: map[string]schema.Attribute{
+ "match_expressions": schema.ListNestedAttribute{
+ Description: "matchExpressions is a list of label selector requirements. The requirements are ANDed.",
+ MarkdownDescription: "matchExpressions is a list of label selector requirements. The requirements are ANDed.",
+ NestedObject: schema.NestedAttributeObject{
+ Attributes: map[string]schema.Attribute{
+ "key": schema.StringAttribute{
+ Description: "key is the label key that the selector applies to.",
+ MarkdownDescription: "key is the label key that the selector applies to.",
+ Required: true,
+ Optional: false,
+ Computed: false,
+ },
+
+ "operator": schema.StringAttribute{
+ Description: "operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.",
+ MarkdownDescription: "operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.",
+ Required: true,
+ Optional: false,
+ Computed: false,
+ },
+
+ "values": schema.ListAttribute{
+ Description: "values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.",
+ MarkdownDescription: "values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+ },
+ },
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "match_labels": schema.MapAttribute{
+ Description: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.",
+ MarkdownDescription: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+ },
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
"match_expressions": schema.ListNestedAttribute{
Description: "matchExpressions is a list of label selector requirements. The requirements are ANDed.",
MarkdownDescription: "matchExpressions is a list of label selector requirements. The requirements are ANDed.",
@@ -1219,18 +1298,6 @@ func (r *AppsKubeblocksIoBackupPolicyTemplateV1Alpha1Manifest) Schema(_ context.
Computed: false,
},
- "component_def_ref": schema.StringAttribute{
- Description: "Specifies the name of ClusterComponentDefinition defined in the ClusterDefinition.Must comply with the IANA Service Naming rule.Deprecated since v0.9, should use 'componentDefs' instead.This field is maintained for backward compatibility and its use is discouraged.Existing usage should be updated to the current preferred approach to avoid compatibility issues in future releases.",
- MarkdownDescription: "Specifies the name of ClusterComponentDefinition defined in the ClusterDefinition.Must comply with the IANA Service Naming rule.Deprecated since v0.9, should use 'componentDefs' instead.This field is maintained for backward compatibility and its use is discouraged.Existing usage should be updated to the current preferred approach to avoid compatibility issues in future releases.",
- Required: false,
- Optional: true,
- Computed: false,
- Validators: []validator.String{
- stringvalidator.LengthAtMost(22),
- stringvalidator.RegexMatches(regexp.MustCompile(`^[a-z]([a-z0-9\-]*[a-z0-9])?$`), ""),
- },
- },
-
"component_defs": schema.ListAttribute{
Description: "Specifies a list of names of ComponentDefinitions that the specified ClusterDefinition references.They should be different versions of definitions of the same component,thus allowing them to share a single BackupPolicy.Each name must adhere to the IANA Service Naming rule.",
MarkdownDescription: "Specifies a list of names of ComponentDefinitions that the specified ClusterDefinition references.They should be different versions of definitions of the same component,thus allowing them to share a single BackupPolicy.Each name must adhere to the IANA Service Naming rule.",
@@ -1288,52 +1355,19 @@ func (r *AppsKubeblocksIoBackupPolicyTemplateV1Alpha1Manifest) Schema(_ context.
MarkdownDescription: "Defines the selection criteria of instance to be backed up, and the connection credential to be usedduring the backup process.",
Attributes: map[string]schema.Attribute{
"account": schema.StringAttribute{
- Description: "If 'backupPolicy.componentDefs' is set, this field is required to specify the system account name.This account must match one listed in 'componentDefinition.spec.systemAccounts[*].name'.The corresponding secret created by this account is used to connect to the database.If 'backupPolicy.componentDefRef' (a legacy and deprecated API) is set, the secret defined in'clusterDefinition.spec.ConnectionCredential' is used instead.",
- MarkdownDescription: "If 'backupPolicy.componentDefs' is set, this field is required to specify the system account name.This account must match one listed in 'componentDefinition.spec.systemAccounts[*].name'.The corresponding secret created by this account is used to connect to the database.If 'backupPolicy.componentDefRef' (a legacy and deprecated API) is set, the secret defined in'clusterDefinition.spec.ConnectionCredential' is used instead.",
+ Description: "If 'backupPolicy.componentDefs' is set, this field is required to specify the system account name.This account must match one listed in 'componentDefinition.spec.systemAccounts[*].name'.The corresponding secret created by this account is used to connect to the database.",
+ MarkdownDescription: "If 'backupPolicy.componentDefs' is set, this field is required to specify the system account name.This account must match one listed in 'componentDefinition.spec.systemAccounts[*].name'.The corresponding secret created by this account is used to connect to the database.",
Required: false,
Optional: true,
Computed: false,
},
- "connection_credential_key": schema.SingleNestedAttribute{
- Description: "Specifies the keys of the connection credential secret defined in 'clusterDefinition.spec.ConnectionCredential'.It will be ignored when the 'account' is set.",
- MarkdownDescription: "Specifies the keys of the connection credential secret defined in 'clusterDefinition.spec.ConnectionCredential'.It will be ignored when the 'account' is set.",
- Attributes: map[string]schema.Attribute{
- "host_key": schema.StringAttribute{
- Description: "Defines the key of the host in the connection credential secret.",
- MarkdownDescription: "Defines the key of the host in the connection credential secret.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "password_key": schema.StringAttribute{
- Description: "Represents the key of the password in the connection credential secret.If not specified, the default key 'password' is used.",
- MarkdownDescription: "Represents the key of the password in the connection credential secret.If not specified, the default key 'password' is used.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "port_key": schema.StringAttribute{
- Description: "Indicates map key of the port in the connection credential secret.",
- MarkdownDescription: "Indicates map key of the port in the connection credential secret.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "username_key": schema.StringAttribute{
- Description: "Represents the key of the username in the connection credential secret.If not specified, the default key 'username' is used.",
- MarkdownDescription: "Represents the key of the username in the connection credential secret.If not specified, the default key 'username' is used.",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
+ "fallback_role": schema.StringAttribute{
+ Description: "Specifies the fallback role to select one replica for backup, this only takes effect when the'strategy' field below is set to 'Any'.",
+ MarkdownDescription: "Specifies the fallback role to select one replica for backup, this only takes effect when the'strategy' field below is set to 'Any'.",
+ Required: false,
+ Optional: true,
+ Computed: false,
},
"role": schema.StringAttribute{
@@ -1366,17 +1400,6 @@ func (r *AppsKubeblocksIoBackupPolicyTemplateV1Alpha1Manifest) Schema(_ context.
Computed: false,
},
- "cluster_definition_ref": schema.StringAttribute{
- Description: "Specifies the name of a ClusterDefinition.This is an immutable attribute that cannot be changed after creation.And this field is deprecated since v0.9, consider using the ComponentDef instead.",
- MarkdownDescription: "Specifies the name of a ClusterDefinition.This is an immutable attribute that cannot be changed after creation.And this field is deprecated since v0.9, consider using the ComponentDef instead.",
- Required: false,
- Optional: true,
- Computed: false,
- Validators: []validator.String{
- stringvalidator.RegexMatches(regexp.MustCompile(`^[a-z0-9]([a-z0-9\.\-]*[a-z0-9])?$`), ""),
- },
- },
-
"identifier": schema.StringAttribute{
Description: "Specifies a unique identifier for the BackupPolicyTemplate.This identifier will be used as the suffix of the name of automatically generated BackupPolicy.This prevents unintended overwriting of BackupPolicies due to name conflicts when multiple BackupPolicyTemplatesare present.For instance, using 'backup-policy' for regular backups and 'backup-policy-hscale' for horizontal-scale opscan differentiate the policies.",
MarkdownDescription: "Specifies a unique identifier for the BackupPolicyTemplate.This identifier will be used as the suffix of the name of automatically generated BackupPolicy.This prevents unintended overwriting of BackupPolicies due to name conflicts when multiple BackupPolicyTemplatesare present.For instance, using 'backup-policy' for regular backups and 'backup-policy-hscale' for horizontal-scale opscan differentiate the policies.",
diff --git a/internal/provider/apps_kubeblocks_io_v1alpha1/apps_kubeblocks_io_cluster_definition_v1alpha1_manifest.go b/internal/provider/apps_kubeblocks_io_v1alpha1/apps_kubeblocks_io_cluster_definition_v1alpha1_manifest.go
index 184f893a5..d83817748 100644
--- a/internal/provider/apps_kubeblocks_io_v1alpha1/apps_kubeblocks_io_cluster_definition_v1alpha1_manifest.go
+++ b/internal/provider/apps_kubeblocks_io_v1alpha1/apps_kubeblocks_io_cluster_definition_v1alpha1_manifest.go
@@ -7,7 +7,6 @@ package apps_kubeblocks_io_v1alpha1
import (
"context"
- "github.com/hashicorp/terraform-plugin-framework-validators/int64validator"
"github.com/hashicorp/terraform-plugin-framework-validators/stringvalidator"
"github.com/hashicorp/terraform-plugin-framework/datasource"
"github.com/hashicorp/terraform-plugin-framework/datasource/schema"
@@ -44,1529 +43,7 @@ type AppsKubeblocksIoClusterDefinitionV1Alpha1ManifestData struct {
} `tfsdk:"metadata" json:"metadata"`
Spec *struct {
- ComponentDefs *[]struct {
- CharacterType *string `tfsdk:"character_type" json:"characterType,omitempty"`
- ComponentDefRef *[]struct {
- ComponentDefName *string `tfsdk:"component_def_name" json:"componentDefName,omitempty"`
- ComponentRefEnv *[]struct {
- Name *string `tfsdk:"name" json:"name,omitempty"`
- Value *string `tfsdk:"value" json:"value,omitempty"`
- ValueFrom *struct {
- FieldPath *string `tfsdk:"field_path" json:"fieldPath,omitempty"`
- Format *string `tfsdk:"format" json:"format,omitempty"`
- JoinWith *string `tfsdk:"join_with" json:"joinWith,omitempty"`
- Type *string `tfsdk:"type" json:"type,omitempty"`
- } `tfsdk:"value_from" json:"valueFrom,omitempty"`
- } `tfsdk:"component_ref_env" json:"componentRefEnv,omitempty"`
- FailurePolicy *string `tfsdk:"failure_policy" json:"failurePolicy,omitempty"`
- } `tfsdk:"component_def_ref" json:"componentDefRef,omitempty"`
- ConfigSpecs *[]struct {
- AsEnvFrom *[]string `tfsdk:"as_env_from" json:"asEnvFrom,omitempty"`
- ConstraintRef *string `tfsdk:"constraint_ref" json:"constraintRef,omitempty"`
- DefaultMode *int64 `tfsdk:"default_mode" json:"defaultMode,omitempty"`
- InjectEnvTo *[]string `tfsdk:"inject_env_to" json:"injectEnvTo,omitempty"`
- Keys *[]string `tfsdk:"keys" json:"keys,omitempty"`
- LegacyRenderedConfigSpec *struct {
- Namespace *string `tfsdk:"namespace" json:"namespace,omitempty"`
- Policy *string `tfsdk:"policy" json:"policy,omitempty"`
- TemplateRef *string `tfsdk:"template_ref" json:"templateRef,omitempty"`
- } `tfsdk:"legacy_rendered_config_spec" json:"legacyRenderedConfigSpec,omitempty"`
- Name *string `tfsdk:"name" json:"name,omitempty"`
- Namespace *string `tfsdk:"namespace" json:"namespace,omitempty"`
- ReRenderResourceTypes *[]string `tfsdk:"re_render_resource_types" json:"reRenderResourceTypes,omitempty"`
- TemplateRef *string `tfsdk:"template_ref" json:"templateRef,omitempty"`
- VolumeName *string `tfsdk:"volume_name" json:"volumeName,omitempty"`
- } `tfsdk:"config_specs" json:"configSpecs,omitempty"`
- ConsensusSpec *struct {
- Followers *[]struct {
- AccessMode *string `tfsdk:"access_mode" json:"accessMode,omitempty"`
- Name *string `tfsdk:"name" json:"name,omitempty"`
- Replicas *int64 `tfsdk:"replicas" json:"replicas,omitempty"`
- } `tfsdk:"followers" json:"followers,omitempty"`
- Leader *struct {
- AccessMode *string `tfsdk:"access_mode" json:"accessMode,omitempty"`
- Name *string `tfsdk:"name" json:"name,omitempty"`
- Replicas *int64 `tfsdk:"replicas" json:"replicas,omitempty"`
- } `tfsdk:"leader" json:"leader,omitempty"`
- Learner *struct {
- AccessMode *string `tfsdk:"access_mode" json:"accessMode,omitempty"`
- Name *string `tfsdk:"name" json:"name,omitempty"`
- Replicas *int64 `tfsdk:"replicas" json:"replicas,omitempty"`
- } `tfsdk:"learner" json:"learner,omitempty"`
- LlPodManagementPolicy *string `tfsdk:"ll_pod_management_policy" json:"llPodManagementPolicy,omitempty"`
- LlUpdateStrategy *struct {
- RollingUpdate *struct {
- MaxUnavailable *string `tfsdk:"max_unavailable" json:"maxUnavailable,omitempty"`
- Partition *int64 `tfsdk:"partition" json:"partition,omitempty"`
- } `tfsdk:"rolling_update" json:"rollingUpdate,omitempty"`
- Type *string `tfsdk:"type" json:"type,omitempty"`
- } `tfsdk:"ll_update_strategy" json:"llUpdateStrategy,omitempty"`
- UpdateStrategy *string `tfsdk:"update_strategy" json:"updateStrategy,omitempty"`
- } `tfsdk:"consensus_spec" json:"consensusSpec,omitempty"`
- HorizontalScalePolicy *struct {
- BackupPolicyTemplateName *string `tfsdk:"backup_policy_template_name" json:"backupPolicyTemplateName,omitempty"`
- Type *string `tfsdk:"type" json:"type,omitempty"`
- VolumeMountsName *string `tfsdk:"volume_mounts_name" json:"volumeMountsName,omitempty"`
- } `tfsdk:"horizontal_scale_policy" json:"horizontalScalePolicy,omitempty"`
- LogConfigs *[]struct {
- FilePathPattern *string `tfsdk:"file_path_pattern" json:"filePathPattern,omitempty"`
- Name *string `tfsdk:"name" json:"name,omitempty"`
- } `tfsdk:"log_configs" json:"logConfigs,omitempty"`
- Name *string `tfsdk:"name" json:"name,omitempty"`
- PodSpec *struct {
- ActiveDeadlineSeconds *int64 `tfsdk:"active_deadline_seconds" json:"activeDeadlineSeconds,omitempty"`
- Affinity *struct {
- NodeAffinity *struct {
- PreferredDuringSchedulingIgnoredDuringExecution *[]struct {
- Preference *struct {
- MatchExpressions *[]struct {
- Key *string `tfsdk:"key" json:"key,omitempty"`
- Operator *string `tfsdk:"operator" json:"operator,omitempty"`
- Values *[]string `tfsdk:"values" json:"values,omitempty"`
- } `tfsdk:"match_expressions" json:"matchExpressions,omitempty"`
- MatchFields *[]struct {
- Key *string `tfsdk:"key" json:"key,omitempty"`
- Operator *string `tfsdk:"operator" json:"operator,omitempty"`
- Values *[]string `tfsdk:"values" json:"values,omitempty"`
- } `tfsdk:"match_fields" json:"matchFields,omitempty"`
- } `tfsdk:"preference" json:"preference,omitempty"`
- Weight *int64 `tfsdk:"weight" json:"weight,omitempty"`
- } `tfsdk:"preferred_during_scheduling_ignored_during_execution" json:"preferredDuringSchedulingIgnoredDuringExecution,omitempty"`
- RequiredDuringSchedulingIgnoredDuringExecution *struct {
- NodeSelectorTerms *[]struct {
- MatchExpressions *[]struct {
- Key *string `tfsdk:"key" json:"key,omitempty"`
- Operator *string `tfsdk:"operator" json:"operator,omitempty"`
- Values *[]string `tfsdk:"values" json:"values,omitempty"`
- } `tfsdk:"match_expressions" json:"matchExpressions,omitempty"`
- MatchFields *[]struct {
- Key *string `tfsdk:"key" json:"key,omitempty"`
- Operator *string `tfsdk:"operator" json:"operator,omitempty"`
- Values *[]string `tfsdk:"values" json:"values,omitempty"`
- } `tfsdk:"match_fields" json:"matchFields,omitempty"`
- } `tfsdk:"node_selector_terms" json:"nodeSelectorTerms,omitempty"`
- } `tfsdk:"required_during_scheduling_ignored_during_execution" json:"requiredDuringSchedulingIgnoredDuringExecution,omitempty"`
- } `tfsdk:"node_affinity" json:"nodeAffinity,omitempty"`
- PodAffinity *struct {
- PreferredDuringSchedulingIgnoredDuringExecution *[]struct {
- PodAffinityTerm *struct {
- LabelSelector *struct {
- MatchExpressions *[]struct {
- Key *string `tfsdk:"key" json:"key,omitempty"`
- Operator *string `tfsdk:"operator" json:"operator,omitempty"`
- Values *[]string `tfsdk:"values" json:"values,omitempty"`
- } `tfsdk:"match_expressions" json:"matchExpressions,omitempty"`
- MatchLabels *map[string]string `tfsdk:"match_labels" json:"matchLabels,omitempty"`
- } `tfsdk:"label_selector" json:"labelSelector,omitempty"`
- NamespaceSelector *struct {
- MatchExpressions *[]struct {
- Key *string `tfsdk:"key" json:"key,omitempty"`
- Operator *string `tfsdk:"operator" json:"operator,omitempty"`
- Values *[]string `tfsdk:"values" json:"values,omitempty"`
- } `tfsdk:"match_expressions" json:"matchExpressions,omitempty"`
- MatchLabels *map[string]string `tfsdk:"match_labels" json:"matchLabels,omitempty"`
- } `tfsdk:"namespace_selector" json:"namespaceSelector,omitempty"`
- Namespaces *[]string `tfsdk:"namespaces" json:"namespaces,omitempty"`
- TopologyKey *string `tfsdk:"topology_key" json:"topologyKey,omitempty"`
- } `tfsdk:"pod_affinity_term" json:"podAffinityTerm,omitempty"`
- Weight *int64 `tfsdk:"weight" json:"weight,omitempty"`
- } `tfsdk:"preferred_during_scheduling_ignored_during_execution" json:"preferredDuringSchedulingIgnoredDuringExecution,omitempty"`
- RequiredDuringSchedulingIgnoredDuringExecution *[]struct {
- LabelSelector *struct {
- MatchExpressions *[]struct {
- Key *string `tfsdk:"key" json:"key,omitempty"`
- Operator *string `tfsdk:"operator" json:"operator,omitempty"`
- Values *[]string `tfsdk:"values" json:"values,omitempty"`
- } `tfsdk:"match_expressions" json:"matchExpressions,omitempty"`
- MatchLabels *map[string]string `tfsdk:"match_labels" json:"matchLabels,omitempty"`
- } `tfsdk:"label_selector" json:"labelSelector,omitempty"`
- NamespaceSelector *struct {
- MatchExpressions *[]struct {
- Key *string `tfsdk:"key" json:"key,omitempty"`
- Operator *string `tfsdk:"operator" json:"operator,omitempty"`
- Values *[]string `tfsdk:"values" json:"values,omitempty"`
- } `tfsdk:"match_expressions" json:"matchExpressions,omitempty"`
- MatchLabels *map[string]string `tfsdk:"match_labels" json:"matchLabels,omitempty"`
- } `tfsdk:"namespace_selector" json:"namespaceSelector,omitempty"`
- Namespaces *[]string `tfsdk:"namespaces" json:"namespaces,omitempty"`
- TopologyKey *string `tfsdk:"topology_key" json:"topologyKey,omitempty"`
- } `tfsdk:"required_during_scheduling_ignored_during_execution" json:"requiredDuringSchedulingIgnoredDuringExecution,omitempty"`
- } `tfsdk:"pod_affinity" json:"podAffinity,omitempty"`
- PodAntiAffinity *struct {
- PreferredDuringSchedulingIgnoredDuringExecution *[]struct {
- PodAffinityTerm *struct {
- LabelSelector *struct {
- MatchExpressions *[]struct {
- Key *string `tfsdk:"key" json:"key,omitempty"`
- Operator *string `tfsdk:"operator" json:"operator,omitempty"`
- Values *[]string `tfsdk:"values" json:"values,omitempty"`
- } `tfsdk:"match_expressions" json:"matchExpressions,omitempty"`
- MatchLabels *map[string]string `tfsdk:"match_labels" json:"matchLabels,omitempty"`
- } `tfsdk:"label_selector" json:"labelSelector,omitempty"`
- NamespaceSelector *struct {
- MatchExpressions *[]struct {
- Key *string `tfsdk:"key" json:"key,omitempty"`
- Operator *string `tfsdk:"operator" json:"operator,omitempty"`
- Values *[]string `tfsdk:"values" json:"values,omitempty"`
- } `tfsdk:"match_expressions" json:"matchExpressions,omitempty"`
- MatchLabels *map[string]string `tfsdk:"match_labels" json:"matchLabels,omitempty"`
- } `tfsdk:"namespace_selector" json:"namespaceSelector,omitempty"`
- Namespaces *[]string `tfsdk:"namespaces" json:"namespaces,omitempty"`
- TopologyKey *string `tfsdk:"topology_key" json:"topologyKey,omitempty"`
- } `tfsdk:"pod_affinity_term" json:"podAffinityTerm,omitempty"`
- Weight *int64 `tfsdk:"weight" json:"weight,omitempty"`
- } `tfsdk:"preferred_during_scheduling_ignored_during_execution" json:"preferredDuringSchedulingIgnoredDuringExecution,omitempty"`
- RequiredDuringSchedulingIgnoredDuringExecution *[]struct {
- LabelSelector *struct {
- MatchExpressions *[]struct {
- Key *string `tfsdk:"key" json:"key,omitempty"`
- Operator *string `tfsdk:"operator" json:"operator,omitempty"`
- Values *[]string `tfsdk:"values" json:"values,omitempty"`
- } `tfsdk:"match_expressions" json:"matchExpressions,omitempty"`
- MatchLabels *map[string]string `tfsdk:"match_labels" json:"matchLabels,omitempty"`
- } `tfsdk:"label_selector" json:"labelSelector,omitempty"`
- NamespaceSelector *struct {
- MatchExpressions *[]struct {
- Key *string `tfsdk:"key" json:"key,omitempty"`
- Operator *string `tfsdk:"operator" json:"operator,omitempty"`
- Values *[]string `tfsdk:"values" json:"values,omitempty"`
- } `tfsdk:"match_expressions" json:"matchExpressions,omitempty"`
- MatchLabels *map[string]string `tfsdk:"match_labels" json:"matchLabels,omitempty"`
- } `tfsdk:"namespace_selector" json:"namespaceSelector,omitempty"`
- Namespaces *[]string `tfsdk:"namespaces" json:"namespaces,omitempty"`
- TopologyKey *string `tfsdk:"topology_key" json:"topologyKey,omitempty"`
- } `tfsdk:"required_during_scheduling_ignored_during_execution" json:"requiredDuringSchedulingIgnoredDuringExecution,omitempty"`
- } `tfsdk:"pod_anti_affinity" json:"podAntiAffinity,omitempty"`
- } `tfsdk:"affinity" json:"affinity,omitempty"`
- AutomountServiceAccountToken *bool `tfsdk:"automount_service_account_token" json:"automountServiceAccountToken,omitempty"`
- Containers *[]struct {
- Args *[]string `tfsdk:"args" json:"args,omitempty"`
- Command *[]string `tfsdk:"command" json:"command,omitempty"`
- Env *[]struct {
- Name *string `tfsdk:"name" json:"name,omitempty"`
- Value *string `tfsdk:"value" json:"value,omitempty"`
- ValueFrom *struct {
- ConfigMapKeyRef *struct {
- Key *string `tfsdk:"key" json:"key,omitempty"`
- Name *string `tfsdk:"name" json:"name,omitempty"`
- Optional *bool `tfsdk:"optional" json:"optional,omitempty"`
- } `tfsdk:"config_map_key_ref" json:"configMapKeyRef,omitempty"`
- FieldRef *struct {
- ApiVersion *string `tfsdk:"api_version" json:"apiVersion,omitempty"`
- FieldPath *string `tfsdk:"field_path" json:"fieldPath,omitempty"`
- } `tfsdk:"field_ref" json:"fieldRef,omitempty"`
- ResourceFieldRef *struct {
- ContainerName *string `tfsdk:"container_name" json:"containerName,omitempty"`
- Divisor *string `tfsdk:"divisor" json:"divisor,omitempty"`
- Resource *string `tfsdk:"resource" json:"resource,omitempty"`
- } `tfsdk:"resource_field_ref" json:"resourceFieldRef,omitempty"`
- SecretKeyRef *struct {
- Key *string `tfsdk:"key" json:"key,omitempty"`
- Name *string `tfsdk:"name" json:"name,omitempty"`
- Optional *bool `tfsdk:"optional" json:"optional,omitempty"`
- } `tfsdk:"secret_key_ref" json:"secretKeyRef,omitempty"`
- } `tfsdk:"value_from" json:"valueFrom,omitempty"`
- } `tfsdk:"env" json:"env,omitempty"`
- EnvFrom *[]struct {
- ConfigMapRef *struct {
- Name *string `tfsdk:"name" json:"name,omitempty"`
- Optional *bool `tfsdk:"optional" json:"optional,omitempty"`
- } `tfsdk:"config_map_ref" json:"configMapRef,omitempty"`
- Prefix *string `tfsdk:"prefix" json:"prefix,omitempty"`
- SecretRef *struct {
- Name *string `tfsdk:"name" json:"name,omitempty"`
- Optional *bool `tfsdk:"optional" json:"optional,omitempty"`
- } `tfsdk:"secret_ref" json:"secretRef,omitempty"`
- } `tfsdk:"env_from" json:"envFrom,omitempty"`
- Image *string `tfsdk:"image" json:"image,omitempty"`
- ImagePullPolicy *string `tfsdk:"image_pull_policy" json:"imagePullPolicy,omitempty"`
- Lifecycle *struct {
- PostStart *struct {
- Exec *struct {
- Command *[]string `tfsdk:"command" json:"command,omitempty"`
- } `tfsdk:"exec" json:"exec,omitempty"`
- HttpGet *struct {
- Host *string `tfsdk:"host" json:"host,omitempty"`
- HttpHeaders *[]struct {
- Name *string `tfsdk:"name" json:"name,omitempty"`
- Value *string `tfsdk:"value" json:"value,omitempty"`
- } `tfsdk:"http_headers" json:"httpHeaders,omitempty"`
- Path *string `tfsdk:"path" json:"path,omitempty"`
- Port *string `tfsdk:"port" json:"port,omitempty"`
- Scheme *string `tfsdk:"scheme" json:"scheme,omitempty"`
- } `tfsdk:"http_get" json:"httpGet,omitempty"`
- TcpSocket *struct {
- Host *string `tfsdk:"host" json:"host,omitempty"`
- Port *string `tfsdk:"port" json:"port,omitempty"`
- } `tfsdk:"tcp_socket" json:"tcpSocket,omitempty"`
- } `tfsdk:"post_start" json:"postStart,omitempty"`
- PreStop *struct {
- Exec *struct {
- Command *[]string `tfsdk:"command" json:"command,omitempty"`
- } `tfsdk:"exec" json:"exec,omitempty"`
- HttpGet *struct {
- Host *string `tfsdk:"host" json:"host,omitempty"`
- HttpHeaders *[]struct {
- Name *string `tfsdk:"name" json:"name,omitempty"`
- Value *string `tfsdk:"value" json:"value,omitempty"`
- } `tfsdk:"http_headers" json:"httpHeaders,omitempty"`
- Path *string `tfsdk:"path" json:"path,omitempty"`
- Port *string `tfsdk:"port" json:"port,omitempty"`
- Scheme *string `tfsdk:"scheme" json:"scheme,omitempty"`
- } `tfsdk:"http_get" json:"httpGet,omitempty"`
- TcpSocket *struct {
- Host *string `tfsdk:"host" json:"host,omitempty"`
- Port *string `tfsdk:"port" json:"port,omitempty"`
- } `tfsdk:"tcp_socket" json:"tcpSocket,omitempty"`
- } `tfsdk:"pre_stop" json:"preStop,omitempty"`
- } `tfsdk:"lifecycle" json:"lifecycle,omitempty"`
- LivenessProbe *struct {
- Exec *struct {
- Command *[]string `tfsdk:"command" json:"command,omitempty"`
- } `tfsdk:"exec" json:"exec,omitempty"`
- FailureThreshold *int64 `tfsdk:"failure_threshold" json:"failureThreshold,omitempty"`
- Grpc *struct {
- Port *int64 `tfsdk:"port" json:"port,omitempty"`
- Service *string `tfsdk:"service" json:"service,omitempty"`
- } `tfsdk:"grpc" json:"grpc,omitempty"`
- HttpGet *struct {
- Host *string `tfsdk:"host" json:"host,omitempty"`
- HttpHeaders *[]struct {
- Name *string `tfsdk:"name" json:"name,omitempty"`
- Value *string `tfsdk:"value" json:"value,omitempty"`
- } `tfsdk:"http_headers" json:"httpHeaders,omitempty"`
- Path *string `tfsdk:"path" json:"path,omitempty"`
- Port *string `tfsdk:"port" json:"port,omitempty"`
- Scheme *string `tfsdk:"scheme" json:"scheme,omitempty"`
- } `tfsdk:"http_get" json:"httpGet,omitempty"`
- InitialDelaySeconds *int64 `tfsdk:"initial_delay_seconds" json:"initialDelaySeconds,omitempty"`
- PeriodSeconds *int64 `tfsdk:"period_seconds" json:"periodSeconds,omitempty"`
- SuccessThreshold *int64 `tfsdk:"success_threshold" json:"successThreshold,omitempty"`
- TcpSocket *struct {
- Host *string `tfsdk:"host" json:"host,omitempty"`
- Port *string `tfsdk:"port" json:"port,omitempty"`
- } `tfsdk:"tcp_socket" json:"tcpSocket,omitempty"`
- TerminationGracePeriodSeconds *int64 `tfsdk:"termination_grace_period_seconds" json:"terminationGracePeriodSeconds,omitempty"`
- TimeoutSeconds *int64 `tfsdk:"timeout_seconds" json:"timeoutSeconds,omitempty"`
- } `tfsdk:"liveness_probe" json:"livenessProbe,omitempty"`
- Name *string `tfsdk:"name" json:"name,omitempty"`
- Ports *[]struct {
- ContainerPort *int64 `tfsdk:"container_port" json:"containerPort,omitempty"`
- HostIP *string `tfsdk:"host_ip" json:"hostIP,omitempty"`
- HostPort *int64 `tfsdk:"host_port" json:"hostPort,omitempty"`
- Name *string `tfsdk:"name" json:"name,omitempty"`
- Protocol *string `tfsdk:"protocol" json:"protocol,omitempty"`
- } `tfsdk:"ports" json:"ports,omitempty"`
- ReadinessProbe *struct {
- Exec *struct {
- Command *[]string `tfsdk:"command" json:"command,omitempty"`
- } `tfsdk:"exec" json:"exec,omitempty"`
- FailureThreshold *int64 `tfsdk:"failure_threshold" json:"failureThreshold,omitempty"`
- Grpc *struct {
- Port *int64 `tfsdk:"port" json:"port,omitempty"`
- Service *string `tfsdk:"service" json:"service,omitempty"`
- } `tfsdk:"grpc" json:"grpc,omitempty"`
- HttpGet *struct {
- Host *string `tfsdk:"host" json:"host,omitempty"`
- HttpHeaders *[]struct {
- Name *string `tfsdk:"name" json:"name,omitempty"`
- Value *string `tfsdk:"value" json:"value,omitempty"`
- } `tfsdk:"http_headers" json:"httpHeaders,omitempty"`
- Path *string `tfsdk:"path" json:"path,omitempty"`
- Port *string `tfsdk:"port" json:"port,omitempty"`
- Scheme *string `tfsdk:"scheme" json:"scheme,omitempty"`
- } `tfsdk:"http_get" json:"httpGet,omitempty"`
- InitialDelaySeconds *int64 `tfsdk:"initial_delay_seconds" json:"initialDelaySeconds,omitempty"`
- PeriodSeconds *int64 `tfsdk:"period_seconds" json:"periodSeconds,omitempty"`
- SuccessThreshold *int64 `tfsdk:"success_threshold" json:"successThreshold,omitempty"`
- TcpSocket *struct {
- Host *string `tfsdk:"host" json:"host,omitempty"`
- Port *string `tfsdk:"port" json:"port,omitempty"`
- } `tfsdk:"tcp_socket" json:"tcpSocket,omitempty"`
- TerminationGracePeriodSeconds *int64 `tfsdk:"termination_grace_period_seconds" json:"terminationGracePeriodSeconds,omitempty"`
- TimeoutSeconds *int64 `tfsdk:"timeout_seconds" json:"timeoutSeconds,omitempty"`
- } `tfsdk:"readiness_probe" json:"readinessProbe,omitempty"`
- ResizePolicy *[]struct {
- ResourceName *string `tfsdk:"resource_name" json:"resourceName,omitempty"`
- RestartPolicy *string `tfsdk:"restart_policy" json:"restartPolicy,omitempty"`
- } `tfsdk:"resize_policy" json:"resizePolicy,omitempty"`
- Resources *struct {
- Claims *[]struct {
- Name *string `tfsdk:"name" json:"name,omitempty"`
- } `tfsdk:"claims" json:"claims,omitempty"`
- Limits *map[string]string `tfsdk:"limits" json:"limits,omitempty"`
- Requests *map[string]string `tfsdk:"requests" json:"requests,omitempty"`
- } `tfsdk:"resources" json:"resources,omitempty"`
- RestartPolicy *string `tfsdk:"restart_policy" json:"restartPolicy,omitempty"`
- SecurityContext *struct {
- AllowPrivilegeEscalation *bool `tfsdk:"allow_privilege_escalation" json:"allowPrivilegeEscalation,omitempty"`
- Capabilities *struct {
- Add *[]string `tfsdk:"add" json:"add,omitempty"`
- Drop *[]string `tfsdk:"drop" json:"drop,omitempty"`
- } `tfsdk:"capabilities" json:"capabilities,omitempty"`
- Privileged *bool `tfsdk:"privileged" json:"privileged,omitempty"`
- ProcMount *string `tfsdk:"proc_mount" json:"procMount,omitempty"`
- ReadOnlyRootFilesystem *bool `tfsdk:"read_only_root_filesystem" json:"readOnlyRootFilesystem,omitempty"`
- RunAsGroup *int64 `tfsdk:"run_as_group" json:"runAsGroup,omitempty"`
- RunAsNonRoot *bool `tfsdk:"run_as_non_root" json:"runAsNonRoot,omitempty"`
- RunAsUser *int64 `tfsdk:"run_as_user" json:"runAsUser,omitempty"`
- SeLinuxOptions *struct {
- Level *string `tfsdk:"level" json:"level,omitempty"`
- Role *string `tfsdk:"role" json:"role,omitempty"`
- Type *string `tfsdk:"type" json:"type,omitempty"`
- User *string `tfsdk:"user" json:"user,omitempty"`
- } `tfsdk:"se_linux_options" json:"seLinuxOptions,omitempty"`
- SeccompProfile *struct {
- LocalhostProfile *string `tfsdk:"localhost_profile" json:"localhostProfile,omitempty"`
- Type *string `tfsdk:"type" json:"type,omitempty"`
- } `tfsdk:"seccomp_profile" json:"seccompProfile,omitempty"`
- WindowsOptions *struct {
- GmsaCredentialSpec *string `tfsdk:"gmsa_credential_spec" json:"gmsaCredentialSpec,omitempty"`
- GmsaCredentialSpecName *string `tfsdk:"gmsa_credential_spec_name" json:"gmsaCredentialSpecName,omitempty"`
- HostProcess *bool `tfsdk:"host_process" json:"hostProcess,omitempty"`
- RunAsUserName *string `tfsdk:"run_as_user_name" json:"runAsUserName,omitempty"`
- } `tfsdk:"windows_options" json:"windowsOptions,omitempty"`
- } `tfsdk:"security_context" json:"securityContext,omitempty"`
- StartupProbe *struct {
- Exec *struct {
- Command *[]string `tfsdk:"command" json:"command,omitempty"`
- } `tfsdk:"exec" json:"exec,omitempty"`
- FailureThreshold *int64 `tfsdk:"failure_threshold" json:"failureThreshold,omitempty"`
- Grpc *struct {
- Port *int64 `tfsdk:"port" json:"port,omitempty"`
- Service *string `tfsdk:"service" json:"service,omitempty"`
- } `tfsdk:"grpc" json:"grpc,omitempty"`
- HttpGet *struct {
- Host *string `tfsdk:"host" json:"host,omitempty"`
- HttpHeaders *[]struct {
- Name *string `tfsdk:"name" json:"name,omitempty"`
- Value *string `tfsdk:"value" json:"value,omitempty"`
- } `tfsdk:"http_headers" json:"httpHeaders,omitempty"`
- Path *string `tfsdk:"path" json:"path,omitempty"`
- Port *string `tfsdk:"port" json:"port,omitempty"`
- Scheme *string `tfsdk:"scheme" json:"scheme,omitempty"`
- } `tfsdk:"http_get" json:"httpGet,omitempty"`
- InitialDelaySeconds *int64 `tfsdk:"initial_delay_seconds" json:"initialDelaySeconds,omitempty"`
- PeriodSeconds *int64 `tfsdk:"period_seconds" json:"periodSeconds,omitempty"`
- SuccessThreshold *int64 `tfsdk:"success_threshold" json:"successThreshold,omitempty"`
- TcpSocket *struct {
- Host *string `tfsdk:"host" json:"host,omitempty"`
- Port *string `tfsdk:"port" json:"port,omitempty"`
- } `tfsdk:"tcp_socket" json:"tcpSocket,omitempty"`
- TerminationGracePeriodSeconds *int64 `tfsdk:"termination_grace_period_seconds" json:"terminationGracePeriodSeconds,omitempty"`
- TimeoutSeconds *int64 `tfsdk:"timeout_seconds" json:"timeoutSeconds,omitempty"`
- } `tfsdk:"startup_probe" json:"startupProbe,omitempty"`
- Stdin *bool `tfsdk:"stdin" json:"stdin,omitempty"`
- StdinOnce *bool `tfsdk:"stdin_once" json:"stdinOnce,omitempty"`
- TerminationMessagePath *string `tfsdk:"termination_message_path" json:"terminationMessagePath,omitempty"`
- TerminationMessagePolicy *string `tfsdk:"termination_message_policy" json:"terminationMessagePolicy,omitempty"`
- Tty *bool `tfsdk:"tty" json:"tty,omitempty"`
- VolumeDevices *[]struct {
- DevicePath *string `tfsdk:"device_path" json:"devicePath,omitempty"`
- Name *string `tfsdk:"name" json:"name,omitempty"`
- } `tfsdk:"volume_devices" json:"volumeDevices,omitempty"`
- VolumeMounts *[]struct {
- MountPath *string `tfsdk:"mount_path" json:"mountPath,omitempty"`
- MountPropagation *string `tfsdk:"mount_propagation" json:"mountPropagation,omitempty"`
- Name *string `tfsdk:"name" json:"name,omitempty"`
- ReadOnly *bool `tfsdk:"read_only" json:"readOnly,omitempty"`
- SubPath *string `tfsdk:"sub_path" json:"subPath,omitempty"`
- SubPathExpr *string `tfsdk:"sub_path_expr" json:"subPathExpr,omitempty"`
- } `tfsdk:"volume_mounts" json:"volumeMounts,omitempty"`
- WorkingDir *string `tfsdk:"working_dir" json:"workingDir,omitempty"`
- } `tfsdk:"containers" json:"containers,omitempty"`
- DnsConfig *struct {
- Nameservers *[]string `tfsdk:"nameservers" json:"nameservers,omitempty"`
- Options *[]struct {
- Name *string `tfsdk:"name" json:"name,omitempty"`
- Value *string `tfsdk:"value" json:"value,omitempty"`
- } `tfsdk:"options" json:"options,omitempty"`
- Searches *[]string `tfsdk:"searches" json:"searches,omitempty"`
- } `tfsdk:"dns_config" json:"dnsConfig,omitempty"`
- DnsPolicy *string `tfsdk:"dns_policy" json:"dnsPolicy,omitempty"`
- EnableServiceLinks *bool `tfsdk:"enable_service_links" json:"enableServiceLinks,omitempty"`
- EphemeralContainers *[]struct {
- Args *[]string `tfsdk:"args" json:"args,omitempty"`
- Command *[]string `tfsdk:"command" json:"command,omitempty"`
- Env *[]struct {
- Name *string `tfsdk:"name" json:"name,omitempty"`
- Value *string `tfsdk:"value" json:"value,omitempty"`
- ValueFrom *struct {
- ConfigMapKeyRef *struct {
- Key *string `tfsdk:"key" json:"key,omitempty"`
- Name *string `tfsdk:"name" json:"name,omitempty"`
- Optional *bool `tfsdk:"optional" json:"optional,omitempty"`
- } `tfsdk:"config_map_key_ref" json:"configMapKeyRef,omitempty"`
- FieldRef *struct {
- ApiVersion *string `tfsdk:"api_version" json:"apiVersion,omitempty"`
- FieldPath *string `tfsdk:"field_path" json:"fieldPath,omitempty"`
- } `tfsdk:"field_ref" json:"fieldRef,omitempty"`
- ResourceFieldRef *struct {
- ContainerName *string `tfsdk:"container_name" json:"containerName,omitempty"`
- Divisor *string `tfsdk:"divisor" json:"divisor,omitempty"`
- Resource *string `tfsdk:"resource" json:"resource,omitempty"`
- } `tfsdk:"resource_field_ref" json:"resourceFieldRef,omitempty"`
- SecretKeyRef *struct {
- Key *string `tfsdk:"key" json:"key,omitempty"`
- Name *string `tfsdk:"name" json:"name,omitempty"`
- Optional *bool `tfsdk:"optional" json:"optional,omitempty"`
- } `tfsdk:"secret_key_ref" json:"secretKeyRef,omitempty"`
- } `tfsdk:"value_from" json:"valueFrom,omitempty"`
- } `tfsdk:"env" json:"env,omitempty"`
- EnvFrom *[]struct {
- ConfigMapRef *struct {
- Name *string `tfsdk:"name" json:"name,omitempty"`
- Optional *bool `tfsdk:"optional" json:"optional,omitempty"`
- } `tfsdk:"config_map_ref" json:"configMapRef,omitempty"`
- Prefix *string `tfsdk:"prefix" json:"prefix,omitempty"`
- SecretRef *struct {
- Name *string `tfsdk:"name" json:"name,omitempty"`
- Optional *bool `tfsdk:"optional" json:"optional,omitempty"`
- } `tfsdk:"secret_ref" json:"secretRef,omitempty"`
- } `tfsdk:"env_from" json:"envFrom,omitempty"`
- Image *string `tfsdk:"image" json:"image,omitempty"`
- ImagePullPolicy *string `tfsdk:"image_pull_policy" json:"imagePullPolicy,omitempty"`
- Lifecycle *struct {
- PostStart *struct {
- Exec *struct {
- Command *[]string `tfsdk:"command" json:"command,omitempty"`
- } `tfsdk:"exec" json:"exec,omitempty"`
- HttpGet *struct {
- Host *string `tfsdk:"host" json:"host,omitempty"`
- HttpHeaders *[]struct {
- Name *string `tfsdk:"name" json:"name,omitempty"`
- Value *string `tfsdk:"value" json:"value,omitempty"`
- } `tfsdk:"http_headers" json:"httpHeaders,omitempty"`
- Path *string `tfsdk:"path" json:"path,omitempty"`
- Port *string `tfsdk:"port" json:"port,omitempty"`
- Scheme *string `tfsdk:"scheme" json:"scheme,omitempty"`
- } `tfsdk:"http_get" json:"httpGet,omitempty"`
- TcpSocket *struct {
- Host *string `tfsdk:"host" json:"host,omitempty"`
- Port *string `tfsdk:"port" json:"port,omitempty"`
- } `tfsdk:"tcp_socket" json:"tcpSocket,omitempty"`
- } `tfsdk:"post_start" json:"postStart,omitempty"`
- PreStop *struct {
- Exec *struct {
- Command *[]string `tfsdk:"command" json:"command,omitempty"`
- } `tfsdk:"exec" json:"exec,omitempty"`
- HttpGet *struct {
- Host *string `tfsdk:"host" json:"host,omitempty"`
- HttpHeaders *[]struct {
- Name *string `tfsdk:"name" json:"name,omitempty"`
- Value *string `tfsdk:"value" json:"value,omitempty"`
- } `tfsdk:"http_headers" json:"httpHeaders,omitempty"`
- Path *string `tfsdk:"path" json:"path,omitempty"`
- Port *string `tfsdk:"port" json:"port,omitempty"`
- Scheme *string `tfsdk:"scheme" json:"scheme,omitempty"`
- } `tfsdk:"http_get" json:"httpGet,omitempty"`
- TcpSocket *struct {
- Host *string `tfsdk:"host" json:"host,omitempty"`
- Port *string `tfsdk:"port" json:"port,omitempty"`
- } `tfsdk:"tcp_socket" json:"tcpSocket,omitempty"`
- } `tfsdk:"pre_stop" json:"preStop,omitempty"`
- } `tfsdk:"lifecycle" json:"lifecycle,omitempty"`
- LivenessProbe *struct {
- Exec *struct {
- Command *[]string `tfsdk:"command" json:"command,omitempty"`
- } `tfsdk:"exec" json:"exec,omitempty"`
- FailureThreshold *int64 `tfsdk:"failure_threshold" json:"failureThreshold,omitempty"`
- Grpc *struct {
- Port *int64 `tfsdk:"port" json:"port,omitempty"`
- Service *string `tfsdk:"service" json:"service,omitempty"`
- } `tfsdk:"grpc" json:"grpc,omitempty"`
- HttpGet *struct {
- Host *string `tfsdk:"host" json:"host,omitempty"`
- HttpHeaders *[]struct {
- Name *string `tfsdk:"name" json:"name,omitempty"`
- Value *string `tfsdk:"value" json:"value,omitempty"`
- } `tfsdk:"http_headers" json:"httpHeaders,omitempty"`
- Path *string `tfsdk:"path" json:"path,omitempty"`
- Port *string `tfsdk:"port" json:"port,omitempty"`
- Scheme *string `tfsdk:"scheme" json:"scheme,omitempty"`
- } `tfsdk:"http_get" json:"httpGet,omitempty"`
- InitialDelaySeconds *int64 `tfsdk:"initial_delay_seconds" json:"initialDelaySeconds,omitempty"`
- PeriodSeconds *int64 `tfsdk:"period_seconds" json:"periodSeconds,omitempty"`
- SuccessThreshold *int64 `tfsdk:"success_threshold" json:"successThreshold,omitempty"`
- TcpSocket *struct {
- Host *string `tfsdk:"host" json:"host,omitempty"`
- Port *string `tfsdk:"port" json:"port,omitempty"`
- } `tfsdk:"tcp_socket" json:"tcpSocket,omitempty"`
- TerminationGracePeriodSeconds *int64 `tfsdk:"termination_grace_period_seconds" json:"terminationGracePeriodSeconds,omitempty"`
- TimeoutSeconds *int64 `tfsdk:"timeout_seconds" json:"timeoutSeconds,omitempty"`
- } `tfsdk:"liveness_probe" json:"livenessProbe,omitempty"`
- Name *string `tfsdk:"name" json:"name,omitempty"`
- Ports *[]struct {
- ContainerPort *int64 `tfsdk:"container_port" json:"containerPort,omitempty"`
- HostIP *string `tfsdk:"host_ip" json:"hostIP,omitempty"`
- HostPort *int64 `tfsdk:"host_port" json:"hostPort,omitempty"`
- Name *string `tfsdk:"name" json:"name,omitempty"`
- Protocol *string `tfsdk:"protocol" json:"protocol,omitempty"`
- } `tfsdk:"ports" json:"ports,omitempty"`
- ReadinessProbe *struct {
- Exec *struct {
- Command *[]string `tfsdk:"command" json:"command,omitempty"`
- } `tfsdk:"exec" json:"exec,omitempty"`
- FailureThreshold *int64 `tfsdk:"failure_threshold" json:"failureThreshold,omitempty"`
- Grpc *struct {
- Port *int64 `tfsdk:"port" json:"port,omitempty"`
- Service *string `tfsdk:"service" json:"service,omitempty"`
- } `tfsdk:"grpc" json:"grpc,omitempty"`
- HttpGet *struct {
- Host *string `tfsdk:"host" json:"host,omitempty"`
- HttpHeaders *[]struct {
- Name *string `tfsdk:"name" json:"name,omitempty"`
- Value *string `tfsdk:"value" json:"value,omitempty"`
- } `tfsdk:"http_headers" json:"httpHeaders,omitempty"`
- Path *string `tfsdk:"path" json:"path,omitempty"`
- Port *string `tfsdk:"port" json:"port,omitempty"`
- Scheme *string `tfsdk:"scheme" json:"scheme,omitempty"`
- } `tfsdk:"http_get" json:"httpGet,omitempty"`
- InitialDelaySeconds *int64 `tfsdk:"initial_delay_seconds" json:"initialDelaySeconds,omitempty"`
- PeriodSeconds *int64 `tfsdk:"period_seconds" json:"periodSeconds,omitempty"`
- SuccessThreshold *int64 `tfsdk:"success_threshold" json:"successThreshold,omitempty"`
- TcpSocket *struct {
- Host *string `tfsdk:"host" json:"host,omitempty"`
- Port *string `tfsdk:"port" json:"port,omitempty"`
- } `tfsdk:"tcp_socket" json:"tcpSocket,omitempty"`
- TerminationGracePeriodSeconds *int64 `tfsdk:"termination_grace_period_seconds" json:"terminationGracePeriodSeconds,omitempty"`
- TimeoutSeconds *int64 `tfsdk:"timeout_seconds" json:"timeoutSeconds,omitempty"`
- } `tfsdk:"readiness_probe" json:"readinessProbe,omitempty"`
- ResizePolicy *[]struct {
- ResourceName *string `tfsdk:"resource_name" json:"resourceName,omitempty"`
- RestartPolicy *string `tfsdk:"restart_policy" json:"restartPolicy,omitempty"`
- } `tfsdk:"resize_policy" json:"resizePolicy,omitempty"`
- Resources *struct {
- Claims *[]struct {
- Name *string `tfsdk:"name" json:"name,omitempty"`
- } `tfsdk:"claims" json:"claims,omitempty"`
- Limits *map[string]string `tfsdk:"limits" json:"limits,omitempty"`
- Requests *map[string]string `tfsdk:"requests" json:"requests,omitempty"`
- } `tfsdk:"resources" json:"resources,omitempty"`
- RestartPolicy *string `tfsdk:"restart_policy" json:"restartPolicy,omitempty"`
- SecurityContext *struct {
- AllowPrivilegeEscalation *bool `tfsdk:"allow_privilege_escalation" json:"allowPrivilegeEscalation,omitempty"`
- Capabilities *struct {
- Add *[]string `tfsdk:"add" json:"add,omitempty"`
- Drop *[]string `tfsdk:"drop" json:"drop,omitempty"`
- } `tfsdk:"capabilities" json:"capabilities,omitempty"`
- Privileged *bool `tfsdk:"privileged" json:"privileged,omitempty"`
- ProcMount *string `tfsdk:"proc_mount" json:"procMount,omitempty"`
- ReadOnlyRootFilesystem *bool `tfsdk:"read_only_root_filesystem" json:"readOnlyRootFilesystem,omitempty"`
- RunAsGroup *int64 `tfsdk:"run_as_group" json:"runAsGroup,omitempty"`
- RunAsNonRoot *bool `tfsdk:"run_as_non_root" json:"runAsNonRoot,omitempty"`
- RunAsUser *int64 `tfsdk:"run_as_user" json:"runAsUser,omitempty"`
- SeLinuxOptions *struct {
- Level *string `tfsdk:"level" json:"level,omitempty"`
- Role *string `tfsdk:"role" json:"role,omitempty"`
- Type *string `tfsdk:"type" json:"type,omitempty"`
- User *string `tfsdk:"user" json:"user,omitempty"`
- } `tfsdk:"se_linux_options" json:"seLinuxOptions,omitempty"`
- SeccompProfile *struct {
- LocalhostProfile *string `tfsdk:"localhost_profile" json:"localhostProfile,omitempty"`
- Type *string `tfsdk:"type" json:"type,omitempty"`
- } `tfsdk:"seccomp_profile" json:"seccompProfile,omitempty"`
- WindowsOptions *struct {
- GmsaCredentialSpec *string `tfsdk:"gmsa_credential_spec" json:"gmsaCredentialSpec,omitempty"`
- GmsaCredentialSpecName *string `tfsdk:"gmsa_credential_spec_name" json:"gmsaCredentialSpecName,omitempty"`
- HostProcess *bool `tfsdk:"host_process" json:"hostProcess,omitempty"`
- RunAsUserName *string `tfsdk:"run_as_user_name" json:"runAsUserName,omitempty"`
- } `tfsdk:"windows_options" json:"windowsOptions,omitempty"`
- } `tfsdk:"security_context" json:"securityContext,omitempty"`
- StartupProbe *struct {
- Exec *struct {
- Command *[]string `tfsdk:"command" json:"command,omitempty"`
- } `tfsdk:"exec" json:"exec,omitempty"`
- FailureThreshold *int64 `tfsdk:"failure_threshold" json:"failureThreshold,omitempty"`
- Grpc *struct {
- Port *int64 `tfsdk:"port" json:"port,omitempty"`
- Service *string `tfsdk:"service" json:"service,omitempty"`
- } `tfsdk:"grpc" json:"grpc,omitempty"`
- HttpGet *struct {
- Host *string `tfsdk:"host" json:"host,omitempty"`
- HttpHeaders *[]struct {
- Name *string `tfsdk:"name" json:"name,omitempty"`
- Value *string `tfsdk:"value" json:"value,omitempty"`
- } `tfsdk:"http_headers" json:"httpHeaders,omitempty"`
- Path *string `tfsdk:"path" json:"path,omitempty"`
- Port *string `tfsdk:"port" json:"port,omitempty"`
- Scheme *string `tfsdk:"scheme" json:"scheme,omitempty"`
- } `tfsdk:"http_get" json:"httpGet,omitempty"`
- InitialDelaySeconds *int64 `tfsdk:"initial_delay_seconds" json:"initialDelaySeconds,omitempty"`
- PeriodSeconds *int64 `tfsdk:"period_seconds" json:"periodSeconds,omitempty"`
- SuccessThreshold *int64 `tfsdk:"success_threshold" json:"successThreshold,omitempty"`
- TcpSocket *struct {
- Host *string `tfsdk:"host" json:"host,omitempty"`
- Port *string `tfsdk:"port" json:"port,omitempty"`
- } `tfsdk:"tcp_socket" json:"tcpSocket,omitempty"`
- TerminationGracePeriodSeconds *int64 `tfsdk:"termination_grace_period_seconds" json:"terminationGracePeriodSeconds,omitempty"`
- TimeoutSeconds *int64 `tfsdk:"timeout_seconds" json:"timeoutSeconds,omitempty"`
- } `tfsdk:"startup_probe" json:"startupProbe,omitempty"`
- Stdin *bool `tfsdk:"stdin" json:"stdin,omitempty"`
- StdinOnce *bool `tfsdk:"stdin_once" json:"stdinOnce,omitempty"`
- TargetContainerName *string `tfsdk:"target_container_name" json:"targetContainerName,omitempty"`
- TerminationMessagePath *string `tfsdk:"termination_message_path" json:"terminationMessagePath,omitempty"`
- TerminationMessagePolicy *string `tfsdk:"termination_message_policy" json:"terminationMessagePolicy,omitempty"`
- Tty *bool `tfsdk:"tty" json:"tty,omitempty"`
- VolumeDevices *[]struct {
- DevicePath *string `tfsdk:"device_path" json:"devicePath,omitempty"`
- Name *string `tfsdk:"name" json:"name,omitempty"`
- } `tfsdk:"volume_devices" json:"volumeDevices,omitempty"`
- VolumeMounts *[]struct {
- MountPath *string `tfsdk:"mount_path" json:"mountPath,omitempty"`
- MountPropagation *string `tfsdk:"mount_propagation" json:"mountPropagation,omitempty"`
- Name *string `tfsdk:"name" json:"name,omitempty"`
- ReadOnly *bool `tfsdk:"read_only" json:"readOnly,omitempty"`
- SubPath *string `tfsdk:"sub_path" json:"subPath,omitempty"`
- SubPathExpr *string `tfsdk:"sub_path_expr" json:"subPathExpr,omitempty"`
- } `tfsdk:"volume_mounts" json:"volumeMounts,omitempty"`
- WorkingDir *string `tfsdk:"working_dir" json:"workingDir,omitempty"`
- } `tfsdk:"ephemeral_containers" json:"ephemeralContainers,omitempty"`
- HostAliases *[]struct {
- Hostnames *[]string `tfsdk:"hostnames" json:"hostnames,omitempty"`
- Ip *string `tfsdk:"ip" json:"ip,omitempty"`
- } `tfsdk:"host_aliases" json:"hostAliases,omitempty"`
- HostIPC *bool `tfsdk:"host_ipc" json:"hostIPC,omitempty"`
- HostNetwork *bool `tfsdk:"host_network" json:"hostNetwork,omitempty"`
- HostPID *bool `tfsdk:"host_pid" json:"hostPID,omitempty"`
- HostUsers *bool `tfsdk:"host_users" json:"hostUsers,omitempty"`
- Hostname *string `tfsdk:"hostname" json:"hostname,omitempty"`
- ImagePullSecrets *[]struct {
- Name *string `tfsdk:"name" json:"name,omitempty"`
- } `tfsdk:"image_pull_secrets" json:"imagePullSecrets,omitempty"`
- InitContainers *[]struct {
- Args *[]string `tfsdk:"args" json:"args,omitempty"`
- Command *[]string `tfsdk:"command" json:"command,omitempty"`
- Env *[]struct {
- Name *string `tfsdk:"name" json:"name,omitempty"`
- Value *string `tfsdk:"value" json:"value,omitempty"`
- ValueFrom *struct {
- ConfigMapKeyRef *struct {
- Key *string `tfsdk:"key" json:"key,omitempty"`
- Name *string `tfsdk:"name" json:"name,omitempty"`
- Optional *bool `tfsdk:"optional" json:"optional,omitempty"`
- } `tfsdk:"config_map_key_ref" json:"configMapKeyRef,omitempty"`
- FieldRef *struct {
- ApiVersion *string `tfsdk:"api_version" json:"apiVersion,omitempty"`
- FieldPath *string `tfsdk:"field_path" json:"fieldPath,omitempty"`
- } `tfsdk:"field_ref" json:"fieldRef,omitempty"`
- ResourceFieldRef *struct {
- ContainerName *string `tfsdk:"container_name" json:"containerName,omitempty"`
- Divisor *string `tfsdk:"divisor" json:"divisor,omitempty"`
- Resource *string `tfsdk:"resource" json:"resource,omitempty"`
- } `tfsdk:"resource_field_ref" json:"resourceFieldRef,omitempty"`
- SecretKeyRef *struct {
- Key *string `tfsdk:"key" json:"key,omitempty"`
- Name *string `tfsdk:"name" json:"name,omitempty"`
- Optional *bool `tfsdk:"optional" json:"optional,omitempty"`
- } `tfsdk:"secret_key_ref" json:"secretKeyRef,omitempty"`
- } `tfsdk:"value_from" json:"valueFrom,omitempty"`
- } `tfsdk:"env" json:"env,omitempty"`
- EnvFrom *[]struct {
- ConfigMapRef *struct {
- Name *string `tfsdk:"name" json:"name,omitempty"`
- Optional *bool `tfsdk:"optional" json:"optional,omitempty"`
- } `tfsdk:"config_map_ref" json:"configMapRef,omitempty"`
- Prefix *string `tfsdk:"prefix" json:"prefix,omitempty"`
- SecretRef *struct {
- Name *string `tfsdk:"name" json:"name,omitempty"`
- Optional *bool `tfsdk:"optional" json:"optional,omitempty"`
- } `tfsdk:"secret_ref" json:"secretRef,omitempty"`
- } `tfsdk:"env_from" json:"envFrom,omitempty"`
- Image *string `tfsdk:"image" json:"image,omitempty"`
- ImagePullPolicy *string `tfsdk:"image_pull_policy" json:"imagePullPolicy,omitempty"`
- Lifecycle *struct {
- PostStart *struct {
- Exec *struct {
- Command *[]string `tfsdk:"command" json:"command,omitempty"`
- } `tfsdk:"exec" json:"exec,omitempty"`
- HttpGet *struct {
- Host *string `tfsdk:"host" json:"host,omitempty"`
- HttpHeaders *[]struct {
- Name *string `tfsdk:"name" json:"name,omitempty"`
- Value *string `tfsdk:"value" json:"value,omitempty"`
- } `tfsdk:"http_headers" json:"httpHeaders,omitempty"`
- Path *string `tfsdk:"path" json:"path,omitempty"`
- Port *string `tfsdk:"port" json:"port,omitempty"`
- Scheme *string `tfsdk:"scheme" json:"scheme,omitempty"`
- } `tfsdk:"http_get" json:"httpGet,omitempty"`
- TcpSocket *struct {
- Host *string `tfsdk:"host" json:"host,omitempty"`
- Port *string `tfsdk:"port" json:"port,omitempty"`
- } `tfsdk:"tcp_socket" json:"tcpSocket,omitempty"`
- } `tfsdk:"post_start" json:"postStart,omitempty"`
- PreStop *struct {
- Exec *struct {
- Command *[]string `tfsdk:"command" json:"command,omitempty"`
- } `tfsdk:"exec" json:"exec,omitempty"`
- HttpGet *struct {
- Host *string `tfsdk:"host" json:"host,omitempty"`
- HttpHeaders *[]struct {
- Name *string `tfsdk:"name" json:"name,omitempty"`
- Value *string `tfsdk:"value" json:"value,omitempty"`
- } `tfsdk:"http_headers" json:"httpHeaders,omitempty"`
- Path *string `tfsdk:"path" json:"path,omitempty"`
- Port *string `tfsdk:"port" json:"port,omitempty"`
- Scheme *string `tfsdk:"scheme" json:"scheme,omitempty"`
- } `tfsdk:"http_get" json:"httpGet,omitempty"`
- TcpSocket *struct {
- Host *string `tfsdk:"host" json:"host,omitempty"`
- Port *string `tfsdk:"port" json:"port,omitempty"`
- } `tfsdk:"tcp_socket" json:"tcpSocket,omitempty"`
- } `tfsdk:"pre_stop" json:"preStop,omitempty"`
- } `tfsdk:"lifecycle" json:"lifecycle,omitempty"`
- LivenessProbe *struct {
- Exec *struct {
- Command *[]string `tfsdk:"command" json:"command,omitempty"`
- } `tfsdk:"exec" json:"exec,omitempty"`
- FailureThreshold *int64 `tfsdk:"failure_threshold" json:"failureThreshold,omitempty"`
- Grpc *struct {
- Port *int64 `tfsdk:"port" json:"port,omitempty"`
- Service *string `tfsdk:"service" json:"service,omitempty"`
- } `tfsdk:"grpc" json:"grpc,omitempty"`
- HttpGet *struct {
- Host *string `tfsdk:"host" json:"host,omitempty"`
- HttpHeaders *[]struct {
- Name *string `tfsdk:"name" json:"name,omitempty"`
- Value *string `tfsdk:"value" json:"value,omitempty"`
- } `tfsdk:"http_headers" json:"httpHeaders,omitempty"`
- Path *string `tfsdk:"path" json:"path,omitempty"`
- Port *string `tfsdk:"port" json:"port,omitempty"`
- Scheme *string `tfsdk:"scheme" json:"scheme,omitempty"`
- } `tfsdk:"http_get" json:"httpGet,omitempty"`
- InitialDelaySeconds *int64 `tfsdk:"initial_delay_seconds" json:"initialDelaySeconds,omitempty"`
- PeriodSeconds *int64 `tfsdk:"period_seconds" json:"periodSeconds,omitempty"`
- SuccessThreshold *int64 `tfsdk:"success_threshold" json:"successThreshold,omitempty"`
- TcpSocket *struct {
- Host *string `tfsdk:"host" json:"host,omitempty"`
- Port *string `tfsdk:"port" json:"port,omitempty"`
- } `tfsdk:"tcp_socket" json:"tcpSocket,omitempty"`
- TerminationGracePeriodSeconds *int64 `tfsdk:"termination_grace_period_seconds" json:"terminationGracePeriodSeconds,omitempty"`
- TimeoutSeconds *int64 `tfsdk:"timeout_seconds" json:"timeoutSeconds,omitempty"`
- } `tfsdk:"liveness_probe" json:"livenessProbe,omitempty"`
- Name *string `tfsdk:"name" json:"name,omitempty"`
- Ports *[]struct {
- ContainerPort *int64 `tfsdk:"container_port" json:"containerPort,omitempty"`
- HostIP *string `tfsdk:"host_ip" json:"hostIP,omitempty"`
- HostPort *int64 `tfsdk:"host_port" json:"hostPort,omitempty"`
- Name *string `tfsdk:"name" json:"name,omitempty"`
- Protocol *string `tfsdk:"protocol" json:"protocol,omitempty"`
- } `tfsdk:"ports" json:"ports,omitempty"`
- ReadinessProbe *struct {
- Exec *struct {
- Command *[]string `tfsdk:"command" json:"command,omitempty"`
- } `tfsdk:"exec" json:"exec,omitempty"`
- FailureThreshold *int64 `tfsdk:"failure_threshold" json:"failureThreshold,omitempty"`
- Grpc *struct {
- Port *int64 `tfsdk:"port" json:"port,omitempty"`
- Service *string `tfsdk:"service" json:"service,omitempty"`
- } `tfsdk:"grpc" json:"grpc,omitempty"`
- HttpGet *struct {
- Host *string `tfsdk:"host" json:"host,omitempty"`
- HttpHeaders *[]struct {
- Name *string `tfsdk:"name" json:"name,omitempty"`
- Value *string `tfsdk:"value" json:"value,omitempty"`
- } `tfsdk:"http_headers" json:"httpHeaders,omitempty"`
- Path *string `tfsdk:"path" json:"path,omitempty"`
- Port *string `tfsdk:"port" json:"port,omitempty"`
- Scheme *string `tfsdk:"scheme" json:"scheme,omitempty"`
- } `tfsdk:"http_get" json:"httpGet,omitempty"`
- InitialDelaySeconds *int64 `tfsdk:"initial_delay_seconds" json:"initialDelaySeconds,omitempty"`
- PeriodSeconds *int64 `tfsdk:"period_seconds" json:"periodSeconds,omitempty"`
- SuccessThreshold *int64 `tfsdk:"success_threshold" json:"successThreshold,omitempty"`
- TcpSocket *struct {
- Host *string `tfsdk:"host" json:"host,omitempty"`
- Port *string `tfsdk:"port" json:"port,omitempty"`
- } `tfsdk:"tcp_socket" json:"tcpSocket,omitempty"`
- TerminationGracePeriodSeconds *int64 `tfsdk:"termination_grace_period_seconds" json:"terminationGracePeriodSeconds,omitempty"`
- TimeoutSeconds *int64 `tfsdk:"timeout_seconds" json:"timeoutSeconds,omitempty"`
- } `tfsdk:"readiness_probe" json:"readinessProbe,omitempty"`
- ResizePolicy *[]struct {
- ResourceName *string `tfsdk:"resource_name" json:"resourceName,omitempty"`
- RestartPolicy *string `tfsdk:"restart_policy" json:"restartPolicy,omitempty"`
- } `tfsdk:"resize_policy" json:"resizePolicy,omitempty"`
- Resources *struct {
- Claims *[]struct {
- Name *string `tfsdk:"name" json:"name,omitempty"`
- } `tfsdk:"claims" json:"claims,omitempty"`
- Limits *map[string]string `tfsdk:"limits" json:"limits,omitempty"`
- Requests *map[string]string `tfsdk:"requests" json:"requests,omitempty"`
- } `tfsdk:"resources" json:"resources,omitempty"`
- RestartPolicy *string `tfsdk:"restart_policy" json:"restartPolicy,omitempty"`
- SecurityContext *struct {
- AllowPrivilegeEscalation *bool `tfsdk:"allow_privilege_escalation" json:"allowPrivilegeEscalation,omitempty"`
- Capabilities *struct {
- Add *[]string `tfsdk:"add" json:"add,omitempty"`
- Drop *[]string `tfsdk:"drop" json:"drop,omitempty"`
- } `tfsdk:"capabilities" json:"capabilities,omitempty"`
- Privileged *bool `tfsdk:"privileged" json:"privileged,omitempty"`
- ProcMount *string `tfsdk:"proc_mount" json:"procMount,omitempty"`
- ReadOnlyRootFilesystem *bool `tfsdk:"read_only_root_filesystem" json:"readOnlyRootFilesystem,omitempty"`
- RunAsGroup *int64 `tfsdk:"run_as_group" json:"runAsGroup,omitempty"`
- RunAsNonRoot *bool `tfsdk:"run_as_non_root" json:"runAsNonRoot,omitempty"`
- RunAsUser *int64 `tfsdk:"run_as_user" json:"runAsUser,omitempty"`
- SeLinuxOptions *struct {
- Level *string `tfsdk:"level" json:"level,omitempty"`
- Role *string `tfsdk:"role" json:"role,omitempty"`
- Type *string `tfsdk:"type" json:"type,omitempty"`
- User *string `tfsdk:"user" json:"user,omitempty"`
- } `tfsdk:"se_linux_options" json:"seLinuxOptions,omitempty"`
- SeccompProfile *struct {
- LocalhostProfile *string `tfsdk:"localhost_profile" json:"localhostProfile,omitempty"`
- Type *string `tfsdk:"type" json:"type,omitempty"`
- } `tfsdk:"seccomp_profile" json:"seccompProfile,omitempty"`
- WindowsOptions *struct {
- GmsaCredentialSpec *string `tfsdk:"gmsa_credential_spec" json:"gmsaCredentialSpec,omitempty"`
- GmsaCredentialSpecName *string `tfsdk:"gmsa_credential_spec_name" json:"gmsaCredentialSpecName,omitempty"`
- HostProcess *bool `tfsdk:"host_process" json:"hostProcess,omitempty"`
- RunAsUserName *string `tfsdk:"run_as_user_name" json:"runAsUserName,omitempty"`
- } `tfsdk:"windows_options" json:"windowsOptions,omitempty"`
- } `tfsdk:"security_context" json:"securityContext,omitempty"`
- StartupProbe *struct {
- Exec *struct {
- Command *[]string `tfsdk:"command" json:"command,omitempty"`
- } `tfsdk:"exec" json:"exec,omitempty"`
- FailureThreshold *int64 `tfsdk:"failure_threshold" json:"failureThreshold,omitempty"`
- Grpc *struct {
- Port *int64 `tfsdk:"port" json:"port,omitempty"`
- Service *string `tfsdk:"service" json:"service,omitempty"`
- } `tfsdk:"grpc" json:"grpc,omitempty"`
- HttpGet *struct {
- Host *string `tfsdk:"host" json:"host,omitempty"`
- HttpHeaders *[]struct {
- Name *string `tfsdk:"name" json:"name,omitempty"`
- Value *string `tfsdk:"value" json:"value,omitempty"`
- } `tfsdk:"http_headers" json:"httpHeaders,omitempty"`
- Path *string `tfsdk:"path" json:"path,omitempty"`
- Port *string `tfsdk:"port" json:"port,omitempty"`
- Scheme *string `tfsdk:"scheme" json:"scheme,omitempty"`
- } `tfsdk:"http_get" json:"httpGet,omitempty"`
- InitialDelaySeconds *int64 `tfsdk:"initial_delay_seconds" json:"initialDelaySeconds,omitempty"`
- PeriodSeconds *int64 `tfsdk:"period_seconds" json:"periodSeconds,omitempty"`
- SuccessThreshold *int64 `tfsdk:"success_threshold" json:"successThreshold,omitempty"`
- TcpSocket *struct {
- Host *string `tfsdk:"host" json:"host,omitempty"`
- Port *string `tfsdk:"port" json:"port,omitempty"`
- } `tfsdk:"tcp_socket" json:"tcpSocket,omitempty"`
- TerminationGracePeriodSeconds *int64 `tfsdk:"termination_grace_period_seconds" json:"terminationGracePeriodSeconds,omitempty"`
- TimeoutSeconds *int64 `tfsdk:"timeout_seconds" json:"timeoutSeconds,omitempty"`
- } `tfsdk:"startup_probe" json:"startupProbe,omitempty"`
- Stdin *bool `tfsdk:"stdin" json:"stdin,omitempty"`
- StdinOnce *bool `tfsdk:"stdin_once" json:"stdinOnce,omitempty"`
- TerminationMessagePath *string `tfsdk:"termination_message_path" json:"terminationMessagePath,omitempty"`
- TerminationMessagePolicy *string `tfsdk:"termination_message_policy" json:"terminationMessagePolicy,omitempty"`
- Tty *bool `tfsdk:"tty" json:"tty,omitempty"`
- VolumeDevices *[]struct {
- DevicePath *string `tfsdk:"device_path" json:"devicePath,omitempty"`
- Name *string `tfsdk:"name" json:"name,omitempty"`
- } `tfsdk:"volume_devices" json:"volumeDevices,omitempty"`
- VolumeMounts *[]struct {
- MountPath *string `tfsdk:"mount_path" json:"mountPath,omitempty"`
- MountPropagation *string `tfsdk:"mount_propagation" json:"mountPropagation,omitempty"`
- Name *string `tfsdk:"name" json:"name,omitempty"`
- ReadOnly *bool `tfsdk:"read_only" json:"readOnly,omitempty"`
- SubPath *string `tfsdk:"sub_path" json:"subPath,omitempty"`
- SubPathExpr *string `tfsdk:"sub_path_expr" json:"subPathExpr,omitempty"`
- } `tfsdk:"volume_mounts" json:"volumeMounts,omitempty"`
- WorkingDir *string `tfsdk:"working_dir" json:"workingDir,omitempty"`
- } `tfsdk:"init_containers" json:"initContainers,omitempty"`
- NodeName *string `tfsdk:"node_name" json:"nodeName,omitempty"`
- NodeSelector *map[string]string `tfsdk:"node_selector" json:"nodeSelector,omitempty"`
- Os *struct {
- Name *string `tfsdk:"name" json:"name,omitempty"`
- } `tfsdk:"os" json:"os,omitempty"`
- Overhead *map[string]string `tfsdk:"overhead" json:"overhead,omitempty"`
- PreemptionPolicy *string `tfsdk:"preemption_policy" json:"preemptionPolicy,omitempty"`
- Priority *int64 `tfsdk:"priority" json:"priority,omitempty"`
- PriorityClassName *string `tfsdk:"priority_class_name" json:"priorityClassName,omitempty"`
- ReadinessGates *[]struct {
- ConditionType *string `tfsdk:"condition_type" json:"conditionType,omitempty"`
- } `tfsdk:"readiness_gates" json:"readinessGates,omitempty"`
- ResourceClaims *[]struct {
- Name *string `tfsdk:"name" json:"name,omitempty"`
- Source *struct {
- ResourceClaimName *string `tfsdk:"resource_claim_name" json:"resourceClaimName,omitempty"`
- ResourceClaimTemplateName *string `tfsdk:"resource_claim_template_name" json:"resourceClaimTemplateName,omitempty"`
- } `tfsdk:"source" json:"source,omitempty"`
- } `tfsdk:"resource_claims" json:"resourceClaims,omitempty"`
- RestartPolicy *string `tfsdk:"restart_policy" json:"restartPolicy,omitempty"`
- RuntimeClassName *string `tfsdk:"runtime_class_name" json:"runtimeClassName,omitempty"`
- SchedulerName *string `tfsdk:"scheduler_name" json:"schedulerName,omitempty"`
- SchedulingGates *[]struct {
- Name *string `tfsdk:"name" json:"name,omitempty"`
- } `tfsdk:"scheduling_gates" json:"schedulingGates,omitempty"`
- SecurityContext *struct {
- FsGroup *int64 `tfsdk:"fs_group" json:"fsGroup,omitempty"`
- FsGroupChangePolicy *string `tfsdk:"fs_group_change_policy" json:"fsGroupChangePolicy,omitempty"`
- RunAsGroup *int64 `tfsdk:"run_as_group" json:"runAsGroup,omitempty"`
- RunAsNonRoot *bool `tfsdk:"run_as_non_root" json:"runAsNonRoot,omitempty"`
- RunAsUser *int64 `tfsdk:"run_as_user" json:"runAsUser,omitempty"`
- SeLinuxOptions *struct {
- Level *string `tfsdk:"level" json:"level,omitempty"`
- Role *string `tfsdk:"role" json:"role,omitempty"`
- Type *string `tfsdk:"type" json:"type,omitempty"`
- User *string `tfsdk:"user" json:"user,omitempty"`
- } `tfsdk:"se_linux_options" json:"seLinuxOptions,omitempty"`
- SeccompProfile *struct {
- LocalhostProfile *string `tfsdk:"localhost_profile" json:"localhostProfile,omitempty"`
- Type *string `tfsdk:"type" json:"type,omitempty"`
- } `tfsdk:"seccomp_profile" json:"seccompProfile,omitempty"`
- SupplementalGroups *[]string `tfsdk:"supplemental_groups" json:"supplementalGroups,omitempty"`
- Sysctls *[]struct {
- Name *string `tfsdk:"name" json:"name,omitempty"`
- Value *string `tfsdk:"value" json:"value,omitempty"`
- } `tfsdk:"sysctls" json:"sysctls,omitempty"`
- WindowsOptions *struct {
- GmsaCredentialSpec *string `tfsdk:"gmsa_credential_spec" json:"gmsaCredentialSpec,omitempty"`
- GmsaCredentialSpecName *string `tfsdk:"gmsa_credential_spec_name" json:"gmsaCredentialSpecName,omitempty"`
- HostProcess *bool `tfsdk:"host_process" json:"hostProcess,omitempty"`
- RunAsUserName *string `tfsdk:"run_as_user_name" json:"runAsUserName,omitempty"`
- } `tfsdk:"windows_options" json:"windowsOptions,omitempty"`
- } `tfsdk:"security_context" json:"securityContext,omitempty"`
- ServiceAccount *string `tfsdk:"service_account" json:"serviceAccount,omitempty"`
- ServiceAccountName *string `tfsdk:"service_account_name" json:"serviceAccountName,omitempty"`
- SetHostnameAsFQDN *bool `tfsdk:"set_hostname_as_fqdn" json:"setHostnameAsFQDN,omitempty"`
- ShareProcessNamespace *bool `tfsdk:"share_process_namespace" json:"shareProcessNamespace,omitempty"`
- Subdomain *string `tfsdk:"subdomain" json:"subdomain,omitempty"`
- TerminationGracePeriodSeconds *int64 `tfsdk:"termination_grace_period_seconds" json:"terminationGracePeriodSeconds,omitempty"`
- Tolerations *[]struct {
- Effect *string `tfsdk:"effect" json:"effect,omitempty"`
- Key *string `tfsdk:"key" json:"key,omitempty"`
- Operator *string `tfsdk:"operator" json:"operator,omitempty"`
- TolerationSeconds *int64 `tfsdk:"toleration_seconds" json:"tolerationSeconds,omitempty"`
- Value *string `tfsdk:"value" json:"value,omitempty"`
- } `tfsdk:"tolerations" json:"tolerations,omitempty"`
- TopologySpreadConstraints *[]struct {
- LabelSelector *struct {
- MatchExpressions *[]struct {
- Key *string `tfsdk:"key" json:"key,omitempty"`
- Operator *string `tfsdk:"operator" json:"operator,omitempty"`
- Values *[]string `tfsdk:"values" json:"values,omitempty"`
- } `tfsdk:"match_expressions" json:"matchExpressions,omitempty"`
- MatchLabels *map[string]string `tfsdk:"match_labels" json:"matchLabels,omitempty"`
- } `tfsdk:"label_selector" json:"labelSelector,omitempty"`
- MatchLabelKeys *[]string `tfsdk:"match_label_keys" json:"matchLabelKeys,omitempty"`
- MaxSkew *int64 `tfsdk:"max_skew" json:"maxSkew,omitempty"`
- MinDomains *int64 `tfsdk:"min_domains" json:"minDomains,omitempty"`
- NodeAffinityPolicy *string `tfsdk:"node_affinity_policy" json:"nodeAffinityPolicy,omitempty"`
- NodeTaintsPolicy *string `tfsdk:"node_taints_policy" json:"nodeTaintsPolicy,omitempty"`
- TopologyKey *string `tfsdk:"topology_key" json:"topologyKey,omitempty"`
- WhenUnsatisfiable *string `tfsdk:"when_unsatisfiable" json:"whenUnsatisfiable,omitempty"`
- } `tfsdk:"topology_spread_constraints" json:"topologySpreadConstraints,omitempty"`
- Volumes *[]struct {
- AwsElasticBlockStore *struct {
- FsType *string `tfsdk:"fs_type" json:"fsType,omitempty"`
- Partition *int64 `tfsdk:"partition" json:"partition,omitempty"`
- ReadOnly *bool `tfsdk:"read_only" json:"readOnly,omitempty"`
- VolumeID *string `tfsdk:"volume_id" json:"volumeID,omitempty"`
- } `tfsdk:"aws_elastic_block_store" json:"awsElasticBlockStore,omitempty"`
- AzureDisk *struct {
- CachingMode *string `tfsdk:"caching_mode" json:"cachingMode,omitempty"`
- DiskName *string `tfsdk:"disk_name" json:"diskName,omitempty"`
- DiskURI *string `tfsdk:"disk_uri" json:"diskURI,omitempty"`
- FsType *string `tfsdk:"fs_type" json:"fsType,omitempty"`
- Kind *string `tfsdk:"kind" json:"kind,omitempty"`
- ReadOnly *bool `tfsdk:"read_only" json:"readOnly,omitempty"`
- } `tfsdk:"azure_disk" json:"azureDisk,omitempty"`
- AzureFile *struct {
- ReadOnly *bool `tfsdk:"read_only" json:"readOnly,omitempty"`
- SecretName *string `tfsdk:"secret_name" json:"secretName,omitempty"`
- ShareName *string `tfsdk:"share_name" json:"shareName,omitempty"`
- } `tfsdk:"azure_file" json:"azureFile,omitempty"`
- Cephfs *struct {
- Monitors *[]string `tfsdk:"monitors" json:"monitors,omitempty"`
- Path *string `tfsdk:"path" json:"path,omitempty"`
- ReadOnly *bool `tfsdk:"read_only" json:"readOnly,omitempty"`
- SecretFile *string `tfsdk:"secret_file" json:"secretFile,omitempty"`
- SecretRef *struct {
- Name *string `tfsdk:"name" json:"name,omitempty"`
- } `tfsdk:"secret_ref" json:"secretRef,omitempty"`
- User *string `tfsdk:"user" json:"user,omitempty"`
- } `tfsdk:"cephfs" json:"cephfs,omitempty"`
- Cinder *struct {
- FsType *string `tfsdk:"fs_type" json:"fsType,omitempty"`
- ReadOnly *bool `tfsdk:"read_only" json:"readOnly,omitempty"`
- SecretRef *struct {
- Name *string `tfsdk:"name" json:"name,omitempty"`
- } `tfsdk:"secret_ref" json:"secretRef,omitempty"`
- VolumeID *string `tfsdk:"volume_id" json:"volumeID,omitempty"`
- } `tfsdk:"cinder" json:"cinder,omitempty"`
- ConfigMap *struct {
- DefaultMode *int64 `tfsdk:"default_mode" json:"defaultMode,omitempty"`
- Items *[]struct {
- Key *string `tfsdk:"key" json:"key,omitempty"`
- Mode *int64 `tfsdk:"mode" json:"mode,omitempty"`
- Path *string `tfsdk:"path" json:"path,omitempty"`
- } `tfsdk:"items" json:"items,omitempty"`
- Name *string `tfsdk:"name" json:"name,omitempty"`
- Optional *bool `tfsdk:"optional" json:"optional,omitempty"`
- } `tfsdk:"config_map" json:"configMap,omitempty"`
- Csi *struct {
- Driver *string `tfsdk:"driver" json:"driver,omitempty"`
- FsType *string `tfsdk:"fs_type" json:"fsType,omitempty"`
- NodePublishSecretRef *struct {
- Name *string `tfsdk:"name" json:"name,omitempty"`
- } `tfsdk:"node_publish_secret_ref" json:"nodePublishSecretRef,omitempty"`
- ReadOnly *bool `tfsdk:"read_only" json:"readOnly,omitempty"`
- VolumeAttributes *map[string]string `tfsdk:"volume_attributes" json:"volumeAttributes,omitempty"`
- } `tfsdk:"csi" json:"csi,omitempty"`
- DownwardAPI *struct {
- DefaultMode *int64 `tfsdk:"default_mode" json:"defaultMode,omitempty"`
- Items *[]struct {
- FieldRef *struct {
- ApiVersion *string `tfsdk:"api_version" json:"apiVersion,omitempty"`
- FieldPath *string `tfsdk:"field_path" json:"fieldPath,omitempty"`
- } `tfsdk:"field_ref" json:"fieldRef,omitempty"`
- Mode *int64 `tfsdk:"mode" json:"mode,omitempty"`
- Path *string `tfsdk:"path" json:"path,omitempty"`
- ResourceFieldRef *struct {
- ContainerName *string `tfsdk:"container_name" json:"containerName,omitempty"`
- Divisor *string `tfsdk:"divisor" json:"divisor,omitempty"`
- Resource *string `tfsdk:"resource" json:"resource,omitempty"`
- } `tfsdk:"resource_field_ref" json:"resourceFieldRef,omitempty"`
- } `tfsdk:"items" json:"items,omitempty"`
- } `tfsdk:"downward_api" json:"downwardAPI,omitempty"`
- EmptyDir *struct {
- Medium *string `tfsdk:"medium" json:"medium,omitempty"`
- SizeLimit *string `tfsdk:"size_limit" json:"sizeLimit,omitempty"`
- } `tfsdk:"empty_dir" json:"emptyDir,omitempty"`
- Ephemeral *struct {
- VolumeClaimTemplate *struct {
- Metadata *struct {
- Annotations *map[string]string `tfsdk:"annotations" json:"annotations,omitempty"`
- Finalizers *[]string `tfsdk:"finalizers" json:"finalizers,omitempty"`
- Labels *map[string]string `tfsdk:"labels" json:"labels,omitempty"`
- Name *string `tfsdk:"name" json:"name,omitempty"`
- Namespace *string `tfsdk:"namespace" json:"namespace,omitempty"`
- } `tfsdk:"metadata" json:"metadata,omitempty"`
- Spec *struct {
- AccessModes *[]string `tfsdk:"access_modes" json:"accessModes,omitempty"`
- DataSource *struct {
- ApiGroup *string `tfsdk:"api_group" json:"apiGroup,omitempty"`
- Kind *string `tfsdk:"kind" json:"kind,omitempty"`
- Name *string `tfsdk:"name" json:"name,omitempty"`
- } `tfsdk:"data_source" json:"dataSource,omitempty"`
- DataSourceRef *struct {
- ApiGroup *string `tfsdk:"api_group" json:"apiGroup,omitempty"`
- Kind *string `tfsdk:"kind" json:"kind,omitempty"`
- Name *string `tfsdk:"name" json:"name,omitempty"`
- Namespace *string `tfsdk:"namespace" json:"namespace,omitempty"`
- } `tfsdk:"data_source_ref" json:"dataSourceRef,omitempty"`
- Resources *struct {
- Claims *[]struct {
- Name *string `tfsdk:"name" json:"name,omitempty"`
- } `tfsdk:"claims" json:"claims,omitempty"`
- Limits *map[string]string `tfsdk:"limits" json:"limits,omitempty"`
- Requests *map[string]string `tfsdk:"requests" json:"requests,omitempty"`
- } `tfsdk:"resources" json:"resources,omitempty"`
- Selector *struct {
- MatchExpressions *[]struct {
- Key *string `tfsdk:"key" json:"key,omitempty"`
- Operator *string `tfsdk:"operator" json:"operator,omitempty"`
- Values *[]string `tfsdk:"values" json:"values,omitempty"`
- } `tfsdk:"match_expressions" json:"matchExpressions,omitempty"`
- MatchLabels *map[string]string `tfsdk:"match_labels" json:"matchLabels,omitempty"`
- } `tfsdk:"selector" json:"selector,omitempty"`
- StorageClassName *string `tfsdk:"storage_class_name" json:"storageClassName,omitempty"`
- VolumeMode *string `tfsdk:"volume_mode" json:"volumeMode,omitempty"`
- VolumeName *string `tfsdk:"volume_name" json:"volumeName,omitempty"`
- } `tfsdk:"spec" json:"spec,omitempty"`
- } `tfsdk:"volume_claim_template" json:"volumeClaimTemplate,omitempty"`
- } `tfsdk:"ephemeral" json:"ephemeral,omitempty"`
- Fc *struct {
- FsType *string `tfsdk:"fs_type" json:"fsType,omitempty"`
- Lun *int64 `tfsdk:"lun" json:"lun,omitempty"`
- ReadOnly *bool `tfsdk:"read_only" json:"readOnly,omitempty"`
- TargetWWNs *[]string `tfsdk:"target_ww_ns" json:"targetWWNs,omitempty"`
- Wwids *[]string `tfsdk:"wwids" json:"wwids,omitempty"`
- } `tfsdk:"fc" json:"fc,omitempty"`
- FlexVolume *struct {
- Driver *string `tfsdk:"driver" json:"driver,omitempty"`
- FsType *string `tfsdk:"fs_type" json:"fsType,omitempty"`
- Options *map[string]string `tfsdk:"options" json:"options,omitempty"`
- ReadOnly *bool `tfsdk:"read_only" json:"readOnly,omitempty"`
- SecretRef *struct {
- Name *string `tfsdk:"name" json:"name,omitempty"`
- } `tfsdk:"secret_ref" json:"secretRef,omitempty"`
- } `tfsdk:"flex_volume" json:"flexVolume,omitempty"`
- Flocker *struct {
- DatasetName *string `tfsdk:"dataset_name" json:"datasetName,omitempty"`
- DatasetUUID *string `tfsdk:"dataset_uuid" json:"datasetUUID,omitempty"`
- } `tfsdk:"flocker" json:"flocker,omitempty"`
- GcePersistentDisk *struct {
- FsType *string `tfsdk:"fs_type" json:"fsType,omitempty"`
- Partition *int64 `tfsdk:"partition" json:"partition,omitempty"`
- PdName *string `tfsdk:"pd_name" json:"pdName,omitempty"`
- ReadOnly *bool `tfsdk:"read_only" json:"readOnly,omitempty"`
- } `tfsdk:"gce_persistent_disk" json:"gcePersistentDisk,omitempty"`
- GitRepo *struct {
- Directory *string `tfsdk:"directory" json:"directory,omitempty"`
- Repository *string `tfsdk:"repository" json:"repository,omitempty"`
- Revision *string `tfsdk:"revision" json:"revision,omitempty"`
- } `tfsdk:"git_repo" json:"gitRepo,omitempty"`
- Glusterfs *struct {
- Endpoints *string `tfsdk:"endpoints" json:"endpoints,omitempty"`
- Path *string `tfsdk:"path" json:"path,omitempty"`
- ReadOnly *bool `tfsdk:"read_only" json:"readOnly,omitempty"`
- } `tfsdk:"glusterfs" json:"glusterfs,omitempty"`
- HostPath *struct {
- Path *string `tfsdk:"path" json:"path,omitempty"`
- Type *string `tfsdk:"type" json:"type,omitempty"`
- } `tfsdk:"host_path" json:"hostPath,omitempty"`
- Iscsi *struct {
- ChapAuthDiscovery *bool `tfsdk:"chap_auth_discovery" json:"chapAuthDiscovery,omitempty"`
- ChapAuthSession *bool `tfsdk:"chap_auth_session" json:"chapAuthSession,omitempty"`
- FsType *string `tfsdk:"fs_type" json:"fsType,omitempty"`
- InitiatorName *string `tfsdk:"initiator_name" json:"initiatorName,omitempty"`
- Iqn *string `tfsdk:"iqn" json:"iqn,omitempty"`
- IscsiInterface *string `tfsdk:"iscsi_interface" json:"iscsiInterface,omitempty"`
- Lun *int64 `tfsdk:"lun" json:"lun,omitempty"`
- Portals *[]string `tfsdk:"portals" json:"portals,omitempty"`
- ReadOnly *bool `tfsdk:"read_only" json:"readOnly,omitempty"`
- SecretRef *struct {
- Name *string `tfsdk:"name" json:"name,omitempty"`
- } `tfsdk:"secret_ref" json:"secretRef,omitempty"`
- TargetPortal *string `tfsdk:"target_portal" json:"targetPortal,omitempty"`
- } `tfsdk:"iscsi" json:"iscsi,omitempty"`
- Name *string `tfsdk:"name" json:"name,omitempty"`
- Nfs *struct {
- Path *string `tfsdk:"path" json:"path,omitempty"`
- ReadOnly *bool `tfsdk:"read_only" json:"readOnly,omitempty"`
- Server *string `tfsdk:"server" json:"server,omitempty"`
- } `tfsdk:"nfs" json:"nfs,omitempty"`
- PersistentVolumeClaim *struct {
- ClaimName *string `tfsdk:"claim_name" json:"claimName,omitempty"`
- ReadOnly *bool `tfsdk:"read_only" json:"readOnly,omitempty"`
- } `tfsdk:"persistent_volume_claim" json:"persistentVolumeClaim,omitempty"`
- PhotonPersistentDisk *struct {
- FsType *string `tfsdk:"fs_type" json:"fsType,omitempty"`
- PdID *string `tfsdk:"pd_id" json:"pdID,omitempty"`
- } `tfsdk:"photon_persistent_disk" json:"photonPersistentDisk,omitempty"`
- PortworxVolume *struct {
- FsType *string `tfsdk:"fs_type" json:"fsType,omitempty"`
- ReadOnly *bool `tfsdk:"read_only" json:"readOnly,omitempty"`
- VolumeID *string `tfsdk:"volume_id" json:"volumeID,omitempty"`
- } `tfsdk:"portworx_volume" json:"portworxVolume,omitempty"`
- Projected *struct {
- DefaultMode *int64 `tfsdk:"default_mode" json:"defaultMode,omitempty"`
- Sources *[]struct {
- ConfigMap *struct {
- Items *[]struct {
- Key *string `tfsdk:"key" json:"key,omitempty"`
- Mode *int64 `tfsdk:"mode" json:"mode,omitempty"`
- Path *string `tfsdk:"path" json:"path,omitempty"`
- } `tfsdk:"items" json:"items,omitempty"`
- Name *string `tfsdk:"name" json:"name,omitempty"`
- Optional *bool `tfsdk:"optional" json:"optional,omitempty"`
- } `tfsdk:"config_map" json:"configMap,omitempty"`
- DownwardAPI *struct {
- Items *[]struct {
- FieldRef *struct {
- ApiVersion *string `tfsdk:"api_version" json:"apiVersion,omitempty"`
- FieldPath *string `tfsdk:"field_path" json:"fieldPath,omitempty"`
- } `tfsdk:"field_ref" json:"fieldRef,omitempty"`
- Mode *int64 `tfsdk:"mode" json:"mode,omitempty"`
- Path *string `tfsdk:"path" json:"path,omitempty"`
- ResourceFieldRef *struct {
- ContainerName *string `tfsdk:"container_name" json:"containerName,omitempty"`
- Divisor *string `tfsdk:"divisor" json:"divisor,omitempty"`
- Resource *string `tfsdk:"resource" json:"resource,omitempty"`
- } `tfsdk:"resource_field_ref" json:"resourceFieldRef,omitempty"`
- } `tfsdk:"items" json:"items,omitempty"`
- } `tfsdk:"downward_api" json:"downwardAPI,omitempty"`
- Secret *struct {
- Items *[]struct {
- Key *string `tfsdk:"key" json:"key,omitempty"`
- Mode *int64 `tfsdk:"mode" json:"mode,omitempty"`
- Path *string `tfsdk:"path" json:"path,omitempty"`
- } `tfsdk:"items" json:"items,omitempty"`
- Name *string `tfsdk:"name" json:"name,omitempty"`
- Optional *bool `tfsdk:"optional" json:"optional,omitempty"`
- } `tfsdk:"secret" json:"secret,omitempty"`
- ServiceAccountToken *struct {
- Audience *string `tfsdk:"audience" json:"audience,omitempty"`
- ExpirationSeconds *int64 `tfsdk:"expiration_seconds" json:"expirationSeconds,omitempty"`
- Path *string `tfsdk:"path" json:"path,omitempty"`
- } `tfsdk:"service_account_token" json:"serviceAccountToken,omitempty"`
- } `tfsdk:"sources" json:"sources,omitempty"`
- } `tfsdk:"projected" json:"projected,omitempty"`
- Quobyte *struct {
- Group *string `tfsdk:"group" json:"group,omitempty"`
- ReadOnly *bool `tfsdk:"read_only" json:"readOnly,omitempty"`
- Registry *string `tfsdk:"registry" json:"registry,omitempty"`
- Tenant *string `tfsdk:"tenant" json:"tenant,omitempty"`
- User *string `tfsdk:"user" json:"user,omitempty"`
- Volume *string `tfsdk:"volume" json:"volume,omitempty"`
- } `tfsdk:"quobyte" json:"quobyte,omitempty"`
- Rbd *struct {
- FsType *string `tfsdk:"fs_type" json:"fsType,omitempty"`
- Image *string `tfsdk:"image" json:"image,omitempty"`
- Keyring *string `tfsdk:"keyring" json:"keyring,omitempty"`
- Monitors *[]string `tfsdk:"monitors" json:"monitors,omitempty"`
- Pool *string `tfsdk:"pool" json:"pool,omitempty"`
- ReadOnly *bool `tfsdk:"read_only" json:"readOnly,omitempty"`
- SecretRef *struct {
- Name *string `tfsdk:"name" json:"name,omitempty"`
- } `tfsdk:"secret_ref" json:"secretRef,omitempty"`
- User *string `tfsdk:"user" json:"user,omitempty"`
- } `tfsdk:"rbd" json:"rbd,omitempty"`
- ScaleIO *struct {
- FsType *string `tfsdk:"fs_type" json:"fsType,omitempty"`
- Gateway *string `tfsdk:"gateway" json:"gateway,omitempty"`
- ProtectionDomain *string `tfsdk:"protection_domain" json:"protectionDomain,omitempty"`
- ReadOnly *bool `tfsdk:"read_only" json:"readOnly,omitempty"`
- SecretRef *struct {
- Name *string `tfsdk:"name" json:"name,omitempty"`
- } `tfsdk:"secret_ref" json:"secretRef,omitempty"`
- SslEnabled *bool `tfsdk:"ssl_enabled" json:"sslEnabled,omitempty"`
- StorageMode *string `tfsdk:"storage_mode" json:"storageMode,omitempty"`
- StoragePool *string `tfsdk:"storage_pool" json:"storagePool,omitempty"`
- System *string `tfsdk:"system" json:"system,omitempty"`
- VolumeName *string `tfsdk:"volume_name" json:"volumeName,omitempty"`
- } `tfsdk:"scale_io" json:"scaleIO,omitempty"`
- Secret *struct {
- DefaultMode *int64 `tfsdk:"default_mode" json:"defaultMode,omitempty"`
- Items *[]struct {
- Key *string `tfsdk:"key" json:"key,omitempty"`
- Mode *int64 `tfsdk:"mode" json:"mode,omitempty"`
- Path *string `tfsdk:"path" json:"path,omitempty"`
- } `tfsdk:"items" json:"items,omitempty"`
- Optional *bool `tfsdk:"optional" json:"optional,omitempty"`
- SecretName *string `tfsdk:"secret_name" json:"secretName,omitempty"`
- } `tfsdk:"secret" json:"secret,omitempty"`
- Storageos *struct {
- FsType *string `tfsdk:"fs_type" json:"fsType,omitempty"`
- ReadOnly *bool `tfsdk:"read_only" json:"readOnly,omitempty"`
- SecretRef *struct {
- Name *string `tfsdk:"name" json:"name,omitempty"`
- } `tfsdk:"secret_ref" json:"secretRef,omitempty"`
- VolumeName *string `tfsdk:"volume_name" json:"volumeName,omitempty"`
- VolumeNamespace *string `tfsdk:"volume_namespace" json:"volumeNamespace,omitempty"`
- } `tfsdk:"storageos" json:"storageos,omitempty"`
- VsphereVolume *struct {
- FsType *string `tfsdk:"fs_type" json:"fsType,omitempty"`
- StoragePolicyID *string `tfsdk:"storage_policy_id" json:"storagePolicyID,omitempty"`
- StoragePolicyName *string `tfsdk:"storage_policy_name" json:"storagePolicyName,omitempty"`
- VolumePath *string `tfsdk:"volume_path" json:"volumePath,omitempty"`
- } `tfsdk:"vsphere_volume" json:"vsphereVolume,omitempty"`
- } `tfsdk:"volumes" json:"volumes,omitempty"`
- } `tfsdk:"pod_spec" json:"podSpec,omitempty"`
- PostStartSpec *struct {
- CmdExecutorConfig *struct {
- Args *[]string `tfsdk:"args" json:"args,omitempty"`
- Command *[]string `tfsdk:"command" json:"command,omitempty"`
- Env *map[string]string `tfsdk:"env" json:"env,omitempty"`
- Image *string `tfsdk:"image" json:"image,omitempty"`
- } `tfsdk:"cmd_executor_config" json:"cmdExecutorConfig,omitempty"`
- ScriptSpecSelectors *[]struct {
- Name *string `tfsdk:"name" json:"name,omitempty"`
- } `tfsdk:"script_spec_selectors" json:"scriptSpecSelectors,omitempty"`
- } `tfsdk:"post_start_spec" json:"postStartSpec,omitempty"`
- Probes *struct {
- RoleProbe *struct {
- Commands *struct {
- Queries *[]string `tfsdk:"queries" json:"queries,omitempty"`
- Writes *[]string `tfsdk:"writes" json:"writes,omitempty"`
- } `tfsdk:"commands" json:"commands,omitempty"`
- FailureThreshold *int64 `tfsdk:"failure_threshold" json:"failureThreshold,omitempty"`
- PeriodSeconds *int64 `tfsdk:"period_seconds" json:"periodSeconds,omitempty"`
- TimeoutSeconds *int64 `tfsdk:"timeout_seconds" json:"timeoutSeconds,omitempty"`
- } `tfsdk:"role_probe" json:"roleProbe,omitempty"`
- RoleProbeTimeoutAfterPodsReady *int64 `tfsdk:"role_probe_timeout_after_pods_ready" json:"roleProbeTimeoutAfterPodsReady,omitempty"`
- RunningProbe *struct {
- Commands *struct {
- Queries *[]string `tfsdk:"queries" json:"queries,omitempty"`
- Writes *[]string `tfsdk:"writes" json:"writes,omitempty"`
- } `tfsdk:"commands" json:"commands,omitempty"`
- FailureThreshold *int64 `tfsdk:"failure_threshold" json:"failureThreshold,omitempty"`
- PeriodSeconds *int64 `tfsdk:"period_seconds" json:"periodSeconds,omitempty"`
- TimeoutSeconds *int64 `tfsdk:"timeout_seconds" json:"timeoutSeconds,omitempty"`
- } `tfsdk:"running_probe" json:"runningProbe,omitempty"`
- StatusProbe *struct {
- Commands *struct {
- Queries *[]string `tfsdk:"queries" json:"queries,omitempty"`
- Writes *[]string `tfsdk:"writes" json:"writes,omitempty"`
- } `tfsdk:"commands" json:"commands,omitempty"`
- FailureThreshold *int64 `tfsdk:"failure_threshold" json:"failureThreshold,omitempty"`
- PeriodSeconds *int64 `tfsdk:"period_seconds" json:"periodSeconds,omitempty"`
- TimeoutSeconds *int64 `tfsdk:"timeout_seconds" json:"timeoutSeconds,omitempty"`
- } `tfsdk:"status_probe" json:"statusProbe,omitempty"`
- } `tfsdk:"probes" json:"probes,omitempty"`
- ReplicationSpec *struct {
- LlPodManagementPolicy *string `tfsdk:"ll_pod_management_policy" json:"llPodManagementPolicy,omitempty"`
- LlUpdateStrategy *struct {
- RollingUpdate *struct {
- MaxUnavailable *string `tfsdk:"max_unavailable" json:"maxUnavailable,omitempty"`
- Partition *int64 `tfsdk:"partition" json:"partition,omitempty"`
- } `tfsdk:"rolling_update" json:"rollingUpdate,omitempty"`
- Type *string `tfsdk:"type" json:"type,omitempty"`
- } `tfsdk:"ll_update_strategy" json:"llUpdateStrategy,omitempty"`
- UpdateStrategy *string `tfsdk:"update_strategy" json:"updateStrategy,omitempty"`
- } `tfsdk:"replication_spec" json:"replicationSpec,omitempty"`
- RsmSpec *struct {
- MemberUpdateStrategy *string `tfsdk:"member_update_strategy" json:"memberUpdateStrategy,omitempty"`
- MembershipReconfiguration *struct {
- LogSyncAction *struct {
- Args *[]string `tfsdk:"args" json:"args,omitempty"`
- Command *[]string `tfsdk:"command" json:"command,omitempty"`
- Image *string `tfsdk:"image" json:"image,omitempty"`
- } `tfsdk:"log_sync_action" json:"logSyncAction,omitempty"`
- MemberJoinAction *struct {
- Args *[]string `tfsdk:"args" json:"args,omitempty"`
- Command *[]string `tfsdk:"command" json:"command,omitempty"`
- Image *string `tfsdk:"image" json:"image,omitempty"`
- } `tfsdk:"member_join_action" json:"memberJoinAction,omitempty"`
- MemberLeaveAction *struct {
- Args *[]string `tfsdk:"args" json:"args,omitempty"`
- Command *[]string `tfsdk:"command" json:"command,omitempty"`
- Image *string `tfsdk:"image" json:"image,omitempty"`
- } `tfsdk:"member_leave_action" json:"memberLeaveAction,omitempty"`
- PromoteAction *struct {
- Args *[]string `tfsdk:"args" json:"args,omitempty"`
- Command *[]string `tfsdk:"command" json:"command,omitempty"`
- Image *string `tfsdk:"image" json:"image,omitempty"`
- } `tfsdk:"promote_action" json:"promoteAction,omitempty"`
- SwitchoverAction *struct {
- Args *[]string `tfsdk:"args" json:"args,omitempty"`
- Command *[]string `tfsdk:"command" json:"command,omitempty"`
- Image *string `tfsdk:"image" json:"image,omitempty"`
- } `tfsdk:"switchover_action" json:"switchoverAction,omitempty"`
- } `tfsdk:"membership_reconfiguration" json:"membershipReconfiguration,omitempty"`
- RoleProbe *struct {
- BuiltinHandlerName *string `tfsdk:"builtin_handler_name" json:"builtinHandlerName,omitempty"`
- CustomHandler *[]struct {
- Args *[]string `tfsdk:"args" json:"args,omitempty"`
- Command *[]string `tfsdk:"command" json:"command,omitempty"`
- Image *string `tfsdk:"image" json:"image,omitempty"`
- } `tfsdk:"custom_handler" json:"customHandler,omitempty"`
- FailureThreshold *int64 `tfsdk:"failure_threshold" json:"failureThreshold,omitempty"`
- InitialDelaySeconds *int64 `tfsdk:"initial_delay_seconds" json:"initialDelaySeconds,omitempty"`
- PeriodSeconds *int64 `tfsdk:"period_seconds" json:"periodSeconds,omitempty"`
- RoleUpdateMechanism *string `tfsdk:"role_update_mechanism" json:"roleUpdateMechanism,omitempty"`
- SuccessThreshold *int64 `tfsdk:"success_threshold" json:"successThreshold,omitempty"`
- TimeoutSeconds *int64 `tfsdk:"timeout_seconds" json:"timeoutSeconds,omitempty"`
- } `tfsdk:"role_probe" json:"roleProbe,omitempty"`
- Roles *[]struct {
- AccessMode *string `tfsdk:"access_mode" json:"accessMode,omitempty"`
- CanVote *bool `tfsdk:"can_vote" json:"canVote,omitempty"`
- IsLeader *bool `tfsdk:"is_leader" json:"isLeader,omitempty"`
- Name *string `tfsdk:"name" json:"name,omitempty"`
- } `tfsdk:"roles" json:"roles,omitempty"`
- } `tfsdk:"rsm_spec" json:"rsmSpec,omitempty"`
- ScriptSpecs *[]struct {
- DefaultMode *int64 `tfsdk:"default_mode" json:"defaultMode,omitempty"`
- Name *string `tfsdk:"name" json:"name,omitempty"`
- Namespace *string `tfsdk:"namespace" json:"namespace,omitempty"`
- TemplateRef *string `tfsdk:"template_ref" json:"templateRef,omitempty"`
- VolumeName *string `tfsdk:"volume_name" json:"volumeName,omitempty"`
- } `tfsdk:"script_specs" json:"scriptSpecs,omitempty"`
- Service *struct {
- Ports *[]struct {
- AppProtocol *string `tfsdk:"app_protocol" json:"appProtocol,omitempty"`
- Name *string `tfsdk:"name" json:"name,omitempty"`
- Port *int64 `tfsdk:"port" json:"port,omitempty"`
- Protocol *string `tfsdk:"protocol" json:"protocol,omitempty"`
- TargetPort *string `tfsdk:"target_port" json:"targetPort,omitempty"`
- } `tfsdk:"ports" json:"ports,omitempty"`
- } `tfsdk:"service" json:"service,omitempty"`
- ServiceRefDeclarations *[]struct {
- Name *string `tfsdk:"name" json:"name,omitempty"`
- Optional *bool `tfsdk:"optional" json:"optional,omitempty"`
- ServiceRefDeclarationSpecs *[]struct {
- ServiceKind *string `tfsdk:"service_kind" json:"serviceKind,omitempty"`
- ServiceVersion *string `tfsdk:"service_version" json:"serviceVersion,omitempty"`
- } `tfsdk:"service_ref_declaration_specs" json:"serviceRefDeclarationSpecs,omitempty"`
- } `tfsdk:"service_ref_declarations" json:"serviceRefDeclarations,omitempty"`
- StatefulSpec *struct {
- LlPodManagementPolicy *string `tfsdk:"ll_pod_management_policy" json:"llPodManagementPolicy,omitempty"`
- LlUpdateStrategy *struct {
- RollingUpdate *struct {
- MaxUnavailable *string `tfsdk:"max_unavailable" json:"maxUnavailable,omitempty"`
- Partition *int64 `tfsdk:"partition" json:"partition,omitempty"`
- } `tfsdk:"rolling_update" json:"rollingUpdate,omitempty"`
- Type *string `tfsdk:"type" json:"type,omitempty"`
- } `tfsdk:"ll_update_strategy" json:"llUpdateStrategy,omitempty"`
- UpdateStrategy *string `tfsdk:"update_strategy" json:"updateStrategy,omitempty"`
- } `tfsdk:"stateful_spec" json:"statefulSpec,omitempty"`
- StatelessSpec *struct {
- UpdateStrategy *struct {
- RollingUpdate *struct {
- MaxSurge *string `tfsdk:"max_surge" json:"maxSurge,omitempty"`
- MaxUnavailable *string `tfsdk:"max_unavailable" json:"maxUnavailable,omitempty"`
- } `tfsdk:"rolling_update" json:"rollingUpdate,omitempty"`
- Type *string `tfsdk:"type" json:"type,omitempty"`
- } `tfsdk:"update_strategy" json:"updateStrategy,omitempty"`
- } `tfsdk:"stateless_spec" json:"statelessSpec,omitempty"`
- SwitchoverSpec *struct {
- WithCandidate *struct {
- CmdExecutorConfig *struct {
- Args *[]string `tfsdk:"args" json:"args,omitempty"`
- Command *[]string `tfsdk:"command" json:"command,omitempty"`
- Env *map[string]string `tfsdk:"env" json:"env,omitempty"`
- Image *string `tfsdk:"image" json:"image,omitempty"`
- } `tfsdk:"cmd_executor_config" json:"cmdExecutorConfig,omitempty"`
- ScriptSpecSelectors *[]struct {
- Name *string `tfsdk:"name" json:"name,omitempty"`
- } `tfsdk:"script_spec_selectors" json:"scriptSpecSelectors,omitempty"`
- } `tfsdk:"with_candidate" json:"withCandidate,omitempty"`
- WithoutCandidate *struct {
- CmdExecutorConfig *struct {
- Args *[]string `tfsdk:"args" json:"args,omitempty"`
- Command *[]string `tfsdk:"command" json:"command,omitempty"`
- Env *map[string]string `tfsdk:"env" json:"env,omitempty"`
- Image *string `tfsdk:"image" json:"image,omitempty"`
- } `tfsdk:"cmd_executor_config" json:"cmdExecutorConfig,omitempty"`
- ScriptSpecSelectors *[]struct {
- Name *string `tfsdk:"name" json:"name,omitempty"`
- } `tfsdk:"script_spec_selectors" json:"scriptSpecSelectors,omitempty"`
- } `tfsdk:"without_candidate" json:"withoutCandidate,omitempty"`
- } `tfsdk:"switchover_spec" json:"switchoverSpec,omitempty"`
- SystemAccounts *struct {
- Accounts *[]struct {
- Name *string `tfsdk:"name" json:"name,omitempty"`
- ProvisionPolicy *struct {
- Scope *string `tfsdk:"scope" json:"scope,omitempty"`
- SecretRef *struct {
- Name *string `tfsdk:"name" json:"name,omitempty"`
- Namespace *string `tfsdk:"namespace" json:"namespace,omitempty"`
- } `tfsdk:"secret_ref" json:"secretRef,omitempty"`
- Statements *struct {
- Creation *string `tfsdk:"creation" json:"creation,omitempty"`
- Deletion *string `tfsdk:"deletion" json:"deletion,omitempty"`
- Update *string `tfsdk:"update" json:"update,omitempty"`
- } `tfsdk:"statements" json:"statements,omitempty"`
- Type *string `tfsdk:"type" json:"type,omitempty"`
- } `tfsdk:"provision_policy" json:"provisionPolicy,omitempty"`
- } `tfsdk:"accounts" json:"accounts,omitempty"`
- CmdExecutorConfig *struct {
- Args *[]string `tfsdk:"args" json:"args,omitempty"`
- Command *[]string `tfsdk:"command" json:"command,omitempty"`
- Env *map[string]string `tfsdk:"env" json:"env,omitempty"`
- Image *string `tfsdk:"image" json:"image,omitempty"`
- } `tfsdk:"cmd_executor_config" json:"cmdExecutorConfig,omitempty"`
- PasswordConfig *struct {
- Length *int64 `tfsdk:"length" json:"length,omitempty"`
- LetterCase *string `tfsdk:"letter_case" json:"letterCase,omitempty"`
- NumDigits *int64 `tfsdk:"num_digits" json:"numDigits,omitempty"`
- NumSymbols *int64 `tfsdk:"num_symbols" json:"numSymbols,omitempty"`
- Seed *string `tfsdk:"seed" json:"seed,omitempty"`
- } `tfsdk:"password_config" json:"passwordConfig,omitempty"`
- } `tfsdk:"system_accounts" json:"systemAccounts,omitempty"`
- VolumeProtectionSpec *struct {
- HighWatermark *int64 `tfsdk:"high_watermark" json:"highWatermark,omitempty"`
- Volumes *[]struct {
- HighWatermark *int64 `tfsdk:"high_watermark" json:"highWatermark,omitempty"`
- Name *string `tfsdk:"name" json:"name,omitempty"`
- } `tfsdk:"volumes" json:"volumes,omitempty"`
- } `tfsdk:"volume_protection_spec" json:"volumeProtectionSpec,omitempty"`
- VolumeTypes *[]struct {
- Name *string `tfsdk:"name" json:"name,omitempty"`
- Type *string `tfsdk:"type" json:"type,omitempty"`
- } `tfsdk:"volume_types" json:"volumeTypes,omitempty"`
- WorkloadType *string `tfsdk:"workload_type" json:"workloadType,omitempty"`
- } `tfsdk:"component_defs" json:"componentDefs,omitempty"`
- ConnectionCredential *map[string]string `tfsdk:"connection_credential" json:"connectionCredential,omitempty"`
- Topologies *[]struct {
+ Topologies *[]struct {
Components *[]struct {
CompDef *string `tfsdk:"comp_def" json:"compDef,omitempty"`
Name *string `tfsdk:"name" json:"name,omitempty"`
@@ -1647,10373 +124,6 @@ func (r *AppsKubeblocksIoClusterDefinitionV1Alpha1Manifest) Schema(_ context.Con
Description: "ClusterDefinitionSpec defines the desired state of ClusterDefinition.",
MarkdownDescription: "ClusterDefinitionSpec defines the desired state of ClusterDefinition.",
Attributes: map[string]schema.Attribute{
- "component_defs": schema.ListNestedAttribute{
- Description: "Provides the definitions for the cluster components.Deprecated since v0.9.Components should now be individually defined using ComponentDefinition andcollectively referenced via 'topology.components'.This field is maintained for backward compatibility and its use is discouraged.Existing usage should be updated to the current preferred approach to avoid compatibility issues in future releases.",
- MarkdownDescription: "Provides the definitions for the cluster components.Deprecated since v0.9.Components should now be individually defined using ComponentDefinition andcollectively referenced via 'topology.components'.This field is maintained for backward compatibility and its use is discouraged.Existing usage should be updated to the current preferred approach to avoid compatibility issues in future releases.",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "character_type": schema.StringAttribute{
- Description: "Defines well-known database component name, such as mongos(mongodb), proxy(redis), mariadb(mysql).",
- MarkdownDescription: "Defines well-known database component name, such as mongos(mongodb), proxy(redis), mariadb(mysql).",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "component_def_ref": schema.ListNestedAttribute{
- Description: "Used to inject values from other components into the current component. Values will be saved and updated in aconfigmap and mounted to the current component.",
- MarkdownDescription: "Used to inject values from other components into the current component. Values will be saved and updated in aconfigmap and mounted to the current component.",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "component_def_name": schema.StringAttribute{
- Description: "The name of the componentDef to be selected.",
- MarkdownDescription: "The name of the componentDef to be selected.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "component_ref_env": schema.ListNestedAttribute{
- Description: "The values that are to be injected as environment variables into each component.",
- MarkdownDescription: "The values that are to be injected as environment variables into each component.",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "name": schema.StringAttribute{
- Description: "The name of the env, it must be a C identifier.",
- MarkdownDescription: "The name of the env, it must be a C identifier.",
- Required: true,
- Optional: false,
- Computed: false,
- Validators: []validator.String{
- stringvalidator.RegexMatches(regexp.MustCompile(`^[A-Za-z_][A-Za-z0-9_]*$`), ""),
- },
- },
-
- "value": schema.StringAttribute{
- Description: "The value of the env.",
- MarkdownDescription: "The value of the env.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "value_from": schema.SingleNestedAttribute{
- Description: "The source from which the value of the env.",
- MarkdownDescription: "The source from which the value of the env.",
- Attributes: map[string]schema.Attribute{
- "field_path": schema.StringAttribute{
- Description: "The jsonpath of the source to select when the Type is 'FieldRef'.Two objects are registered in the jsonpath: 'componentDef' and 'components':- 'componentDef' is the component definition object specified in 'componentRef.componentDefName'.- 'components' are the component list objects referring to the component definition object.",
- MarkdownDescription: "The jsonpath of the source to select when the Type is 'FieldRef'.Two objects are registered in the jsonpath: 'componentDef' and 'components':- 'componentDef' is the component definition object specified in 'componentRef.componentDefName'.- 'components' are the component list objects referring to the component definition object.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "format": schema.StringAttribute{
- Description: "Defines the format of each headless service address.Three builtin variables can be used as placeholders: '$POD_ORDINAL', '$POD_FQDN', '$POD_NAME'- '$POD_ORDINAL' represents the ordinal of the pod.- '$POD_FQDN' represents the fully qualified domain name of the pod.- '$POD_NAME' represents the name of the pod.",
- MarkdownDescription: "Defines the format of each headless service address.Three builtin variables can be used as placeholders: '$POD_ORDINAL', '$POD_FQDN', '$POD_NAME'- '$POD_ORDINAL' represents the ordinal of the pod.- '$POD_FQDN' represents the fully qualified domain name of the pod.- '$POD_NAME' represents the name of the pod.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "join_with": schema.StringAttribute{
- Description: "The string used to join the values of headless service addresses.",
- MarkdownDescription: "The string used to join the values of headless service addresses.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "type": schema.StringAttribute{
- Description: "Specifies the source to select. It can be one of three types: 'FieldRef', 'ServiceRef', 'HeadlessServiceRef'.",
- MarkdownDescription: "Specifies the source to select. It can be one of three types: 'FieldRef', 'ServiceRef', 'HeadlessServiceRef'.",
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "failure_policy": schema.StringAttribute{
- Description: "Defines the policy to be followed in case of a failure in finding the component.",
- MarkdownDescription: "Defines the policy to be followed in case of a failure in finding the component.",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "config_specs": schema.ListNestedAttribute{
- Description: "Defines the template of configurations.",
- MarkdownDescription: "Defines the template of configurations.",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "as_env_from": schema.ListAttribute{
- Description: "Specifies the containers to inject the ConfigMap parameters as environment variables.This is useful when application images accept parameters through environment variables andgenerate the final configuration file in the startup script based on these variables.This field allows users to specify a list of container names, and KubeBlocks will inject the environmentvariables converted from the ConfigMap into these designated containers. This provides a flexible way topass the configuration items from the ConfigMap to the container without modifying the image.Deprecated: 'asEnvFrom' has been deprecated since 0.9.0 and will be removed in 0.10.0.Use 'injectEnvTo' instead.",
- MarkdownDescription: "Specifies the containers to inject the ConfigMap parameters as environment variables.This is useful when application images accept parameters through environment variables andgenerate the final configuration file in the startup script based on these variables.This field allows users to specify a list of container names, and KubeBlocks will inject the environmentvariables converted from the ConfigMap into these designated containers. This provides a flexible way topass the configuration items from the ConfigMap to the container without modifying the image.Deprecated: 'asEnvFrom' has been deprecated since 0.9.0 and will be removed in 0.10.0.Use 'injectEnvTo' instead.",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "constraint_ref": schema.StringAttribute{
- Description: "Specifies the name of the referenced configuration constraints object.",
- MarkdownDescription: "Specifies the name of the referenced configuration constraints object.",
- Required: false,
- Optional: true,
- Computed: false,
- Validators: []validator.String{
- stringvalidator.LengthAtMost(63),
- stringvalidator.RegexMatches(regexp.MustCompile(`^[a-z0-9]([a-z0-9\.\-]*[a-z0-9])?$`), ""),
- },
- },
-
- "default_mode": schema.Int64Attribute{
- Description: "The operator attempts to set default file permissions for scripts (0555) and configurations (0444).However, certain database engines may require different file permissions.You can specify the desired file permissions here.Must be specified as an octal value between 0000 and 0777 (inclusive),or as a decimal value between 0 and 511 (inclusive).YAML supports both octal and decimal values for file permissions.Please note that this setting only affects the permissions of the files themselves.Directories within the specified path are not impacted by this setting.It's important to be aware that this setting might conflict with other optionsthat influence the file mode, such as fsGroup.In such cases, the resulting file mode may have additional bits set.Refers to documents of k8s.ConfigMapVolumeSource.defaultMode for more information.",
- MarkdownDescription: "The operator attempts to set default file permissions for scripts (0555) and configurations (0444).However, certain database engines may require different file permissions.You can specify the desired file permissions here.Must be specified as an octal value between 0000 and 0777 (inclusive),or as a decimal value between 0 and 511 (inclusive).YAML supports both octal and decimal values for file permissions.Please note that this setting only affects the permissions of the files themselves.Directories within the specified path are not impacted by this setting.It's important to be aware that this setting might conflict with other optionsthat influence the file mode, such as fsGroup.In such cases, the resulting file mode may have additional bits set.Refers to documents of k8s.ConfigMapVolumeSource.defaultMode for more information.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "inject_env_to": schema.ListAttribute{
- Description: "Specifies the containers to inject the ConfigMap parameters as environment variables.This is useful when application images accept parameters through environment variables andgenerate the final configuration file in the startup script based on these variables.This field allows users to specify a list of container names, and KubeBlocks will inject the environmentvariables converted from the ConfigMap into these designated containers. This provides a flexible way topass the configuration items from the ConfigMap to the container without modifying the image.",
- MarkdownDescription: "Specifies the containers to inject the ConfigMap parameters as environment variables.This is useful when application images accept parameters through environment variables andgenerate the final configuration file in the startup script based on these variables.This field allows users to specify a list of container names, and KubeBlocks will inject the environmentvariables converted from the ConfigMap into these designated containers. This provides a flexible way topass the configuration items from the ConfigMap to the container without modifying the image.",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "keys": schema.ListAttribute{
- Description: "Specifies the configuration files within the ConfigMap that support dynamic updates.A configuration template (provided in the form of a ConfigMap) may contain templates for multipleconfiguration files.Each configuration file corresponds to a key in the ConfigMap.Some of these configuration files may support dynamic modification and reloading without requiringa pod restart.If empty or omitted, all configuration files in the ConfigMap are assumed to support dynamic updates,and ConfigConstraint applies to all keys.",
- MarkdownDescription: "Specifies the configuration files within the ConfigMap that support dynamic updates.A configuration template (provided in the form of a ConfigMap) may contain templates for multipleconfiguration files.Each configuration file corresponds to a key in the ConfigMap.Some of these configuration files may support dynamic modification and reloading without requiringa pod restart.If empty or omitted, all configuration files in the ConfigMap are assumed to support dynamic updates,and ConfigConstraint applies to all keys.",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "legacy_rendered_config_spec": schema.SingleNestedAttribute{
- Description: "Specifies the secondary rendered config spec for pod-specific customization.The template is rendered inside the pod (by the 'config-manager' sidecar container) and merged with the maintemplate's render result to generate the final configuration file.This field is intended to handle scenarios where different pods within the same Component havevarying configurations. It allows for pod-specific customization of the configuration.Note: This field will be deprecated in future versions, and the functionality will be moved to'cluster.spec.componentSpecs[*].instances[*]'.",
- MarkdownDescription: "Specifies the secondary rendered config spec for pod-specific customization.The template is rendered inside the pod (by the 'config-manager' sidecar container) and merged with the maintemplate's render result to generate the final configuration file.This field is intended to handle scenarios where different pods within the same Component havevarying configurations. It allows for pod-specific customization of the configuration.Note: This field will be deprecated in future versions, and the functionality will be moved to'cluster.spec.componentSpecs[*].instances[*]'.",
- Attributes: map[string]schema.Attribute{
- "namespace": schema.StringAttribute{
- Description: "Specifies the namespace of the referenced configuration template ConfigMap object.An empty namespace is equivalent to the 'default' namespace.",
- MarkdownDescription: "Specifies the namespace of the referenced configuration template ConfigMap object.An empty namespace is equivalent to the 'default' namespace.",
- Required: false,
- Optional: true,
- Computed: false,
- Validators: []validator.String{
- stringvalidator.RegexMatches(regexp.MustCompile(`^[a-z0-9]([a-z0-9\-]*[a-z0-9])?$`), ""),
- },
- },
-
- "policy": schema.StringAttribute{
- Description: "Defines the strategy for merging externally imported templates into component templates.",
- MarkdownDescription: "Defines the strategy for merging externally imported templates into component templates.",
- Required: false,
- Optional: true,
- Computed: false,
- Validators: []validator.String{
- stringvalidator.OneOf("patch", "replace", "none"),
- },
- },
-
- "template_ref": schema.StringAttribute{
- Description: "Specifies the name of the referenced configuration template ConfigMap object.",
- MarkdownDescription: "Specifies the name of the referenced configuration template ConfigMap object.",
- Required: true,
- Optional: false,
- Computed: false,
- Validators: []validator.String{
- stringvalidator.RegexMatches(regexp.MustCompile(`^[a-z0-9]([a-z0-9\.\-]*[a-z0-9])?$`), ""),
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "name": schema.StringAttribute{
- Description: "Specifies the name of the configuration template.",
- MarkdownDescription: "Specifies the name of the configuration template.",
- Required: true,
- Optional: false,
- Computed: false,
- Validators: []validator.String{
- stringvalidator.LengthAtMost(63),
- stringvalidator.RegexMatches(regexp.MustCompile(`^[a-z0-9]([a-z0-9\.\-]*[a-z0-9])?$`), ""),
- },
- },
-
- "namespace": schema.StringAttribute{
- Description: "Specifies the namespace of the referenced configuration template ConfigMap object.An empty namespace is equivalent to the 'default' namespace.",
- MarkdownDescription: "Specifies the namespace of the referenced configuration template ConfigMap object.An empty namespace is equivalent to the 'default' namespace.",
- Required: false,
- Optional: true,
- Computed: false,
- Validators: []validator.String{
- stringvalidator.LengthAtMost(63),
- stringvalidator.RegexMatches(regexp.MustCompile(`^[a-z0-9]([a-z0-9\-]*[a-z0-9])?$`), ""),
- },
- },
-
- "re_render_resource_types": schema.ListAttribute{
- Description: "Specifies whether the configuration needs to be re-rendered after v-scale or h-scale operations to reflect changes.In some scenarios, the configuration may need to be updated to reflect the changes in resource allocationor cluster topology. Examples:- Redis: adjust maxmemory after v-scale operation.- MySQL: increase max connections after v-scale operation.- Zookeeper: update zoo.cfg with new node addresses after h-scale operation.",
- MarkdownDescription: "Specifies whether the configuration needs to be re-rendered after v-scale or h-scale operations to reflect changes.In some scenarios, the configuration may need to be updated to reflect the changes in resource allocationor cluster topology. Examples:- Redis: adjust maxmemory after v-scale operation.- MySQL: increase max connections after v-scale operation.- Zookeeper: update zoo.cfg with new node addresses after h-scale operation.",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "template_ref": schema.StringAttribute{
- Description: "Specifies the name of the referenced configuration template ConfigMap object.",
- MarkdownDescription: "Specifies the name of the referenced configuration template ConfigMap object.",
- Required: false,
- Optional: true,
- Computed: false,
- Validators: []validator.String{
- stringvalidator.LengthAtMost(63),
- stringvalidator.RegexMatches(regexp.MustCompile(`^[a-z0-9]([a-z0-9\.\-]*[a-z0-9])?$`), ""),
- },
- },
-
- "volume_name": schema.StringAttribute{
- Description: "Refers to the volume name of PodTemplate. The configuration file produced through the configurationtemplate will be mounted to the corresponding volume. Must be a DNS_LABEL name.The volume name must be defined in podSpec.containers[*].volumeMounts.",
- MarkdownDescription: "Refers to the volume name of PodTemplate. The configuration file produced through the configurationtemplate will be mounted to the corresponding volume. Must be a DNS_LABEL name.The volume name must be defined in podSpec.containers[*].volumeMounts.",
- Required: true,
- Optional: false,
- Computed: false,
- Validators: []validator.String{
- stringvalidator.LengthAtMost(63),
- stringvalidator.RegexMatches(regexp.MustCompile(`^[a-z]([a-z0-9\-]*[a-z0-9])?$`), ""),
- },
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "consensus_spec": schema.SingleNestedAttribute{
- Description: "Defines spec for 'Consensus' workloads. It's required if the workload type is 'Consensus'.",
- MarkdownDescription: "Defines spec for 'Consensus' workloads. It's required if the workload type is 'Consensus'.",
- Attributes: map[string]schema.Attribute{
- "followers": schema.ListNestedAttribute{
- Description: "Members of the consensus set that have voting rights but are not the leader.",
- MarkdownDescription: "Members of the consensus set that have voting rights but are not the leader.",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "access_mode": schema.StringAttribute{
- Description: "Specifies the services that this member is capable of providing.",
- MarkdownDescription: "Specifies the services that this member is capable of providing.",
- Required: true,
- Optional: false,
- Computed: false,
- Validators: []validator.String{
- stringvalidator.OneOf("None", "Readonly", "ReadWrite"),
- },
- },
-
- "name": schema.StringAttribute{
- Description: "Specifies the name of the consensus member.",
- MarkdownDescription: "Specifies the name of the consensus member.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "replicas": schema.Int64Attribute{
- Description: "Indicates the number of Pods that perform this role.The default is 1 for 'Leader', 0 for 'Learner', others for 'Followers'.",
- MarkdownDescription: "Indicates the number of Pods that perform this role.The default is 1 for 'Leader', 0 for 'Learner', others for 'Followers'.",
- Required: false,
- Optional: true,
- Computed: false,
- Validators: []validator.Int64{
- int64validator.AtLeast(0),
- },
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "leader": schema.SingleNestedAttribute{
- Description: "Represents a single leader in the consensus set.",
- MarkdownDescription: "Represents a single leader in the consensus set.",
- Attributes: map[string]schema.Attribute{
- "access_mode": schema.StringAttribute{
- Description: "Specifies the services that this member is capable of providing.",
- MarkdownDescription: "Specifies the services that this member is capable of providing.",
- Required: true,
- Optional: false,
- Computed: false,
- Validators: []validator.String{
- stringvalidator.OneOf("None", "Readonly", "ReadWrite"),
- },
- },
-
- "name": schema.StringAttribute{
- Description: "Specifies the name of the consensus member.",
- MarkdownDescription: "Specifies the name of the consensus member.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "replicas": schema.Int64Attribute{
- Description: "Indicates the number of Pods that perform this role.The default is 1 for 'Leader', 0 for 'Learner', others for 'Followers'.",
- MarkdownDescription: "Indicates the number of Pods that perform this role.The default is 1 for 'Leader', 0 for 'Learner', others for 'Followers'.",
- Required: false,
- Optional: true,
- Computed: false,
- Validators: []validator.Int64{
- int64validator.AtLeast(0),
- },
- },
- },
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "learner": schema.SingleNestedAttribute{
- Description: "Represents a member of the consensus set that does not have voting rights.",
- MarkdownDescription: "Represents a member of the consensus set that does not have voting rights.",
- Attributes: map[string]schema.Attribute{
- "access_mode": schema.StringAttribute{
- Description: "Specifies the services that this member is capable of providing.",
- MarkdownDescription: "Specifies the services that this member is capable of providing.",
- Required: true,
- Optional: false,
- Computed: false,
- Validators: []validator.String{
- stringvalidator.OneOf("None", "Readonly", "ReadWrite"),
- },
- },
-
- "name": schema.StringAttribute{
- Description: "Specifies the name of the consensus member.",
- MarkdownDescription: "Specifies the name of the consensus member.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "replicas": schema.Int64Attribute{
- Description: "Indicates the number of Pods that perform this role.The default is 1 for 'Leader', 0 for 'Learner', others for 'Followers'.",
- MarkdownDescription: "Indicates the number of Pods that perform this role.The default is 1 for 'Leader', 0 for 'Learner', others for 'Followers'.",
- Required: false,
- Optional: true,
- Computed: false,
- Validators: []validator.Int64{
- int64validator.AtLeast(0),
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "ll_pod_management_policy": schema.StringAttribute{
- Description: "Controls the creation of pods during initial scale up, replacement of pods on nodes, and scaling down.- 'OrderedReady': Creates pods in increasing order (pod-0, then pod-1, etc). The controller waits until each podis ready before continuing. Pods are removed in reverse order when scaling down.- 'Parallel': Creates pods in parallel to match the desired scale without waiting. All pods are deleted at oncewhen scaling down.",
- MarkdownDescription: "Controls the creation of pods during initial scale up, replacement of pods on nodes, and scaling down.- 'OrderedReady': Creates pods in increasing order (pod-0, then pod-1, etc). The controller waits until each podis ready before continuing. Pods are removed in reverse order when scaling down.- 'Parallel': Creates pods in parallel to match the desired scale without waiting. All pods are deleted at oncewhen scaling down.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "ll_update_strategy": schema.SingleNestedAttribute{
- Description: "Specifies the low-level StatefulSetUpdateStrategy to be used when updating Pods in the StatefulSet upon arevision to the Template.'UpdateStrategy' will be ignored if this is provided.",
- MarkdownDescription: "Specifies the low-level StatefulSetUpdateStrategy to be used when updating Pods in the StatefulSet upon arevision to the Template.'UpdateStrategy' will be ignored if this is provided.",
- Attributes: map[string]schema.Attribute{
- "rolling_update": schema.SingleNestedAttribute{
- Description: "RollingUpdate is used to communicate parameters when Type is RollingUpdateStatefulSetStrategyType.",
- MarkdownDescription: "RollingUpdate is used to communicate parameters when Type is RollingUpdateStatefulSetStrategyType.",
- Attributes: map[string]schema.Attribute{
- "max_unavailable": schema.StringAttribute{
- Description: "The maximum number of pods that can be unavailable during the update.Value can be an absolute number (ex: 5) or a percentage of desired pods (ex: 10%).Absolute number is calculated from percentage by rounding up. This can not be 0.Defaults to 1. This field is alpha-level and is only honored by servers that enable theMaxUnavailableStatefulSet feature. The field applies to all pods in the range 0 toReplicas-1. That means if there is any unavailable pod in the range 0 to Replicas-1, itwill be counted towards MaxUnavailable.",
- MarkdownDescription: "The maximum number of pods that can be unavailable during the update.Value can be an absolute number (ex: 5) or a percentage of desired pods (ex: 10%).Absolute number is calculated from percentage by rounding up. This can not be 0.Defaults to 1. This field is alpha-level and is only honored by servers that enable theMaxUnavailableStatefulSet feature. The field applies to all pods in the range 0 toReplicas-1. That means if there is any unavailable pod in the range 0 to Replicas-1, itwill be counted towards MaxUnavailable.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "partition": schema.Int64Attribute{
- Description: "Partition indicates the ordinal at which the StatefulSet should be partitionedfor updates. During a rolling update, all pods from ordinal Replicas-1 toPartition are updated. All pods from ordinal Partition-1 to 0 remain untouched.This is helpful in being able to do a canary based deployment. The default value is 0.",
- MarkdownDescription: "Partition indicates the ordinal at which the StatefulSet should be partitionedfor updates. During a rolling update, all pods from ordinal Replicas-1 toPartition are updated. All pods from ordinal Partition-1 to 0 remain untouched.This is helpful in being able to do a canary based deployment. The default value is 0.",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "type": schema.StringAttribute{
- Description: "Type indicates the type of the StatefulSetUpdateStrategy.Default is RollingUpdate.",
- MarkdownDescription: "Type indicates the type of the StatefulSetUpdateStrategy.Default is RollingUpdate.",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "update_strategy": schema.StringAttribute{
- Description: "Specifies the strategy for updating Pods.For workloadType='Consensus', the update strategy can be one of the following:- 'Serial': Updates Members sequentially to minimize component downtime.- 'BestEffortParallel': Updates Members in parallel to minimize component write downtime. Majority remains onlineat all times.- 'Parallel': Forces parallel updates.",
- MarkdownDescription: "Specifies the strategy for updating Pods.For workloadType='Consensus', the update strategy can be one of the following:- 'Serial': Updates Members sequentially to minimize component downtime.- 'BestEffortParallel': Updates Members in parallel to minimize component write downtime. Majority remains onlineat all times.- 'Parallel': Forces parallel updates.",
- Required: false,
- Optional: true,
- Computed: false,
- Validators: []validator.String{
- stringvalidator.OneOf("Serial", "BestEffortParallel", "Parallel"),
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "horizontal_scale_policy": schema.SingleNestedAttribute{
- Description: "Defines the behavior of horizontal scale.",
- MarkdownDescription: "Defines the behavior of horizontal scale.",
- Attributes: map[string]schema.Attribute{
- "backup_policy_template_name": schema.StringAttribute{
- Description: "Refers to the backup policy template.",
- MarkdownDescription: "Refers to the backup policy template.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "type": schema.StringAttribute{
- Description: "Determines the data synchronization method when a component scales out.The policy can be one of the following: {None, CloneVolume}. The default policy is 'None'.- 'None': This is the default policy. It creates an empty volume without data cloning.- 'CloneVolume': This policy clones data to newly scaled pods. It first tries to use a volume snapshot. If volume snapshot is not enabled, it will attempt to use a backup tool. If neither method works, it will report an error.- 'Snapshot': This policy is deprecated and is an alias for CloneVolume.",
- MarkdownDescription: "Determines the data synchronization method when a component scales out.The policy can be one of the following: {None, CloneVolume}. The default policy is 'None'.- 'None': This is the default policy. It creates an empty volume without data cloning.- 'CloneVolume': This policy clones data to newly scaled pods. It first tries to use a volume snapshot. If volume snapshot is not enabled, it will attempt to use a backup tool. If neither method works, it will report an error.- 'Snapshot': This policy is deprecated and is an alias for CloneVolume.",
- Required: false,
- Optional: true,
- Computed: false,
- Validators: []validator.String{
- stringvalidator.OneOf("None", "CloneVolume", "Snapshot"),
- },
- },
-
- "volume_mounts_name": schema.StringAttribute{
- Description: "Specifies the volumeMount of the container to backup.This only works if Type is not None. If not specified, the first volumeMount will be selected.",
- MarkdownDescription: "Specifies the volumeMount of the container to backup.This only works if Type is not None. If not specified, the first volumeMount will be selected.",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "log_configs": schema.ListNestedAttribute{
- Description: "Specify the logging files which can be observed and configured by cluster users.",
- MarkdownDescription: "Specify the logging files which can be observed and configured by cluster users.",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "file_path_pattern": schema.StringAttribute{
- Description: "Specifies the paths or patterns identifying where the log files are stored.This field allows the system to locate and manage log files effectively.Examples:- /home/postgres/pgdata/pgroot/data/log/postgresql-*- /data/mysql/log/mysqld-error.log",
- MarkdownDescription: "Specifies the paths or patterns identifying where the log files are stored.This field allows the system to locate and manage log files effectively.Examples:- /home/postgres/pgdata/pgroot/data/log/postgresql-*- /data/mysql/log/mysqld-error.log",
- Required: true,
- Optional: false,
- Computed: false,
- Validators: []validator.String{
- stringvalidator.LengthAtMost(4096),
- },
- },
-
- "name": schema.StringAttribute{
- Description: "Specifies a descriptive label for the log type, such as 'slow' for a MySQL slow log file.It provides a clear identification of the log's purpose and content.",
- MarkdownDescription: "Specifies a descriptive label for the log type, such as 'slow' for a MySQL slow log file.It provides a clear identification of the log's purpose and content.",
- Required: true,
- Optional: false,
- Computed: false,
- Validators: []validator.String{
- stringvalidator.LengthAtMost(128),
- },
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "name": schema.StringAttribute{
- Description: "This name could be used as default name of 'cluster.spec.componentSpecs.name', and needs to conform with samevalidation rules as 'cluster.spec.componentSpecs.name', currently complying with IANA Service Naming rule.This name will apply to cluster objects as the value of label 'apps.kubeblocks.io/component-name'.",
- MarkdownDescription: "This name could be used as default name of 'cluster.spec.componentSpecs.name', and needs to conform with samevalidation rules as 'cluster.spec.componentSpecs.name', currently complying with IANA Service Naming rule.This name will apply to cluster objects as the value of label 'apps.kubeblocks.io/component-name'.",
- Required: true,
- Optional: false,
- Computed: false,
- Validators: []validator.String{
- stringvalidator.LengthAtMost(22),
- stringvalidator.RegexMatches(regexp.MustCompile(`^[a-z]([a-z0-9\-]*[a-z0-9])?$`), ""),
- },
- },
-
- "pod_spec": schema.SingleNestedAttribute{
- Description: "Defines the pod spec template of component.",
- MarkdownDescription: "Defines the pod spec template of component.",
- Attributes: map[string]schema.Attribute{
- "active_deadline_seconds": schema.Int64Attribute{
- Description: "Optional duration in seconds the pod may be active on the node relative toStartTime before the system will actively try to mark it failed and kill associated containers.Value must be a positive integer.",
- MarkdownDescription: "Optional duration in seconds the pod may be active on the node relative toStartTime before the system will actively try to mark it failed and kill associated containers.Value must be a positive integer.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "affinity": schema.SingleNestedAttribute{
- Description: "If specified, the pod's scheduling constraints",
- MarkdownDescription: "If specified, the pod's scheduling constraints",
- Attributes: map[string]schema.Attribute{
- "node_affinity": schema.SingleNestedAttribute{
- Description: "Describes node affinity scheduling rules for the pod.",
- MarkdownDescription: "Describes node affinity scheduling rules for the pod.",
- Attributes: map[string]schema.Attribute{
- "preferred_during_scheduling_ignored_during_execution": schema.ListNestedAttribute{
- Description: "The scheduler will prefer to schedule pods to nodes that satisfythe affinity expressions specified by this field, but it may choosea node that violates one or more of the expressions. The node that ismost preferred is the one with the greatest sum of weights, i.e.for each node that meets all of the scheduling requirements (resourcerequest, requiredDuringScheduling affinity expressions, etc.),compute a sum by iterating through the elements of this field and adding'weight' to the sum if the node matches the corresponding matchExpressions; thenode(s) with the highest sum are the most preferred.",
- MarkdownDescription: "The scheduler will prefer to schedule pods to nodes that satisfythe affinity expressions specified by this field, but it may choosea node that violates one or more of the expressions. The node that ismost preferred is the one with the greatest sum of weights, i.e.for each node that meets all of the scheduling requirements (resourcerequest, requiredDuringScheduling affinity expressions, etc.),compute a sum by iterating through the elements of this field and adding'weight' to the sum if the node matches the corresponding matchExpressions; thenode(s) with the highest sum are the most preferred.",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "preference": schema.SingleNestedAttribute{
- Description: "A node selector term, associated with the corresponding weight.",
- MarkdownDescription: "A node selector term, associated with the corresponding weight.",
- Attributes: map[string]schema.Attribute{
- "match_expressions": schema.ListNestedAttribute{
- Description: "A list of node selector requirements by node's labels.",
- MarkdownDescription: "A list of node selector requirements by node's labels.",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "key": schema.StringAttribute{
- Description: "The label key that the selector applies to.",
- MarkdownDescription: "The label key that the selector applies to.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "operator": schema.StringAttribute{
- Description: "Represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt.",
- MarkdownDescription: "Represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "values": schema.ListAttribute{
- Description: "An array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. If the operator is Gt or Lt, the valuesarray must have a single element, which will be interpreted as an integer.This array is replaced during a strategic merge patch.",
- MarkdownDescription: "An array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. If the operator is Gt or Lt, the valuesarray must have a single element, which will be interpreted as an integer.This array is replaced during a strategic merge patch.",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "match_fields": schema.ListNestedAttribute{
- Description: "A list of node selector requirements by node's fields.",
- MarkdownDescription: "A list of node selector requirements by node's fields.",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "key": schema.StringAttribute{
- Description: "The label key that the selector applies to.",
- MarkdownDescription: "The label key that the selector applies to.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "operator": schema.StringAttribute{
- Description: "Represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt.",
- MarkdownDescription: "Represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "values": schema.ListAttribute{
- Description: "An array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. If the operator is Gt or Lt, the valuesarray must have a single element, which will be interpreted as an integer.This array is replaced during a strategic merge patch.",
- MarkdownDescription: "An array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. If the operator is Gt or Lt, the valuesarray must have a single element, which will be interpreted as an integer.This array is replaced during a strategic merge patch.",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "weight": schema.Int64Attribute{
- Description: "Weight associated with matching the corresponding nodeSelectorTerm, in the range 1-100.",
- MarkdownDescription: "Weight associated with matching the corresponding nodeSelectorTerm, in the range 1-100.",
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "required_during_scheduling_ignored_during_execution": schema.SingleNestedAttribute{
- Description: "If the affinity requirements specified by this field are not met atscheduling time, the pod will not be scheduled onto the node.If the affinity requirements specified by this field cease to be metat some point during pod execution (e.g. due to an update), the systemmay or may not try to eventually evict the pod from its node.",
- MarkdownDescription: "If the affinity requirements specified by this field are not met atscheduling time, the pod will not be scheduled onto the node.If the affinity requirements specified by this field cease to be metat some point during pod execution (e.g. due to an update), the systemmay or may not try to eventually evict the pod from its node.",
- Attributes: map[string]schema.Attribute{
- "node_selector_terms": schema.ListNestedAttribute{
- Description: "Required. A list of node selector terms. The terms are ORed.",
- MarkdownDescription: "Required. A list of node selector terms. The terms are ORed.",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "match_expressions": schema.ListNestedAttribute{
- Description: "A list of node selector requirements by node's labels.",
- MarkdownDescription: "A list of node selector requirements by node's labels.",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "key": schema.StringAttribute{
- Description: "The label key that the selector applies to.",
- MarkdownDescription: "The label key that the selector applies to.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "operator": schema.StringAttribute{
- Description: "Represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt.",
- MarkdownDescription: "Represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "values": schema.ListAttribute{
- Description: "An array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. If the operator is Gt or Lt, the valuesarray must have a single element, which will be interpreted as an integer.This array is replaced during a strategic merge patch.",
- MarkdownDescription: "An array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. If the operator is Gt or Lt, the valuesarray must have a single element, which will be interpreted as an integer.This array is replaced during a strategic merge patch.",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "match_fields": schema.ListNestedAttribute{
- Description: "A list of node selector requirements by node's fields.",
- MarkdownDescription: "A list of node selector requirements by node's fields.",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "key": schema.StringAttribute{
- Description: "The label key that the selector applies to.",
- MarkdownDescription: "The label key that the selector applies to.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "operator": schema.StringAttribute{
- Description: "Represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt.",
- MarkdownDescription: "Represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "values": schema.ListAttribute{
- Description: "An array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. If the operator is Gt or Lt, the valuesarray must have a single element, which will be interpreted as an integer.This array is replaced during a strategic merge patch.",
- MarkdownDescription: "An array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. If the operator is Gt or Lt, the valuesarray must have a single element, which will be interpreted as an integer.This array is replaced during a strategic merge patch.",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- },
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "pod_affinity": schema.SingleNestedAttribute{
- Description: "Describes pod affinity scheduling rules (e.g. co-locate this pod in the same node, zone, etc. as some other pod(s)).",
- MarkdownDescription: "Describes pod affinity scheduling rules (e.g. co-locate this pod in the same node, zone, etc. as some other pod(s)).",
- Attributes: map[string]schema.Attribute{
- "preferred_during_scheduling_ignored_during_execution": schema.ListNestedAttribute{
- Description: "The scheduler will prefer to schedule pods to nodes that satisfythe affinity expressions specified by this field, but it may choosea node that violates one or more of the expressions. The node that ismost preferred is the one with the greatest sum of weights, i.e.for each node that meets all of the scheduling requirements (resourcerequest, requiredDuringScheduling affinity expressions, etc.),compute a sum by iterating through the elements of this field and adding'weight' to the sum if the node has pods which matches the corresponding podAffinityTerm; thenode(s) with the highest sum are the most preferred.",
- MarkdownDescription: "The scheduler will prefer to schedule pods to nodes that satisfythe affinity expressions specified by this field, but it may choosea node that violates one or more of the expressions. The node that ismost preferred is the one with the greatest sum of weights, i.e.for each node that meets all of the scheduling requirements (resourcerequest, requiredDuringScheduling affinity expressions, etc.),compute a sum by iterating through the elements of this field and adding'weight' to the sum if the node has pods which matches the corresponding podAffinityTerm; thenode(s) with the highest sum are the most preferred.",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "pod_affinity_term": schema.SingleNestedAttribute{
- Description: "Required. A pod affinity term, associated with the corresponding weight.",
- MarkdownDescription: "Required. A pod affinity term, associated with the corresponding weight.",
- Attributes: map[string]schema.Attribute{
- "label_selector": schema.SingleNestedAttribute{
- Description: "A label query over a set of resources, in this case pods.",
- MarkdownDescription: "A label query over a set of resources, in this case pods.",
- Attributes: map[string]schema.Attribute{
- "match_expressions": schema.ListNestedAttribute{
- Description: "matchExpressions is a list of label selector requirements. The requirements are ANDed.",
- MarkdownDescription: "matchExpressions is a list of label selector requirements. The requirements are ANDed.",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "key": schema.StringAttribute{
- Description: "key is the label key that the selector applies to.",
- MarkdownDescription: "key is the label key that the selector applies to.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "operator": schema.StringAttribute{
- Description: "operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.",
- MarkdownDescription: "operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "values": schema.ListAttribute{
- Description: "values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.",
- MarkdownDescription: "values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "match_labels": schema.MapAttribute{
- Description: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.",
- MarkdownDescription: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "namespace_selector": schema.SingleNestedAttribute{
- Description: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.",
- MarkdownDescription: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.",
- Attributes: map[string]schema.Attribute{
- "match_expressions": schema.ListNestedAttribute{
- Description: "matchExpressions is a list of label selector requirements. The requirements are ANDed.",
- MarkdownDescription: "matchExpressions is a list of label selector requirements. The requirements are ANDed.",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "key": schema.StringAttribute{
- Description: "key is the label key that the selector applies to.",
- MarkdownDescription: "key is the label key that the selector applies to.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "operator": schema.StringAttribute{
- Description: "operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.",
- MarkdownDescription: "operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "values": schema.ListAttribute{
- Description: "values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.",
- MarkdownDescription: "values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "match_labels": schema.MapAttribute{
- Description: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.",
- MarkdownDescription: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "namespaces": schema.ListAttribute{
- Description: "namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.",
- MarkdownDescription: "namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "topology_key": schema.StringAttribute{
- Description: "This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matchingthe labelSelector in the specified namespaces, where co-located is defined as running on a nodewhose value of the label with key topologyKey matches that of any node on which any of theselected pods is running.Empty topologyKey is not allowed.",
- MarkdownDescription: "This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matchingthe labelSelector in the specified namespaces, where co-located is defined as running on a nodewhose value of the label with key topologyKey matches that of any node on which any of theselected pods is running.Empty topologyKey is not allowed.",
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "weight": schema.Int64Attribute{
- Description: "weight associated with matching the corresponding podAffinityTerm,in the range 1-100.",
- MarkdownDescription: "weight associated with matching the corresponding podAffinityTerm,in the range 1-100.",
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "required_during_scheduling_ignored_during_execution": schema.ListNestedAttribute{
- Description: "If the affinity requirements specified by this field are not met atscheduling time, the pod will not be scheduled onto the node.If the affinity requirements specified by this field cease to be metat some point during pod execution (e.g. due to a pod label update), thesystem may or may not try to eventually evict the pod from its node.When there are multiple elements, the lists of nodes corresponding to eachpodAffinityTerm are intersected, i.e. all terms must be satisfied.",
- MarkdownDescription: "If the affinity requirements specified by this field are not met atscheduling time, the pod will not be scheduled onto the node.If the affinity requirements specified by this field cease to be metat some point during pod execution (e.g. due to a pod label update), thesystem may or may not try to eventually evict the pod from its node.When there are multiple elements, the lists of nodes corresponding to eachpodAffinityTerm are intersected, i.e. all terms must be satisfied.",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "label_selector": schema.SingleNestedAttribute{
- Description: "A label query over a set of resources, in this case pods.",
- MarkdownDescription: "A label query over a set of resources, in this case pods.",
- Attributes: map[string]schema.Attribute{
- "match_expressions": schema.ListNestedAttribute{
- Description: "matchExpressions is a list of label selector requirements. The requirements are ANDed.",
- MarkdownDescription: "matchExpressions is a list of label selector requirements. The requirements are ANDed.",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "key": schema.StringAttribute{
- Description: "key is the label key that the selector applies to.",
- MarkdownDescription: "key is the label key that the selector applies to.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "operator": schema.StringAttribute{
- Description: "operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.",
- MarkdownDescription: "operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "values": schema.ListAttribute{
- Description: "values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.",
- MarkdownDescription: "values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "match_labels": schema.MapAttribute{
- Description: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.",
- MarkdownDescription: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "namespace_selector": schema.SingleNestedAttribute{
- Description: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.",
- MarkdownDescription: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.",
- Attributes: map[string]schema.Attribute{
- "match_expressions": schema.ListNestedAttribute{
- Description: "matchExpressions is a list of label selector requirements. The requirements are ANDed.",
- MarkdownDescription: "matchExpressions is a list of label selector requirements. The requirements are ANDed.",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "key": schema.StringAttribute{
- Description: "key is the label key that the selector applies to.",
- MarkdownDescription: "key is the label key that the selector applies to.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "operator": schema.StringAttribute{
- Description: "operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.",
- MarkdownDescription: "operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "values": schema.ListAttribute{
- Description: "values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.",
- MarkdownDescription: "values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "match_labels": schema.MapAttribute{
- Description: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.",
- MarkdownDescription: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "namespaces": schema.ListAttribute{
- Description: "namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.",
- MarkdownDescription: "namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "topology_key": schema.StringAttribute{
- Description: "This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matchingthe labelSelector in the specified namespaces, where co-located is defined as running on a nodewhose value of the label with key topologyKey matches that of any node on which any of theselected pods is running.Empty topologyKey is not allowed.",
- MarkdownDescription: "This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matchingthe labelSelector in the specified namespaces, where co-located is defined as running on a nodewhose value of the label with key topologyKey matches that of any node on which any of theselected pods is running.Empty topologyKey is not allowed.",
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "pod_anti_affinity": schema.SingleNestedAttribute{
- Description: "Describes pod anti-affinity scheduling rules (e.g. avoid putting this pod in the same node, zone, etc. as some other pod(s)).",
- MarkdownDescription: "Describes pod anti-affinity scheduling rules (e.g. avoid putting this pod in the same node, zone, etc. as some other pod(s)).",
- Attributes: map[string]schema.Attribute{
- "preferred_during_scheduling_ignored_during_execution": schema.ListNestedAttribute{
- Description: "The scheduler will prefer to schedule pods to nodes that satisfythe anti-affinity expressions specified by this field, but it may choosea node that violates one or more of the expressions. The node that ismost preferred is the one with the greatest sum of weights, i.e.for each node that meets all of the scheduling requirements (resourcerequest, requiredDuringScheduling anti-affinity expressions, etc.),compute a sum by iterating through the elements of this field and adding'weight' to the sum if the node has pods which matches the corresponding podAffinityTerm; thenode(s) with the highest sum are the most preferred.",
- MarkdownDescription: "The scheduler will prefer to schedule pods to nodes that satisfythe anti-affinity expressions specified by this field, but it may choosea node that violates one or more of the expressions. The node that ismost preferred is the one with the greatest sum of weights, i.e.for each node that meets all of the scheduling requirements (resourcerequest, requiredDuringScheduling anti-affinity expressions, etc.),compute a sum by iterating through the elements of this field and adding'weight' to the sum if the node has pods which matches the corresponding podAffinityTerm; thenode(s) with the highest sum are the most preferred.",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "pod_affinity_term": schema.SingleNestedAttribute{
- Description: "Required. A pod affinity term, associated with the corresponding weight.",
- MarkdownDescription: "Required. A pod affinity term, associated with the corresponding weight.",
- Attributes: map[string]schema.Attribute{
- "label_selector": schema.SingleNestedAttribute{
- Description: "A label query over a set of resources, in this case pods.",
- MarkdownDescription: "A label query over a set of resources, in this case pods.",
- Attributes: map[string]schema.Attribute{
- "match_expressions": schema.ListNestedAttribute{
- Description: "matchExpressions is a list of label selector requirements. The requirements are ANDed.",
- MarkdownDescription: "matchExpressions is a list of label selector requirements. The requirements are ANDed.",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "key": schema.StringAttribute{
- Description: "key is the label key that the selector applies to.",
- MarkdownDescription: "key is the label key that the selector applies to.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "operator": schema.StringAttribute{
- Description: "operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.",
- MarkdownDescription: "operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "values": schema.ListAttribute{
- Description: "values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.",
- MarkdownDescription: "values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "match_labels": schema.MapAttribute{
- Description: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.",
- MarkdownDescription: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "namespace_selector": schema.SingleNestedAttribute{
- Description: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.",
- MarkdownDescription: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.",
- Attributes: map[string]schema.Attribute{
- "match_expressions": schema.ListNestedAttribute{
- Description: "matchExpressions is a list of label selector requirements. The requirements are ANDed.",
- MarkdownDescription: "matchExpressions is a list of label selector requirements. The requirements are ANDed.",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "key": schema.StringAttribute{
- Description: "key is the label key that the selector applies to.",
- MarkdownDescription: "key is the label key that the selector applies to.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "operator": schema.StringAttribute{
- Description: "operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.",
- MarkdownDescription: "operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "values": schema.ListAttribute{
- Description: "values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.",
- MarkdownDescription: "values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "match_labels": schema.MapAttribute{
- Description: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.",
- MarkdownDescription: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "namespaces": schema.ListAttribute{
- Description: "namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.",
- MarkdownDescription: "namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "topology_key": schema.StringAttribute{
- Description: "This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matchingthe labelSelector in the specified namespaces, where co-located is defined as running on a nodewhose value of the label with key topologyKey matches that of any node on which any of theselected pods is running.Empty topologyKey is not allowed.",
- MarkdownDescription: "This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matchingthe labelSelector in the specified namespaces, where co-located is defined as running on a nodewhose value of the label with key topologyKey matches that of any node on which any of theselected pods is running.Empty topologyKey is not allowed.",
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "weight": schema.Int64Attribute{
- Description: "weight associated with matching the corresponding podAffinityTerm,in the range 1-100.",
- MarkdownDescription: "weight associated with matching the corresponding podAffinityTerm,in the range 1-100.",
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "required_during_scheduling_ignored_during_execution": schema.ListNestedAttribute{
- Description: "If the anti-affinity requirements specified by this field are not met atscheduling time, the pod will not be scheduled onto the node.If the anti-affinity requirements specified by this field cease to be metat some point during pod execution (e.g. due to a pod label update), thesystem may or may not try to eventually evict the pod from its node.When there are multiple elements, the lists of nodes corresponding to eachpodAffinityTerm are intersected, i.e. all terms must be satisfied.",
- MarkdownDescription: "If the anti-affinity requirements specified by this field are not met atscheduling time, the pod will not be scheduled onto the node.If the anti-affinity requirements specified by this field cease to be metat some point during pod execution (e.g. due to a pod label update), thesystem may or may not try to eventually evict the pod from its node.When there are multiple elements, the lists of nodes corresponding to eachpodAffinityTerm are intersected, i.e. all terms must be satisfied.",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "label_selector": schema.SingleNestedAttribute{
- Description: "A label query over a set of resources, in this case pods.",
- MarkdownDescription: "A label query over a set of resources, in this case pods.",
- Attributes: map[string]schema.Attribute{
- "match_expressions": schema.ListNestedAttribute{
- Description: "matchExpressions is a list of label selector requirements. The requirements are ANDed.",
- MarkdownDescription: "matchExpressions is a list of label selector requirements. The requirements are ANDed.",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "key": schema.StringAttribute{
- Description: "key is the label key that the selector applies to.",
- MarkdownDescription: "key is the label key that the selector applies to.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "operator": schema.StringAttribute{
- Description: "operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.",
- MarkdownDescription: "operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "values": schema.ListAttribute{
- Description: "values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.",
- MarkdownDescription: "values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "match_labels": schema.MapAttribute{
- Description: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.",
- MarkdownDescription: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "namespace_selector": schema.SingleNestedAttribute{
- Description: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.",
- MarkdownDescription: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.",
- Attributes: map[string]schema.Attribute{
- "match_expressions": schema.ListNestedAttribute{
- Description: "matchExpressions is a list of label selector requirements. The requirements are ANDed.",
- MarkdownDescription: "matchExpressions is a list of label selector requirements. The requirements are ANDed.",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "key": schema.StringAttribute{
- Description: "key is the label key that the selector applies to.",
- MarkdownDescription: "key is the label key that the selector applies to.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "operator": schema.StringAttribute{
- Description: "operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.",
- MarkdownDescription: "operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "values": schema.ListAttribute{
- Description: "values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.",
- MarkdownDescription: "values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "match_labels": schema.MapAttribute{
- Description: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.",
- MarkdownDescription: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "namespaces": schema.ListAttribute{
- Description: "namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.",
- MarkdownDescription: "namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "topology_key": schema.StringAttribute{
- Description: "This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matchingthe labelSelector in the specified namespaces, where co-located is defined as running on a nodewhose value of the label with key topologyKey matches that of any node on which any of theselected pods is running.Empty topologyKey is not allowed.",
- MarkdownDescription: "This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matchingthe labelSelector in the specified namespaces, where co-located is defined as running on a nodewhose value of the label with key topologyKey matches that of any node on which any of theselected pods is running.Empty topologyKey is not allowed.",
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "automount_service_account_token": schema.BoolAttribute{
- Description: "AutomountServiceAccountToken indicates whether a service account token should be automatically mounted.",
- MarkdownDescription: "AutomountServiceAccountToken indicates whether a service account token should be automatically mounted.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "containers": schema.ListNestedAttribute{
- Description: "List of containers belonging to the pod.Containers cannot currently be added or removed.There must be at least one container in a Pod.Cannot be updated.",
- MarkdownDescription: "List of containers belonging to the pod.Containers cannot currently be added or removed.There must be at least one container in a Pod.Cannot be updated.",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "args": schema.ListAttribute{
- Description: "Arguments to the entrypoint.The container image's CMD is used if this is not provided.Variable references $(VAR_NAME) are expanded using the container's environment. If a variablecannot be resolved, the reference in the input string will be unchanged. Double $$ are reducedto a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. '$$(VAR_NAME)' willproduce the string literal '$(VAR_NAME)'. Escaped references will never be expanded, regardlessof whether the variable exists or not. Cannot be updated.More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell",
- MarkdownDescription: "Arguments to the entrypoint.The container image's CMD is used if this is not provided.Variable references $(VAR_NAME) are expanded using the container's environment. If a variablecannot be resolved, the reference in the input string will be unchanged. Double $$ are reducedto a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. '$$(VAR_NAME)' willproduce the string literal '$(VAR_NAME)'. Escaped references will never be expanded, regardlessof whether the variable exists or not. Cannot be updated.More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "command": schema.ListAttribute{
- Description: "Entrypoint array. Not executed within a shell.The container image's ENTRYPOINT is used if this is not provided.Variable references $(VAR_NAME) are expanded using the container's environment. If a variablecannot be resolved, the reference in the input string will be unchanged. Double $$ are reducedto a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. '$$(VAR_NAME)' willproduce the string literal '$(VAR_NAME)'. Escaped references will never be expanded, regardlessof whether the variable exists or not. Cannot be updated.More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell",
- MarkdownDescription: "Entrypoint array. Not executed within a shell.The container image's ENTRYPOINT is used if this is not provided.Variable references $(VAR_NAME) are expanded using the container's environment. If a variablecannot be resolved, the reference in the input string will be unchanged. Double $$ are reducedto a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. '$$(VAR_NAME)' willproduce the string literal '$(VAR_NAME)'. Escaped references will never be expanded, regardlessof whether the variable exists or not. Cannot be updated.More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "env": schema.ListNestedAttribute{
- Description: "List of environment variables to set in the container.Cannot be updated.",
- MarkdownDescription: "List of environment variables to set in the container.Cannot be updated.",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "name": schema.StringAttribute{
- Description: "Name of the environment variable. Must be a C_IDENTIFIER.",
- MarkdownDescription: "Name of the environment variable. Must be a C_IDENTIFIER.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "value": schema.StringAttribute{
- Description: "Variable references $(VAR_NAME) are expandedusing the previously defined environment variables in the container andany service environment variables. If a variable cannot be resolved,the reference in the input string will be unchanged. Double $$ are reducedto a single $, which allows for escaping the $(VAR_NAME) syntax: i.e.'$$(VAR_NAME)' will produce the string literal '$(VAR_NAME)'.Escaped references will never be expanded, regardless of whether the variableexists or not.Defaults to ''.",
- MarkdownDescription: "Variable references $(VAR_NAME) are expandedusing the previously defined environment variables in the container andany service environment variables. If a variable cannot be resolved,the reference in the input string will be unchanged. Double $$ are reducedto a single $, which allows for escaping the $(VAR_NAME) syntax: i.e.'$$(VAR_NAME)' will produce the string literal '$(VAR_NAME)'.Escaped references will never be expanded, regardless of whether the variableexists or not.Defaults to ''.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "value_from": schema.SingleNestedAttribute{
- Description: "Source for the environment variable's value. Cannot be used if value is not empty.",
- MarkdownDescription: "Source for the environment variable's value. Cannot be used if value is not empty.",
- Attributes: map[string]schema.Attribute{
- "config_map_key_ref": schema.SingleNestedAttribute{
- Description: "Selects a key of a ConfigMap.",
- MarkdownDescription: "Selects a key of a ConfigMap.",
- Attributes: map[string]schema.Attribute{
- "key": schema.StringAttribute{
- Description: "The key to select.",
- MarkdownDescription: "The key to select.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "name": schema.StringAttribute{
- Description: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?",
- MarkdownDescription: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "optional": schema.BoolAttribute{
- Description: "Specify whether the ConfigMap or its key must be defined",
- MarkdownDescription: "Specify whether the ConfigMap or its key must be defined",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "field_ref": schema.SingleNestedAttribute{
- Description: "Selects a field of the pod: supports metadata.name, metadata.namespace, 'metadata.labels['']', 'metadata.annotations['']',spec.nodeName, spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs.",
- MarkdownDescription: "Selects a field of the pod: supports metadata.name, metadata.namespace, 'metadata.labels['']', 'metadata.annotations['']',spec.nodeName, spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs.",
- Attributes: map[string]schema.Attribute{
- "api_version": schema.StringAttribute{
- Description: "Version of the schema the FieldPath is written in terms of, defaults to 'v1'.",
- MarkdownDescription: "Version of the schema the FieldPath is written in terms of, defaults to 'v1'.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "field_path": schema.StringAttribute{
- Description: "Path of the field to select in the specified API version.",
- MarkdownDescription: "Path of the field to select in the specified API version.",
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "resource_field_ref": schema.SingleNestedAttribute{
- Description: "Selects a resource of the container: only resources limits and requests(limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu, requests.memory and requests.ephemeral-storage) are currently supported.",
- MarkdownDescription: "Selects a resource of the container: only resources limits and requests(limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu, requests.memory and requests.ephemeral-storage) are currently supported.",
- Attributes: map[string]schema.Attribute{
- "container_name": schema.StringAttribute{
- Description: "Container name: required for volumes, optional for env vars",
- MarkdownDescription: "Container name: required for volumes, optional for env vars",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "divisor": schema.StringAttribute{
- Description: "Specifies the output format of the exposed resources, defaults to '1'",
- MarkdownDescription: "Specifies the output format of the exposed resources, defaults to '1'",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "resource": schema.StringAttribute{
- Description: "Required: resource to select",
- MarkdownDescription: "Required: resource to select",
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "secret_key_ref": schema.SingleNestedAttribute{
- Description: "Selects a key of a secret in the pod's namespace",
- MarkdownDescription: "Selects a key of a secret in the pod's namespace",
- Attributes: map[string]schema.Attribute{
- "key": schema.StringAttribute{
- Description: "The key of the secret to select from. Must be a valid secret key.",
- MarkdownDescription: "The key of the secret to select from. Must be a valid secret key.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "name": schema.StringAttribute{
- Description: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?",
- MarkdownDescription: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "optional": schema.BoolAttribute{
- Description: "Specify whether the Secret or its key must be defined",
- MarkdownDescription: "Specify whether the Secret or its key must be defined",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "env_from": schema.ListNestedAttribute{
- Description: "List of sources to populate environment variables in the container.The keys defined within a source must be a C_IDENTIFIER. All invalid keyswill be reported as an event when the container is starting. When a key exists in multiplesources, the value associated with the last source will take precedence.Values defined by an Env with a duplicate key will take precedence.Cannot be updated.",
- MarkdownDescription: "List of sources to populate environment variables in the container.The keys defined within a source must be a C_IDENTIFIER. All invalid keyswill be reported as an event when the container is starting. When a key exists in multiplesources, the value associated with the last source will take precedence.Values defined by an Env with a duplicate key will take precedence.Cannot be updated.",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "config_map_ref": schema.SingleNestedAttribute{
- Description: "The ConfigMap to select from",
- MarkdownDescription: "The ConfigMap to select from",
- Attributes: map[string]schema.Attribute{
- "name": schema.StringAttribute{
- Description: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?",
- MarkdownDescription: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "optional": schema.BoolAttribute{
- Description: "Specify whether the ConfigMap must be defined",
- MarkdownDescription: "Specify whether the ConfigMap must be defined",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "prefix": schema.StringAttribute{
- Description: "An optional identifier to prepend to each key in the ConfigMap. Must be a C_IDENTIFIER.",
- MarkdownDescription: "An optional identifier to prepend to each key in the ConfigMap. Must be a C_IDENTIFIER.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "secret_ref": schema.SingleNestedAttribute{
- Description: "The Secret to select from",
- MarkdownDescription: "The Secret to select from",
- Attributes: map[string]schema.Attribute{
- "name": schema.StringAttribute{
- Description: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?",
- MarkdownDescription: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "optional": schema.BoolAttribute{
- Description: "Specify whether the Secret must be defined",
- MarkdownDescription: "Specify whether the Secret must be defined",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "image": schema.StringAttribute{
- Description: "Container image name.More info: https://kubernetes.io/docs/concepts/containers/imagesThis field is optional to allow higher level config management to default or overridecontainer images in workload controllers like Deployments and StatefulSets.",
- MarkdownDescription: "Container image name.More info: https://kubernetes.io/docs/concepts/containers/imagesThis field is optional to allow higher level config management to default or overridecontainer images in workload controllers like Deployments and StatefulSets.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "image_pull_policy": schema.StringAttribute{
- Description: "Image pull policy.One of Always, Never, IfNotPresent.Defaults to Always if :latest tag is specified, or IfNotPresent otherwise.Cannot be updated.More info: https://kubernetes.io/docs/concepts/containers/images#updating-images",
- MarkdownDescription: "Image pull policy.One of Always, Never, IfNotPresent.Defaults to Always if :latest tag is specified, or IfNotPresent otherwise.Cannot be updated.More info: https://kubernetes.io/docs/concepts/containers/images#updating-images",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "lifecycle": schema.SingleNestedAttribute{
- Description: "Actions that the management system should take in response to container lifecycle events.Cannot be updated.",
- MarkdownDescription: "Actions that the management system should take in response to container lifecycle events.Cannot be updated.",
- Attributes: map[string]schema.Attribute{
- "post_start": schema.SingleNestedAttribute{
- Description: "PostStart is called immediately after a container is created. If the handler fails,the container is terminated and restarted according to its restart policy.Other management of the container blocks until the hook completes.More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks",
- MarkdownDescription: "PostStart is called immediately after a container is created. If the handler fails,the container is terminated and restarted according to its restart policy.Other management of the container blocks until the hook completes.More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks",
- Attributes: map[string]schema.Attribute{
- "exec": schema.SingleNestedAttribute{
- Description: "Exec specifies the action to take.",
- MarkdownDescription: "Exec specifies the action to take.",
- Attributes: map[string]schema.Attribute{
- "command": schema.ListAttribute{
- Description: "Command is the command line to execute inside the container, the working directory for thecommand is root ('/') in the container's filesystem. The command is simply exec'd, it isnot run inside a shell, so traditional shell instructions ('|', etc) won't work. To usea shell, you need to explicitly call out to that shell.Exit status of 0 is treated as live/healthy and non-zero is unhealthy.",
- MarkdownDescription: "Command is the command line to execute inside the container, the working directory for thecommand is root ('/') in the container's filesystem. The command is simply exec'd, it isnot run inside a shell, so traditional shell instructions ('|', etc) won't work. To usea shell, you need to explicitly call out to that shell.Exit status of 0 is treated as live/healthy and non-zero is unhealthy.",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "http_get": schema.SingleNestedAttribute{
- Description: "HTTPGet specifies the http request to perform.",
- MarkdownDescription: "HTTPGet specifies the http request to perform.",
- Attributes: map[string]schema.Attribute{
- "host": schema.StringAttribute{
- Description: "Host name to connect to, defaults to the pod IP. You probably want to set'Host' in httpHeaders instead.",
- MarkdownDescription: "Host name to connect to, defaults to the pod IP. You probably want to set'Host' in httpHeaders instead.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "http_headers": schema.ListNestedAttribute{
- Description: "Custom headers to set in the request. HTTP allows repeated headers.",
- MarkdownDescription: "Custom headers to set in the request. HTTP allows repeated headers.",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "name": schema.StringAttribute{
- Description: "The header field name.This will be canonicalized upon output, so case-variant names will be understood as the same header.",
- MarkdownDescription: "The header field name.This will be canonicalized upon output, so case-variant names will be understood as the same header.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "value": schema.StringAttribute{
- Description: "The header field value",
- MarkdownDescription: "The header field value",
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "path": schema.StringAttribute{
- Description: "Path to access on the HTTP server.",
- MarkdownDescription: "Path to access on the HTTP server.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "port": schema.StringAttribute{
- Description: "Name or number of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.",
- MarkdownDescription: "Name or number of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "scheme": schema.StringAttribute{
- Description: "Scheme to use for connecting to the host.Defaults to HTTP.",
- MarkdownDescription: "Scheme to use for connecting to the host.Defaults to HTTP.",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "tcp_socket": schema.SingleNestedAttribute{
- Description: "Deprecated. TCPSocket is NOT supported as a LifecycleHandler and keptfor the backward compatibility. There are no validation of this field andlifecycle hooks will fail in runtime when tcp handler is specified.",
- MarkdownDescription: "Deprecated. TCPSocket is NOT supported as a LifecycleHandler and keptfor the backward compatibility. There are no validation of this field andlifecycle hooks will fail in runtime when tcp handler is specified.",
- Attributes: map[string]schema.Attribute{
- "host": schema.StringAttribute{
- Description: "Optional: Host name to connect to, defaults to the pod IP.",
- MarkdownDescription: "Optional: Host name to connect to, defaults to the pod IP.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "port": schema.StringAttribute{
- Description: "Number or name of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.",
- MarkdownDescription: "Number or name of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.",
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "pre_stop": schema.SingleNestedAttribute{
- Description: "PreStop is called immediately before a container is terminated due to anAPI request or management event such as liveness/startup probe failure,preemption, resource contention, etc. The handler is not called if thecontainer crashes or exits. The Pod's termination grace period countdown begins before thePreStop hook is executed. Regardless of the outcome of the handler, thecontainer will eventually terminate within the Pod's termination graceperiod (unless delayed by finalizers). Other management of the container blocks until the hook completesor until the termination grace period is reached.More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks",
- MarkdownDescription: "PreStop is called immediately before a container is terminated due to anAPI request or management event such as liveness/startup probe failure,preemption, resource contention, etc. The handler is not called if thecontainer crashes or exits. The Pod's termination grace period countdown begins before thePreStop hook is executed. Regardless of the outcome of the handler, thecontainer will eventually terminate within the Pod's termination graceperiod (unless delayed by finalizers). Other management of the container blocks until the hook completesor until the termination grace period is reached.More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks",
- Attributes: map[string]schema.Attribute{
- "exec": schema.SingleNestedAttribute{
- Description: "Exec specifies the action to take.",
- MarkdownDescription: "Exec specifies the action to take.",
- Attributes: map[string]schema.Attribute{
- "command": schema.ListAttribute{
- Description: "Command is the command line to execute inside the container, the working directory for thecommand is root ('/') in the container's filesystem. The command is simply exec'd, it isnot run inside a shell, so traditional shell instructions ('|', etc) won't work. To usea shell, you need to explicitly call out to that shell.Exit status of 0 is treated as live/healthy and non-zero is unhealthy.",
- MarkdownDescription: "Command is the command line to execute inside the container, the working directory for thecommand is root ('/') in the container's filesystem. The command is simply exec'd, it isnot run inside a shell, so traditional shell instructions ('|', etc) won't work. To usea shell, you need to explicitly call out to that shell.Exit status of 0 is treated as live/healthy and non-zero is unhealthy.",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "http_get": schema.SingleNestedAttribute{
- Description: "HTTPGet specifies the http request to perform.",
- MarkdownDescription: "HTTPGet specifies the http request to perform.",
- Attributes: map[string]schema.Attribute{
- "host": schema.StringAttribute{
- Description: "Host name to connect to, defaults to the pod IP. You probably want to set'Host' in httpHeaders instead.",
- MarkdownDescription: "Host name to connect to, defaults to the pod IP. You probably want to set'Host' in httpHeaders instead.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "http_headers": schema.ListNestedAttribute{
- Description: "Custom headers to set in the request. HTTP allows repeated headers.",
- MarkdownDescription: "Custom headers to set in the request. HTTP allows repeated headers.",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "name": schema.StringAttribute{
- Description: "The header field name.This will be canonicalized upon output, so case-variant names will be understood as the same header.",
- MarkdownDescription: "The header field name.This will be canonicalized upon output, so case-variant names will be understood as the same header.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "value": schema.StringAttribute{
- Description: "The header field value",
- MarkdownDescription: "The header field value",
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "path": schema.StringAttribute{
- Description: "Path to access on the HTTP server.",
- MarkdownDescription: "Path to access on the HTTP server.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "port": schema.StringAttribute{
- Description: "Name or number of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.",
- MarkdownDescription: "Name or number of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "scheme": schema.StringAttribute{
- Description: "Scheme to use for connecting to the host.Defaults to HTTP.",
- MarkdownDescription: "Scheme to use for connecting to the host.Defaults to HTTP.",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "tcp_socket": schema.SingleNestedAttribute{
- Description: "Deprecated. TCPSocket is NOT supported as a LifecycleHandler and keptfor the backward compatibility. There are no validation of this field andlifecycle hooks will fail in runtime when tcp handler is specified.",
- MarkdownDescription: "Deprecated. TCPSocket is NOT supported as a LifecycleHandler and keptfor the backward compatibility. There are no validation of this field andlifecycle hooks will fail in runtime when tcp handler is specified.",
- Attributes: map[string]schema.Attribute{
- "host": schema.StringAttribute{
- Description: "Optional: Host name to connect to, defaults to the pod IP.",
- MarkdownDescription: "Optional: Host name to connect to, defaults to the pod IP.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "port": schema.StringAttribute{
- Description: "Number or name of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.",
- MarkdownDescription: "Number or name of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.",
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "liveness_probe": schema.SingleNestedAttribute{
- Description: "Periodic probe of container liveness.Container will be restarted if the probe fails.Cannot be updated.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes",
- MarkdownDescription: "Periodic probe of container liveness.Container will be restarted if the probe fails.Cannot be updated.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes",
- Attributes: map[string]schema.Attribute{
- "exec": schema.SingleNestedAttribute{
- Description: "Exec specifies the action to take.",
- MarkdownDescription: "Exec specifies the action to take.",
- Attributes: map[string]schema.Attribute{
- "command": schema.ListAttribute{
- Description: "Command is the command line to execute inside the container, the working directory for thecommand is root ('/') in the container's filesystem. The command is simply exec'd, it isnot run inside a shell, so traditional shell instructions ('|', etc) won't work. To usea shell, you need to explicitly call out to that shell.Exit status of 0 is treated as live/healthy and non-zero is unhealthy.",
- MarkdownDescription: "Command is the command line to execute inside the container, the working directory for thecommand is root ('/') in the container's filesystem. The command is simply exec'd, it isnot run inside a shell, so traditional shell instructions ('|', etc) won't work. To usea shell, you need to explicitly call out to that shell.Exit status of 0 is treated as live/healthy and non-zero is unhealthy.",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "failure_threshold": schema.Int64Attribute{
- Description: "Minimum consecutive failures for the probe to be considered failed after having succeeded.Defaults to 3. Minimum value is 1.",
- MarkdownDescription: "Minimum consecutive failures for the probe to be considered failed after having succeeded.Defaults to 3. Minimum value is 1.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "grpc": schema.SingleNestedAttribute{
- Description: "GRPC specifies an action involving a GRPC port.",
- MarkdownDescription: "GRPC specifies an action involving a GRPC port.",
- Attributes: map[string]schema.Attribute{
- "port": schema.Int64Attribute{
- Description: "Port number of the gRPC service. Number must be in the range 1 to 65535.",
- MarkdownDescription: "Port number of the gRPC service. Number must be in the range 1 to 65535.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "service": schema.StringAttribute{
- Description: "Service is the name of the service to place in the gRPC HealthCheckRequest(see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).If this is not specified, the default behavior is defined by gRPC.",
- MarkdownDescription: "Service is the name of the service to place in the gRPC HealthCheckRequest(see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).If this is not specified, the default behavior is defined by gRPC.",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "http_get": schema.SingleNestedAttribute{
- Description: "HTTPGet specifies the http request to perform.",
- MarkdownDescription: "HTTPGet specifies the http request to perform.",
- Attributes: map[string]schema.Attribute{
- "host": schema.StringAttribute{
- Description: "Host name to connect to, defaults to the pod IP. You probably want to set'Host' in httpHeaders instead.",
- MarkdownDescription: "Host name to connect to, defaults to the pod IP. You probably want to set'Host' in httpHeaders instead.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "http_headers": schema.ListNestedAttribute{
- Description: "Custom headers to set in the request. HTTP allows repeated headers.",
- MarkdownDescription: "Custom headers to set in the request. HTTP allows repeated headers.",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "name": schema.StringAttribute{
- Description: "The header field name.This will be canonicalized upon output, so case-variant names will be understood as the same header.",
- MarkdownDescription: "The header field name.This will be canonicalized upon output, so case-variant names will be understood as the same header.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "value": schema.StringAttribute{
- Description: "The header field value",
- MarkdownDescription: "The header field value",
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "path": schema.StringAttribute{
- Description: "Path to access on the HTTP server.",
- MarkdownDescription: "Path to access on the HTTP server.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "port": schema.StringAttribute{
- Description: "Name or number of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.",
- MarkdownDescription: "Name or number of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "scheme": schema.StringAttribute{
- Description: "Scheme to use for connecting to the host.Defaults to HTTP.",
- MarkdownDescription: "Scheme to use for connecting to the host.Defaults to HTTP.",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "initial_delay_seconds": schema.Int64Attribute{
- Description: "Number of seconds after the container has started before liveness probes are initiated.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes",
- MarkdownDescription: "Number of seconds after the container has started before liveness probes are initiated.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "period_seconds": schema.Int64Attribute{
- Description: "How often (in seconds) to perform the probe.Default to 10 seconds. Minimum value is 1.",
- MarkdownDescription: "How often (in seconds) to perform the probe.Default to 10 seconds. Minimum value is 1.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "success_threshold": schema.Int64Attribute{
- Description: "Minimum consecutive successes for the probe to be considered successful after having failed.Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.",
- MarkdownDescription: "Minimum consecutive successes for the probe to be considered successful after having failed.Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "tcp_socket": schema.SingleNestedAttribute{
- Description: "TCPSocket specifies an action involving a TCP port.",
- MarkdownDescription: "TCPSocket specifies an action involving a TCP port.",
- Attributes: map[string]schema.Attribute{
- "host": schema.StringAttribute{
- Description: "Optional: Host name to connect to, defaults to the pod IP.",
- MarkdownDescription: "Optional: Host name to connect to, defaults to the pod IP.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "port": schema.StringAttribute{
- Description: "Number or name of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.",
- MarkdownDescription: "Number or name of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.",
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "termination_grace_period_seconds": schema.Int64Attribute{
- Description: "Optional duration in seconds the pod needs to terminate gracefully upon probe failure.The grace period is the duration in seconds after the processes running in the pod are senta termination signal and the time when the processes are forcibly halted with a kill signal.Set this value longer than the expected cleanup time for your process.If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, thisvalue overrides the value provided by the pod spec.Value must be non-negative integer. The value zero indicates stop immediately viathe kill signal (no opportunity to shut down).This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate.Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.",
- MarkdownDescription: "Optional duration in seconds the pod needs to terminate gracefully upon probe failure.The grace period is the duration in seconds after the processes running in the pod are senta termination signal and the time when the processes are forcibly halted with a kill signal.Set this value longer than the expected cleanup time for your process.If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, thisvalue overrides the value provided by the pod spec.Value must be non-negative integer. The value zero indicates stop immediately viathe kill signal (no opportunity to shut down).This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate.Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "timeout_seconds": schema.Int64Attribute{
- Description: "Number of seconds after which the probe times out.Defaults to 1 second. Minimum value is 1.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes",
- MarkdownDescription: "Number of seconds after which the probe times out.Defaults to 1 second. Minimum value is 1.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "name": schema.StringAttribute{
- Description: "Name of the container specified as a DNS_LABEL.Each container in a pod must have a unique name (DNS_LABEL).Cannot be updated.",
- MarkdownDescription: "Name of the container specified as a DNS_LABEL.Each container in a pod must have a unique name (DNS_LABEL).Cannot be updated.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "ports": schema.ListNestedAttribute{
- Description: "List of ports to expose from the container. Not specifying a port hereDOES NOT prevent that port from being exposed. Any port which islistening on the default '0.0.0.0' address inside a container will beaccessible from the network.Modifying this array with strategic merge patch may corrupt the data.For more information See https://github.com/kubernetes/kubernetes/issues/108255.Cannot be updated.",
- MarkdownDescription: "List of ports to expose from the container. Not specifying a port hereDOES NOT prevent that port from being exposed. Any port which islistening on the default '0.0.0.0' address inside a container will beaccessible from the network.Modifying this array with strategic merge patch may corrupt the data.For more information See https://github.com/kubernetes/kubernetes/issues/108255.Cannot be updated.",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "container_port": schema.Int64Attribute{
- Description: "Number of port to expose on the pod's IP address.This must be a valid port number, 0 < x < 65536.",
- MarkdownDescription: "Number of port to expose on the pod's IP address.This must be a valid port number, 0 < x < 65536.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "host_ip": schema.StringAttribute{
- Description: "What host IP to bind the external port to.",
- MarkdownDescription: "What host IP to bind the external port to.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "host_port": schema.Int64Attribute{
- Description: "Number of port to expose on the host.If specified, this must be a valid port number, 0 < x < 65536.If HostNetwork is specified, this must match ContainerPort.Most containers do not need this.",
- MarkdownDescription: "Number of port to expose on the host.If specified, this must be a valid port number, 0 < x < 65536.If HostNetwork is specified, this must match ContainerPort.Most containers do not need this.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "name": schema.StringAttribute{
- Description: "If specified, this must be an IANA_SVC_NAME and unique within the pod. Eachnamed port in a pod must have a unique name. Name for the port that can bereferred to by services.",
- MarkdownDescription: "If specified, this must be an IANA_SVC_NAME and unique within the pod. Eachnamed port in a pod must have a unique name. Name for the port that can bereferred to by services.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "protocol": schema.StringAttribute{
- Description: "Protocol for port. Must be UDP, TCP, or SCTP.Defaults to 'TCP'.",
- MarkdownDescription: "Protocol for port. Must be UDP, TCP, or SCTP.Defaults to 'TCP'.",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "readiness_probe": schema.SingleNestedAttribute{
- Description: "Periodic probe of container service readiness.Container will be removed from service endpoints if the probe fails.Cannot be updated.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes",
- MarkdownDescription: "Periodic probe of container service readiness.Container will be removed from service endpoints if the probe fails.Cannot be updated.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes",
- Attributes: map[string]schema.Attribute{
- "exec": schema.SingleNestedAttribute{
- Description: "Exec specifies the action to take.",
- MarkdownDescription: "Exec specifies the action to take.",
- Attributes: map[string]schema.Attribute{
- "command": schema.ListAttribute{
- Description: "Command is the command line to execute inside the container, the working directory for thecommand is root ('/') in the container's filesystem. The command is simply exec'd, it isnot run inside a shell, so traditional shell instructions ('|', etc) won't work. To usea shell, you need to explicitly call out to that shell.Exit status of 0 is treated as live/healthy and non-zero is unhealthy.",
- MarkdownDescription: "Command is the command line to execute inside the container, the working directory for thecommand is root ('/') in the container's filesystem. The command is simply exec'd, it isnot run inside a shell, so traditional shell instructions ('|', etc) won't work. To usea shell, you need to explicitly call out to that shell.Exit status of 0 is treated as live/healthy and non-zero is unhealthy.",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "failure_threshold": schema.Int64Attribute{
- Description: "Minimum consecutive failures for the probe to be considered failed after having succeeded.Defaults to 3. Minimum value is 1.",
- MarkdownDescription: "Minimum consecutive failures for the probe to be considered failed after having succeeded.Defaults to 3. Minimum value is 1.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "grpc": schema.SingleNestedAttribute{
- Description: "GRPC specifies an action involving a GRPC port.",
- MarkdownDescription: "GRPC specifies an action involving a GRPC port.",
- Attributes: map[string]schema.Attribute{
- "port": schema.Int64Attribute{
- Description: "Port number of the gRPC service. Number must be in the range 1 to 65535.",
- MarkdownDescription: "Port number of the gRPC service. Number must be in the range 1 to 65535.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "service": schema.StringAttribute{
- Description: "Service is the name of the service to place in the gRPC HealthCheckRequest(see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).If this is not specified, the default behavior is defined by gRPC.",
- MarkdownDescription: "Service is the name of the service to place in the gRPC HealthCheckRequest(see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).If this is not specified, the default behavior is defined by gRPC.",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "http_get": schema.SingleNestedAttribute{
- Description: "HTTPGet specifies the http request to perform.",
- MarkdownDescription: "HTTPGet specifies the http request to perform.",
- Attributes: map[string]schema.Attribute{
- "host": schema.StringAttribute{
- Description: "Host name to connect to, defaults to the pod IP. You probably want to set'Host' in httpHeaders instead.",
- MarkdownDescription: "Host name to connect to, defaults to the pod IP. You probably want to set'Host' in httpHeaders instead.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "http_headers": schema.ListNestedAttribute{
- Description: "Custom headers to set in the request. HTTP allows repeated headers.",
- MarkdownDescription: "Custom headers to set in the request. HTTP allows repeated headers.",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "name": schema.StringAttribute{
- Description: "The header field name.This will be canonicalized upon output, so case-variant names will be understood as the same header.",
- MarkdownDescription: "The header field name.This will be canonicalized upon output, so case-variant names will be understood as the same header.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "value": schema.StringAttribute{
- Description: "The header field value",
- MarkdownDescription: "The header field value",
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "path": schema.StringAttribute{
- Description: "Path to access on the HTTP server.",
- MarkdownDescription: "Path to access on the HTTP server.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "port": schema.StringAttribute{
- Description: "Name or number of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.",
- MarkdownDescription: "Name or number of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "scheme": schema.StringAttribute{
- Description: "Scheme to use for connecting to the host.Defaults to HTTP.",
- MarkdownDescription: "Scheme to use for connecting to the host.Defaults to HTTP.",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "initial_delay_seconds": schema.Int64Attribute{
- Description: "Number of seconds after the container has started before liveness probes are initiated.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes",
- MarkdownDescription: "Number of seconds after the container has started before liveness probes are initiated.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "period_seconds": schema.Int64Attribute{
- Description: "How often (in seconds) to perform the probe.Default to 10 seconds. Minimum value is 1.",
- MarkdownDescription: "How often (in seconds) to perform the probe.Default to 10 seconds. Minimum value is 1.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "success_threshold": schema.Int64Attribute{
- Description: "Minimum consecutive successes for the probe to be considered successful after having failed.Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.",
- MarkdownDescription: "Minimum consecutive successes for the probe to be considered successful after having failed.Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "tcp_socket": schema.SingleNestedAttribute{
- Description: "TCPSocket specifies an action involving a TCP port.",
- MarkdownDescription: "TCPSocket specifies an action involving a TCP port.",
- Attributes: map[string]schema.Attribute{
- "host": schema.StringAttribute{
- Description: "Optional: Host name to connect to, defaults to the pod IP.",
- MarkdownDescription: "Optional: Host name to connect to, defaults to the pod IP.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "port": schema.StringAttribute{
- Description: "Number or name of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.",
- MarkdownDescription: "Number or name of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.",
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "termination_grace_period_seconds": schema.Int64Attribute{
- Description: "Optional duration in seconds the pod needs to terminate gracefully upon probe failure.The grace period is the duration in seconds after the processes running in the pod are senta termination signal and the time when the processes are forcibly halted with a kill signal.Set this value longer than the expected cleanup time for your process.If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, thisvalue overrides the value provided by the pod spec.Value must be non-negative integer. The value zero indicates stop immediately viathe kill signal (no opportunity to shut down).This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate.Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.",
- MarkdownDescription: "Optional duration in seconds the pod needs to terminate gracefully upon probe failure.The grace period is the duration in seconds after the processes running in the pod are senta termination signal and the time when the processes are forcibly halted with a kill signal.Set this value longer than the expected cleanup time for your process.If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, thisvalue overrides the value provided by the pod spec.Value must be non-negative integer. The value zero indicates stop immediately viathe kill signal (no opportunity to shut down).This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate.Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "timeout_seconds": schema.Int64Attribute{
- Description: "Number of seconds after which the probe times out.Defaults to 1 second. Minimum value is 1.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes",
- MarkdownDescription: "Number of seconds after which the probe times out.Defaults to 1 second. Minimum value is 1.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "resize_policy": schema.ListNestedAttribute{
- Description: "Resources resize policy for the container.",
- MarkdownDescription: "Resources resize policy for the container.",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "resource_name": schema.StringAttribute{
- Description: "Name of the resource to which this resource resize policy applies.Supported values: cpu, memory.",
- MarkdownDescription: "Name of the resource to which this resource resize policy applies.Supported values: cpu, memory.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "restart_policy": schema.StringAttribute{
- Description: "Restart policy to apply when specified resource is resized.If not specified, it defaults to NotRequired.",
- MarkdownDescription: "Restart policy to apply when specified resource is resized.If not specified, it defaults to NotRequired.",
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "resources": schema.SingleNestedAttribute{
- Description: "Compute Resources required by this container.Cannot be updated.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/",
- MarkdownDescription: "Compute Resources required by this container.Cannot be updated.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/",
- Attributes: map[string]schema.Attribute{
- "claims": schema.ListNestedAttribute{
- Description: "Claims lists the names of resources, defined in spec.resourceClaims,that are used by this container.This is an alpha field and requires enabling theDynamicResourceAllocation feature gate.This field is immutable. It can only be set for containers.",
- MarkdownDescription: "Claims lists the names of resources, defined in spec.resourceClaims,that are used by this container.This is an alpha field and requires enabling theDynamicResourceAllocation feature gate.This field is immutable. It can only be set for containers.",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "name": schema.StringAttribute{
- Description: "Name must match the name of one entry in pod.spec.resourceClaims ofthe Pod where this field is used. It makes that resource availableinside a container.",
- MarkdownDescription: "Name must match the name of one entry in pod.spec.resourceClaims ofthe Pod where this field is used. It makes that resource availableinside a container.",
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "limits": schema.MapAttribute{
- Description: "Limits describes the maximum amount of compute resources allowed.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/",
- MarkdownDescription: "Limits describes the maximum amount of compute resources allowed.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "requests": schema.MapAttribute{
- Description: "Requests describes the minimum amount of compute resources required.If Requests is omitted for a container, it defaults to Limits if that is explicitly specified,otherwise to an implementation-defined value. Requests cannot exceed Limits.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/",
- MarkdownDescription: "Requests describes the minimum amount of compute resources required.If Requests is omitted for a container, it defaults to Limits if that is explicitly specified,otherwise to an implementation-defined value. Requests cannot exceed Limits.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "restart_policy": schema.StringAttribute{
- Description: "RestartPolicy defines the restart behavior of individual containers in a pod.This field may only be set for init containers, and the only allowed value is 'Always'.For non-init containers or when this field is not specified,the restart behavior is defined by the Pod's restart policy and the container type.Setting the RestartPolicy as 'Always' for the init container will have the following effect:this init container will be continually restarted onexit until all regular containers have terminated. Once all regularcontainers have completed, all init containers with restartPolicy 'Always'will be shut down. This lifecycle differs from normal init containers andis often referred to as a 'sidecar' container. Although this initcontainer still starts in the init container sequence, it does not waitfor the container to complete before proceeding to the next initcontainer. Instead, the next init container starts immediately after thisinit container is started, or after any startupProbe has successfullycompleted.",
- MarkdownDescription: "RestartPolicy defines the restart behavior of individual containers in a pod.This field may only be set for init containers, and the only allowed value is 'Always'.For non-init containers or when this field is not specified,the restart behavior is defined by the Pod's restart policy and the container type.Setting the RestartPolicy as 'Always' for the init container will have the following effect:this init container will be continually restarted onexit until all regular containers have terminated. Once all regularcontainers have completed, all init containers with restartPolicy 'Always'will be shut down. This lifecycle differs from normal init containers andis often referred to as a 'sidecar' container. Although this initcontainer still starts in the init container sequence, it does not waitfor the container to complete before proceeding to the next initcontainer. Instead, the next init container starts immediately after thisinit container is started, or after any startupProbe has successfullycompleted.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "security_context": schema.SingleNestedAttribute{
- Description: "SecurityContext defines the security options the container should be run with.If set, the fields of SecurityContext override the equivalent fields of PodSecurityContext.More info: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/",
- MarkdownDescription: "SecurityContext defines the security options the container should be run with.If set, the fields of SecurityContext override the equivalent fields of PodSecurityContext.More info: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/",
- Attributes: map[string]schema.Attribute{
- "allow_privilege_escalation": schema.BoolAttribute{
- Description: "AllowPrivilegeEscalation controls whether a process can gain moreprivileges than its parent process. This bool directly controls ifthe no_new_privs flag will be set on the container process.AllowPrivilegeEscalation is true always when the container is:1) run as Privileged2) has CAP_SYS_ADMINNote that this field cannot be set when spec.os.name is windows.",
- MarkdownDescription: "AllowPrivilegeEscalation controls whether a process can gain moreprivileges than its parent process. This bool directly controls ifthe no_new_privs flag will be set on the container process.AllowPrivilegeEscalation is true always when the container is:1) run as Privileged2) has CAP_SYS_ADMINNote that this field cannot be set when spec.os.name is windows.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "capabilities": schema.SingleNestedAttribute{
- Description: "The capabilities to add/drop when running containers.Defaults to the default set of capabilities granted by the container runtime.Note that this field cannot be set when spec.os.name is windows.",
- MarkdownDescription: "The capabilities to add/drop when running containers.Defaults to the default set of capabilities granted by the container runtime.Note that this field cannot be set when spec.os.name is windows.",
- Attributes: map[string]schema.Attribute{
- "add": schema.ListAttribute{
- Description: "Added capabilities",
- MarkdownDescription: "Added capabilities",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "drop": schema.ListAttribute{
- Description: "Removed capabilities",
- MarkdownDescription: "Removed capabilities",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "privileged": schema.BoolAttribute{
- Description: "Run container in privileged mode.Processes in privileged containers are essentially equivalent to root on the host.Defaults to false.Note that this field cannot be set when spec.os.name is windows.",
- MarkdownDescription: "Run container in privileged mode.Processes in privileged containers are essentially equivalent to root on the host.Defaults to false.Note that this field cannot be set when spec.os.name is windows.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "proc_mount": schema.StringAttribute{
- Description: "procMount denotes the type of proc mount to use for the containers.The default is DefaultProcMount which uses the container runtime defaults forreadonly paths and masked paths.This requires the ProcMountType feature flag to be enabled.Note that this field cannot be set when spec.os.name is windows.",
- MarkdownDescription: "procMount denotes the type of proc mount to use for the containers.The default is DefaultProcMount which uses the container runtime defaults forreadonly paths and masked paths.This requires the ProcMountType feature flag to be enabled.Note that this field cannot be set when spec.os.name is windows.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "read_only_root_filesystem": schema.BoolAttribute{
- Description: "Whether this container has a read-only root filesystem.Default is false.Note that this field cannot be set when spec.os.name is windows.",
- MarkdownDescription: "Whether this container has a read-only root filesystem.Default is false.Note that this field cannot be set when spec.os.name is windows.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "run_as_group": schema.Int64Attribute{
- Description: "The GID to run the entrypoint of the container process.Uses runtime default if unset.May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.Note that this field cannot be set when spec.os.name is windows.",
- MarkdownDescription: "The GID to run the entrypoint of the container process.Uses runtime default if unset.May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.Note that this field cannot be set when spec.os.name is windows.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "run_as_non_root": schema.BoolAttribute{
- Description: "Indicates that the container must run as a non-root user.If true, the Kubelet will validate the image at runtime to ensure that itdoes not run as UID 0 (root) and fail to start the container if it does.If unset or false, no such validation will be performed.May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.",
- MarkdownDescription: "Indicates that the container must run as a non-root user.If true, the Kubelet will validate the image at runtime to ensure that itdoes not run as UID 0 (root) and fail to start the container if it does.If unset or false, no such validation will be performed.May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "run_as_user": schema.Int64Attribute{
- Description: "The UID to run the entrypoint of the container process.Defaults to user specified in image metadata if unspecified.May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.Note that this field cannot be set when spec.os.name is windows.",
- MarkdownDescription: "The UID to run the entrypoint of the container process.Defaults to user specified in image metadata if unspecified.May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.Note that this field cannot be set when spec.os.name is windows.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "se_linux_options": schema.SingleNestedAttribute{
- Description: "The SELinux context to be applied to the container.If unspecified, the container runtime will allocate a random SELinux context for eachcontainer. May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.Note that this field cannot be set when spec.os.name is windows.",
- MarkdownDescription: "The SELinux context to be applied to the container.If unspecified, the container runtime will allocate a random SELinux context for eachcontainer. May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.Note that this field cannot be set when spec.os.name is windows.",
- Attributes: map[string]schema.Attribute{
- "level": schema.StringAttribute{
- Description: "Level is SELinux level label that applies to the container.",
- MarkdownDescription: "Level is SELinux level label that applies to the container.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "role": schema.StringAttribute{
- Description: "Role is a SELinux role label that applies to the container.",
- MarkdownDescription: "Role is a SELinux role label that applies to the container.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "type": schema.StringAttribute{
- Description: "Type is a SELinux type label that applies to the container.",
- MarkdownDescription: "Type is a SELinux type label that applies to the container.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "user": schema.StringAttribute{
- Description: "User is a SELinux user label that applies to the container.",
- MarkdownDescription: "User is a SELinux user label that applies to the container.",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "seccomp_profile": schema.SingleNestedAttribute{
- Description: "The seccomp options to use by this container. If seccomp options areprovided at both the pod & container level, the container optionsoverride the pod options.Note that this field cannot be set when spec.os.name is windows.",
- MarkdownDescription: "The seccomp options to use by this container. If seccomp options areprovided at both the pod & container level, the container optionsoverride the pod options.Note that this field cannot be set when spec.os.name is windows.",
- Attributes: map[string]schema.Attribute{
- "localhost_profile": schema.StringAttribute{
- Description: "localhostProfile indicates a profile defined in a file on the node should be used.The profile must be preconfigured on the node to work.Must be a descending path, relative to the kubelet's configured seccomp profile location.Must be set if type is 'Localhost'. Must NOT be set for any other type.",
- MarkdownDescription: "localhostProfile indicates a profile defined in a file on the node should be used.The profile must be preconfigured on the node to work.Must be a descending path, relative to the kubelet's configured seccomp profile location.Must be set if type is 'Localhost'. Must NOT be set for any other type.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "type": schema.StringAttribute{
- Description: "type indicates which kind of seccomp profile will be applied.Valid options are:Localhost - a profile defined in a file on the node should be used.RuntimeDefault - the container runtime default profile should be used.Unconfined - no profile should be applied.",
- MarkdownDescription: "type indicates which kind of seccomp profile will be applied.Valid options are:Localhost - a profile defined in a file on the node should be used.RuntimeDefault - the container runtime default profile should be used.Unconfined - no profile should be applied.",
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "windows_options": schema.SingleNestedAttribute{
- Description: "The Windows specific settings applied to all containers.If unspecified, the options from the PodSecurityContext will be used.If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.Note that this field cannot be set when spec.os.name is linux.",
- MarkdownDescription: "The Windows specific settings applied to all containers.If unspecified, the options from the PodSecurityContext will be used.If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.Note that this field cannot be set when spec.os.name is linux.",
- Attributes: map[string]schema.Attribute{
- "gmsa_credential_spec": schema.StringAttribute{
- Description: "GMSACredentialSpec is where the GMSA admission webhook(https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of theGMSA credential spec named by the GMSACredentialSpecName field.",
- MarkdownDescription: "GMSACredentialSpec is where the GMSA admission webhook(https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of theGMSA credential spec named by the GMSACredentialSpecName field.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "gmsa_credential_spec_name": schema.StringAttribute{
- Description: "GMSACredentialSpecName is the name of the GMSA credential spec to use.",
- MarkdownDescription: "GMSACredentialSpecName is the name of the GMSA credential spec to use.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "host_process": schema.BoolAttribute{
- Description: "HostProcess determines if a container should be run as a 'Host Process' container.All of a Pod's containers must have the same effective HostProcess value(it is not allowed to have a mix of HostProcess containers and non-HostProcess containers).In addition, if HostProcess is true then HostNetwork must also be set to true.",
- MarkdownDescription: "HostProcess determines if a container should be run as a 'Host Process' container.All of a Pod's containers must have the same effective HostProcess value(it is not allowed to have a mix of HostProcess containers and non-HostProcess containers).In addition, if HostProcess is true then HostNetwork must also be set to true.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "run_as_user_name": schema.StringAttribute{
- Description: "The UserName in Windows to run the entrypoint of the container process.Defaults to the user specified in image metadata if unspecified.May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.",
- MarkdownDescription: "The UserName in Windows to run the entrypoint of the container process.Defaults to the user specified in image metadata if unspecified.May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "startup_probe": schema.SingleNestedAttribute{
- Description: "StartupProbe indicates that the Pod has successfully initialized.If specified, no other probes are executed until this completes successfully.If this probe fails, the Pod will be restarted, just as if the livenessProbe failed.This can be used to provide different probe parameters at the beginning of a Pod's lifecycle,when it might take a long time to load data or warm a cache, than during steady-state operation.This cannot be updated.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes",
- MarkdownDescription: "StartupProbe indicates that the Pod has successfully initialized.If specified, no other probes are executed until this completes successfully.If this probe fails, the Pod will be restarted, just as if the livenessProbe failed.This can be used to provide different probe parameters at the beginning of a Pod's lifecycle,when it might take a long time to load data or warm a cache, than during steady-state operation.This cannot be updated.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes",
- Attributes: map[string]schema.Attribute{
- "exec": schema.SingleNestedAttribute{
- Description: "Exec specifies the action to take.",
- MarkdownDescription: "Exec specifies the action to take.",
- Attributes: map[string]schema.Attribute{
- "command": schema.ListAttribute{
- Description: "Command is the command line to execute inside the container, the working directory for thecommand is root ('/') in the container's filesystem. The command is simply exec'd, it isnot run inside a shell, so traditional shell instructions ('|', etc) won't work. To usea shell, you need to explicitly call out to that shell.Exit status of 0 is treated as live/healthy and non-zero is unhealthy.",
- MarkdownDescription: "Command is the command line to execute inside the container, the working directory for thecommand is root ('/') in the container's filesystem. The command is simply exec'd, it isnot run inside a shell, so traditional shell instructions ('|', etc) won't work. To usea shell, you need to explicitly call out to that shell.Exit status of 0 is treated as live/healthy and non-zero is unhealthy.",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "failure_threshold": schema.Int64Attribute{
- Description: "Minimum consecutive failures for the probe to be considered failed after having succeeded.Defaults to 3. Minimum value is 1.",
- MarkdownDescription: "Minimum consecutive failures for the probe to be considered failed after having succeeded.Defaults to 3. Minimum value is 1.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "grpc": schema.SingleNestedAttribute{
- Description: "GRPC specifies an action involving a GRPC port.",
- MarkdownDescription: "GRPC specifies an action involving a GRPC port.",
- Attributes: map[string]schema.Attribute{
- "port": schema.Int64Attribute{
- Description: "Port number of the gRPC service. Number must be in the range 1 to 65535.",
- MarkdownDescription: "Port number of the gRPC service. Number must be in the range 1 to 65535.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "service": schema.StringAttribute{
- Description: "Service is the name of the service to place in the gRPC HealthCheckRequest(see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).If this is not specified, the default behavior is defined by gRPC.",
- MarkdownDescription: "Service is the name of the service to place in the gRPC HealthCheckRequest(see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).If this is not specified, the default behavior is defined by gRPC.",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "http_get": schema.SingleNestedAttribute{
- Description: "HTTPGet specifies the http request to perform.",
- MarkdownDescription: "HTTPGet specifies the http request to perform.",
- Attributes: map[string]schema.Attribute{
- "host": schema.StringAttribute{
- Description: "Host name to connect to, defaults to the pod IP. You probably want to set'Host' in httpHeaders instead.",
- MarkdownDescription: "Host name to connect to, defaults to the pod IP. You probably want to set'Host' in httpHeaders instead.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "http_headers": schema.ListNestedAttribute{
- Description: "Custom headers to set in the request. HTTP allows repeated headers.",
- MarkdownDescription: "Custom headers to set in the request. HTTP allows repeated headers.",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "name": schema.StringAttribute{
- Description: "The header field name.This will be canonicalized upon output, so case-variant names will be understood as the same header.",
- MarkdownDescription: "The header field name.This will be canonicalized upon output, so case-variant names will be understood as the same header.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "value": schema.StringAttribute{
- Description: "The header field value",
- MarkdownDescription: "The header field value",
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "path": schema.StringAttribute{
- Description: "Path to access on the HTTP server.",
- MarkdownDescription: "Path to access on the HTTP server.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "port": schema.StringAttribute{
- Description: "Name or number of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.",
- MarkdownDescription: "Name or number of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "scheme": schema.StringAttribute{
- Description: "Scheme to use for connecting to the host.Defaults to HTTP.",
- MarkdownDescription: "Scheme to use for connecting to the host.Defaults to HTTP.",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "initial_delay_seconds": schema.Int64Attribute{
- Description: "Number of seconds after the container has started before liveness probes are initiated.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes",
- MarkdownDescription: "Number of seconds after the container has started before liveness probes are initiated.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "period_seconds": schema.Int64Attribute{
- Description: "How often (in seconds) to perform the probe.Default to 10 seconds. Minimum value is 1.",
- MarkdownDescription: "How often (in seconds) to perform the probe.Default to 10 seconds. Minimum value is 1.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "success_threshold": schema.Int64Attribute{
- Description: "Minimum consecutive successes for the probe to be considered successful after having failed.Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.",
- MarkdownDescription: "Minimum consecutive successes for the probe to be considered successful after having failed.Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "tcp_socket": schema.SingleNestedAttribute{
- Description: "TCPSocket specifies an action involving a TCP port.",
- MarkdownDescription: "TCPSocket specifies an action involving a TCP port.",
- Attributes: map[string]schema.Attribute{
- "host": schema.StringAttribute{
- Description: "Optional: Host name to connect to, defaults to the pod IP.",
- MarkdownDescription: "Optional: Host name to connect to, defaults to the pod IP.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "port": schema.StringAttribute{
- Description: "Number or name of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.",
- MarkdownDescription: "Number or name of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.",
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "termination_grace_period_seconds": schema.Int64Attribute{
- Description: "Optional duration in seconds the pod needs to terminate gracefully upon probe failure.The grace period is the duration in seconds after the processes running in the pod are senta termination signal and the time when the processes are forcibly halted with a kill signal.Set this value longer than the expected cleanup time for your process.If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, thisvalue overrides the value provided by the pod spec.Value must be non-negative integer. The value zero indicates stop immediately viathe kill signal (no opportunity to shut down).This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate.Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.",
- MarkdownDescription: "Optional duration in seconds the pod needs to terminate gracefully upon probe failure.The grace period is the duration in seconds after the processes running in the pod are senta termination signal and the time when the processes are forcibly halted with a kill signal.Set this value longer than the expected cleanup time for your process.If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, thisvalue overrides the value provided by the pod spec.Value must be non-negative integer. The value zero indicates stop immediately viathe kill signal (no opportunity to shut down).This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate.Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "timeout_seconds": schema.Int64Attribute{
- Description: "Number of seconds after which the probe times out.Defaults to 1 second. Minimum value is 1.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes",
- MarkdownDescription: "Number of seconds after which the probe times out.Defaults to 1 second. Minimum value is 1.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "stdin": schema.BoolAttribute{
- Description: "Whether this container should allocate a buffer for stdin in the container runtime. If thisis not set, reads from stdin in the container will always result in EOF.Default is false.",
- MarkdownDescription: "Whether this container should allocate a buffer for stdin in the container runtime. If thisis not set, reads from stdin in the container will always result in EOF.Default is false.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "stdin_once": schema.BoolAttribute{
- Description: "Whether the container runtime should close the stdin channel after it has been opened bya single attach. When stdin is true the stdin stream will remain open across multiple attachsessions. If stdinOnce is set to true, stdin is opened on container start, is empty until thefirst client attaches to stdin, and then remains open and accepts data until the client disconnects,at which time stdin is closed and remains closed until the container is restarted. If thisflag is false, a container processes that reads from stdin will never receive an EOF.Default is false",
- MarkdownDescription: "Whether the container runtime should close the stdin channel after it has been opened bya single attach. When stdin is true the stdin stream will remain open across multiple attachsessions. If stdinOnce is set to true, stdin is opened on container start, is empty until thefirst client attaches to stdin, and then remains open and accepts data until the client disconnects,at which time stdin is closed and remains closed until the container is restarted. If thisflag is false, a container processes that reads from stdin will never receive an EOF.Default is false",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "termination_message_path": schema.StringAttribute{
- Description: "Optional: Path at which the file to which the container's termination messagewill be written is mounted into the container's filesystem.Message written is intended to be brief final status, such as an assertion failure message.Will be truncated by the node if greater than 4096 bytes. The total message length acrossall containers will be limited to 12kb.Defaults to /dev/termination-log.Cannot be updated.",
- MarkdownDescription: "Optional: Path at which the file to which the container's termination messagewill be written is mounted into the container's filesystem.Message written is intended to be brief final status, such as an assertion failure message.Will be truncated by the node if greater than 4096 bytes. The total message length acrossall containers will be limited to 12kb.Defaults to /dev/termination-log.Cannot be updated.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "termination_message_policy": schema.StringAttribute{
- Description: "Indicate how the termination message should be populated. File will use the contents ofterminationMessagePath to populate the container status message on both success and failure.FallbackToLogsOnError will use the last chunk of container log output if the terminationmessage file is empty and the container exited with an error.The log output is limited to 2048 bytes or 80 lines, whichever is smaller.Defaults to File.Cannot be updated.",
- MarkdownDescription: "Indicate how the termination message should be populated. File will use the contents ofterminationMessagePath to populate the container status message on both success and failure.FallbackToLogsOnError will use the last chunk of container log output if the terminationmessage file is empty and the container exited with an error.The log output is limited to 2048 bytes or 80 lines, whichever is smaller.Defaults to File.Cannot be updated.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "tty": schema.BoolAttribute{
- Description: "Whether this container should allocate a TTY for itself, also requires 'stdin' to be true.Default is false.",
- MarkdownDescription: "Whether this container should allocate a TTY for itself, also requires 'stdin' to be true.Default is false.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "volume_devices": schema.ListNestedAttribute{
- Description: "volumeDevices is the list of block devices to be used by the container.",
- MarkdownDescription: "volumeDevices is the list of block devices to be used by the container.",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "device_path": schema.StringAttribute{
- Description: "devicePath is the path inside of the container that the device will be mapped to.",
- MarkdownDescription: "devicePath is the path inside of the container that the device will be mapped to.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "name": schema.StringAttribute{
- Description: "name must match the name of a persistentVolumeClaim in the pod",
- MarkdownDescription: "name must match the name of a persistentVolumeClaim in the pod",
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "volume_mounts": schema.ListNestedAttribute{
- Description: "Pod volumes to mount into the container's filesystem.Cannot be updated.",
- MarkdownDescription: "Pod volumes to mount into the container's filesystem.Cannot be updated.",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "mount_path": schema.StringAttribute{
- Description: "Path within the container at which the volume should be mounted. Mustnot contain ':'.",
- MarkdownDescription: "Path within the container at which the volume should be mounted. Mustnot contain ':'.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "mount_propagation": schema.StringAttribute{
- Description: "mountPropagation determines how mounts are propagated from the hostto container and the other way around.When not set, MountPropagationNone is used.This field is beta in 1.10.",
- MarkdownDescription: "mountPropagation determines how mounts are propagated from the hostto container and the other way around.When not set, MountPropagationNone is used.This field is beta in 1.10.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "name": schema.StringAttribute{
- Description: "This must match the Name of a Volume.",
- MarkdownDescription: "This must match the Name of a Volume.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "read_only": schema.BoolAttribute{
- Description: "Mounted read-only if true, read-write otherwise (false or unspecified).Defaults to false.",
- MarkdownDescription: "Mounted read-only if true, read-write otherwise (false or unspecified).Defaults to false.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "sub_path": schema.StringAttribute{
- Description: "Path within the volume from which the container's volume should be mounted.Defaults to '' (volume's root).",
- MarkdownDescription: "Path within the volume from which the container's volume should be mounted.Defaults to '' (volume's root).",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "sub_path_expr": schema.StringAttribute{
- Description: "Expanded path within the volume from which the container's volume should be mounted.Behaves similarly to SubPath but environment variable references $(VAR_NAME) are expanded using the container's environment.Defaults to '' (volume's root).SubPathExpr and SubPath are mutually exclusive.",
- MarkdownDescription: "Expanded path within the volume from which the container's volume should be mounted.Behaves similarly to SubPath but environment variable references $(VAR_NAME) are expanded using the container's environment.Defaults to '' (volume's root).SubPathExpr and SubPath are mutually exclusive.",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "working_dir": schema.StringAttribute{
- Description: "Container's working directory.If not specified, the container runtime's default will be used, whichmight be configured in the container image.Cannot be updated.",
- MarkdownDescription: "Container's working directory.If not specified, the container runtime's default will be used, whichmight be configured in the container image.Cannot be updated.",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- },
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "dns_config": schema.SingleNestedAttribute{
- Description: "Specifies the DNS parameters of a pod.Parameters specified here will be merged to the generated DNSconfiguration based on DNSPolicy.",
- MarkdownDescription: "Specifies the DNS parameters of a pod.Parameters specified here will be merged to the generated DNSconfiguration based on DNSPolicy.",
- Attributes: map[string]schema.Attribute{
- "nameservers": schema.ListAttribute{
- Description: "A list of DNS name server IP addresses.This will be appended to the base nameservers generated from DNSPolicy.Duplicated nameservers will be removed.",
- MarkdownDescription: "A list of DNS name server IP addresses.This will be appended to the base nameservers generated from DNSPolicy.Duplicated nameservers will be removed.",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "options": schema.ListNestedAttribute{
- Description: "A list of DNS resolver options.This will be merged with the base options generated from DNSPolicy.Duplicated entries will be removed. Resolution options given in Optionswill override those that appear in the base DNSPolicy.",
- MarkdownDescription: "A list of DNS resolver options.This will be merged with the base options generated from DNSPolicy.Duplicated entries will be removed. Resolution options given in Optionswill override those that appear in the base DNSPolicy.",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "name": schema.StringAttribute{
- Description: "Required.",
- MarkdownDescription: "Required.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "value": schema.StringAttribute{
- Description: "",
- MarkdownDescription: "",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "searches": schema.ListAttribute{
- Description: "A list of DNS search domains for host-name lookup.This will be appended to the base search paths generated from DNSPolicy.Duplicated search paths will be removed.",
- MarkdownDescription: "A list of DNS search domains for host-name lookup.This will be appended to the base search paths generated from DNSPolicy.Duplicated search paths will be removed.",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "dns_policy": schema.StringAttribute{
- Description: "Set DNS policy for the pod.Defaults to 'ClusterFirst'.Valid values are 'ClusterFirstWithHostNet', 'ClusterFirst', 'Default' or 'None'.DNS parameters given in DNSConfig will be merged with the policy selected with DNSPolicy.To have DNS options set along with hostNetwork, you have to specify DNS policyexplicitly to 'ClusterFirstWithHostNet'.",
- MarkdownDescription: "Set DNS policy for the pod.Defaults to 'ClusterFirst'.Valid values are 'ClusterFirstWithHostNet', 'ClusterFirst', 'Default' or 'None'.DNS parameters given in DNSConfig will be merged with the policy selected with DNSPolicy.To have DNS options set along with hostNetwork, you have to specify DNS policyexplicitly to 'ClusterFirstWithHostNet'.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "enable_service_links": schema.BoolAttribute{
- Description: "EnableServiceLinks indicates whether information about services should be injected into pod'senvironment variables, matching the syntax of Docker links.Optional: Defaults to true.",
- MarkdownDescription: "EnableServiceLinks indicates whether information about services should be injected into pod'senvironment variables, matching the syntax of Docker links.Optional: Defaults to true.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "ephemeral_containers": schema.ListNestedAttribute{
- Description: "List of ephemeral containers run in this pod. Ephemeral containers may be run in an existingpod to perform user-initiated actions such as debugging. This list cannot be specified whencreating a pod, and it cannot be modified by updating the pod spec. In order to add anephemeral container to an existing pod, use the pod's ephemeralcontainers subresource.",
- MarkdownDescription: "List of ephemeral containers run in this pod. Ephemeral containers may be run in an existingpod to perform user-initiated actions such as debugging. This list cannot be specified whencreating a pod, and it cannot be modified by updating the pod spec. In order to add anephemeral container to an existing pod, use the pod's ephemeralcontainers subresource.",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "args": schema.ListAttribute{
- Description: "Arguments to the entrypoint.The image's CMD is used if this is not provided.Variable references $(VAR_NAME) are expanded using the container's environment. If a variablecannot be resolved, the reference in the input string will be unchanged. Double $$ are reducedto a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. '$$(VAR_NAME)' willproduce the string literal '$(VAR_NAME)'. Escaped references will never be expanded, regardlessof whether the variable exists or not. Cannot be updated.More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell",
- MarkdownDescription: "Arguments to the entrypoint.The image's CMD is used if this is not provided.Variable references $(VAR_NAME) are expanded using the container's environment. If a variablecannot be resolved, the reference in the input string will be unchanged. Double $$ are reducedto a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. '$$(VAR_NAME)' willproduce the string literal '$(VAR_NAME)'. Escaped references will never be expanded, regardlessof whether the variable exists or not. Cannot be updated.More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "command": schema.ListAttribute{
- Description: "Entrypoint array. Not executed within a shell.The image's ENTRYPOINT is used if this is not provided.Variable references $(VAR_NAME) are expanded using the container's environment. If a variablecannot be resolved, the reference in the input string will be unchanged. Double $$ are reducedto a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. '$$(VAR_NAME)' willproduce the string literal '$(VAR_NAME)'. Escaped references will never be expanded, regardlessof whether the variable exists or not. Cannot be updated.More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell",
- MarkdownDescription: "Entrypoint array. Not executed within a shell.The image's ENTRYPOINT is used if this is not provided.Variable references $(VAR_NAME) are expanded using the container's environment. If a variablecannot be resolved, the reference in the input string will be unchanged. Double $$ are reducedto a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. '$$(VAR_NAME)' willproduce the string literal '$(VAR_NAME)'. Escaped references will never be expanded, regardlessof whether the variable exists or not. Cannot be updated.More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "env": schema.ListNestedAttribute{
- Description: "List of environment variables to set in the container.Cannot be updated.",
- MarkdownDescription: "List of environment variables to set in the container.Cannot be updated.",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "name": schema.StringAttribute{
- Description: "Name of the environment variable. Must be a C_IDENTIFIER.",
- MarkdownDescription: "Name of the environment variable. Must be a C_IDENTIFIER.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "value": schema.StringAttribute{
- Description: "Variable references $(VAR_NAME) are expandedusing the previously defined environment variables in the container andany service environment variables. If a variable cannot be resolved,the reference in the input string will be unchanged. Double $$ are reducedto a single $, which allows for escaping the $(VAR_NAME) syntax: i.e.'$$(VAR_NAME)' will produce the string literal '$(VAR_NAME)'.Escaped references will never be expanded, regardless of whether the variableexists or not.Defaults to ''.",
- MarkdownDescription: "Variable references $(VAR_NAME) are expandedusing the previously defined environment variables in the container andany service environment variables. If a variable cannot be resolved,the reference in the input string will be unchanged. Double $$ are reducedto a single $, which allows for escaping the $(VAR_NAME) syntax: i.e.'$$(VAR_NAME)' will produce the string literal '$(VAR_NAME)'.Escaped references will never be expanded, regardless of whether the variableexists or not.Defaults to ''.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "value_from": schema.SingleNestedAttribute{
- Description: "Source for the environment variable's value. Cannot be used if value is not empty.",
- MarkdownDescription: "Source for the environment variable's value. Cannot be used if value is not empty.",
- Attributes: map[string]schema.Attribute{
- "config_map_key_ref": schema.SingleNestedAttribute{
- Description: "Selects a key of a ConfigMap.",
- MarkdownDescription: "Selects a key of a ConfigMap.",
- Attributes: map[string]schema.Attribute{
- "key": schema.StringAttribute{
- Description: "The key to select.",
- MarkdownDescription: "The key to select.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "name": schema.StringAttribute{
- Description: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?",
- MarkdownDescription: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "optional": schema.BoolAttribute{
- Description: "Specify whether the ConfigMap or its key must be defined",
- MarkdownDescription: "Specify whether the ConfigMap or its key must be defined",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "field_ref": schema.SingleNestedAttribute{
- Description: "Selects a field of the pod: supports metadata.name, metadata.namespace, 'metadata.labels['']', 'metadata.annotations['']',spec.nodeName, spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs.",
- MarkdownDescription: "Selects a field of the pod: supports metadata.name, metadata.namespace, 'metadata.labels['']', 'metadata.annotations['']',spec.nodeName, spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs.",
- Attributes: map[string]schema.Attribute{
- "api_version": schema.StringAttribute{
- Description: "Version of the schema the FieldPath is written in terms of, defaults to 'v1'.",
- MarkdownDescription: "Version of the schema the FieldPath is written in terms of, defaults to 'v1'.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "field_path": schema.StringAttribute{
- Description: "Path of the field to select in the specified API version.",
- MarkdownDescription: "Path of the field to select in the specified API version.",
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "resource_field_ref": schema.SingleNestedAttribute{
- Description: "Selects a resource of the container: only resources limits and requests(limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu, requests.memory and requests.ephemeral-storage) are currently supported.",
- MarkdownDescription: "Selects a resource of the container: only resources limits and requests(limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu, requests.memory and requests.ephemeral-storage) are currently supported.",
- Attributes: map[string]schema.Attribute{
- "container_name": schema.StringAttribute{
- Description: "Container name: required for volumes, optional for env vars",
- MarkdownDescription: "Container name: required for volumes, optional for env vars",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "divisor": schema.StringAttribute{
- Description: "Specifies the output format of the exposed resources, defaults to '1'",
- MarkdownDescription: "Specifies the output format of the exposed resources, defaults to '1'",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "resource": schema.StringAttribute{
- Description: "Required: resource to select",
- MarkdownDescription: "Required: resource to select",
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "secret_key_ref": schema.SingleNestedAttribute{
- Description: "Selects a key of a secret in the pod's namespace",
- MarkdownDescription: "Selects a key of a secret in the pod's namespace",
- Attributes: map[string]schema.Attribute{
- "key": schema.StringAttribute{
- Description: "The key of the secret to select from. Must be a valid secret key.",
- MarkdownDescription: "The key of the secret to select from. Must be a valid secret key.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "name": schema.StringAttribute{
- Description: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?",
- MarkdownDescription: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "optional": schema.BoolAttribute{
- Description: "Specify whether the Secret or its key must be defined",
- MarkdownDescription: "Specify whether the Secret or its key must be defined",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "env_from": schema.ListNestedAttribute{
- Description: "List of sources to populate environment variables in the container.The keys defined within a source must be a C_IDENTIFIER. All invalid keyswill be reported as an event when the container is starting. When a key exists in multiplesources, the value associated with the last source will take precedence.Values defined by an Env with a duplicate key will take precedence.Cannot be updated.",
- MarkdownDescription: "List of sources to populate environment variables in the container.The keys defined within a source must be a C_IDENTIFIER. All invalid keyswill be reported as an event when the container is starting. When a key exists in multiplesources, the value associated with the last source will take precedence.Values defined by an Env with a duplicate key will take precedence.Cannot be updated.",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "config_map_ref": schema.SingleNestedAttribute{
- Description: "The ConfigMap to select from",
- MarkdownDescription: "The ConfigMap to select from",
- Attributes: map[string]schema.Attribute{
- "name": schema.StringAttribute{
- Description: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?",
- MarkdownDescription: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "optional": schema.BoolAttribute{
- Description: "Specify whether the ConfigMap must be defined",
- MarkdownDescription: "Specify whether the ConfigMap must be defined",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "prefix": schema.StringAttribute{
- Description: "An optional identifier to prepend to each key in the ConfigMap. Must be a C_IDENTIFIER.",
- MarkdownDescription: "An optional identifier to prepend to each key in the ConfigMap. Must be a C_IDENTIFIER.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "secret_ref": schema.SingleNestedAttribute{
- Description: "The Secret to select from",
- MarkdownDescription: "The Secret to select from",
- Attributes: map[string]schema.Attribute{
- "name": schema.StringAttribute{
- Description: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?",
- MarkdownDescription: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "optional": schema.BoolAttribute{
- Description: "Specify whether the Secret must be defined",
- MarkdownDescription: "Specify whether the Secret must be defined",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "image": schema.StringAttribute{
- Description: "Container image name.More info: https://kubernetes.io/docs/concepts/containers/images",
- MarkdownDescription: "Container image name.More info: https://kubernetes.io/docs/concepts/containers/images",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "image_pull_policy": schema.StringAttribute{
- Description: "Image pull policy.One of Always, Never, IfNotPresent.Defaults to Always if :latest tag is specified, or IfNotPresent otherwise.Cannot be updated.More info: https://kubernetes.io/docs/concepts/containers/images#updating-images",
- MarkdownDescription: "Image pull policy.One of Always, Never, IfNotPresent.Defaults to Always if :latest tag is specified, or IfNotPresent otherwise.Cannot be updated.More info: https://kubernetes.io/docs/concepts/containers/images#updating-images",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "lifecycle": schema.SingleNestedAttribute{
- Description: "Lifecycle is not allowed for ephemeral containers.",
- MarkdownDescription: "Lifecycle is not allowed for ephemeral containers.",
- Attributes: map[string]schema.Attribute{
- "post_start": schema.SingleNestedAttribute{
- Description: "PostStart is called immediately after a container is created. If the handler fails,the container is terminated and restarted according to its restart policy.Other management of the container blocks until the hook completes.More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks",
- MarkdownDescription: "PostStart is called immediately after a container is created. If the handler fails,the container is terminated and restarted according to its restart policy.Other management of the container blocks until the hook completes.More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks",
- Attributes: map[string]schema.Attribute{
- "exec": schema.SingleNestedAttribute{
- Description: "Exec specifies the action to take.",
- MarkdownDescription: "Exec specifies the action to take.",
- Attributes: map[string]schema.Attribute{
- "command": schema.ListAttribute{
- Description: "Command is the command line to execute inside the container, the working directory for thecommand is root ('/') in the container's filesystem. The command is simply exec'd, it isnot run inside a shell, so traditional shell instructions ('|', etc) won't work. To usea shell, you need to explicitly call out to that shell.Exit status of 0 is treated as live/healthy and non-zero is unhealthy.",
- MarkdownDescription: "Command is the command line to execute inside the container, the working directory for thecommand is root ('/') in the container's filesystem. The command is simply exec'd, it isnot run inside a shell, so traditional shell instructions ('|', etc) won't work. To usea shell, you need to explicitly call out to that shell.Exit status of 0 is treated as live/healthy and non-zero is unhealthy.",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "http_get": schema.SingleNestedAttribute{
- Description: "HTTPGet specifies the http request to perform.",
- MarkdownDescription: "HTTPGet specifies the http request to perform.",
- Attributes: map[string]schema.Attribute{
- "host": schema.StringAttribute{
- Description: "Host name to connect to, defaults to the pod IP. You probably want to set'Host' in httpHeaders instead.",
- MarkdownDescription: "Host name to connect to, defaults to the pod IP. You probably want to set'Host' in httpHeaders instead.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "http_headers": schema.ListNestedAttribute{
- Description: "Custom headers to set in the request. HTTP allows repeated headers.",
- MarkdownDescription: "Custom headers to set in the request. HTTP allows repeated headers.",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "name": schema.StringAttribute{
- Description: "The header field name.This will be canonicalized upon output, so case-variant names will be understood as the same header.",
- MarkdownDescription: "The header field name.This will be canonicalized upon output, so case-variant names will be understood as the same header.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "value": schema.StringAttribute{
- Description: "The header field value",
- MarkdownDescription: "The header field value",
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "path": schema.StringAttribute{
- Description: "Path to access on the HTTP server.",
- MarkdownDescription: "Path to access on the HTTP server.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "port": schema.StringAttribute{
- Description: "Name or number of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.",
- MarkdownDescription: "Name or number of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "scheme": schema.StringAttribute{
- Description: "Scheme to use for connecting to the host.Defaults to HTTP.",
- MarkdownDescription: "Scheme to use for connecting to the host.Defaults to HTTP.",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "tcp_socket": schema.SingleNestedAttribute{
- Description: "Deprecated. TCPSocket is NOT supported as a LifecycleHandler and keptfor the backward compatibility. There are no validation of this field andlifecycle hooks will fail in runtime when tcp handler is specified.",
- MarkdownDescription: "Deprecated. TCPSocket is NOT supported as a LifecycleHandler and keptfor the backward compatibility. There are no validation of this field andlifecycle hooks will fail in runtime when tcp handler is specified.",
- Attributes: map[string]schema.Attribute{
- "host": schema.StringAttribute{
- Description: "Optional: Host name to connect to, defaults to the pod IP.",
- MarkdownDescription: "Optional: Host name to connect to, defaults to the pod IP.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "port": schema.StringAttribute{
- Description: "Number or name of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.",
- MarkdownDescription: "Number or name of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.",
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "pre_stop": schema.SingleNestedAttribute{
- Description: "PreStop is called immediately before a container is terminated due to anAPI request or management event such as liveness/startup probe failure,preemption, resource contention, etc. The handler is not called if thecontainer crashes or exits. The Pod's termination grace period countdown begins before thePreStop hook is executed. Regardless of the outcome of the handler, thecontainer will eventually terminate within the Pod's termination graceperiod (unless delayed by finalizers). Other management of the container blocks until the hook completesor until the termination grace period is reached.More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks",
- MarkdownDescription: "PreStop is called immediately before a container is terminated due to anAPI request or management event such as liveness/startup probe failure,preemption, resource contention, etc. The handler is not called if thecontainer crashes or exits. The Pod's termination grace period countdown begins before thePreStop hook is executed. Regardless of the outcome of the handler, thecontainer will eventually terminate within the Pod's termination graceperiod (unless delayed by finalizers). Other management of the container blocks until the hook completesor until the termination grace period is reached.More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks",
- Attributes: map[string]schema.Attribute{
- "exec": schema.SingleNestedAttribute{
- Description: "Exec specifies the action to take.",
- MarkdownDescription: "Exec specifies the action to take.",
- Attributes: map[string]schema.Attribute{
- "command": schema.ListAttribute{
- Description: "Command is the command line to execute inside the container, the working directory for thecommand is root ('/') in the container's filesystem. The command is simply exec'd, it isnot run inside a shell, so traditional shell instructions ('|', etc) won't work. To usea shell, you need to explicitly call out to that shell.Exit status of 0 is treated as live/healthy and non-zero is unhealthy.",
- MarkdownDescription: "Command is the command line to execute inside the container, the working directory for thecommand is root ('/') in the container's filesystem. The command is simply exec'd, it isnot run inside a shell, so traditional shell instructions ('|', etc) won't work. To usea shell, you need to explicitly call out to that shell.Exit status of 0 is treated as live/healthy and non-zero is unhealthy.",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "http_get": schema.SingleNestedAttribute{
- Description: "HTTPGet specifies the http request to perform.",
- MarkdownDescription: "HTTPGet specifies the http request to perform.",
- Attributes: map[string]schema.Attribute{
- "host": schema.StringAttribute{
- Description: "Host name to connect to, defaults to the pod IP. You probably want to set'Host' in httpHeaders instead.",
- MarkdownDescription: "Host name to connect to, defaults to the pod IP. You probably want to set'Host' in httpHeaders instead.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "http_headers": schema.ListNestedAttribute{
- Description: "Custom headers to set in the request. HTTP allows repeated headers.",
- MarkdownDescription: "Custom headers to set in the request. HTTP allows repeated headers.",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "name": schema.StringAttribute{
- Description: "The header field name.This will be canonicalized upon output, so case-variant names will be understood as the same header.",
- MarkdownDescription: "The header field name.This will be canonicalized upon output, so case-variant names will be understood as the same header.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "value": schema.StringAttribute{
- Description: "The header field value",
- MarkdownDescription: "The header field value",
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "path": schema.StringAttribute{
- Description: "Path to access on the HTTP server.",
- MarkdownDescription: "Path to access on the HTTP server.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "port": schema.StringAttribute{
- Description: "Name or number of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.",
- MarkdownDescription: "Name or number of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "scheme": schema.StringAttribute{
- Description: "Scheme to use for connecting to the host.Defaults to HTTP.",
- MarkdownDescription: "Scheme to use for connecting to the host.Defaults to HTTP.",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "tcp_socket": schema.SingleNestedAttribute{
- Description: "Deprecated. TCPSocket is NOT supported as a LifecycleHandler and keptfor the backward compatibility. There are no validation of this field andlifecycle hooks will fail in runtime when tcp handler is specified.",
- MarkdownDescription: "Deprecated. TCPSocket is NOT supported as a LifecycleHandler and keptfor the backward compatibility. There are no validation of this field andlifecycle hooks will fail in runtime when tcp handler is specified.",
- Attributes: map[string]schema.Attribute{
- "host": schema.StringAttribute{
- Description: "Optional: Host name to connect to, defaults to the pod IP.",
- MarkdownDescription: "Optional: Host name to connect to, defaults to the pod IP.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "port": schema.StringAttribute{
- Description: "Number or name of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.",
- MarkdownDescription: "Number or name of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.",
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "liveness_probe": schema.SingleNestedAttribute{
- Description: "Probes are not allowed for ephemeral containers.",
- MarkdownDescription: "Probes are not allowed for ephemeral containers.",
- Attributes: map[string]schema.Attribute{
- "exec": schema.SingleNestedAttribute{
- Description: "Exec specifies the action to take.",
- MarkdownDescription: "Exec specifies the action to take.",
- Attributes: map[string]schema.Attribute{
- "command": schema.ListAttribute{
- Description: "Command is the command line to execute inside the container, the working directory for thecommand is root ('/') in the container's filesystem. The command is simply exec'd, it isnot run inside a shell, so traditional shell instructions ('|', etc) won't work. To usea shell, you need to explicitly call out to that shell.Exit status of 0 is treated as live/healthy and non-zero is unhealthy.",
- MarkdownDescription: "Command is the command line to execute inside the container, the working directory for thecommand is root ('/') in the container's filesystem. The command is simply exec'd, it isnot run inside a shell, so traditional shell instructions ('|', etc) won't work. To usea shell, you need to explicitly call out to that shell.Exit status of 0 is treated as live/healthy and non-zero is unhealthy.",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "failure_threshold": schema.Int64Attribute{
- Description: "Minimum consecutive failures for the probe to be considered failed after having succeeded.Defaults to 3. Minimum value is 1.",
- MarkdownDescription: "Minimum consecutive failures for the probe to be considered failed after having succeeded.Defaults to 3. Minimum value is 1.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "grpc": schema.SingleNestedAttribute{
- Description: "GRPC specifies an action involving a GRPC port.",
- MarkdownDescription: "GRPC specifies an action involving a GRPC port.",
- Attributes: map[string]schema.Attribute{
- "port": schema.Int64Attribute{
- Description: "Port number of the gRPC service. Number must be in the range 1 to 65535.",
- MarkdownDescription: "Port number of the gRPC service. Number must be in the range 1 to 65535.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "service": schema.StringAttribute{
- Description: "Service is the name of the service to place in the gRPC HealthCheckRequest(see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).If this is not specified, the default behavior is defined by gRPC.",
- MarkdownDescription: "Service is the name of the service to place in the gRPC HealthCheckRequest(see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).If this is not specified, the default behavior is defined by gRPC.",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "http_get": schema.SingleNestedAttribute{
- Description: "HTTPGet specifies the http request to perform.",
- MarkdownDescription: "HTTPGet specifies the http request to perform.",
- Attributes: map[string]schema.Attribute{
- "host": schema.StringAttribute{
- Description: "Host name to connect to, defaults to the pod IP. You probably want to set'Host' in httpHeaders instead.",
- MarkdownDescription: "Host name to connect to, defaults to the pod IP. You probably want to set'Host' in httpHeaders instead.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "http_headers": schema.ListNestedAttribute{
- Description: "Custom headers to set in the request. HTTP allows repeated headers.",
- MarkdownDescription: "Custom headers to set in the request. HTTP allows repeated headers.",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "name": schema.StringAttribute{
- Description: "The header field name.This will be canonicalized upon output, so case-variant names will be understood as the same header.",
- MarkdownDescription: "The header field name.This will be canonicalized upon output, so case-variant names will be understood as the same header.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "value": schema.StringAttribute{
- Description: "The header field value",
- MarkdownDescription: "The header field value",
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "path": schema.StringAttribute{
- Description: "Path to access on the HTTP server.",
- MarkdownDescription: "Path to access on the HTTP server.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "port": schema.StringAttribute{
- Description: "Name or number of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.",
- MarkdownDescription: "Name or number of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "scheme": schema.StringAttribute{
- Description: "Scheme to use for connecting to the host.Defaults to HTTP.",
- MarkdownDescription: "Scheme to use for connecting to the host.Defaults to HTTP.",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "initial_delay_seconds": schema.Int64Attribute{
- Description: "Number of seconds after the container has started before liveness probes are initiated.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes",
- MarkdownDescription: "Number of seconds after the container has started before liveness probes are initiated.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "period_seconds": schema.Int64Attribute{
- Description: "How often (in seconds) to perform the probe.Default to 10 seconds. Minimum value is 1.",
- MarkdownDescription: "How often (in seconds) to perform the probe.Default to 10 seconds. Minimum value is 1.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "success_threshold": schema.Int64Attribute{
- Description: "Minimum consecutive successes for the probe to be considered successful after having failed.Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.",
- MarkdownDescription: "Minimum consecutive successes for the probe to be considered successful after having failed.Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "tcp_socket": schema.SingleNestedAttribute{
- Description: "TCPSocket specifies an action involving a TCP port.",
- MarkdownDescription: "TCPSocket specifies an action involving a TCP port.",
- Attributes: map[string]schema.Attribute{
- "host": schema.StringAttribute{
- Description: "Optional: Host name to connect to, defaults to the pod IP.",
- MarkdownDescription: "Optional: Host name to connect to, defaults to the pod IP.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "port": schema.StringAttribute{
- Description: "Number or name of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.",
- MarkdownDescription: "Number or name of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.",
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "termination_grace_period_seconds": schema.Int64Attribute{
- Description: "Optional duration in seconds the pod needs to terminate gracefully upon probe failure.The grace period is the duration in seconds after the processes running in the pod are senta termination signal and the time when the processes are forcibly halted with a kill signal.Set this value longer than the expected cleanup time for your process.If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, thisvalue overrides the value provided by the pod spec.Value must be non-negative integer. The value zero indicates stop immediately viathe kill signal (no opportunity to shut down).This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate.Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.",
- MarkdownDescription: "Optional duration in seconds the pod needs to terminate gracefully upon probe failure.The grace period is the duration in seconds after the processes running in the pod are senta termination signal and the time when the processes are forcibly halted with a kill signal.Set this value longer than the expected cleanup time for your process.If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, thisvalue overrides the value provided by the pod spec.Value must be non-negative integer. The value zero indicates stop immediately viathe kill signal (no opportunity to shut down).This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate.Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "timeout_seconds": schema.Int64Attribute{
- Description: "Number of seconds after which the probe times out.Defaults to 1 second. Minimum value is 1.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes",
- MarkdownDescription: "Number of seconds after which the probe times out.Defaults to 1 second. Minimum value is 1.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "name": schema.StringAttribute{
- Description: "Name of the ephemeral container specified as a DNS_LABEL.This name must be unique among all containers, init containers and ephemeral containers.",
- MarkdownDescription: "Name of the ephemeral container specified as a DNS_LABEL.This name must be unique among all containers, init containers and ephemeral containers.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "ports": schema.ListNestedAttribute{
- Description: "Ports are not allowed for ephemeral containers.",
- MarkdownDescription: "Ports are not allowed for ephemeral containers.",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "container_port": schema.Int64Attribute{
- Description: "Number of port to expose on the pod's IP address.This must be a valid port number, 0 < x < 65536.",
- MarkdownDescription: "Number of port to expose on the pod's IP address.This must be a valid port number, 0 < x < 65536.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "host_ip": schema.StringAttribute{
- Description: "What host IP to bind the external port to.",
- MarkdownDescription: "What host IP to bind the external port to.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "host_port": schema.Int64Attribute{
- Description: "Number of port to expose on the host.If specified, this must be a valid port number, 0 < x < 65536.If HostNetwork is specified, this must match ContainerPort.Most containers do not need this.",
- MarkdownDescription: "Number of port to expose on the host.If specified, this must be a valid port number, 0 < x < 65536.If HostNetwork is specified, this must match ContainerPort.Most containers do not need this.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "name": schema.StringAttribute{
- Description: "If specified, this must be an IANA_SVC_NAME and unique within the pod. Eachnamed port in a pod must have a unique name. Name for the port that can bereferred to by services.",
- MarkdownDescription: "If specified, this must be an IANA_SVC_NAME and unique within the pod. Eachnamed port in a pod must have a unique name. Name for the port that can bereferred to by services.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "protocol": schema.StringAttribute{
- Description: "Protocol for port. Must be UDP, TCP, or SCTP.Defaults to 'TCP'.",
- MarkdownDescription: "Protocol for port. Must be UDP, TCP, or SCTP.Defaults to 'TCP'.",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "readiness_probe": schema.SingleNestedAttribute{
- Description: "Probes are not allowed for ephemeral containers.",
- MarkdownDescription: "Probes are not allowed for ephemeral containers.",
- Attributes: map[string]schema.Attribute{
- "exec": schema.SingleNestedAttribute{
- Description: "Exec specifies the action to take.",
- MarkdownDescription: "Exec specifies the action to take.",
- Attributes: map[string]schema.Attribute{
- "command": schema.ListAttribute{
- Description: "Command is the command line to execute inside the container, the working directory for thecommand is root ('/') in the container's filesystem. The command is simply exec'd, it isnot run inside a shell, so traditional shell instructions ('|', etc) won't work. To usea shell, you need to explicitly call out to that shell.Exit status of 0 is treated as live/healthy and non-zero is unhealthy.",
- MarkdownDescription: "Command is the command line to execute inside the container, the working directory for thecommand is root ('/') in the container's filesystem. The command is simply exec'd, it isnot run inside a shell, so traditional shell instructions ('|', etc) won't work. To usea shell, you need to explicitly call out to that shell.Exit status of 0 is treated as live/healthy and non-zero is unhealthy.",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "failure_threshold": schema.Int64Attribute{
- Description: "Minimum consecutive failures for the probe to be considered failed after having succeeded.Defaults to 3. Minimum value is 1.",
- MarkdownDescription: "Minimum consecutive failures for the probe to be considered failed after having succeeded.Defaults to 3. Minimum value is 1.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "grpc": schema.SingleNestedAttribute{
- Description: "GRPC specifies an action involving a GRPC port.",
- MarkdownDescription: "GRPC specifies an action involving a GRPC port.",
- Attributes: map[string]schema.Attribute{
- "port": schema.Int64Attribute{
- Description: "Port number of the gRPC service. Number must be in the range 1 to 65535.",
- MarkdownDescription: "Port number of the gRPC service. Number must be in the range 1 to 65535.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "service": schema.StringAttribute{
- Description: "Service is the name of the service to place in the gRPC HealthCheckRequest(see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).If this is not specified, the default behavior is defined by gRPC.",
- MarkdownDescription: "Service is the name of the service to place in the gRPC HealthCheckRequest(see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).If this is not specified, the default behavior is defined by gRPC.",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "http_get": schema.SingleNestedAttribute{
- Description: "HTTPGet specifies the http request to perform.",
- MarkdownDescription: "HTTPGet specifies the http request to perform.",
- Attributes: map[string]schema.Attribute{
- "host": schema.StringAttribute{
- Description: "Host name to connect to, defaults to the pod IP. You probably want to set'Host' in httpHeaders instead.",
- MarkdownDescription: "Host name to connect to, defaults to the pod IP. You probably want to set'Host' in httpHeaders instead.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "http_headers": schema.ListNestedAttribute{
- Description: "Custom headers to set in the request. HTTP allows repeated headers.",
- MarkdownDescription: "Custom headers to set in the request. HTTP allows repeated headers.",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "name": schema.StringAttribute{
- Description: "The header field name.This will be canonicalized upon output, so case-variant names will be understood as the same header.",
- MarkdownDescription: "The header field name.This will be canonicalized upon output, so case-variant names will be understood as the same header.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "value": schema.StringAttribute{
- Description: "The header field value",
- MarkdownDescription: "The header field value",
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "path": schema.StringAttribute{
- Description: "Path to access on the HTTP server.",
- MarkdownDescription: "Path to access on the HTTP server.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "port": schema.StringAttribute{
- Description: "Name or number of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.",
- MarkdownDescription: "Name or number of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "scheme": schema.StringAttribute{
- Description: "Scheme to use for connecting to the host.Defaults to HTTP.",
- MarkdownDescription: "Scheme to use for connecting to the host.Defaults to HTTP.",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "initial_delay_seconds": schema.Int64Attribute{
- Description: "Number of seconds after the container has started before liveness probes are initiated.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes",
- MarkdownDescription: "Number of seconds after the container has started before liveness probes are initiated.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "period_seconds": schema.Int64Attribute{
- Description: "How often (in seconds) to perform the probe.Default to 10 seconds. Minimum value is 1.",
- MarkdownDescription: "How often (in seconds) to perform the probe.Default to 10 seconds. Minimum value is 1.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "success_threshold": schema.Int64Attribute{
- Description: "Minimum consecutive successes for the probe to be considered successful after having failed.Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.",
- MarkdownDescription: "Minimum consecutive successes for the probe to be considered successful after having failed.Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "tcp_socket": schema.SingleNestedAttribute{
- Description: "TCPSocket specifies an action involving a TCP port.",
- MarkdownDescription: "TCPSocket specifies an action involving a TCP port.",
- Attributes: map[string]schema.Attribute{
- "host": schema.StringAttribute{
- Description: "Optional: Host name to connect to, defaults to the pod IP.",
- MarkdownDescription: "Optional: Host name to connect to, defaults to the pod IP.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "port": schema.StringAttribute{
- Description: "Number or name of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.",
- MarkdownDescription: "Number or name of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.",
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "termination_grace_period_seconds": schema.Int64Attribute{
- Description: "Optional duration in seconds the pod needs to terminate gracefully upon probe failure.The grace period is the duration in seconds after the processes running in the pod are senta termination signal and the time when the processes are forcibly halted with a kill signal.Set this value longer than the expected cleanup time for your process.If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, thisvalue overrides the value provided by the pod spec.Value must be non-negative integer. The value zero indicates stop immediately viathe kill signal (no opportunity to shut down).This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate.Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.",
- MarkdownDescription: "Optional duration in seconds the pod needs to terminate gracefully upon probe failure.The grace period is the duration in seconds after the processes running in the pod are senta termination signal and the time when the processes are forcibly halted with a kill signal.Set this value longer than the expected cleanup time for your process.If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, thisvalue overrides the value provided by the pod spec.Value must be non-negative integer. The value zero indicates stop immediately viathe kill signal (no opportunity to shut down).This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate.Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "timeout_seconds": schema.Int64Attribute{
- Description: "Number of seconds after which the probe times out.Defaults to 1 second. Minimum value is 1.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes",
- MarkdownDescription: "Number of seconds after which the probe times out.Defaults to 1 second. Minimum value is 1.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "resize_policy": schema.ListNestedAttribute{
- Description: "Resources resize policy for the container.",
- MarkdownDescription: "Resources resize policy for the container.",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "resource_name": schema.StringAttribute{
- Description: "Name of the resource to which this resource resize policy applies.Supported values: cpu, memory.",
- MarkdownDescription: "Name of the resource to which this resource resize policy applies.Supported values: cpu, memory.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "restart_policy": schema.StringAttribute{
- Description: "Restart policy to apply when specified resource is resized.If not specified, it defaults to NotRequired.",
- MarkdownDescription: "Restart policy to apply when specified resource is resized.If not specified, it defaults to NotRequired.",
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "resources": schema.SingleNestedAttribute{
- Description: "Resources are not allowed for ephemeral containers. Ephemeral containers use spare resourcesalready allocated to the pod.",
- MarkdownDescription: "Resources are not allowed for ephemeral containers. Ephemeral containers use spare resourcesalready allocated to the pod.",
- Attributes: map[string]schema.Attribute{
- "claims": schema.ListNestedAttribute{
- Description: "Claims lists the names of resources, defined in spec.resourceClaims,that are used by this container.This is an alpha field and requires enabling theDynamicResourceAllocation feature gate.This field is immutable. It can only be set for containers.",
- MarkdownDescription: "Claims lists the names of resources, defined in spec.resourceClaims,that are used by this container.This is an alpha field and requires enabling theDynamicResourceAllocation feature gate.This field is immutable. It can only be set for containers.",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "name": schema.StringAttribute{
- Description: "Name must match the name of one entry in pod.spec.resourceClaims ofthe Pod where this field is used. It makes that resource availableinside a container.",
- MarkdownDescription: "Name must match the name of one entry in pod.spec.resourceClaims ofthe Pod where this field is used. It makes that resource availableinside a container.",
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "limits": schema.MapAttribute{
- Description: "Limits describes the maximum amount of compute resources allowed.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/",
- MarkdownDescription: "Limits describes the maximum amount of compute resources allowed.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "requests": schema.MapAttribute{
- Description: "Requests describes the minimum amount of compute resources required.If Requests is omitted for a container, it defaults to Limits if that is explicitly specified,otherwise to an implementation-defined value. Requests cannot exceed Limits.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/",
- MarkdownDescription: "Requests describes the minimum amount of compute resources required.If Requests is omitted for a container, it defaults to Limits if that is explicitly specified,otherwise to an implementation-defined value. Requests cannot exceed Limits.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "restart_policy": schema.StringAttribute{
- Description: "Restart policy for the container to manage the restart behavior of eachcontainer within a pod.This may only be set for init containers. You cannot set this field onephemeral containers.",
- MarkdownDescription: "Restart policy for the container to manage the restart behavior of eachcontainer within a pod.This may only be set for init containers. You cannot set this field onephemeral containers.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "security_context": schema.SingleNestedAttribute{
- Description: "Optional: SecurityContext defines the security options the ephemeral container should be run with.If set, the fields of SecurityContext override the equivalent fields of PodSecurityContext.",
- MarkdownDescription: "Optional: SecurityContext defines the security options the ephemeral container should be run with.If set, the fields of SecurityContext override the equivalent fields of PodSecurityContext.",
- Attributes: map[string]schema.Attribute{
- "allow_privilege_escalation": schema.BoolAttribute{
- Description: "AllowPrivilegeEscalation controls whether a process can gain moreprivileges than its parent process. This bool directly controls ifthe no_new_privs flag will be set on the container process.AllowPrivilegeEscalation is true always when the container is:1) run as Privileged2) has CAP_SYS_ADMINNote that this field cannot be set when spec.os.name is windows.",
- MarkdownDescription: "AllowPrivilegeEscalation controls whether a process can gain moreprivileges than its parent process. This bool directly controls ifthe no_new_privs flag will be set on the container process.AllowPrivilegeEscalation is true always when the container is:1) run as Privileged2) has CAP_SYS_ADMINNote that this field cannot be set when spec.os.name is windows.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "capabilities": schema.SingleNestedAttribute{
- Description: "The capabilities to add/drop when running containers.Defaults to the default set of capabilities granted by the container runtime.Note that this field cannot be set when spec.os.name is windows.",
- MarkdownDescription: "The capabilities to add/drop when running containers.Defaults to the default set of capabilities granted by the container runtime.Note that this field cannot be set when spec.os.name is windows.",
- Attributes: map[string]schema.Attribute{
- "add": schema.ListAttribute{
- Description: "Added capabilities",
- MarkdownDescription: "Added capabilities",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "drop": schema.ListAttribute{
- Description: "Removed capabilities",
- MarkdownDescription: "Removed capabilities",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "privileged": schema.BoolAttribute{
- Description: "Run container in privileged mode.Processes in privileged containers are essentially equivalent to root on the host.Defaults to false.Note that this field cannot be set when spec.os.name is windows.",
- MarkdownDescription: "Run container in privileged mode.Processes in privileged containers are essentially equivalent to root on the host.Defaults to false.Note that this field cannot be set when spec.os.name is windows.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "proc_mount": schema.StringAttribute{
- Description: "procMount denotes the type of proc mount to use for the containers.The default is DefaultProcMount which uses the container runtime defaults forreadonly paths and masked paths.This requires the ProcMountType feature flag to be enabled.Note that this field cannot be set when spec.os.name is windows.",
- MarkdownDescription: "procMount denotes the type of proc mount to use for the containers.The default is DefaultProcMount which uses the container runtime defaults forreadonly paths and masked paths.This requires the ProcMountType feature flag to be enabled.Note that this field cannot be set when spec.os.name is windows.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "read_only_root_filesystem": schema.BoolAttribute{
- Description: "Whether this container has a read-only root filesystem.Default is false.Note that this field cannot be set when spec.os.name is windows.",
- MarkdownDescription: "Whether this container has a read-only root filesystem.Default is false.Note that this field cannot be set when spec.os.name is windows.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "run_as_group": schema.Int64Attribute{
- Description: "The GID to run the entrypoint of the container process.Uses runtime default if unset.May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.Note that this field cannot be set when spec.os.name is windows.",
- MarkdownDescription: "The GID to run the entrypoint of the container process.Uses runtime default if unset.May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.Note that this field cannot be set when spec.os.name is windows.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "run_as_non_root": schema.BoolAttribute{
- Description: "Indicates that the container must run as a non-root user.If true, the Kubelet will validate the image at runtime to ensure that itdoes not run as UID 0 (root) and fail to start the container if it does.If unset or false, no such validation will be performed.May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.",
- MarkdownDescription: "Indicates that the container must run as a non-root user.If true, the Kubelet will validate the image at runtime to ensure that itdoes not run as UID 0 (root) and fail to start the container if it does.If unset or false, no such validation will be performed.May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "run_as_user": schema.Int64Attribute{
- Description: "The UID to run the entrypoint of the container process.Defaults to user specified in image metadata if unspecified.May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.Note that this field cannot be set when spec.os.name is windows.",
- MarkdownDescription: "The UID to run the entrypoint of the container process.Defaults to user specified in image metadata if unspecified.May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.Note that this field cannot be set when spec.os.name is windows.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "se_linux_options": schema.SingleNestedAttribute{
- Description: "The SELinux context to be applied to the container.If unspecified, the container runtime will allocate a random SELinux context for eachcontainer. May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.Note that this field cannot be set when spec.os.name is windows.",
- MarkdownDescription: "The SELinux context to be applied to the container.If unspecified, the container runtime will allocate a random SELinux context for eachcontainer. May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.Note that this field cannot be set when spec.os.name is windows.",
- Attributes: map[string]schema.Attribute{
- "level": schema.StringAttribute{
- Description: "Level is SELinux level label that applies to the container.",
- MarkdownDescription: "Level is SELinux level label that applies to the container.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "role": schema.StringAttribute{
- Description: "Role is a SELinux role label that applies to the container.",
- MarkdownDescription: "Role is a SELinux role label that applies to the container.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "type": schema.StringAttribute{
- Description: "Type is a SELinux type label that applies to the container.",
- MarkdownDescription: "Type is a SELinux type label that applies to the container.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "user": schema.StringAttribute{
- Description: "User is a SELinux user label that applies to the container.",
- MarkdownDescription: "User is a SELinux user label that applies to the container.",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "seccomp_profile": schema.SingleNestedAttribute{
- Description: "The seccomp options to use by this container. If seccomp options areprovided at both the pod & container level, the container optionsoverride the pod options.Note that this field cannot be set when spec.os.name is windows.",
- MarkdownDescription: "The seccomp options to use by this container. If seccomp options areprovided at both the pod & container level, the container optionsoverride the pod options.Note that this field cannot be set when spec.os.name is windows.",
- Attributes: map[string]schema.Attribute{
- "localhost_profile": schema.StringAttribute{
- Description: "localhostProfile indicates a profile defined in a file on the node should be used.The profile must be preconfigured on the node to work.Must be a descending path, relative to the kubelet's configured seccomp profile location.Must be set if type is 'Localhost'. Must NOT be set for any other type.",
- MarkdownDescription: "localhostProfile indicates a profile defined in a file on the node should be used.The profile must be preconfigured on the node to work.Must be a descending path, relative to the kubelet's configured seccomp profile location.Must be set if type is 'Localhost'. Must NOT be set for any other type.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "type": schema.StringAttribute{
- Description: "type indicates which kind of seccomp profile will be applied.Valid options are:Localhost - a profile defined in a file on the node should be used.RuntimeDefault - the container runtime default profile should be used.Unconfined - no profile should be applied.",
- MarkdownDescription: "type indicates which kind of seccomp profile will be applied.Valid options are:Localhost - a profile defined in a file on the node should be used.RuntimeDefault - the container runtime default profile should be used.Unconfined - no profile should be applied.",
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "windows_options": schema.SingleNestedAttribute{
- Description: "The Windows specific settings applied to all containers.If unspecified, the options from the PodSecurityContext will be used.If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.Note that this field cannot be set when spec.os.name is linux.",
- MarkdownDescription: "The Windows specific settings applied to all containers.If unspecified, the options from the PodSecurityContext will be used.If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.Note that this field cannot be set when spec.os.name is linux.",
- Attributes: map[string]schema.Attribute{
- "gmsa_credential_spec": schema.StringAttribute{
- Description: "GMSACredentialSpec is where the GMSA admission webhook(https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of theGMSA credential spec named by the GMSACredentialSpecName field.",
- MarkdownDescription: "GMSACredentialSpec is where the GMSA admission webhook(https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of theGMSA credential spec named by the GMSACredentialSpecName field.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "gmsa_credential_spec_name": schema.StringAttribute{
- Description: "GMSACredentialSpecName is the name of the GMSA credential spec to use.",
- MarkdownDescription: "GMSACredentialSpecName is the name of the GMSA credential spec to use.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "host_process": schema.BoolAttribute{
- Description: "HostProcess determines if a container should be run as a 'Host Process' container.All of a Pod's containers must have the same effective HostProcess value(it is not allowed to have a mix of HostProcess containers and non-HostProcess containers).In addition, if HostProcess is true then HostNetwork must also be set to true.",
- MarkdownDescription: "HostProcess determines if a container should be run as a 'Host Process' container.All of a Pod's containers must have the same effective HostProcess value(it is not allowed to have a mix of HostProcess containers and non-HostProcess containers).In addition, if HostProcess is true then HostNetwork must also be set to true.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "run_as_user_name": schema.StringAttribute{
- Description: "The UserName in Windows to run the entrypoint of the container process.Defaults to the user specified in image metadata if unspecified.May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.",
- MarkdownDescription: "The UserName in Windows to run the entrypoint of the container process.Defaults to the user specified in image metadata if unspecified.May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "startup_probe": schema.SingleNestedAttribute{
- Description: "Probes are not allowed for ephemeral containers.",
- MarkdownDescription: "Probes are not allowed for ephemeral containers.",
- Attributes: map[string]schema.Attribute{
- "exec": schema.SingleNestedAttribute{
- Description: "Exec specifies the action to take.",
- MarkdownDescription: "Exec specifies the action to take.",
- Attributes: map[string]schema.Attribute{
- "command": schema.ListAttribute{
- Description: "Command is the command line to execute inside the container, the working directory for thecommand is root ('/') in the container's filesystem. The command is simply exec'd, it isnot run inside a shell, so traditional shell instructions ('|', etc) won't work. To usea shell, you need to explicitly call out to that shell.Exit status of 0 is treated as live/healthy and non-zero is unhealthy.",
- MarkdownDescription: "Command is the command line to execute inside the container, the working directory for thecommand is root ('/') in the container's filesystem. The command is simply exec'd, it isnot run inside a shell, so traditional shell instructions ('|', etc) won't work. To usea shell, you need to explicitly call out to that shell.Exit status of 0 is treated as live/healthy and non-zero is unhealthy.",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "failure_threshold": schema.Int64Attribute{
- Description: "Minimum consecutive failures for the probe to be considered failed after having succeeded.Defaults to 3. Minimum value is 1.",
- MarkdownDescription: "Minimum consecutive failures for the probe to be considered failed after having succeeded.Defaults to 3. Minimum value is 1.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "grpc": schema.SingleNestedAttribute{
- Description: "GRPC specifies an action involving a GRPC port.",
- MarkdownDescription: "GRPC specifies an action involving a GRPC port.",
- Attributes: map[string]schema.Attribute{
- "port": schema.Int64Attribute{
- Description: "Port number of the gRPC service. Number must be in the range 1 to 65535.",
- MarkdownDescription: "Port number of the gRPC service. Number must be in the range 1 to 65535.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "service": schema.StringAttribute{
- Description: "Service is the name of the service to place in the gRPC HealthCheckRequest(see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).If this is not specified, the default behavior is defined by gRPC.",
- MarkdownDescription: "Service is the name of the service to place in the gRPC HealthCheckRequest(see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).If this is not specified, the default behavior is defined by gRPC.",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "http_get": schema.SingleNestedAttribute{
- Description: "HTTPGet specifies the http request to perform.",
- MarkdownDescription: "HTTPGet specifies the http request to perform.",
- Attributes: map[string]schema.Attribute{
- "host": schema.StringAttribute{
- Description: "Host name to connect to, defaults to the pod IP. You probably want to set'Host' in httpHeaders instead.",
- MarkdownDescription: "Host name to connect to, defaults to the pod IP. You probably want to set'Host' in httpHeaders instead.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "http_headers": schema.ListNestedAttribute{
- Description: "Custom headers to set in the request. HTTP allows repeated headers.",
- MarkdownDescription: "Custom headers to set in the request. HTTP allows repeated headers.",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "name": schema.StringAttribute{
- Description: "The header field name.This will be canonicalized upon output, so case-variant names will be understood as the same header.",
- MarkdownDescription: "The header field name.This will be canonicalized upon output, so case-variant names will be understood as the same header.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "value": schema.StringAttribute{
- Description: "The header field value",
- MarkdownDescription: "The header field value",
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "path": schema.StringAttribute{
- Description: "Path to access on the HTTP server.",
- MarkdownDescription: "Path to access on the HTTP server.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "port": schema.StringAttribute{
- Description: "Name or number of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.",
- MarkdownDescription: "Name or number of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "scheme": schema.StringAttribute{
- Description: "Scheme to use for connecting to the host.Defaults to HTTP.",
- MarkdownDescription: "Scheme to use for connecting to the host.Defaults to HTTP.",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "initial_delay_seconds": schema.Int64Attribute{
- Description: "Number of seconds after the container has started before liveness probes are initiated.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes",
- MarkdownDescription: "Number of seconds after the container has started before liveness probes are initiated.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "period_seconds": schema.Int64Attribute{
- Description: "How often (in seconds) to perform the probe.Default to 10 seconds. Minimum value is 1.",
- MarkdownDescription: "How often (in seconds) to perform the probe.Default to 10 seconds. Minimum value is 1.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "success_threshold": schema.Int64Attribute{
- Description: "Minimum consecutive successes for the probe to be considered successful after having failed.Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.",
- MarkdownDescription: "Minimum consecutive successes for the probe to be considered successful after having failed.Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "tcp_socket": schema.SingleNestedAttribute{
- Description: "TCPSocket specifies an action involving a TCP port.",
- MarkdownDescription: "TCPSocket specifies an action involving a TCP port.",
- Attributes: map[string]schema.Attribute{
- "host": schema.StringAttribute{
- Description: "Optional: Host name to connect to, defaults to the pod IP.",
- MarkdownDescription: "Optional: Host name to connect to, defaults to the pod IP.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "port": schema.StringAttribute{
- Description: "Number or name of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.",
- MarkdownDescription: "Number or name of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.",
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "termination_grace_period_seconds": schema.Int64Attribute{
- Description: "Optional duration in seconds the pod needs to terminate gracefully upon probe failure.The grace period is the duration in seconds after the processes running in the pod are senta termination signal and the time when the processes are forcibly halted with a kill signal.Set this value longer than the expected cleanup time for your process.If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, thisvalue overrides the value provided by the pod spec.Value must be non-negative integer. The value zero indicates stop immediately viathe kill signal (no opportunity to shut down).This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate.Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.",
- MarkdownDescription: "Optional duration in seconds the pod needs to terminate gracefully upon probe failure.The grace period is the duration in seconds after the processes running in the pod are senta termination signal and the time when the processes are forcibly halted with a kill signal.Set this value longer than the expected cleanup time for your process.If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, thisvalue overrides the value provided by the pod spec.Value must be non-negative integer. The value zero indicates stop immediately viathe kill signal (no opportunity to shut down).This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate.Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "timeout_seconds": schema.Int64Attribute{
- Description: "Number of seconds after which the probe times out.Defaults to 1 second. Minimum value is 1.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes",
- MarkdownDescription: "Number of seconds after which the probe times out.Defaults to 1 second. Minimum value is 1.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "stdin": schema.BoolAttribute{
- Description: "Whether this container should allocate a buffer for stdin in the container runtime. If thisis not set, reads from stdin in the container will always result in EOF.Default is false.",
- MarkdownDescription: "Whether this container should allocate a buffer for stdin in the container runtime. If thisis not set, reads from stdin in the container will always result in EOF.Default is false.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "stdin_once": schema.BoolAttribute{
- Description: "Whether the container runtime should close the stdin channel after it has been opened bya single attach. When stdin is true the stdin stream will remain open across multiple attachsessions. If stdinOnce is set to true, stdin is opened on container start, is empty until thefirst client attaches to stdin, and then remains open and accepts data until the client disconnects,at which time stdin is closed and remains closed until the container is restarted. If thisflag is false, a container processes that reads from stdin will never receive an EOF.Default is false",
- MarkdownDescription: "Whether the container runtime should close the stdin channel after it has been opened bya single attach. When stdin is true the stdin stream will remain open across multiple attachsessions. If stdinOnce is set to true, stdin is opened on container start, is empty until thefirst client attaches to stdin, and then remains open and accepts data until the client disconnects,at which time stdin is closed and remains closed until the container is restarted. If thisflag is false, a container processes that reads from stdin will never receive an EOF.Default is false",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "target_container_name": schema.StringAttribute{
- Description: "If set, the name of the container from PodSpec that this ephemeral container targets.The ephemeral container will be run in the namespaces (IPC, PID, etc) of this container.If not set then the ephemeral container uses the namespaces configured in the Pod spec.The container runtime must implement support for this feature. If the runtime does notsupport namespace targeting then the result of setting this field is undefined.",
- MarkdownDescription: "If set, the name of the container from PodSpec that this ephemeral container targets.The ephemeral container will be run in the namespaces (IPC, PID, etc) of this container.If not set then the ephemeral container uses the namespaces configured in the Pod spec.The container runtime must implement support for this feature. If the runtime does notsupport namespace targeting then the result of setting this field is undefined.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "termination_message_path": schema.StringAttribute{
- Description: "Optional: Path at which the file to which the container's termination messagewill be written is mounted into the container's filesystem.Message written is intended to be brief final status, such as an assertion failure message.Will be truncated by the node if greater than 4096 bytes. The total message length acrossall containers will be limited to 12kb.Defaults to /dev/termination-log.Cannot be updated.",
- MarkdownDescription: "Optional: Path at which the file to which the container's termination messagewill be written is mounted into the container's filesystem.Message written is intended to be brief final status, such as an assertion failure message.Will be truncated by the node if greater than 4096 bytes. The total message length acrossall containers will be limited to 12kb.Defaults to /dev/termination-log.Cannot be updated.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "termination_message_policy": schema.StringAttribute{
- Description: "Indicate how the termination message should be populated. File will use the contents ofterminationMessagePath to populate the container status message on both success and failure.FallbackToLogsOnError will use the last chunk of container log output if the terminationmessage file is empty and the container exited with an error.The log output is limited to 2048 bytes or 80 lines, whichever is smaller.Defaults to File.Cannot be updated.",
- MarkdownDescription: "Indicate how the termination message should be populated. File will use the contents ofterminationMessagePath to populate the container status message on both success and failure.FallbackToLogsOnError will use the last chunk of container log output if the terminationmessage file is empty and the container exited with an error.The log output is limited to 2048 bytes or 80 lines, whichever is smaller.Defaults to File.Cannot be updated.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "tty": schema.BoolAttribute{
- Description: "Whether this container should allocate a TTY for itself, also requires 'stdin' to be true.Default is false.",
- MarkdownDescription: "Whether this container should allocate a TTY for itself, also requires 'stdin' to be true.Default is false.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "volume_devices": schema.ListNestedAttribute{
- Description: "volumeDevices is the list of block devices to be used by the container.",
- MarkdownDescription: "volumeDevices is the list of block devices to be used by the container.",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "device_path": schema.StringAttribute{
- Description: "devicePath is the path inside of the container that the device will be mapped to.",
- MarkdownDescription: "devicePath is the path inside of the container that the device will be mapped to.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "name": schema.StringAttribute{
- Description: "name must match the name of a persistentVolumeClaim in the pod",
- MarkdownDescription: "name must match the name of a persistentVolumeClaim in the pod",
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "volume_mounts": schema.ListNestedAttribute{
- Description: "Pod volumes to mount into the container's filesystem. Subpath mounts are not allowed for ephemeral containers.Cannot be updated.",
- MarkdownDescription: "Pod volumes to mount into the container's filesystem. Subpath mounts are not allowed for ephemeral containers.Cannot be updated.",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "mount_path": schema.StringAttribute{
- Description: "Path within the container at which the volume should be mounted. Mustnot contain ':'.",
- MarkdownDescription: "Path within the container at which the volume should be mounted. Mustnot contain ':'.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "mount_propagation": schema.StringAttribute{
- Description: "mountPropagation determines how mounts are propagated from the hostto container and the other way around.When not set, MountPropagationNone is used.This field is beta in 1.10.",
- MarkdownDescription: "mountPropagation determines how mounts are propagated from the hostto container and the other way around.When not set, MountPropagationNone is used.This field is beta in 1.10.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "name": schema.StringAttribute{
- Description: "This must match the Name of a Volume.",
- MarkdownDescription: "This must match the Name of a Volume.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "read_only": schema.BoolAttribute{
- Description: "Mounted read-only if true, read-write otherwise (false or unspecified).Defaults to false.",
- MarkdownDescription: "Mounted read-only if true, read-write otherwise (false or unspecified).Defaults to false.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "sub_path": schema.StringAttribute{
- Description: "Path within the volume from which the container's volume should be mounted.Defaults to '' (volume's root).",
- MarkdownDescription: "Path within the volume from which the container's volume should be mounted.Defaults to '' (volume's root).",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "sub_path_expr": schema.StringAttribute{
- Description: "Expanded path within the volume from which the container's volume should be mounted.Behaves similarly to SubPath but environment variable references $(VAR_NAME) are expanded using the container's environment.Defaults to '' (volume's root).SubPathExpr and SubPath are mutually exclusive.",
- MarkdownDescription: "Expanded path within the volume from which the container's volume should be mounted.Behaves similarly to SubPath but environment variable references $(VAR_NAME) are expanded using the container's environment.Defaults to '' (volume's root).SubPathExpr and SubPath are mutually exclusive.",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "working_dir": schema.StringAttribute{
- Description: "Container's working directory.If not specified, the container runtime's default will be used, whichmight be configured in the container image.Cannot be updated.",
- MarkdownDescription: "Container's working directory.If not specified, the container runtime's default will be used, whichmight be configured in the container image.Cannot be updated.",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "host_aliases": schema.ListNestedAttribute{
- Description: "HostAliases is an optional list of hosts and IPs that will be injected into the pod's hostsfile if specified. This is only valid for non-hostNetwork pods.",
- MarkdownDescription: "HostAliases is an optional list of hosts and IPs that will be injected into the pod's hostsfile if specified. This is only valid for non-hostNetwork pods.",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "hostnames": schema.ListAttribute{
- Description: "Hostnames for the above IP address.",
- MarkdownDescription: "Hostnames for the above IP address.",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "ip": schema.StringAttribute{
- Description: "IP address of the host file entry.",
- MarkdownDescription: "IP address of the host file entry.",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "host_ipc": schema.BoolAttribute{
- Description: "Use the host's ipc namespace.Optional: Default to false.",
- MarkdownDescription: "Use the host's ipc namespace.Optional: Default to false.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "host_network": schema.BoolAttribute{
- Description: "Host networking requested for this pod. Use the host's network namespace.If this option is set, the ports that will be used must be specified.Default to false.",
- MarkdownDescription: "Host networking requested for this pod. Use the host's network namespace.If this option is set, the ports that will be used must be specified.Default to false.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "host_pid": schema.BoolAttribute{
- Description: "Use the host's pid namespace.Optional: Default to false.",
- MarkdownDescription: "Use the host's pid namespace.Optional: Default to false.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "host_users": schema.BoolAttribute{
- Description: "Use the host's user namespace.Optional: Default to true.If set to true or not present, the pod will be run in the host user namespace, usefulfor when the pod needs a feature only available to the host user namespace, such asloading a kernel module with CAP_SYS_MODULE.When set to false, a new userns is created for the pod. Setting false is useful formitigating container breakout vulnerabilities even allowing users to run theircontainers as root without actually having root privileges on the host.This field is alpha-level and is only honored by servers that enable the UserNamespacesSupport feature.",
- MarkdownDescription: "Use the host's user namespace.Optional: Default to true.If set to true or not present, the pod will be run in the host user namespace, usefulfor when the pod needs a feature only available to the host user namespace, such asloading a kernel module with CAP_SYS_MODULE.When set to false, a new userns is created for the pod. Setting false is useful formitigating container breakout vulnerabilities even allowing users to run theircontainers as root without actually having root privileges on the host.This field is alpha-level and is only honored by servers that enable the UserNamespacesSupport feature.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "hostname": schema.StringAttribute{
- Description: "Specifies the hostname of the PodIf not specified, the pod's hostname will be set to a system-defined value.",
- MarkdownDescription: "Specifies the hostname of the PodIf not specified, the pod's hostname will be set to a system-defined value.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "image_pull_secrets": schema.ListNestedAttribute{
- Description: "ImagePullSecrets is an optional list of references to secrets in the same namespace to use for pulling any of the images used by this PodSpec.If specified, these secrets will be passed to individual puller implementations for them to use.More info: https://kubernetes.io/docs/concepts/containers/images#specifying-imagepullsecrets-on-a-pod",
- MarkdownDescription: "ImagePullSecrets is an optional list of references to secrets in the same namespace to use for pulling any of the images used by this PodSpec.If specified, these secrets will be passed to individual puller implementations for them to use.More info: https://kubernetes.io/docs/concepts/containers/images#specifying-imagepullsecrets-on-a-pod",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "name": schema.StringAttribute{
- Description: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?",
- MarkdownDescription: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "init_containers": schema.ListNestedAttribute{
- Description: "List of initialization containers belonging to the pod.Init containers are executed in order prior to containers being started. If anyinit container fails, the pod is considered to have failed and is handled accordingto its restartPolicy. The name for an init container or normal container must beunique among all containers.Init containers may not have Lifecycle actions, Readiness probes, Liveness probes, or Startup probes.The resourceRequirements of an init container are taken into account during schedulingby finding the highest request/limit for each resource type, and then using the max ofof that value or the sum of the normal containers. Limits are applied to init containersin a similar fashion.Init containers cannot currently be added or removed.Cannot be updated.More info: https://kubernetes.io/docs/concepts/workloads/pods/init-containers/",
- MarkdownDescription: "List of initialization containers belonging to the pod.Init containers are executed in order prior to containers being started. If anyinit container fails, the pod is considered to have failed and is handled accordingto its restartPolicy. The name for an init container or normal container must beunique among all containers.Init containers may not have Lifecycle actions, Readiness probes, Liveness probes, or Startup probes.The resourceRequirements of an init container are taken into account during schedulingby finding the highest request/limit for each resource type, and then using the max ofof that value or the sum of the normal containers. Limits are applied to init containersin a similar fashion.Init containers cannot currently be added or removed.Cannot be updated.More info: https://kubernetes.io/docs/concepts/workloads/pods/init-containers/",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "args": schema.ListAttribute{
- Description: "Arguments to the entrypoint.The container image's CMD is used if this is not provided.Variable references $(VAR_NAME) are expanded using the container's environment. If a variablecannot be resolved, the reference in the input string will be unchanged. Double $$ are reducedto a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. '$$(VAR_NAME)' willproduce the string literal '$(VAR_NAME)'. Escaped references will never be expanded, regardlessof whether the variable exists or not. Cannot be updated.More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell",
- MarkdownDescription: "Arguments to the entrypoint.The container image's CMD is used if this is not provided.Variable references $(VAR_NAME) are expanded using the container's environment. If a variablecannot be resolved, the reference in the input string will be unchanged. Double $$ are reducedto a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. '$$(VAR_NAME)' willproduce the string literal '$(VAR_NAME)'. Escaped references will never be expanded, regardlessof whether the variable exists or not. Cannot be updated.More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "command": schema.ListAttribute{
- Description: "Entrypoint array. Not executed within a shell.The container image's ENTRYPOINT is used if this is not provided.Variable references $(VAR_NAME) are expanded using the container's environment. If a variablecannot be resolved, the reference in the input string will be unchanged. Double $$ are reducedto a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. '$$(VAR_NAME)' willproduce the string literal '$(VAR_NAME)'. Escaped references will never be expanded, regardlessof whether the variable exists or not. Cannot be updated.More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell",
- MarkdownDescription: "Entrypoint array. Not executed within a shell.The container image's ENTRYPOINT is used if this is not provided.Variable references $(VAR_NAME) are expanded using the container's environment. If a variablecannot be resolved, the reference in the input string will be unchanged. Double $$ are reducedto a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. '$$(VAR_NAME)' willproduce the string literal '$(VAR_NAME)'. Escaped references will never be expanded, regardlessof whether the variable exists or not. Cannot be updated.More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "env": schema.ListNestedAttribute{
- Description: "List of environment variables to set in the container.Cannot be updated.",
- MarkdownDescription: "List of environment variables to set in the container.Cannot be updated.",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "name": schema.StringAttribute{
- Description: "Name of the environment variable. Must be a C_IDENTIFIER.",
- MarkdownDescription: "Name of the environment variable. Must be a C_IDENTIFIER.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "value": schema.StringAttribute{
- Description: "Variable references $(VAR_NAME) are expandedusing the previously defined environment variables in the container andany service environment variables. If a variable cannot be resolved,the reference in the input string will be unchanged. Double $$ are reducedto a single $, which allows for escaping the $(VAR_NAME) syntax: i.e.'$$(VAR_NAME)' will produce the string literal '$(VAR_NAME)'.Escaped references will never be expanded, regardless of whether the variableexists or not.Defaults to ''.",
- MarkdownDescription: "Variable references $(VAR_NAME) are expandedusing the previously defined environment variables in the container andany service environment variables. If a variable cannot be resolved,the reference in the input string will be unchanged. Double $$ are reducedto a single $, which allows for escaping the $(VAR_NAME) syntax: i.e.'$$(VAR_NAME)' will produce the string literal '$(VAR_NAME)'.Escaped references will never be expanded, regardless of whether the variableexists or not.Defaults to ''.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "value_from": schema.SingleNestedAttribute{
- Description: "Source for the environment variable's value. Cannot be used if value is not empty.",
- MarkdownDescription: "Source for the environment variable's value. Cannot be used if value is not empty.",
- Attributes: map[string]schema.Attribute{
- "config_map_key_ref": schema.SingleNestedAttribute{
- Description: "Selects a key of a ConfigMap.",
- MarkdownDescription: "Selects a key of a ConfigMap.",
- Attributes: map[string]schema.Attribute{
- "key": schema.StringAttribute{
- Description: "The key to select.",
- MarkdownDescription: "The key to select.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "name": schema.StringAttribute{
- Description: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?",
- MarkdownDescription: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "optional": schema.BoolAttribute{
- Description: "Specify whether the ConfigMap or its key must be defined",
- MarkdownDescription: "Specify whether the ConfigMap or its key must be defined",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "field_ref": schema.SingleNestedAttribute{
- Description: "Selects a field of the pod: supports metadata.name, metadata.namespace, 'metadata.labels['']', 'metadata.annotations['']',spec.nodeName, spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs.",
- MarkdownDescription: "Selects a field of the pod: supports metadata.name, metadata.namespace, 'metadata.labels['']', 'metadata.annotations['']',spec.nodeName, spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs.",
- Attributes: map[string]schema.Attribute{
- "api_version": schema.StringAttribute{
- Description: "Version of the schema the FieldPath is written in terms of, defaults to 'v1'.",
- MarkdownDescription: "Version of the schema the FieldPath is written in terms of, defaults to 'v1'.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "field_path": schema.StringAttribute{
- Description: "Path of the field to select in the specified API version.",
- MarkdownDescription: "Path of the field to select in the specified API version.",
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "resource_field_ref": schema.SingleNestedAttribute{
- Description: "Selects a resource of the container: only resources limits and requests(limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu, requests.memory and requests.ephemeral-storage) are currently supported.",
- MarkdownDescription: "Selects a resource of the container: only resources limits and requests(limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu, requests.memory and requests.ephemeral-storage) are currently supported.",
- Attributes: map[string]schema.Attribute{
- "container_name": schema.StringAttribute{
- Description: "Container name: required for volumes, optional for env vars",
- MarkdownDescription: "Container name: required for volumes, optional for env vars",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "divisor": schema.StringAttribute{
- Description: "Specifies the output format of the exposed resources, defaults to '1'",
- MarkdownDescription: "Specifies the output format of the exposed resources, defaults to '1'",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "resource": schema.StringAttribute{
- Description: "Required: resource to select",
- MarkdownDescription: "Required: resource to select",
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "secret_key_ref": schema.SingleNestedAttribute{
- Description: "Selects a key of a secret in the pod's namespace",
- MarkdownDescription: "Selects a key of a secret in the pod's namespace",
- Attributes: map[string]schema.Attribute{
- "key": schema.StringAttribute{
- Description: "The key of the secret to select from. Must be a valid secret key.",
- MarkdownDescription: "The key of the secret to select from. Must be a valid secret key.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "name": schema.StringAttribute{
- Description: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?",
- MarkdownDescription: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "optional": schema.BoolAttribute{
- Description: "Specify whether the Secret or its key must be defined",
- MarkdownDescription: "Specify whether the Secret or its key must be defined",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "env_from": schema.ListNestedAttribute{
- Description: "List of sources to populate environment variables in the container.The keys defined within a source must be a C_IDENTIFIER. All invalid keyswill be reported as an event when the container is starting. When a key exists in multiplesources, the value associated with the last source will take precedence.Values defined by an Env with a duplicate key will take precedence.Cannot be updated.",
- MarkdownDescription: "List of sources to populate environment variables in the container.The keys defined within a source must be a C_IDENTIFIER. All invalid keyswill be reported as an event when the container is starting. When a key exists in multiplesources, the value associated with the last source will take precedence.Values defined by an Env with a duplicate key will take precedence.Cannot be updated.",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "config_map_ref": schema.SingleNestedAttribute{
- Description: "The ConfigMap to select from",
- MarkdownDescription: "The ConfigMap to select from",
- Attributes: map[string]schema.Attribute{
- "name": schema.StringAttribute{
- Description: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?",
- MarkdownDescription: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "optional": schema.BoolAttribute{
- Description: "Specify whether the ConfigMap must be defined",
- MarkdownDescription: "Specify whether the ConfigMap must be defined",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "prefix": schema.StringAttribute{
- Description: "An optional identifier to prepend to each key in the ConfigMap. Must be a C_IDENTIFIER.",
- MarkdownDescription: "An optional identifier to prepend to each key in the ConfigMap. Must be a C_IDENTIFIER.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "secret_ref": schema.SingleNestedAttribute{
- Description: "The Secret to select from",
- MarkdownDescription: "The Secret to select from",
- Attributes: map[string]schema.Attribute{
- "name": schema.StringAttribute{
- Description: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?",
- MarkdownDescription: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "optional": schema.BoolAttribute{
- Description: "Specify whether the Secret must be defined",
- MarkdownDescription: "Specify whether the Secret must be defined",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "image": schema.StringAttribute{
- Description: "Container image name.More info: https://kubernetes.io/docs/concepts/containers/imagesThis field is optional to allow higher level config management to default or overridecontainer images in workload controllers like Deployments and StatefulSets.",
- MarkdownDescription: "Container image name.More info: https://kubernetes.io/docs/concepts/containers/imagesThis field is optional to allow higher level config management to default or overridecontainer images in workload controllers like Deployments and StatefulSets.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "image_pull_policy": schema.StringAttribute{
- Description: "Image pull policy.One of Always, Never, IfNotPresent.Defaults to Always if :latest tag is specified, or IfNotPresent otherwise.Cannot be updated.More info: https://kubernetes.io/docs/concepts/containers/images#updating-images",
- MarkdownDescription: "Image pull policy.One of Always, Never, IfNotPresent.Defaults to Always if :latest tag is specified, or IfNotPresent otherwise.Cannot be updated.More info: https://kubernetes.io/docs/concepts/containers/images#updating-images",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "lifecycle": schema.SingleNestedAttribute{
- Description: "Actions that the management system should take in response to container lifecycle events.Cannot be updated.",
- MarkdownDescription: "Actions that the management system should take in response to container lifecycle events.Cannot be updated.",
- Attributes: map[string]schema.Attribute{
- "post_start": schema.SingleNestedAttribute{
- Description: "PostStart is called immediately after a container is created. If the handler fails,the container is terminated and restarted according to its restart policy.Other management of the container blocks until the hook completes.More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks",
- MarkdownDescription: "PostStart is called immediately after a container is created. If the handler fails,the container is terminated and restarted according to its restart policy.Other management of the container blocks until the hook completes.More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks",
- Attributes: map[string]schema.Attribute{
- "exec": schema.SingleNestedAttribute{
- Description: "Exec specifies the action to take.",
- MarkdownDescription: "Exec specifies the action to take.",
- Attributes: map[string]schema.Attribute{
- "command": schema.ListAttribute{
- Description: "Command is the command line to execute inside the container, the working directory for thecommand is root ('/') in the container's filesystem. The command is simply exec'd, it isnot run inside a shell, so traditional shell instructions ('|', etc) won't work. To usea shell, you need to explicitly call out to that shell.Exit status of 0 is treated as live/healthy and non-zero is unhealthy.",
- MarkdownDescription: "Command is the command line to execute inside the container, the working directory for thecommand is root ('/') in the container's filesystem. The command is simply exec'd, it isnot run inside a shell, so traditional shell instructions ('|', etc) won't work. To usea shell, you need to explicitly call out to that shell.Exit status of 0 is treated as live/healthy and non-zero is unhealthy.",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "http_get": schema.SingleNestedAttribute{
- Description: "HTTPGet specifies the http request to perform.",
- MarkdownDescription: "HTTPGet specifies the http request to perform.",
- Attributes: map[string]schema.Attribute{
- "host": schema.StringAttribute{
- Description: "Host name to connect to, defaults to the pod IP. You probably want to set'Host' in httpHeaders instead.",
- MarkdownDescription: "Host name to connect to, defaults to the pod IP. You probably want to set'Host' in httpHeaders instead.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "http_headers": schema.ListNestedAttribute{
- Description: "Custom headers to set in the request. HTTP allows repeated headers.",
- MarkdownDescription: "Custom headers to set in the request. HTTP allows repeated headers.",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "name": schema.StringAttribute{
- Description: "The header field name.This will be canonicalized upon output, so case-variant names will be understood as the same header.",
- MarkdownDescription: "The header field name.This will be canonicalized upon output, so case-variant names will be understood as the same header.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "value": schema.StringAttribute{
- Description: "The header field value",
- MarkdownDescription: "The header field value",
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "path": schema.StringAttribute{
- Description: "Path to access on the HTTP server.",
- MarkdownDescription: "Path to access on the HTTP server.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "port": schema.StringAttribute{
- Description: "Name or number of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.",
- MarkdownDescription: "Name or number of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "scheme": schema.StringAttribute{
- Description: "Scheme to use for connecting to the host.Defaults to HTTP.",
- MarkdownDescription: "Scheme to use for connecting to the host.Defaults to HTTP.",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "tcp_socket": schema.SingleNestedAttribute{
- Description: "Deprecated. TCPSocket is NOT supported as a LifecycleHandler and keptfor the backward compatibility. There are no validation of this field andlifecycle hooks will fail in runtime when tcp handler is specified.",
- MarkdownDescription: "Deprecated. TCPSocket is NOT supported as a LifecycleHandler and keptfor the backward compatibility. There are no validation of this field andlifecycle hooks will fail in runtime when tcp handler is specified.",
- Attributes: map[string]schema.Attribute{
- "host": schema.StringAttribute{
- Description: "Optional: Host name to connect to, defaults to the pod IP.",
- MarkdownDescription: "Optional: Host name to connect to, defaults to the pod IP.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "port": schema.StringAttribute{
- Description: "Number or name of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.",
- MarkdownDescription: "Number or name of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.",
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "pre_stop": schema.SingleNestedAttribute{
- Description: "PreStop is called immediately before a container is terminated due to anAPI request or management event such as liveness/startup probe failure,preemption, resource contention, etc. The handler is not called if thecontainer crashes or exits. The Pod's termination grace period countdown begins before thePreStop hook is executed. Regardless of the outcome of the handler, thecontainer will eventually terminate within the Pod's termination graceperiod (unless delayed by finalizers). Other management of the container blocks until the hook completesor until the termination grace period is reached.More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks",
- MarkdownDescription: "PreStop is called immediately before a container is terminated due to anAPI request or management event such as liveness/startup probe failure,preemption, resource contention, etc. The handler is not called if thecontainer crashes or exits. The Pod's termination grace period countdown begins before thePreStop hook is executed. Regardless of the outcome of the handler, thecontainer will eventually terminate within the Pod's termination graceperiod (unless delayed by finalizers). Other management of the container blocks until the hook completesor until the termination grace period is reached.More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks",
- Attributes: map[string]schema.Attribute{
- "exec": schema.SingleNestedAttribute{
- Description: "Exec specifies the action to take.",
- MarkdownDescription: "Exec specifies the action to take.",
- Attributes: map[string]schema.Attribute{
- "command": schema.ListAttribute{
- Description: "Command is the command line to execute inside the container, the working directory for thecommand is root ('/') in the container's filesystem. The command is simply exec'd, it isnot run inside a shell, so traditional shell instructions ('|', etc) won't work. To usea shell, you need to explicitly call out to that shell.Exit status of 0 is treated as live/healthy and non-zero is unhealthy.",
- MarkdownDescription: "Command is the command line to execute inside the container, the working directory for thecommand is root ('/') in the container's filesystem. The command is simply exec'd, it isnot run inside a shell, so traditional shell instructions ('|', etc) won't work. To usea shell, you need to explicitly call out to that shell.Exit status of 0 is treated as live/healthy and non-zero is unhealthy.",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "http_get": schema.SingleNestedAttribute{
- Description: "HTTPGet specifies the http request to perform.",
- MarkdownDescription: "HTTPGet specifies the http request to perform.",
- Attributes: map[string]schema.Attribute{
- "host": schema.StringAttribute{
- Description: "Host name to connect to, defaults to the pod IP. You probably want to set'Host' in httpHeaders instead.",
- MarkdownDescription: "Host name to connect to, defaults to the pod IP. You probably want to set'Host' in httpHeaders instead.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "http_headers": schema.ListNestedAttribute{
- Description: "Custom headers to set in the request. HTTP allows repeated headers.",
- MarkdownDescription: "Custom headers to set in the request. HTTP allows repeated headers.",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "name": schema.StringAttribute{
- Description: "The header field name.This will be canonicalized upon output, so case-variant names will be understood as the same header.",
- MarkdownDescription: "The header field name.This will be canonicalized upon output, so case-variant names will be understood as the same header.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "value": schema.StringAttribute{
- Description: "The header field value",
- MarkdownDescription: "The header field value",
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "path": schema.StringAttribute{
- Description: "Path to access on the HTTP server.",
- MarkdownDescription: "Path to access on the HTTP server.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "port": schema.StringAttribute{
- Description: "Name or number of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.",
- MarkdownDescription: "Name or number of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "scheme": schema.StringAttribute{
- Description: "Scheme to use for connecting to the host.Defaults to HTTP.",
- MarkdownDescription: "Scheme to use for connecting to the host.Defaults to HTTP.",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "tcp_socket": schema.SingleNestedAttribute{
- Description: "Deprecated. TCPSocket is NOT supported as a LifecycleHandler and keptfor the backward compatibility. There are no validation of this field andlifecycle hooks will fail in runtime when tcp handler is specified.",
- MarkdownDescription: "Deprecated. TCPSocket is NOT supported as a LifecycleHandler and keptfor the backward compatibility. There are no validation of this field andlifecycle hooks will fail in runtime when tcp handler is specified.",
- Attributes: map[string]schema.Attribute{
- "host": schema.StringAttribute{
- Description: "Optional: Host name to connect to, defaults to the pod IP.",
- MarkdownDescription: "Optional: Host name to connect to, defaults to the pod IP.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "port": schema.StringAttribute{
- Description: "Number or name of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.",
- MarkdownDescription: "Number or name of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.",
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "liveness_probe": schema.SingleNestedAttribute{
- Description: "Periodic probe of container liveness.Container will be restarted if the probe fails.Cannot be updated.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes",
- MarkdownDescription: "Periodic probe of container liveness.Container will be restarted if the probe fails.Cannot be updated.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes",
- Attributes: map[string]schema.Attribute{
- "exec": schema.SingleNestedAttribute{
- Description: "Exec specifies the action to take.",
- MarkdownDescription: "Exec specifies the action to take.",
- Attributes: map[string]schema.Attribute{
- "command": schema.ListAttribute{
- Description: "Command is the command line to execute inside the container, the working directory for thecommand is root ('/') in the container's filesystem. The command is simply exec'd, it isnot run inside a shell, so traditional shell instructions ('|', etc) won't work. To usea shell, you need to explicitly call out to that shell.Exit status of 0 is treated as live/healthy and non-zero is unhealthy.",
- MarkdownDescription: "Command is the command line to execute inside the container, the working directory for thecommand is root ('/') in the container's filesystem. The command is simply exec'd, it isnot run inside a shell, so traditional shell instructions ('|', etc) won't work. To usea shell, you need to explicitly call out to that shell.Exit status of 0 is treated as live/healthy and non-zero is unhealthy.",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "failure_threshold": schema.Int64Attribute{
- Description: "Minimum consecutive failures for the probe to be considered failed after having succeeded.Defaults to 3. Minimum value is 1.",
- MarkdownDescription: "Minimum consecutive failures for the probe to be considered failed after having succeeded.Defaults to 3. Minimum value is 1.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "grpc": schema.SingleNestedAttribute{
- Description: "GRPC specifies an action involving a GRPC port.",
- MarkdownDescription: "GRPC specifies an action involving a GRPC port.",
- Attributes: map[string]schema.Attribute{
- "port": schema.Int64Attribute{
- Description: "Port number of the gRPC service. Number must be in the range 1 to 65535.",
- MarkdownDescription: "Port number of the gRPC service. Number must be in the range 1 to 65535.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "service": schema.StringAttribute{
- Description: "Service is the name of the service to place in the gRPC HealthCheckRequest(see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).If this is not specified, the default behavior is defined by gRPC.",
- MarkdownDescription: "Service is the name of the service to place in the gRPC HealthCheckRequest(see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).If this is not specified, the default behavior is defined by gRPC.",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "http_get": schema.SingleNestedAttribute{
- Description: "HTTPGet specifies the http request to perform.",
- MarkdownDescription: "HTTPGet specifies the http request to perform.",
- Attributes: map[string]schema.Attribute{
- "host": schema.StringAttribute{
- Description: "Host name to connect to, defaults to the pod IP. You probably want to set'Host' in httpHeaders instead.",
- MarkdownDescription: "Host name to connect to, defaults to the pod IP. You probably want to set'Host' in httpHeaders instead.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "http_headers": schema.ListNestedAttribute{
- Description: "Custom headers to set in the request. HTTP allows repeated headers.",
- MarkdownDescription: "Custom headers to set in the request. HTTP allows repeated headers.",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "name": schema.StringAttribute{
- Description: "The header field name.This will be canonicalized upon output, so case-variant names will be understood as the same header.",
- MarkdownDescription: "The header field name.This will be canonicalized upon output, so case-variant names will be understood as the same header.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "value": schema.StringAttribute{
- Description: "The header field value",
- MarkdownDescription: "The header field value",
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "path": schema.StringAttribute{
- Description: "Path to access on the HTTP server.",
- MarkdownDescription: "Path to access on the HTTP server.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "port": schema.StringAttribute{
- Description: "Name or number of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.",
- MarkdownDescription: "Name or number of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "scheme": schema.StringAttribute{
- Description: "Scheme to use for connecting to the host.Defaults to HTTP.",
- MarkdownDescription: "Scheme to use for connecting to the host.Defaults to HTTP.",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "initial_delay_seconds": schema.Int64Attribute{
- Description: "Number of seconds after the container has started before liveness probes are initiated.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes",
- MarkdownDescription: "Number of seconds after the container has started before liveness probes are initiated.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "period_seconds": schema.Int64Attribute{
- Description: "How often (in seconds) to perform the probe.Default to 10 seconds. Minimum value is 1.",
- MarkdownDescription: "How often (in seconds) to perform the probe.Default to 10 seconds. Minimum value is 1.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "success_threshold": schema.Int64Attribute{
- Description: "Minimum consecutive successes for the probe to be considered successful after having failed.Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.",
- MarkdownDescription: "Minimum consecutive successes for the probe to be considered successful after having failed.Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "tcp_socket": schema.SingleNestedAttribute{
- Description: "TCPSocket specifies an action involving a TCP port.",
- MarkdownDescription: "TCPSocket specifies an action involving a TCP port.",
- Attributes: map[string]schema.Attribute{
- "host": schema.StringAttribute{
- Description: "Optional: Host name to connect to, defaults to the pod IP.",
- MarkdownDescription: "Optional: Host name to connect to, defaults to the pod IP.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "port": schema.StringAttribute{
- Description: "Number or name of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.",
- MarkdownDescription: "Number or name of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.",
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "termination_grace_period_seconds": schema.Int64Attribute{
- Description: "Optional duration in seconds the pod needs to terminate gracefully upon probe failure.The grace period is the duration in seconds after the processes running in the pod are senta termination signal and the time when the processes are forcibly halted with a kill signal.Set this value longer than the expected cleanup time for your process.If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, thisvalue overrides the value provided by the pod spec.Value must be non-negative integer. The value zero indicates stop immediately viathe kill signal (no opportunity to shut down).This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate.Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.",
- MarkdownDescription: "Optional duration in seconds the pod needs to terminate gracefully upon probe failure.The grace period is the duration in seconds after the processes running in the pod are senta termination signal and the time when the processes are forcibly halted with a kill signal.Set this value longer than the expected cleanup time for your process.If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, thisvalue overrides the value provided by the pod spec.Value must be non-negative integer. The value zero indicates stop immediately viathe kill signal (no opportunity to shut down).This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate.Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "timeout_seconds": schema.Int64Attribute{
- Description: "Number of seconds after which the probe times out.Defaults to 1 second. Minimum value is 1.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes",
- MarkdownDescription: "Number of seconds after which the probe times out.Defaults to 1 second. Minimum value is 1.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "name": schema.StringAttribute{
- Description: "Name of the container specified as a DNS_LABEL.Each container in a pod must have a unique name (DNS_LABEL).Cannot be updated.",
- MarkdownDescription: "Name of the container specified as a DNS_LABEL.Each container in a pod must have a unique name (DNS_LABEL).Cannot be updated.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "ports": schema.ListNestedAttribute{
- Description: "List of ports to expose from the container. Not specifying a port hereDOES NOT prevent that port from being exposed. Any port which islistening on the default '0.0.0.0' address inside a container will beaccessible from the network.Modifying this array with strategic merge patch may corrupt the data.For more information See https://github.com/kubernetes/kubernetes/issues/108255.Cannot be updated.",
- MarkdownDescription: "List of ports to expose from the container. Not specifying a port hereDOES NOT prevent that port from being exposed. Any port which islistening on the default '0.0.0.0' address inside a container will beaccessible from the network.Modifying this array with strategic merge patch may corrupt the data.For more information See https://github.com/kubernetes/kubernetes/issues/108255.Cannot be updated.",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "container_port": schema.Int64Attribute{
- Description: "Number of port to expose on the pod's IP address.This must be a valid port number, 0 < x < 65536.",
- MarkdownDescription: "Number of port to expose on the pod's IP address.This must be a valid port number, 0 < x < 65536.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "host_ip": schema.StringAttribute{
- Description: "What host IP to bind the external port to.",
- MarkdownDescription: "What host IP to bind the external port to.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "host_port": schema.Int64Attribute{
- Description: "Number of port to expose on the host.If specified, this must be a valid port number, 0 < x < 65536.If HostNetwork is specified, this must match ContainerPort.Most containers do not need this.",
- MarkdownDescription: "Number of port to expose on the host.If specified, this must be a valid port number, 0 < x < 65536.If HostNetwork is specified, this must match ContainerPort.Most containers do not need this.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "name": schema.StringAttribute{
- Description: "If specified, this must be an IANA_SVC_NAME and unique within the pod. Eachnamed port in a pod must have a unique name. Name for the port that can bereferred to by services.",
- MarkdownDescription: "If specified, this must be an IANA_SVC_NAME and unique within the pod. Eachnamed port in a pod must have a unique name. Name for the port that can bereferred to by services.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "protocol": schema.StringAttribute{
- Description: "Protocol for port. Must be UDP, TCP, or SCTP.Defaults to 'TCP'.",
- MarkdownDescription: "Protocol for port. Must be UDP, TCP, or SCTP.Defaults to 'TCP'.",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "readiness_probe": schema.SingleNestedAttribute{
- Description: "Periodic probe of container service readiness.Container will be removed from service endpoints if the probe fails.Cannot be updated.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes",
- MarkdownDescription: "Periodic probe of container service readiness.Container will be removed from service endpoints if the probe fails.Cannot be updated.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes",
- Attributes: map[string]schema.Attribute{
- "exec": schema.SingleNestedAttribute{
- Description: "Exec specifies the action to take.",
- MarkdownDescription: "Exec specifies the action to take.",
- Attributes: map[string]schema.Attribute{
- "command": schema.ListAttribute{
- Description: "Command is the command line to execute inside the container, the working directory for thecommand is root ('/') in the container's filesystem. The command is simply exec'd, it isnot run inside a shell, so traditional shell instructions ('|', etc) won't work. To usea shell, you need to explicitly call out to that shell.Exit status of 0 is treated as live/healthy and non-zero is unhealthy.",
- MarkdownDescription: "Command is the command line to execute inside the container, the working directory for thecommand is root ('/') in the container's filesystem. The command is simply exec'd, it isnot run inside a shell, so traditional shell instructions ('|', etc) won't work. To usea shell, you need to explicitly call out to that shell.Exit status of 0 is treated as live/healthy and non-zero is unhealthy.",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "failure_threshold": schema.Int64Attribute{
- Description: "Minimum consecutive failures for the probe to be considered failed after having succeeded.Defaults to 3. Minimum value is 1.",
- MarkdownDescription: "Minimum consecutive failures for the probe to be considered failed after having succeeded.Defaults to 3. Minimum value is 1.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "grpc": schema.SingleNestedAttribute{
- Description: "GRPC specifies an action involving a GRPC port.",
- MarkdownDescription: "GRPC specifies an action involving a GRPC port.",
- Attributes: map[string]schema.Attribute{
- "port": schema.Int64Attribute{
- Description: "Port number of the gRPC service. Number must be in the range 1 to 65535.",
- MarkdownDescription: "Port number of the gRPC service. Number must be in the range 1 to 65535.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "service": schema.StringAttribute{
- Description: "Service is the name of the service to place in the gRPC HealthCheckRequest(see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).If this is not specified, the default behavior is defined by gRPC.",
- MarkdownDescription: "Service is the name of the service to place in the gRPC HealthCheckRequest(see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).If this is not specified, the default behavior is defined by gRPC.",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "http_get": schema.SingleNestedAttribute{
- Description: "HTTPGet specifies the http request to perform.",
- MarkdownDescription: "HTTPGet specifies the http request to perform.",
- Attributes: map[string]schema.Attribute{
- "host": schema.StringAttribute{
- Description: "Host name to connect to, defaults to the pod IP. You probably want to set'Host' in httpHeaders instead.",
- MarkdownDescription: "Host name to connect to, defaults to the pod IP. You probably want to set'Host' in httpHeaders instead.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "http_headers": schema.ListNestedAttribute{
- Description: "Custom headers to set in the request. HTTP allows repeated headers.",
- MarkdownDescription: "Custom headers to set in the request. HTTP allows repeated headers.",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "name": schema.StringAttribute{
- Description: "The header field name.This will be canonicalized upon output, so case-variant names will be understood as the same header.",
- MarkdownDescription: "The header field name.This will be canonicalized upon output, so case-variant names will be understood as the same header.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "value": schema.StringAttribute{
- Description: "The header field value",
- MarkdownDescription: "The header field value",
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "path": schema.StringAttribute{
- Description: "Path to access on the HTTP server.",
- MarkdownDescription: "Path to access on the HTTP server.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "port": schema.StringAttribute{
- Description: "Name or number of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.",
- MarkdownDescription: "Name or number of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "scheme": schema.StringAttribute{
- Description: "Scheme to use for connecting to the host.Defaults to HTTP.",
- MarkdownDescription: "Scheme to use for connecting to the host.Defaults to HTTP.",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "initial_delay_seconds": schema.Int64Attribute{
- Description: "Number of seconds after the container has started before liveness probes are initiated.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes",
- MarkdownDescription: "Number of seconds after the container has started before liveness probes are initiated.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "period_seconds": schema.Int64Attribute{
- Description: "How often (in seconds) to perform the probe.Default to 10 seconds. Minimum value is 1.",
- MarkdownDescription: "How often (in seconds) to perform the probe.Default to 10 seconds. Minimum value is 1.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "success_threshold": schema.Int64Attribute{
- Description: "Minimum consecutive successes for the probe to be considered successful after having failed.Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.",
- MarkdownDescription: "Minimum consecutive successes for the probe to be considered successful after having failed.Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "tcp_socket": schema.SingleNestedAttribute{
- Description: "TCPSocket specifies an action involving a TCP port.",
- MarkdownDescription: "TCPSocket specifies an action involving a TCP port.",
- Attributes: map[string]schema.Attribute{
- "host": schema.StringAttribute{
- Description: "Optional: Host name to connect to, defaults to the pod IP.",
- MarkdownDescription: "Optional: Host name to connect to, defaults to the pod IP.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "port": schema.StringAttribute{
- Description: "Number or name of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.",
- MarkdownDescription: "Number or name of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.",
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "termination_grace_period_seconds": schema.Int64Attribute{
- Description: "Optional duration in seconds the pod needs to terminate gracefully upon probe failure.The grace period is the duration in seconds after the processes running in the pod are senta termination signal and the time when the processes are forcibly halted with a kill signal.Set this value longer than the expected cleanup time for your process.If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, thisvalue overrides the value provided by the pod spec.Value must be non-negative integer. The value zero indicates stop immediately viathe kill signal (no opportunity to shut down).This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate.Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.",
- MarkdownDescription: "Optional duration in seconds the pod needs to terminate gracefully upon probe failure.The grace period is the duration in seconds after the processes running in the pod are senta termination signal and the time when the processes are forcibly halted with a kill signal.Set this value longer than the expected cleanup time for your process.If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, thisvalue overrides the value provided by the pod spec.Value must be non-negative integer. The value zero indicates stop immediately viathe kill signal (no opportunity to shut down).This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate.Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "timeout_seconds": schema.Int64Attribute{
- Description: "Number of seconds after which the probe times out.Defaults to 1 second. Minimum value is 1.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes",
- MarkdownDescription: "Number of seconds after which the probe times out.Defaults to 1 second. Minimum value is 1.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "resize_policy": schema.ListNestedAttribute{
- Description: "Resources resize policy for the container.",
- MarkdownDescription: "Resources resize policy for the container.",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "resource_name": schema.StringAttribute{
- Description: "Name of the resource to which this resource resize policy applies.Supported values: cpu, memory.",
- MarkdownDescription: "Name of the resource to which this resource resize policy applies.Supported values: cpu, memory.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "restart_policy": schema.StringAttribute{
- Description: "Restart policy to apply when specified resource is resized.If not specified, it defaults to NotRequired.",
- MarkdownDescription: "Restart policy to apply when specified resource is resized.If not specified, it defaults to NotRequired.",
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "resources": schema.SingleNestedAttribute{
- Description: "Compute Resources required by this container.Cannot be updated.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/",
- MarkdownDescription: "Compute Resources required by this container.Cannot be updated.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/",
- Attributes: map[string]schema.Attribute{
- "claims": schema.ListNestedAttribute{
- Description: "Claims lists the names of resources, defined in spec.resourceClaims,that are used by this container.This is an alpha field and requires enabling theDynamicResourceAllocation feature gate.This field is immutable. It can only be set for containers.",
- MarkdownDescription: "Claims lists the names of resources, defined in spec.resourceClaims,that are used by this container.This is an alpha field and requires enabling theDynamicResourceAllocation feature gate.This field is immutable. It can only be set for containers.",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "name": schema.StringAttribute{
- Description: "Name must match the name of one entry in pod.spec.resourceClaims ofthe Pod where this field is used. It makes that resource availableinside a container.",
- MarkdownDescription: "Name must match the name of one entry in pod.spec.resourceClaims ofthe Pod where this field is used. It makes that resource availableinside a container.",
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "limits": schema.MapAttribute{
- Description: "Limits describes the maximum amount of compute resources allowed.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/",
- MarkdownDescription: "Limits describes the maximum amount of compute resources allowed.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "requests": schema.MapAttribute{
- Description: "Requests describes the minimum amount of compute resources required.If Requests is omitted for a container, it defaults to Limits if that is explicitly specified,otherwise to an implementation-defined value. Requests cannot exceed Limits.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/",
- MarkdownDescription: "Requests describes the minimum amount of compute resources required.If Requests is omitted for a container, it defaults to Limits if that is explicitly specified,otherwise to an implementation-defined value. Requests cannot exceed Limits.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "restart_policy": schema.StringAttribute{
- Description: "RestartPolicy defines the restart behavior of individual containers in a pod.This field may only be set for init containers, and the only allowed value is 'Always'.For non-init containers or when this field is not specified,the restart behavior is defined by the Pod's restart policy and the container type.Setting the RestartPolicy as 'Always' for the init container will have the following effect:this init container will be continually restarted onexit until all regular containers have terminated. Once all regularcontainers have completed, all init containers with restartPolicy 'Always'will be shut down. This lifecycle differs from normal init containers andis often referred to as a 'sidecar' container. Although this initcontainer still starts in the init container sequence, it does not waitfor the container to complete before proceeding to the next initcontainer. Instead, the next init container starts immediately after thisinit container is started, or after any startupProbe has successfullycompleted.",
- MarkdownDescription: "RestartPolicy defines the restart behavior of individual containers in a pod.This field may only be set for init containers, and the only allowed value is 'Always'.For non-init containers or when this field is not specified,the restart behavior is defined by the Pod's restart policy and the container type.Setting the RestartPolicy as 'Always' for the init container will have the following effect:this init container will be continually restarted onexit until all regular containers have terminated. Once all regularcontainers have completed, all init containers with restartPolicy 'Always'will be shut down. This lifecycle differs from normal init containers andis often referred to as a 'sidecar' container. Although this initcontainer still starts in the init container sequence, it does not waitfor the container to complete before proceeding to the next initcontainer. Instead, the next init container starts immediately after thisinit container is started, or after any startupProbe has successfullycompleted.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "security_context": schema.SingleNestedAttribute{
- Description: "SecurityContext defines the security options the container should be run with.If set, the fields of SecurityContext override the equivalent fields of PodSecurityContext.More info: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/",
- MarkdownDescription: "SecurityContext defines the security options the container should be run with.If set, the fields of SecurityContext override the equivalent fields of PodSecurityContext.More info: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/",
- Attributes: map[string]schema.Attribute{
- "allow_privilege_escalation": schema.BoolAttribute{
- Description: "AllowPrivilegeEscalation controls whether a process can gain moreprivileges than its parent process. This bool directly controls ifthe no_new_privs flag will be set on the container process.AllowPrivilegeEscalation is true always when the container is:1) run as Privileged2) has CAP_SYS_ADMINNote that this field cannot be set when spec.os.name is windows.",
- MarkdownDescription: "AllowPrivilegeEscalation controls whether a process can gain moreprivileges than its parent process. This bool directly controls ifthe no_new_privs flag will be set on the container process.AllowPrivilegeEscalation is true always when the container is:1) run as Privileged2) has CAP_SYS_ADMINNote that this field cannot be set when spec.os.name is windows.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "capabilities": schema.SingleNestedAttribute{
- Description: "The capabilities to add/drop when running containers.Defaults to the default set of capabilities granted by the container runtime.Note that this field cannot be set when spec.os.name is windows.",
- MarkdownDescription: "The capabilities to add/drop when running containers.Defaults to the default set of capabilities granted by the container runtime.Note that this field cannot be set when spec.os.name is windows.",
- Attributes: map[string]schema.Attribute{
- "add": schema.ListAttribute{
- Description: "Added capabilities",
- MarkdownDescription: "Added capabilities",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "drop": schema.ListAttribute{
- Description: "Removed capabilities",
- MarkdownDescription: "Removed capabilities",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "privileged": schema.BoolAttribute{
- Description: "Run container in privileged mode.Processes in privileged containers are essentially equivalent to root on the host.Defaults to false.Note that this field cannot be set when spec.os.name is windows.",
- MarkdownDescription: "Run container in privileged mode.Processes in privileged containers are essentially equivalent to root on the host.Defaults to false.Note that this field cannot be set when spec.os.name is windows.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "proc_mount": schema.StringAttribute{
- Description: "procMount denotes the type of proc mount to use for the containers.The default is DefaultProcMount which uses the container runtime defaults forreadonly paths and masked paths.This requires the ProcMountType feature flag to be enabled.Note that this field cannot be set when spec.os.name is windows.",
- MarkdownDescription: "procMount denotes the type of proc mount to use for the containers.The default is DefaultProcMount which uses the container runtime defaults forreadonly paths and masked paths.This requires the ProcMountType feature flag to be enabled.Note that this field cannot be set when spec.os.name is windows.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "read_only_root_filesystem": schema.BoolAttribute{
- Description: "Whether this container has a read-only root filesystem.Default is false.Note that this field cannot be set when spec.os.name is windows.",
- MarkdownDescription: "Whether this container has a read-only root filesystem.Default is false.Note that this field cannot be set when spec.os.name is windows.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "run_as_group": schema.Int64Attribute{
- Description: "The GID to run the entrypoint of the container process.Uses runtime default if unset.May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.Note that this field cannot be set when spec.os.name is windows.",
- MarkdownDescription: "The GID to run the entrypoint of the container process.Uses runtime default if unset.May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.Note that this field cannot be set when spec.os.name is windows.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "run_as_non_root": schema.BoolAttribute{
- Description: "Indicates that the container must run as a non-root user.If true, the Kubelet will validate the image at runtime to ensure that itdoes not run as UID 0 (root) and fail to start the container if it does.If unset or false, no such validation will be performed.May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.",
- MarkdownDescription: "Indicates that the container must run as a non-root user.If true, the Kubelet will validate the image at runtime to ensure that itdoes not run as UID 0 (root) and fail to start the container if it does.If unset or false, no such validation will be performed.May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "run_as_user": schema.Int64Attribute{
- Description: "The UID to run the entrypoint of the container process.Defaults to user specified in image metadata if unspecified.May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.Note that this field cannot be set when spec.os.name is windows.",
- MarkdownDescription: "The UID to run the entrypoint of the container process.Defaults to user specified in image metadata if unspecified.May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.Note that this field cannot be set when spec.os.name is windows.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "se_linux_options": schema.SingleNestedAttribute{
- Description: "The SELinux context to be applied to the container.If unspecified, the container runtime will allocate a random SELinux context for eachcontainer. May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.Note that this field cannot be set when spec.os.name is windows.",
- MarkdownDescription: "The SELinux context to be applied to the container.If unspecified, the container runtime will allocate a random SELinux context for eachcontainer. May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.Note that this field cannot be set when spec.os.name is windows.",
- Attributes: map[string]schema.Attribute{
- "level": schema.StringAttribute{
- Description: "Level is SELinux level label that applies to the container.",
- MarkdownDescription: "Level is SELinux level label that applies to the container.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "role": schema.StringAttribute{
- Description: "Role is a SELinux role label that applies to the container.",
- MarkdownDescription: "Role is a SELinux role label that applies to the container.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "type": schema.StringAttribute{
- Description: "Type is a SELinux type label that applies to the container.",
- MarkdownDescription: "Type is a SELinux type label that applies to the container.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "user": schema.StringAttribute{
- Description: "User is a SELinux user label that applies to the container.",
- MarkdownDescription: "User is a SELinux user label that applies to the container.",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "seccomp_profile": schema.SingleNestedAttribute{
- Description: "The seccomp options to use by this container. If seccomp options areprovided at both the pod & container level, the container optionsoverride the pod options.Note that this field cannot be set when spec.os.name is windows.",
- MarkdownDescription: "The seccomp options to use by this container. If seccomp options areprovided at both the pod & container level, the container optionsoverride the pod options.Note that this field cannot be set when spec.os.name is windows.",
- Attributes: map[string]schema.Attribute{
- "localhost_profile": schema.StringAttribute{
- Description: "localhostProfile indicates a profile defined in a file on the node should be used.The profile must be preconfigured on the node to work.Must be a descending path, relative to the kubelet's configured seccomp profile location.Must be set if type is 'Localhost'. Must NOT be set for any other type.",
- MarkdownDescription: "localhostProfile indicates a profile defined in a file on the node should be used.The profile must be preconfigured on the node to work.Must be a descending path, relative to the kubelet's configured seccomp profile location.Must be set if type is 'Localhost'. Must NOT be set for any other type.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "type": schema.StringAttribute{
- Description: "type indicates which kind of seccomp profile will be applied.Valid options are:Localhost - a profile defined in a file on the node should be used.RuntimeDefault - the container runtime default profile should be used.Unconfined - no profile should be applied.",
- MarkdownDescription: "type indicates which kind of seccomp profile will be applied.Valid options are:Localhost - a profile defined in a file on the node should be used.RuntimeDefault - the container runtime default profile should be used.Unconfined - no profile should be applied.",
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "windows_options": schema.SingleNestedAttribute{
- Description: "The Windows specific settings applied to all containers.If unspecified, the options from the PodSecurityContext will be used.If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.Note that this field cannot be set when spec.os.name is linux.",
- MarkdownDescription: "The Windows specific settings applied to all containers.If unspecified, the options from the PodSecurityContext will be used.If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.Note that this field cannot be set when spec.os.name is linux.",
- Attributes: map[string]schema.Attribute{
- "gmsa_credential_spec": schema.StringAttribute{
- Description: "GMSACredentialSpec is where the GMSA admission webhook(https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of theGMSA credential spec named by the GMSACredentialSpecName field.",
- MarkdownDescription: "GMSACredentialSpec is where the GMSA admission webhook(https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of theGMSA credential spec named by the GMSACredentialSpecName field.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "gmsa_credential_spec_name": schema.StringAttribute{
- Description: "GMSACredentialSpecName is the name of the GMSA credential spec to use.",
- MarkdownDescription: "GMSACredentialSpecName is the name of the GMSA credential spec to use.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "host_process": schema.BoolAttribute{
- Description: "HostProcess determines if a container should be run as a 'Host Process' container.All of a Pod's containers must have the same effective HostProcess value(it is not allowed to have a mix of HostProcess containers and non-HostProcess containers).In addition, if HostProcess is true then HostNetwork must also be set to true.",
- MarkdownDescription: "HostProcess determines if a container should be run as a 'Host Process' container.All of a Pod's containers must have the same effective HostProcess value(it is not allowed to have a mix of HostProcess containers and non-HostProcess containers).In addition, if HostProcess is true then HostNetwork must also be set to true.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "run_as_user_name": schema.StringAttribute{
- Description: "The UserName in Windows to run the entrypoint of the container process.Defaults to the user specified in image metadata if unspecified.May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.",
- MarkdownDescription: "The UserName in Windows to run the entrypoint of the container process.Defaults to the user specified in image metadata if unspecified.May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "startup_probe": schema.SingleNestedAttribute{
- Description: "StartupProbe indicates that the Pod has successfully initialized.If specified, no other probes are executed until this completes successfully.If this probe fails, the Pod will be restarted, just as if the livenessProbe failed.This can be used to provide different probe parameters at the beginning of a Pod's lifecycle,when it might take a long time to load data or warm a cache, than during steady-state operation.This cannot be updated.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes",
- MarkdownDescription: "StartupProbe indicates that the Pod has successfully initialized.If specified, no other probes are executed until this completes successfully.If this probe fails, the Pod will be restarted, just as if the livenessProbe failed.This can be used to provide different probe parameters at the beginning of a Pod's lifecycle,when it might take a long time to load data or warm a cache, than during steady-state operation.This cannot be updated.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes",
- Attributes: map[string]schema.Attribute{
- "exec": schema.SingleNestedAttribute{
- Description: "Exec specifies the action to take.",
- MarkdownDescription: "Exec specifies the action to take.",
- Attributes: map[string]schema.Attribute{
- "command": schema.ListAttribute{
- Description: "Command is the command line to execute inside the container, the working directory for thecommand is root ('/') in the container's filesystem. The command is simply exec'd, it isnot run inside a shell, so traditional shell instructions ('|', etc) won't work. To usea shell, you need to explicitly call out to that shell.Exit status of 0 is treated as live/healthy and non-zero is unhealthy.",
- MarkdownDescription: "Command is the command line to execute inside the container, the working directory for thecommand is root ('/') in the container's filesystem. The command is simply exec'd, it isnot run inside a shell, so traditional shell instructions ('|', etc) won't work. To usea shell, you need to explicitly call out to that shell.Exit status of 0 is treated as live/healthy and non-zero is unhealthy.",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "failure_threshold": schema.Int64Attribute{
- Description: "Minimum consecutive failures for the probe to be considered failed after having succeeded.Defaults to 3. Minimum value is 1.",
- MarkdownDescription: "Minimum consecutive failures for the probe to be considered failed after having succeeded.Defaults to 3. Minimum value is 1.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "grpc": schema.SingleNestedAttribute{
- Description: "GRPC specifies an action involving a GRPC port.",
- MarkdownDescription: "GRPC specifies an action involving a GRPC port.",
- Attributes: map[string]schema.Attribute{
- "port": schema.Int64Attribute{
- Description: "Port number of the gRPC service. Number must be in the range 1 to 65535.",
- MarkdownDescription: "Port number of the gRPC service. Number must be in the range 1 to 65535.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "service": schema.StringAttribute{
- Description: "Service is the name of the service to place in the gRPC HealthCheckRequest(see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).If this is not specified, the default behavior is defined by gRPC.",
- MarkdownDescription: "Service is the name of the service to place in the gRPC HealthCheckRequest(see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).If this is not specified, the default behavior is defined by gRPC.",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "http_get": schema.SingleNestedAttribute{
- Description: "HTTPGet specifies the http request to perform.",
- MarkdownDescription: "HTTPGet specifies the http request to perform.",
- Attributes: map[string]schema.Attribute{
- "host": schema.StringAttribute{
- Description: "Host name to connect to, defaults to the pod IP. You probably want to set'Host' in httpHeaders instead.",
- MarkdownDescription: "Host name to connect to, defaults to the pod IP. You probably want to set'Host' in httpHeaders instead.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "http_headers": schema.ListNestedAttribute{
- Description: "Custom headers to set in the request. HTTP allows repeated headers.",
- MarkdownDescription: "Custom headers to set in the request. HTTP allows repeated headers.",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "name": schema.StringAttribute{
- Description: "The header field name.This will be canonicalized upon output, so case-variant names will be understood as the same header.",
- MarkdownDescription: "The header field name.This will be canonicalized upon output, so case-variant names will be understood as the same header.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "value": schema.StringAttribute{
- Description: "The header field value",
- MarkdownDescription: "The header field value",
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "path": schema.StringAttribute{
- Description: "Path to access on the HTTP server.",
- MarkdownDescription: "Path to access on the HTTP server.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "port": schema.StringAttribute{
- Description: "Name or number of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.",
- MarkdownDescription: "Name or number of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "scheme": schema.StringAttribute{
- Description: "Scheme to use for connecting to the host.Defaults to HTTP.",
- MarkdownDescription: "Scheme to use for connecting to the host.Defaults to HTTP.",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "initial_delay_seconds": schema.Int64Attribute{
- Description: "Number of seconds after the container has started before liveness probes are initiated.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes",
- MarkdownDescription: "Number of seconds after the container has started before liveness probes are initiated.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "period_seconds": schema.Int64Attribute{
- Description: "How often (in seconds) to perform the probe.Default to 10 seconds. Minimum value is 1.",
- MarkdownDescription: "How often (in seconds) to perform the probe.Default to 10 seconds. Minimum value is 1.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "success_threshold": schema.Int64Attribute{
- Description: "Minimum consecutive successes for the probe to be considered successful after having failed.Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.",
- MarkdownDescription: "Minimum consecutive successes for the probe to be considered successful after having failed.Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "tcp_socket": schema.SingleNestedAttribute{
- Description: "TCPSocket specifies an action involving a TCP port.",
- MarkdownDescription: "TCPSocket specifies an action involving a TCP port.",
- Attributes: map[string]schema.Attribute{
- "host": schema.StringAttribute{
- Description: "Optional: Host name to connect to, defaults to the pod IP.",
- MarkdownDescription: "Optional: Host name to connect to, defaults to the pod IP.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "port": schema.StringAttribute{
- Description: "Number or name of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.",
- MarkdownDescription: "Number or name of the port to access on the container.Number must be in the range 1 to 65535.Name must be an IANA_SVC_NAME.",
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "termination_grace_period_seconds": schema.Int64Attribute{
- Description: "Optional duration in seconds the pod needs to terminate gracefully upon probe failure.The grace period is the duration in seconds after the processes running in the pod are senta termination signal and the time when the processes are forcibly halted with a kill signal.Set this value longer than the expected cleanup time for your process.If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, thisvalue overrides the value provided by the pod spec.Value must be non-negative integer. The value zero indicates stop immediately viathe kill signal (no opportunity to shut down).This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate.Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.",
- MarkdownDescription: "Optional duration in seconds the pod needs to terminate gracefully upon probe failure.The grace period is the duration in seconds after the processes running in the pod are senta termination signal and the time when the processes are forcibly halted with a kill signal.Set this value longer than the expected cleanup time for your process.If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, thisvalue overrides the value provided by the pod spec.Value must be non-negative integer. The value zero indicates stop immediately viathe kill signal (no opportunity to shut down).This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate.Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "timeout_seconds": schema.Int64Attribute{
- Description: "Number of seconds after which the probe times out.Defaults to 1 second. Minimum value is 1.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes",
- MarkdownDescription: "Number of seconds after which the probe times out.Defaults to 1 second. Minimum value is 1.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "stdin": schema.BoolAttribute{
- Description: "Whether this container should allocate a buffer for stdin in the container runtime. If thisis not set, reads from stdin in the container will always result in EOF.Default is false.",
- MarkdownDescription: "Whether this container should allocate a buffer for stdin in the container runtime. If thisis not set, reads from stdin in the container will always result in EOF.Default is false.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "stdin_once": schema.BoolAttribute{
- Description: "Whether the container runtime should close the stdin channel after it has been opened bya single attach. When stdin is true the stdin stream will remain open across multiple attachsessions. If stdinOnce is set to true, stdin is opened on container start, is empty until thefirst client attaches to stdin, and then remains open and accepts data until the client disconnects,at which time stdin is closed and remains closed until the container is restarted. If thisflag is false, a container processes that reads from stdin will never receive an EOF.Default is false",
- MarkdownDescription: "Whether the container runtime should close the stdin channel after it has been opened bya single attach. When stdin is true the stdin stream will remain open across multiple attachsessions. If stdinOnce is set to true, stdin is opened on container start, is empty until thefirst client attaches to stdin, and then remains open and accepts data until the client disconnects,at which time stdin is closed and remains closed until the container is restarted. If thisflag is false, a container processes that reads from stdin will never receive an EOF.Default is false",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "termination_message_path": schema.StringAttribute{
- Description: "Optional: Path at which the file to which the container's termination messagewill be written is mounted into the container's filesystem.Message written is intended to be brief final status, such as an assertion failure message.Will be truncated by the node if greater than 4096 bytes. The total message length acrossall containers will be limited to 12kb.Defaults to /dev/termination-log.Cannot be updated.",
- MarkdownDescription: "Optional: Path at which the file to which the container's termination messagewill be written is mounted into the container's filesystem.Message written is intended to be brief final status, such as an assertion failure message.Will be truncated by the node if greater than 4096 bytes. The total message length acrossall containers will be limited to 12kb.Defaults to /dev/termination-log.Cannot be updated.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "termination_message_policy": schema.StringAttribute{
- Description: "Indicate how the termination message should be populated. File will use the contents ofterminationMessagePath to populate the container status message on both success and failure.FallbackToLogsOnError will use the last chunk of container log output if the terminationmessage file is empty and the container exited with an error.The log output is limited to 2048 bytes or 80 lines, whichever is smaller.Defaults to File.Cannot be updated.",
- MarkdownDescription: "Indicate how the termination message should be populated. File will use the contents ofterminationMessagePath to populate the container status message on both success and failure.FallbackToLogsOnError will use the last chunk of container log output if the terminationmessage file is empty and the container exited with an error.The log output is limited to 2048 bytes or 80 lines, whichever is smaller.Defaults to File.Cannot be updated.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "tty": schema.BoolAttribute{
- Description: "Whether this container should allocate a TTY for itself, also requires 'stdin' to be true.Default is false.",
- MarkdownDescription: "Whether this container should allocate a TTY for itself, also requires 'stdin' to be true.Default is false.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "volume_devices": schema.ListNestedAttribute{
- Description: "volumeDevices is the list of block devices to be used by the container.",
- MarkdownDescription: "volumeDevices is the list of block devices to be used by the container.",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "device_path": schema.StringAttribute{
- Description: "devicePath is the path inside of the container that the device will be mapped to.",
- MarkdownDescription: "devicePath is the path inside of the container that the device will be mapped to.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "name": schema.StringAttribute{
- Description: "name must match the name of a persistentVolumeClaim in the pod",
- MarkdownDescription: "name must match the name of a persistentVolumeClaim in the pod",
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "volume_mounts": schema.ListNestedAttribute{
- Description: "Pod volumes to mount into the container's filesystem.Cannot be updated.",
- MarkdownDescription: "Pod volumes to mount into the container's filesystem.Cannot be updated.",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "mount_path": schema.StringAttribute{
- Description: "Path within the container at which the volume should be mounted. Mustnot contain ':'.",
- MarkdownDescription: "Path within the container at which the volume should be mounted. Mustnot contain ':'.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "mount_propagation": schema.StringAttribute{
- Description: "mountPropagation determines how mounts are propagated from the hostto container and the other way around.When not set, MountPropagationNone is used.This field is beta in 1.10.",
- MarkdownDescription: "mountPropagation determines how mounts are propagated from the hostto container and the other way around.When not set, MountPropagationNone is used.This field is beta in 1.10.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "name": schema.StringAttribute{
- Description: "This must match the Name of a Volume.",
- MarkdownDescription: "This must match the Name of a Volume.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "read_only": schema.BoolAttribute{
- Description: "Mounted read-only if true, read-write otherwise (false or unspecified).Defaults to false.",
- MarkdownDescription: "Mounted read-only if true, read-write otherwise (false or unspecified).Defaults to false.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "sub_path": schema.StringAttribute{
- Description: "Path within the volume from which the container's volume should be mounted.Defaults to '' (volume's root).",
- MarkdownDescription: "Path within the volume from which the container's volume should be mounted.Defaults to '' (volume's root).",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "sub_path_expr": schema.StringAttribute{
- Description: "Expanded path within the volume from which the container's volume should be mounted.Behaves similarly to SubPath but environment variable references $(VAR_NAME) are expanded using the container's environment.Defaults to '' (volume's root).SubPathExpr and SubPath are mutually exclusive.",
- MarkdownDescription: "Expanded path within the volume from which the container's volume should be mounted.Behaves similarly to SubPath but environment variable references $(VAR_NAME) are expanded using the container's environment.Defaults to '' (volume's root).SubPathExpr and SubPath are mutually exclusive.",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "working_dir": schema.StringAttribute{
- Description: "Container's working directory.If not specified, the container runtime's default will be used, whichmight be configured in the container image.Cannot be updated.",
- MarkdownDescription: "Container's working directory.If not specified, the container runtime's default will be used, whichmight be configured in the container image.Cannot be updated.",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "node_name": schema.StringAttribute{
- Description: "NodeName is a request to schedule this pod onto a specific node. If it is non-empty,the scheduler simply schedules this pod onto that node, assuming that it fits resourcerequirements.",
- MarkdownDescription: "NodeName is a request to schedule this pod onto a specific node. If it is non-empty,the scheduler simply schedules this pod onto that node, assuming that it fits resourcerequirements.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "node_selector": schema.MapAttribute{
- Description: "NodeSelector is a selector which must be true for the pod to fit on a node.Selector which must match a node's labels for the pod to be scheduled on that node.More info: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/",
- MarkdownDescription: "NodeSelector is a selector which must be true for the pod to fit on a node.Selector which must match a node's labels for the pod to be scheduled on that node.More info: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "os": schema.SingleNestedAttribute{
- Description: "Specifies the OS of the containers in the pod.Some pod and container fields are restricted if this is set.If the OS field is set to linux, the following fields must be unset:-securityContext.windowsOptionsIf the OS field is set to windows, following fields must be unset:- spec.hostPID- spec.hostIPC- spec.hostUsers- spec.securityContext.seLinuxOptions- spec.securityContext.seccompProfile- spec.securityContext.fsGroup- spec.securityContext.fsGroupChangePolicy- spec.securityContext.sysctls- spec.shareProcessNamespace- spec.securityContext.runAsUser- spec.securityContext.runAsGroup- spec.securityContext.supplementalGroups- spec.containers[*].securityContext.seLinuxOptions- spec.containers[*].securityContext.seccompProfile- spec.containers[*].securityContext.capabilities- spec.containers[*].securityContext.readOnlyRootFilesystem- spec.containers[*].securityContext.privileged- spec.containers[*].securityContext.allowPrivilegeEscalation- spec.containers[*].securityContext.procMount- spec.containers[*].securityContext.runAsUser- spec.containers[*].securityContext.runAsGroup",
- MarkdownDescription: "Specifies the OS of the containers in the pod.Some pod and container fields are restricted if this is set.If the OS field is set to linux, the following fields must be unset:-securityContext.windowsOptionsIf the OS field is set to windows, following fields must be unset:- spec.hostPID- spec.hostIPC- spec.hostUsers- spec.securityContext.seLinuxOptions- spec.securityContext.seccompProfile- spec.securityContext.fsGroup- spec.securityContext.fsGroupChangePolicy- spec.securityContext.sysctls- spec.shareProcessNamespace- spec.securityContext.runAsUser- spec.securityContext.runAsGroup- spec.securityContext.supplementalGroups- spec.containers[*].securityContext.seLinuxOptions- spec.containers[*].securityContext.seccompProfile- spec.containers[*].securityContext.capabilities- spec.containers[*].securityContext.readOnlyRootFilesystem- spec.containers[*].securityContext.privileged- spec.containers[*].securityContext.allowPrivilegeEscalation- spec.containers[*].securityContext.procMount- spec.containers[*].securityContext.runAsUser- spec.containers[*].securityContext.runAsGroup",
- Attributes: map[string]schema.Attribute{
- "name": schema.StringAttribute{
- Description: "Name is the name of the operating system. The currently supported values are linux and windows.Additional value may be defined in future and can be one of:https://github.com/opencontainers/runtime-spec/blob/master/config.md#platform-specific-configurationClients should expect to handle additional values and treat unrecognized values in this field as os: null",
- MarkdownDescription: "Name is the name of the operating system. The currently supported values are linux and windows.Additional value may be defined in future and can be one of:https://github.com/opencontainers/runtime-spec/blob/master/config.md#platform-specific-configurationClients should expect to handle additional values and treat unrecognized values in this field as os: null",
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "overhead": schema.MapAttribute{
- Description: "Overhead represents the resource overhead associated with running a pod for a given RuntimeClass.This field will be autopopulated at admission time by the RuntimeClass admission controller. Ifthe RuntimeClass admission controller is enabled, overhead must not be set in Pod create requests.The RuntimeClass admission controller will reject Pod create requests which have the overhead alreadyset. If RuntimeClass is configured and selected in the PodSpec, Overhead will be set to the valuedefined in the corresponding RuntimeClass, otherwise it will remain unset and treated as zero.More info: https://git.k8s.io/enhancements/keps/sig-node/688-pod-overhead/README.md",
- MarkdownDescription: "Overhead represents the resource overhead associated with running a pod for a given RuntimeClass.This field will be autopopulated at admission time by the RuntimeClass admission controller. Ifthe RuntimeClass admission controller is enabled, overhead must not be set in Pod create requests.The RuntimeClass admission controller will reject Pod create requests which have the overhead alreadyset. If RuntimeClass is configured and selected in the PodSpec, Overhead will be set to the valuedefined in the corresponding RuntimeClass, otherwise it will remain unset and treated as zero.More info: https://git.k8s.io/enhancements/keps/sig-node/688-pod-overhead/README.md",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "preemption_policy": schema.StringAttribute{
- Description: "PreemptionPolicy is the Policy for preempting pods with lower priority.One of Never, PreemptLowerPriority.Defaults to PreemptLowerPriority if unset.",
- MarkdownDescription: "PreemptionPolicy is the Policy for preempting pods with lower priority.One of Never, PreemptLowerPriority.Defaults to PreemptLowerPriority if unset.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "priority": schema.Int64Attribute{
- Description: "The priority value. Various system components use this field to find thepriority of the pod. When Priority Admission Controller is enabled, itprevents users from setting this field. The admission controller populatesthis field from PriorityClassName.The higher the value, the higher the priority.",
- MarkdownDescription: "The priority value. Various system components use this field to find thepriority of the pod. When Priority Admission Controller is enabled, itprevents users from setting this field. The admission controller populatesthis field from PriorityClassName.The higher the value, the higher the priority.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "priority_class_name": schema.StringAttribute{
- Description: "If specified, indicates the pod's priority. 'system-node-critical' and'system-cluster-critical' are two special keywords which indicate thehighest priorities with the former being the highest priority. Any othername must be defined by creating a PriorityClass object with that name.If not specified, the pod priority will be default or zero if there is nodefault.",
- MarkdownDescription: "If specified, indicates the pod's priority. 'system-node-critical' and'system-cluster-critical' are two special keywords which indicate thehighest priorities with the former being the highest priority. Any othername must be defined by creating a PriorityClass object with that name.If not specified, the pod priority will be default or zero if there is nodefault.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "readiness_gates": schema.ListNestedAttribute{
- Description: "If specified, all readiness gates will be evaluated for pod readiness.A pod is ready when all its containers are ready ANDall conditions specified in the readiness gates have status equal to 'True'More info: https://git.k8s.io/enhancements/keps/sig-network/580-pod-readiness-gates",
- MarkdownDescription: "If specified, all readiness gates will be evaluated for pod readiness.A pod is ready when all its containers are ready ANDall conditions specified in the readiness gates have status equal to 'True'More info: https://git.k8s.io/enhancements/keps/sig-network/580-pod-readiness-gates",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "condition_type": schema.StringAttribute{
- Description: "ConditionType refers to a condition in the pod's condition list with matching type.",
- MarkdownDescription: "ConditionType refers to a condition in the pod's condition list with matching type.",
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "resource_claims": schema.ListNestedAttribute{
- Description: "ResourceClaims defines which ResourceClaims must be allocatedand reserved before the Pod is allowed to start. The resourceswill be made available to those containers which consume themby name.This is an alpha field and requires enabling theDynamicResourceAllocation feature gate.This field is immutable.",
- MarkdownDescription: "ResourceClaims defines which ResourceClaims must be allocatedand reserved before the Pod is allowed to start. The resourceswill be made available to those containers which consume themby name.This is an alpha field and requires enabling theDynamicResourceAllocation feature gate.This field is immutable.",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "name": schema.StringAttribute{
- Description: "Name uniquely identifies this resource claim inside the pod.This must be a DNS_LABEL.",
- MarkdownDescription: "Name uniquely identifies this resource claim inside the pod.This must be a DNS_LABEL.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "source": schema.SingleNestedAttribute{
- Description: "Source describes where to find the ResourceClaim.",
- MarkdownDescription: "Source describes where to find the ResourceClaim.",
- Attributes: map[string]schema.Attribute{
- "resource_claim_name": schema.StringAttribute{
- Description: "ResourceClaimName is the name of a ResourceClaim object in the samenamespace as this pod.",
- MarkdownDescription: "ResourceClaimName is the name of a ResourceClaim object in the samenamespace as this pod.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "resource_claim_template_name": schema.StringAttribute{
- Description: "ResourceClaimTemplateName is the name of a ResourceClaimTemplateobject in the same namespace as this pod.The template will be used to create a new ResourceClaim, which willbe bound to this pod. When this pod is deleted, the ResourceClaimwill also be deleted. The pod name and resource name, along with agenerated component, will be used to form a unique name for theResourceClaim, which will be recorded in pod.status.resourceClaimStatuses.This field is immutable and no changes will be made to thecorresponding ResourceClaim by the control plane after creating theResourceClaim.",
- MarkdownDescription: "ResourceClaimTemplateName is the name of a ResourceClaimTemplateobject in the same namespace as this pod.The template will be used to create a new ResourceClaim, which willbe bound to this pod. When this pod is deleted, the ResourceClaimwill also be deleted. The pod name and resource name, along with agenerated component, will be used to form a unique name for theResourceClaim, which will be recorded in pod.status.resourceClaimStatuses.This field is immutable and no changes will be made to thecorresponding ResourceClaim by the control plane after creating theResourceClaim.",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "restart_policy": schema.StringAttribute{
- Description: "Restart policy for all containers within the pod.One of Always, OnFailure, Never. In some contexts, only a subset of those values may be permitted.Default to Always.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle/#restart-policy",
- MarkdownDescription: "Restart policy for all containers within the pod.One of Always, OnFailure, Never. In some contexts, only a subset of those values may be permitted.Default to Always.More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle/#restart-policy",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "runtime_class_name": schema.StringAttribute{
- Description: "RuntimeClassName refers to a RuntimeClass object in the node.k8s.io group, which should be usedto run this pod. If no RuntimeClass resource matches the named class, the pod will not be run.If unset or empty, the 'legacy' RuntimeClass will be used, which is an implicit class with anempty definition that uses the default runtime handler.More info: https://git.k8s.io/enhancements/keps/sig-node/585-runtime-class",
- MarkdownDescription: "RuntimeClassName refers to a RuntimeClass object in the node.k8s.io group, which should be usedto run this pod. If no RuntimeClass resource matches the named class, the pod will not be run.If unset or empty, the 'legacy' RuntimeClass will be used, which is an implicit class with anempty definition that uses the default runtime handler.More info: https://git.k8s.io/enhancements/keps/sig-node/585-runtime-class",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "scheduler_name": schema.StringAttribute{
- Description: "If specified, the pod will be dispatched by specified scheduler.If not specified, the pod will be dispatched by default scheduler.",
- MarkdownDescription: "If specified, the pod will be dispatched by specified scheduler.If not specified, the pod will be dispatched by default scheduler.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "scheduling_gates": schema.ListNestedAttribute{
- Description: "SchedulingGates is an opaque list of values that if specified will block scheduling the pod.If schedulingGates is not empty, the pod will stay in the SchedulingGated state and thescheduler will not attempt to schedule the pod.SchedulingGates can only be set at pod creation time, and be removed only afterwards.This is a beta feature enabled by the PodSchedulingReadiness feature gate.",
- MarkdownDescription: "SchedulingGates is an opaque list of values that if specified will block scheduling the pod.If schedulingGates is not empty, the pod will stay in the SchedulingGated state and thescheduler will not attempt to schedule the pod.SchedulingGates can only be set at pod creation time, and be removed only afterwards.This is a beta feature enabled by the PodSchedulingReadiness feature gate.",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "name": schema.StringAttribute{
- Description: "Name of the scheduling gate.Each scheduling gate must have a unique name field.",
- MarkdownDescription: "Name of the scheduling gate.Each scheduling gate must have a unique name field.",
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "security_context": schema.SingleNestedAttribute{
- Description: "SecurityContext holds pod-level security attributes and common container settings.Optional: Defaults to empty. See type description for default values of each field.",
- MarkdownDescription: "SecurityContext holds pod-level security attributes and common container settings.Optional: Defaults to empty. See type description for default values of each field.",
- Attributes: map[string]schema.Attribute{
- "fs_group": schema.Int64Attribute{
- Description: "A special supplemental group that applies to all containers in a pod.Some volume types allow the Kubelet to change the ownership of that volumeto be owned by the pod:1. The owning GID will be the FSGroup2. The setgid bit is set (new files created in the volume will be owned by FSGroup)3. The permission bits are OR'd with rw-rw----If unset, the Kubelet will not modify the ownership and permissions of any volume.Note that this field cannot be set when spec.os.name is windows.",
- MarkdownDescription: "A special supplemental group that applies to all containers in a pod.Some volume types allow the Kubelet to change the ownership of that volumeto be owned by the pod:1. The owning GID will be the FSGroup2. The setgid bit is set (new files created in the volume will be owned by FSGroup)3. The permission bits are OR'd with rw-rw----If unset, the Kubelet will not modify the ownership and permissions of any volume.Note that this field cannot be set when spec.os.name is windows.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "fs_group_change_policy": schema.StringAttribute{
- Description: "fsGroupChangePolicy defines behavior of changing ownership and permission of the volumebefore being exposed inside Pod. This field will only apply tovolume types which support fsGroup based ownership(and permissions).It will have no effect on ephemeral volume types such as: secret, configmapsand emptydir.Valid values are 'OnRootMismatch' and 'Always'. If not specified, 'Always' is used.Note that this field cannot be set when spec.os.name is windows.",
- MarkdownDescription: "fsGroupChangePolicy defines behavior of changing ownership and permission of the volumebefore being exposed inside Pod. This field will only apply tovolume types which support fsGroup based ownership(and permissions).It will have no effect on ephemeral volume types such as: secret, configmapsand emptydir.Valid values are 'OnRootMismatch' and 'Always'. If not specified, 'Always' is used.Note that this field cannot be set when spec.os.name is windows.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "run_as_group": schema.Int64Attribute{
- Description: "The GID to run the entrypoint of the container process.Uses runtime default if unset.May also be set in SecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedencefor that container.Note that this field cannot be set when spec.os.name is windows.",
- MarkdownDescription: "The GID to run the entrypoint of the container process.Uses runtime default if unset.May also be set in SecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedencefor that container.Note that this field cannot be set when spec.os.name is windows.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "run_as_non_root": schema.BoolAttribute{
- Description: "Indicates that the container must run as a non-root user.If true, the Kubelet will validate the image at runtime to ensure that itdoes not run as UID 0 (root) and fail to start the container if it does.If unset or false, no such validation will be performed.May also be set in SecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.",
- MarkdownDescription: "Indicates that the container must run as a non-root user.If true, the Kubelet will validate the image at runtime to ensure that itdoes not run as UID 0 (root) and fail to start the container if it does.If unset or false, no such validation will be performed.May also be set in SecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "run_as_user": schema.Int64Attribute{
- Description: "The UID to run the entrypoint of the container process.Defaults to user specified in image metadata if unspecified.May also be set in SecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedencefor that container.Note that this field cannot be set when spec.os.name is windows.",
- MarkdownDescription: "The UID to run the entrypoint of the container process.Defaults to user specified in image metadata if unspecified.May also be set in SecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedencefor that container.Note that this field cannot be set when spec.os.name is windows.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "se_linux_options": schema.SingleNestedAttribute{
- Description: "The SELinux context to be applied to all containers.If unspecified, the container runtime will allocate a random SELinux context for eachcontainer. May also be set in SecurityContext. If set inboth SecurityContext and PodSecurityContext, the value specified in SecurityContexttakes precedence for that container.Note that this field cannot be set when spec.os.name is windows.",
- MarkdownDescription: "The SELinux context to be applied to all containers.If unspecified, the container runtime will allocate a random SELinux context for eachcontainer. May also be set in SecurityContext. If set inboth SecurityContext and PodSecurityContext, the value specified in SecurityContexttakes precedence for that container.Note that this field cannot be set when spec.os.name is windows.",
- Attributes: map[string]schema.Attribute{
- "level": schema.StringAttribute{
- Description: "Level is SELinux level label that applies to the container.",
- MarkdownDescription: "Level is SELinux level label that applies to the container.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "role": schema.StringAttribute{
- Description: "Role is a SELinux role label that applies to the container.",
- MarkdownDescription: "Role is a SELinux role label that applies to the container.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "type": schema.StringAttribute{
- Description: "Type is a SELinux type label that applies to the container.",
- MarkdownDescription: "Type is a SELinux type label that applies to the container.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "user": schema.StringAttribute{
- Description: "User is a SELinux user label that applies to the container.",
- MarkdownDescription: "User is a SELinux user label that applies to the container.",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "seccomp_profile": schema.SingleNestedAttribute{
- Description: "The seccomp options to use by the containers in this pod.Note that this field cannot be set when spec.os.name is windows.",
- MarkdownDescription: "The seccomp options to use by the containers in this pod.Note that this field cannot be set when spec.os.name is windows.",
- Attributes: map[string]schema.Attribute{
- "localhost_profile": schema.StringAttribute{
- Description: "localhostProfile indicates a profile defined in a file on the node should be used.The profile must be preconfigured on the node to work.Must be a descending path, relative to the kubelet's configured seccomp profile location.Must be set if type is 'Localhost'. Must NOT be set for any other type.",
- MarkdownDescription: "localhostProfile indicates a profile defined in a file on the node should be used.The profile must be preconfigured on the node to work.Must be a descending path, relative to the kubelet's configured seccomp profile location.Must be set if type is 'Localhost'. Must NOT be set for any other type.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "type": schema.StringAttribute{
- Description: "type indicates which kind of seccomp profile will be applied.Valid options are:Localhost - a profile defined in a file on the node should be used.RuntimeDefault - the container runtime default profile should be used.Unconfined - no profile should be applied.",
- MarkdownDescription: "type indicates which kind of seccomp profile will be applied.Valid options are:Localhost - a profile defined in a file on the node should be used.RuntimeDefault - the container runtime default profile should be used.Unconfined - no profile should be applied.",
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "supplemental_groups": schema.ListAttribute{
- Description: "A list of groups applied to the first process run in each container, in additionto the container's primary GID, the fsGroup (if specified), and group membershipsdefined in the container image for the uid of the container process. If unspecified,no additional groups are added to any container. Note that group membershipsdefined in the container image for the uid of the container process are still effective,even if they are not included in this list.Note that this field cannot be set when spec.os.name is windows.",
- MarkdownDescription: "A list of groups applied to the first process run in each container, in additionto the container's primary GID, the fsGroup (if specified), and group membershipsdefined in the container image for the uid of the container process. If unspecified,no additional groups are added to any container. Note that group membershipsdefined in the container image for the uid of the container process are still effective,even if they are not included in this list.Note that this field cannot be set when spec.os.name is windows.",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "sysctls": schema.ListNestedAttribute{
- Description: "Sysctls hold a list of namespaced sysctls used for the pod. Pods with unsupportedsysctls (by the container runtime) might fail to launch.Note that this field cannot be set when spec.os.name is windows.",
- MarkdownDescription: "Sysctls hold a list of namespaced sysctls used for the pod. Pods with unsupportedsysctls (by the container runtime) might fail to launch.Note that this field cannot be set when spec.os.name is windows.",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "name": schema.StringAttribute{
- Description: "Name of a property to set",
- MarkdownDescription: "Name of a property to set",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "value": schema.StringAttribute{
- Description: "Value of a property to set",
- MarkdownDescription: "Value of a property to set",
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "windows_options": schema.SingleNestedAttribute{
- Description: "The Windows specific settings applied to all containers.If unspecified, the options within a container's SecurityContext will be used.If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.Note that this field cannot be set when spec.os.name is linux.",
- MarkdownDescription: "The Windows specific settings applied to all containers.If unspecified, the options within a container's SecurityContext will be used.If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.Note that this field cannot be set when spec.os.name is linux.",
- Attributes: map[string]schema.Attribute{
- "gmsa_credential_spec": schema.StringAttribute{
- Description: "GMSACredentialSpec is where the GMSA admission webhook(https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of theGMSA credential spec named by the GMSACredentialSpecName field.",
- MarkdownDescription: "GMSACredentialSpec is where the GMSA admission webhook(https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of theGMSA credential spec named by the GMSACredentialSpecName field.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "gmsa_credential_spec_name": schema.StringAttribute{
- Description: "GMSACredentialSpecName is the name of the GMSA credential spec to use.",
- MarkdownDescription: "GMSACredentialSpecName is the name of the GMSA credential spec to use.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "host_process": schema.BoolAttribute{
- Description: "HostProcess determines if a container should be run as a 'Host Process' container.All of a Pod's containers must have the same effective HostProcess value(it is not allowed to have a mix of HostProcess containers and non-HostProcess containers).In addition, if HostProcess is true then HostNetwork must also be set to true.",
- MarkdownDescription: "HostProcess determines if a container should be run as a 'Host Process' container.All of a Pod's containers must have the same effective HostProcess value(it is not allowed to have a mix of HostProcess containers and non-HostProcess containers).In addition, if HostProcess is true then HostNetwork must also be set to true.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "run_as_user_name": schema.StringAttribute{
- Description: "The UserName in Windows to run the entrypoint of the container process.Defaults to the user specified in image metadata if unspecified.May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.",
- MarkdownDescription: "The UserName in Windows to run the entrypoint of the container process.Defaults to the user specified in image metadata if unspecified.May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "service_account": schema.StringAttribute{
- Description: "DeprecatedServiceAccount is a depreciated alias for ServiceAccountName.Deprecated: Use serviceAccountName instead.",
- MarkdownDescription: "DeprecatedServiceAccount is a depreciated alias for ServiceAccountName.Deprecated: Use serviceAccountName instead.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "service_account_name": schema.StringAttribute{
- Description: "ServiceAccountName is the name of the ServiceAccount to use to run this pod.More info: https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/",
- MarkdownDescription: "ServiceAccountName is the name of the ServiceAccount to use to run this pod.More info: https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "set_hostname_as_fqdn": schema.BoolAttribute{
- Description: "If true the pod's hostname will be configured as the pod's FQDN, rather than the leaf name (the default).In Linux containers, this means setting the FQDN in the hostname field of the kernel (the nodename field of struct utsname).In Windows containers, this means setting the registry value of hostname for the registry key HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParameters to FQDN.If a pod does not have FQDN, this has no effect.Default to false.",
- MarkdownDescription: "If true the pod's hostname will be configured as the pod's FQDN, rather than the leaf name (the default).In Linux containers, this means setting the FQDN in the hostname field of the kernel (the nodename field of struct utsname).In Windows containers, this means setting the registry value of hostname for the registry key HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParameters to FQDN.If a pod does not have FQDN, this has no effect.Default to false.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "share_process_namespace": schema.BoolAttribute{
- Description: "Share a single process namespace between all of the containers in a pod.When this is set containers will be able to view and signal processes from other containersin the same pod, and the first process in each container will not be assigned PID 1.HostPID and ShareProcessNamespace cannot both be set.Optional: Default to false.",
- MarkdownDescription: "Share a single process namespace between all of the containers in a pod.When this is set containers will be able to view and signal processes from other containersin the same pod, and the first process in each container will not be assigned PID 1.HostPID and ShareProcessNamespace cannot both be set.Optional: Default to false.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "subdomain": schema.StringAttribute{
- Description: "If specified, the fully qualified Pod hostname will be '...svc.'.If not specified, the pod will not have a domainname at all.",
- MarkdownDescription: "If specified, the fully qualified Pod hostname will be '...svc.'.If not specified, the pod will not have a domainname at all.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "termination_grace_period_seconds": schema.Int64Attribute{
- Description: "Optional duration in seconds the pod needs to terminate gracefully. May be decreased in delete request.Value must be non-negative integer. The value zero indicates stop immediately viathe kill signal (no opportunity to shut down).If this value is nil, the default grace period will be used instead.The grace period is the duration in seconds after the processes running in the pod are senta termination signal and the time when the processes are forcibly halted with a kill signal.Set this value longer than the expected cleanup time for your process.Defaults to 30 seconds.",
- MarkdownDescription: "Optional duration in seconds the pod needs to terminate gracefully. May be decreased in delete request.Value must be non-negative integer. The value zero indicates stop immediately viathe kill signal (no opportunity to shut down).If this value is nil, the default grace period will be used instead.The grace period is the duration in seconds after the processes running in the pod are senta termination signal and the time when the processes are forcibly halted with a kill signal.Set this value longer than the expected cleanup time for your process.Defaults to 30 seconds.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "tolerations": schema.ListNestedAttribute{
- Description: "If specified, the pod's tolerations.",
- MarkdownDescription: "If specified, the pod's tolerations.",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "effect": schema.StringAttribute{
- Description: "Effect indicates the taint effect to match. Empty means match all taint effects.When specified, allowed values are NoSchedule, PreferNoSchedule and NoExecute.",
- MarkdownDescription: "Effect indicates the taint effect to match. Empty means match all taint effects.When specified, allowed values are NoSchedule, PreferNoSchedule and NoExecute.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "key": schema.StringAttribute{
- Description: "Key is the taint key that the toleration applies to. Empty means match all taint keys.If the key is empty, operator must be Exists; this combination means to match all values and all keys.",
- MarkdownDescription: "Key is the taint key that the toleration applies to. Empty means match all taint keys.If the key is empty, operator must be Exists; this combination means to match all values and all keys.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "operator": schema.StringAttribute{
- Description: "Operator represents a key's relationship to the value.Valid operators are Exists and Equal. Defaults to Equal.Exists is equivalent to wildcard for value, so that a pod cantolerate all taints of a particular category.",
- MarkdownDescription: "Operator represents a key's relationship to the value.Valid operators are Exists and Equal. Defaults to Equal.Exists is equivalent to wildcard for value, so that a pod cantolerate all taints of a particular category.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "toleration_seconds": schema.Int64Attribute{
- Description: "TolerationSeconds represents the period of time the toleration (which must beof effect NoExecute, otherwise this field is ignored) tolerates the taint. By default,it is not set, which means tolerate the taint forever (do not evict). Zero andnegative values will be treated as 0 (evict immediately) by the system.",
- MarkdownDescription: "TolerationSeconds represents the period of time the toleration (which must beof effect NoExecute, otherwise this field is ignored) tolerates the taint. By default,it is not set, which means tolerate the taint forever (do not evict). Zero andnegative values will be treated as 0 (evict immediately) by the system.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "value": schema.StringAttribute{
- Description: "Value is the taint value the toleration matches to.If the operator is Exists, the value should be empty, otherwise just a regular string.",
- MarkdownDescription: "Value is the taint value the toleration matches to.If the operator is Exists, the value should be empty, otherwise just a regular string.",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "topology_spread_constraints": schema.ListNestedAttribute{
- Description: "TopologySpreadConstraints describes how a group of pods ought to spread across topologydomains. Scheduler will schedule pods in a way which abides by the constraints.All topologySpreadConstraints are ANDed.",
- MarkdownDescription: "TopologySpreadConstraints describes how a group of pods ought to spread across topologydomains. Scheduler will schedule pods in a way which abides by the constraints.All topologySpreadConstraints are ANDed.",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "label_selector": schema.SingleNestedAttribute{
- Description: "LabelSelector is used to find matching pods.Pods that match this label selector are counted to determine the number of podsin their corresponding topology domain.",
- MarkdownDescription: "LabelSelector is used to find matching pods.Pods that match this label selector are counted to determine the number of podsin their corresponding topology domain.",
- Attributes: map[string]schema.Attribute{
- "match_expressions": schema.ListNestedAttribute{
- Description: "matchExpressions is a list of label selector requirements. The requirements are ANDed.",
- MarkdownDescription: "matchExpressions is a list of label selector requirements. The requirements are ANDed.",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "key": schema.StringAttribute{
- Description: "key is the label key that the selector applies to.",
- MarkdownDescription: "key is the label key that the selector applies to.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "operator": schema.StringAttribute{
- Description: "operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.",
- MarkdownDescription: "operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "values": schema.ListAttribute{
- Description: "values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.",
- MarkdownDescription: "values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "match_labels": schema.MapAttribute{
- Description: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.",
- MarkdownDescription: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "match_label_keys": schema.ListAttribute{
- Description: "MatchLabelKeys is a set of pod label keys to select the pods over whichspreading will be calculated. The keys are used to lookup values from theincoming pod labels, those key-value labels are ANDed with labelSelectorto select the group of existing pods over which spreading will be calculatedfor the incoming pod. The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.MatchLabelKeys cannot be set when LabelSelector isn't set.Keys that don't exist in the incoming pod labels willbe ignored. A null or empty list means only match against labelSelector.This is a beta field and requires the MatchLabelKeysInPodTopologySpread feature gate to be enabled (enabled by default).",
- MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select the pods over whichspreading will be calculated. The keys are used to lookup values from theincoming pod labels, those key-value labels are ANDed with labelSelectorto select the group of existing pods over which spreading will be calculatedfor the incoming pod. The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.MatchLabelKeys cannot be set when LabelSelector isn't set.Keys that don't exist in the incoming pod labels willbe ignored. A null or empty list means only match against labelSelector.This is a beta field and requires the MatchLabelKeysInPodTopologySpread feature gate to be enabled (enabled by default).",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "max_skew": schema.Int64Attribute{
- Description: "MaxSkew describes the degree to which pods may be unevenly distributed.When 'whenUnsatisfiable=DoNotSchedule', it is the maximum permitted differencebetween the number of matching pods in the target topology and the global minimum.The global minimum is the minimum number of matching pods in an eligible domainor zero if the number of eligible domains is less than MinDomains.For example, in a 3-zone cluster, MaxSkew is set to 1, and pods with the samelabelSelector spread as 2/2/1:In this case, the global minimum is 1.| zone1 | zone2 | zone3 || P P | P P | P |- if MaxSkew is 1, incoming pod can only be scheduled to zone3 to become 2/2/2;scheduling it onto zone1(zone2) would make the ActualSkew(3-1) on zone1(zone2)violate MaxSkew(1).- if MaxSkew is 2, incoming pod can be scheduled onto any zone.When 'whenUnsatisfiable=ScheduleAnyway', it is used to give higher precedenceto topologies that satisfy it.It's a required field. Default value is 1 and 0 is not allowed.",
- MarkdownDescription: "MaxSkew describes the degree to which pods may be unevenly distributed.When 'whenUnsatisfiable=DoNotSchedule', it is the maximum permitted differencebetween the number of matching pods in the target topology and the global minimum.The global minimum is the minimum number of matching pods in an eligible domainor zero if the number of eligible domains is less than MinDomains.For example, in a 3-zone cluster, MaxSkew is set to 1, and pods with the samelabelSelector spread as 2/2/1:In this case, the global minimum is 1.| zone1 | zone2 | zone3 || P P | P P | P |- if MaxSkew is 1, incoming pod can only be scheduled to zone3 to become 2/2/2;scheduling it onto zone1(zone2) would make the ActualSkew(3-1) on zone1(zone2)violate MaxSkew(1).- if MaxSkew is 2, incoming pod can be scheduled onto any zone.When 'whenUnsatisfiable=ScheduleAnyway', it is used to give higher precedenceto topologies that satisfy it.It's a required field. Default value is 1 and 0 is not allowed.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "min_domains": schema.Int64Attribute{
- Description: "MinDomains indicates a minimum number of eligible domains.When the number of eligible domains with matching topology keys is less than minDomains,Pod Topology Spread treats 'global minimum' as 0, and then the calculation of Skew is performed.And when the number of eligible domains with matching topology keys equals or greater than minDomains,this value has no effect on scheduling.As a result, when the number of eligible domains is less than minDomains,scheduler won't schedule more than maxSkew Pods to those domains.If value is nil, the constraint behaves as if MinDomains is equal to 1.Valid values are integers greater than 0.When value is not nil, WhenUnsatisfiable must be DoNotSchedule.For example, in a 3-zone cluster, MaxSkew is set to 2, MinDomains is set to 5 and pods with the samelabelSelector spread as 2/2/2:| zone1 | zone2 | zone3 || P P | P P | P P |The number of domains is less than 5(MinDomains), so 'global minimum' is treated as 0.In this situation, new pod with the same labelSelector cannot be scheduled,because computed skew will be 3(3 - 0) if new Pod is scheduled to any of the three zones,it will violate MaxSkew.This is a beta field and requires the MinDomainsInPodTopologySpread feature gate to be enabled (enabled by default).",
- MarkdownDescription: "MinDomains indicates a minimum number of eligible domains.When the number of eligible domains with matching topology keys is less than minDomains,Pod Topology Spread treats 'global minimum' as 0, and then the calculation of Skew is performed.And when the number of eligible domains with matching topology keys equals or greater than minDomains,this value has no effect on scheduling.As a result, when the number of eligible domains is less than minDomains,scheduler won't schedule more than maxSkew Pods to those domains.If value is nil, the constraint behaves as if MinDomains is equal to 1.Valid values are integers greater than 0.When value is not nil, WhenUnsatisfiable must be DoNotSchedule.For example, in a 3-zone cluster, MaxSkew is set to 2, MinDomains is set to 5 and pods with the samelabelSelector spread as 2/2/2:| zone1 | zone2 | zone3 || P P | P P | P P |The number of domains is less than 5(MinDomains), so 'global minimum' is treated as 0.In this situation, new pod with the same labelSelector cannot be scheduled,because computed skew will be 3(3 - 0) if new Pod is scheduled to any of the three zones,it will violate MaxSkew.This is a beta field and requires the MinDomainsInPodTopologySpread feature gate to be enabled (enabled by default).",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "node_affinity_policy": schema.StringAttribute{
- Description: "NodeAffinityPolicy indicates how we will treat Pod's nodeAffinity/nodeSelectorwhen calculating pod topology spread skew. Options are:- Honor: only nodes matching nodeAffinity/nodeSelector are included in the calculations.- Ignore: nodeAffinity/nodeSelector are ignored. All nodes are included in the calculations.If this value is nil, the behavior is equivalent to the Honor policy.This is a beta-level feature default enabled by the NodeInclusionPolicyInPodTopologySpread feature flag.",
- MarkdownDescription: "NodeAffinityPolicy indicates how we will treat Pod's nodeAffinity/nodeSelectorwhen calculating pod topology spread skew. Options are:- Honor: only nodes matching nodeAffinity/nodeSelector are included in the calculations.- Ignore: nodeAffinity/nodeSelector are ignored. All nodes are included in the calculations.If this value is nil, the behavior is equivalent to the Honor policy.This is a beta-level feature default enabled by the NodeInclusionPolicyInPodTopologySpread feature flag.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "node_taints_policy": schema.StringAttribute{
- Description: "NodeTaintsPolicy indicates how we will treat node taints when calculatingpod topology spread skew. Options are:- Honor: nodes without taints, along with tainted nodes for which the incoming podhas a toleration, are included.- Ignore: node taints are ignored. All nodes are included.If this value is nil, the behavior is equivalent to the Ignore policy.This is a beta-level feature default enabled by the NodeInclusionPolicyInPodTopologySpread feature flag.",
- MarkdownDescription: "NodeTaintsPolicy indicates how we will treat node taints when calculatingpod topology spread skew. Options are:- Honor: nodes without taints, along with tainted nodes for which the incoming podhas a toleration, are included.- Ignore: node taints are ignored. All nodes are included.If this value is nil, the behavior is equivalent to the Ignore policy.This is a beta-level feature default enabled by the NodeInclusionPolicyInPodTopologySpread feature flag.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "topology_key": schema.StringAttribute{
- Description: "TopologyKey is the key of node labels. Nodes that have a label with this keyand identical values are considered to be in the same topology.We consider each as a 'bucket', and try to put balanced numberof pods into each bucket.We define a domain as a particular instance of a topology.Also, we define an eligible domain as a domain whose nodes meet the requirements ofnodeAffinityPolicy and nodeTaintsPolicy.e.g. If TopologyKey is 'kubernetes.io/hostname', each Node is a domain of that topology.And, if TopologyKey is 'topology.kubernetes.io/zone', each zone is a domain of that topology.It's a required field.",
- MarkdownDescription: "TopologyKey is the key of node labels. Nodes that have a label with this keyand identical values are considered to be in the same topology.We consider each as a 'bucket', and try to put balanced numberof pods into each bucket.We define a domain as a particular instance of a topology.Also, we define an eligible domain as a domain whose nodes meet the requirements ofnodeAffinityPolicy and nodeTaintsPolicy.e.g. If TopologyKey is 'kubernetes.io/hostname', each Node is a domain of that topology.And, if TopologyKey is 'topology.kubernetes.io/zone', each zone is a domain of that topology.It's a required field.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "when_unsatisfiable": schema.StringAttribute{
- Description: "WhenUnsatisfiable indicates how to deal with a pod if it doesn't satisfythe spread constraint.- DoNotSchedule (default) tells the scheduler not to schedule it.- ScheduleAnyway tells the scheduler to schedule the pod in any location, but giving higher precedence to topologies that would help reduce the skew.A constraint is considered 'Unsatisfiable' for an incoming podif and only if every possible node assignment for that pod would violate'MaxSkew' on some topology.For example, in a 3-zone cluster, MaxSkew is set to 1, and pods with the samelabelSelector spread as 3/1/1:| zone1 | zone2 | zone3 || P P P | P | P |If WhenUnsatisfiable is set to DoNotSchedule, incoming pod can only be scheduledto zone2(zone3) to become 3/2/1(3/1/2) as ActualSkew(2-1) on zone2(zone3) satisfiesMaxSkew(1). In other words, the cluster can still be imbalanced, but schedulerwon't make it *more* imbalanced.It's a required field.",
- MarkdownDescription: "WhenUnsatisfiable indicates how to deal with a pod if it doesn't satisfythe spread constraint.- DoNotSchedule (default) tells the scheduler not to schedule it.- ScheduleAnyway tells the scheduler to schedule the pod in any location, but giving higher precedence to topologies that would help reduce the skew.A constraint is considered 'Unsatisfiable' for an incoming podif and only if every possible node assignment for that pod would violate'MaxSkew' on some topology.For example, in a 3-zone cluster, MaxSkew is set to 1, and pods with the samelabelSelector spread as 3/1/1:| zone1 | zone2 | zone3 || P P P | P | P |If WhenUnsatisfiable is set to DoNotSchedule, incoming pod can only be scheduledto zone2(zone3) to become 3/2/1(3/1/2) as ActualSkew(2-1) on zone2(zone3) satisfiesMaxSkew(1). In other words, the cluster can still be imbalanced, but schedulerwon't make it *more* imbalanced.It's a required field.",
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "volumes": schema.ListNestedAttribute{
- Description: "List of volumes that can be mounted by containers belonging to the pod.More info: https://kubernetes.io/docs/concepts/storage/volumes",
- MarkdownDescription: "List of volumes that can be mounted by containers belonging to the pod.More info: https://kubernetes.io/docs/concepts/storage/volumes",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "aws_elastic_block_store": schema.SingleNestedAttribute{
- Description: "awsElasticBlockStore represents an AWS Disk resource that is attached to akubelet's host machine and then exposed to the pod.More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore",
- MarkdownDescription: "awsElasticBlockStore represents an AWS Disk resource that is attached to akubelet's host machine and then exposed to the pod.More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore",
- Attributes: map[string]schema.Attribute{
- "fs_type": schema.StringAttribute{
- Description: "fsType is the filesystem type of the volume that you want to mount.Tip: Ensure that the filesystem type is supported by the host operating system.Examples: 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified.More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstoreTODO: how do we prevent errors in the filesystem from compromising the machine",
- MarkdownDescription: "fsType is the filesystem type of the volume that you want to mount.Tip: Ensure that the filesystem type is supported by the host operating system.Examples: 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified.More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstoreTODO: how do we prevent errors in the filesystem from compromising the machine",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "partition": schema.Int64Attribute{
- Description: "partition is the partition in the volume that you want to mount.If omitted, the default is to mount by volume name.Examples: For volume /dev/sda1, you specify the partition as '1'.Similarly, the volume partition for /dev/sda is '0' (or you can leave the property empty).",
- MarkdownDescription: "partition is the partition in the volume that you want to mount.If omitted, the default is to mount by volume name.Examples: For volume /dev/sda1, you specify the partition as '1'.Similarly, the volume partition for /dev/sda is '0' (or you can leave the property empty).",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "read_only": schema.BoolAttribute{
- Description: "readOnly value true will force the readOnly setting in VolumeMounts.More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore",
- MarkdownDescription: "readOnly value true will force the readOnly setting in VolumeMounts.More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "volume_id": schema.StringAttribute{
- Description: "volumeID is unique ID of the persistent disk resource in AWS (Amazon EBS volume).More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore",
- MarkdownDescription: "volumeID is unique ID of the persistent disk resource in AWS (Amazon EBS volume).More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore",
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "azure_disk": schema.SingleNestedAttribute{
- Description: "azureDisk represents an Azure Data Disk mount on the host and bind mount to the pod.",
- MarkdownDescription: "azureDisk represents an Azure Data Disk mount on the host and bind mount to the pod.",
- Attributes: map[string]schema.Attribute{
- "caching_mode": schema.StringAttribute{
- Description: "cachingMode is the Host Caching mode: None, Read Only, Read Write.",
- MarkdownDescription: "cachingMode is the Host Caching mode: None, Read Only, Read Write.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "disk_name": schema.StringAttribute{
- Description: "diskName is the Name of the data disk in the blob storage",
- MarkdownDescription: "diskName is the Name of the data disk in the blob storage",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "disk_uri": schema.StringAttribute{
- Description: "diskURI is the URI of data disk in the blob storage",
- MarkdownDescription: "diskURI is the URI of data disk in the blob storage",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "fs_type": schema.StringAttribute{
- Description: "fsType is Filesystem type to mount.Must be a filesystem type supported by the host operating system.Ex. 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified.",
- MarkdownDescription: "fsType is Filesystem type to mount.Must be a filesystem type supported by the host operating system.Ex. 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "kind": schema.StringAttribute{
- Description: "kind expected values are Shared: multiple blob disks per storage account Dedicated: single blob disk per storage account Managed: azure managed data disk (only in managed availability set). defaults to shared",
- MarkdownDescription: "kind expected values are Shared: multiple blob disks per storage account Dedicated: single blob disk per storage account Managed: azure managed data disk (only in managed availability set). defaults to shared",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "read_only": schema.BoolAttribute{
- Description: "readOnly Defaults to false (read/write). ReadOnly here will forcethe ReadOnly setting in VolumeMounts.",
- MarkdownDescription: "readOnly Defaults to false (read/write). ReadOnly here will forcethe ReadOnly setting in VolumeMounts.",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "azure_file": schema.SingleNestedAttribute{
- Description: "azureFile represents an Azure File Service mount on the host and bind mount to the pod.",
- MarkdownDescription: "azureFile represents an Azure File Service mount on the host and bind mount to the pod.",
- Attributes: map[string]schema.Attribute{
- "read_only": schema.BoolAttribute{
- Description: "readOnly defaults to false (read/write). ReadOnly here will forcethe ReadOnly setting in VolumeMounts.",
- MarkdownDescription: "readOnly defaults to false (read/write). ReadOnly here will forcethe ReadOnly setting in VolumeMounts.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "secret_name": schema.StringAttribute{
- Description: "secretName is the name of secret that contains Azure Storage Account Name and Key",
- MarkdownDescription: "secretName is the name of secret that contains Azure Storage Account Name and Key",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "share_name": schema.StringAttribute{
- Description: "shareName is the azure share Name",
- MarkdownDescription: "shareName is the azure share Name",
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "cephfs": schema.SingleNestedAttribute{
- Description: "cephFS represents a Ceph FS mount on the host that shares a pod's lifetime",
- MarkdownDescription: "cephFS represents a Ceph FS mount on the host that shares a pod's lifetime",
- Attributes: map[string]schema.Attribute{
- "monitors": schema.ListAttribute{
- Description: "monitors is Required: Monitors is a collection of Ceph monitorsMore info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it",
- MarkdownDescription: "monitors is Required: Monitors is a collection of Ceph monitorsMore info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it",
- ElementType: types.StringType,
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "path": schema.StringAttribute{
- Description: "path is Optional: Used as the mounted root, rather than the full Ceph tree, default is /",
- MarkdownDescription: "path is Optional: Used as the mounted root, rather than the full Ceph tree, default is /",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "read_only": schema.BoolAttribute{
- Description: "readOnly is Optional: Defaults to false (read/write). ReadOnly here will forcethe ReadOnly setting in VolumeMounts.More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it",
- MarkdownDescription: "readOnly is Optional: Defaults to false (read/write). ReadOnly here will forcethe ReadOnly setting in VolumeMounts.More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "secret_file": schema.StringAttribute{
- Description: "secretFile is Optional: SecretFile is the path to key ring for User, default is /etc/ceph/user.secretMore info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it",
- MarkdownDescription: "secretFile is Optional: SecretFile is the path to key ring for User, default is /etc/ceph/user.secretMore info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "secret_ref": schema.SingleNestedAttribute{
- Description: "secretRef is Optional: SecretRef is reference to the authentication secret for User, default is empty.More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it",
- MarkdownDescription: "secretRef is Optional: SecretRef is reference to the authentication secret for User, default is empty.More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it",
- Attributes: map[string]schema.Attribute{
- "name": schema.StringAttribute{
- Description: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?",
- MarkdownDescription: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "user": schema.StringAttribute{
- Description: "user is optional: User is the rados user name, default is adminMore info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it",
- MarkdownDescription: "user is optional: User is the rados user name, default is adminMore info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "cinder": schema.SingleNestedAttribute{
- Description: "cinder represents a cinder volume attached and mounted on kubelets host machine.More info: https://examples.k8s.io/mysql-cinder-pd/README.md",
- MarkdownDescription: "cinder represents a cinder volume attached and mounted on kubelets host machine.More info: https://examples.k8s.io/mysql-cinder-pd/README.md",
- Attributes: map[string]schema.Attribute{
- "fs_type": schema.StringAttribute{
- Description: "fsType is the filesystem type to mount.Must be a filesystem type supported by the host operating system.Examples: 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified.More info: https://examples.k8s.io/mysql-cinder-pd/README.md",
- MarkdownDescription: "fsType is the filesystem type to mount.Must be a filesystem type supported by the host operating system.Examples: 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified.More info: https://examples.k8s.io/mysql-cinder-pd/README.md",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "read_only": schema.BoolAttribute{
- Description: "readOnly defaults to false (read/write). ReadOnly here will forcethe ReadOnly setting in VolumeMounts.More info: https://examples.k8s.io/mysql-cinder-pd/README.md",
- MarkdownDescription: "readOnly defaults to false (read/write). ReadOnly here will forcethe ReadOnly setting in VolumeMounts.More info: https://examples.k8s.io/mysql-cinder-pd/README.md",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "secret_ref": schema.SingleNestedAttribute{
- Description: "secretRef is optional: points to a secret object containing parameters used to connectto OpenStack.",
- MarkdownDescription: "secretRef is optional: points to a secret object containing parameters used to connectto OpenStack.",
- Attributes: map[string]schema.Attribute{
- "name": schema.StringAttribute{
- Description: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?",
- MarkdownDescription: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "volume_id": schema.StringAttribute{
- Description: "volumeID used to identify the volume in cinder.More info: https://examples.k8s.io/mysql-cinder-pd/README.md",
- MarkdownDescription: "volumeID used to identify the volume in cinder.More info: https://examples.k8s.io/mysql-cinder-pd/README.md",
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "config_map": schema.SingleNestedAttribute{
- Description: "configMap represents a configMap that should populate this volume",
- MarkdownDescription: "configMap represents a configMap that should populate this volume",
- Attributes: map[string]schema.Attribute{
- "default_mode": schema.Int64Attribute{
- Description: "defaultMode is optional: mode bits used to set permissions on created files by default.Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511.YAML accepts both octal and decimal values, JSON requires decimal values for mode bits.Defaults to 0644.Directories within the path are not affected by this setting.This might be in conflict with other options that affect the filemode, like fsGroup, and the result can be other mode bits set.",
- MarkdownDescription: "defaultMode is optional: mode bits used to set permissions on created files by default.Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511.YAML accepts both octal and decimal values, JSON requires decimal values for mode bits.Defaults to 0644.Directories within the path are not affected by this setting.This might be in conflict with other options that affect the filemode, like fsGroup, and the result can be other mode bits set.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "items": schema.ListNestedAttribute{
- Description: "items if unspecified, each key-value pair in the Data field of the referencedConfigMap will be projected into the volume as a file whose name is thekey and content is the value. If specified, the listed keys will beprojected into the specified paths, and unlisted keys will not bepresent. If a key is specified which is not present in the ConfigMap,the volume setup will error unless it is marked optional. Paths must berelative and may not contain the '..' path or start with '..'.",
- MarkdownDescription: "items if unspecified, each key-value pair in the Data field of the referencedConfigMap will be projected into the volume as a file whose name is thekey and content is the value. If specified, the listed keys will beprojected into the specified paths, and unlisted keys will not bepresent. If a key is specified which is not present in the ConfigMap,the volume setup will error unless it is marked optional. Paths must berelative and may not contain the '..' path or start with '..'.",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "key": schema.StringAttribute{
- Description: "key is the key to project.",
- MarkdownDescription: "key is the key to project.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "mode": schema.Int64Attribute{
- Description: "mode is Optional: mode bits used to set permissions on this file.Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511.YAML accepts both octal and decimal values, JSON requires decimal values for mode bits.If not specified, the volume defaultMode will be used.This might be in conflict with other options that affect the filemode, like fsGroup, and the result can be other mode bits set.",
- MarkdownDescription: "mode is Optional: mode bits used to set permissions on this file.Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511.YAML accepts both octal and decimal values, JSON requires decimal values for mode bits.If not specified, the volume defaultMode will be used.This might be in conflict with other options that affect the filemode, like fsGroup, and the result can be other mode bits set.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "path": schema.StringAttribute{
- Description: "path is the relative path of the file to map the key to.May not be an absolute path.May not contain the path element '..'.May not start with the string '..'.",
- MarkdownDescription: "path is the relative path of the file to map the key to.May not be an absolute path.May not contain the path element '..'.May not start with the string '..'.",
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "name": schema.StringAttribute{
- Description: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?",
- MarkdownDescription: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "optional": schema.BoolAttribute{
- Description: "optional specify whether the ConfigMap or its keys must be defined",
- MarkdownDescription: "optional specify whether the ConfigMap or its keys must be defined",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "csi": schema.SingleNestedAttribute{
- Description: "csi (Container Storage Interface) represents ephemeral storage that is handled by certain external CSI drivers (Beta feature).",
- MarkdownDescription: "csi (Container Storage Interface) represents ephemeral storage that is handled by certain external CSI drivers (Beta feature).",
- Attributes: map[string]schema.Attribute{
- "driver": schema.StringAttribute{
- Description: "driver is the name of the CSI driver that handles this volume.Consult with your admin for the correct name as registered in the cluster.",
- MarkdownDescription: "driver is the name of the CSI driver that handles this volume.Consult with your admin for the correct name as registered in the cluster.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "fs_type": schema.StringAttribute{
- Description: "fsType to mount. Ex. 'ext4', 'xfs', 'ntfs'.If not provided, the empty value is passed to the associated CSI driverwhich will determine the default filesystem to apply.",
- MarkdownDescription: "fsType to mount. Ex. 'ext4', 'xfs', 'ntfs'.If not provided, the empty value is passed to the associated CSI driverwhich will determine the default filesystem to apply.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "node_publish_secret_ref": schema.SingleNestedAttribute{
- Description: "nodePublishSecretRef is a reference to the secret object containingsensitive information to pass to the CSI driver to complete the CSINodePublishVolume and NodeUnpublishVolume calls.This field is optional, and may be empty if no secret is required. If thesecret object contains more than one secret, all secret references are passed.",
- MarkdownDescription: "nodePublishSecretRef is a reference to the secret object containingsensitive information to pass to the CSI driver to complete the CSINodePublishVolume and NodeUnpublishVolume calls.This field is optional, and may be empty if no secret is required. If thesecret object contains more than one secret, all secret references are passed.",
- Attributes: map[string]schema.Attribute{
- "name": schema.StringAttribute{
- Description: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?",
- MarkdownDescription: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "read_only": schema.BoolAttribute{
- Description: "readOnly specifies a read-only configuration for the volume.Defaults to false (read/write).",
- MarkdownDescription: "readOnly specifies a read-only configuration for the volume.Defaults to false (read/write).",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "volume_attributes": schema.MapAttribute{
- Description: "volumeAttributes stores driver-specific properties that are passed to the CSIdriver. Consult your driver's documentation for supported values.",
- MarkdownDescription: "volumeAttributes stores driver-specific properties that are passed to the CSIdriver. Consult your driver's documentation for supported values.",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "downward_api": schema.SingleNestedAttribute{
- Description: "downwardAPI represents downward API about the pod that should populate this volume",
- MarkdownDescription: "downwardAPI represents downward API about the pod that should populate this volume",
- Attributes: map[string]schema.Attribute{
- "default_mode": schema.Int64Attribute{
- Description: "Optional: mode bits to use on created files by default. Must be aOptional: mode bits used to set permissions on created files by default.Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511.YAML accepts both octal and decimal values, JSON requires decimal values for mode bits.Defaults to 0644.Directories within the path are not affected by this setting.This might be in conflict with other options that affect the filemode, like fsGroup, and the result can be other mode bits set.",
- MarkdownDescription: "Optional: mode bits to use on created files by default. Must be aOptional: mode bits used to set permissions on created files by default.Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511.YAML accepts both octal and decimal values, JSON requires decimal values for mode bits.Defaults to 0644.Directories within the path are not affected by this setting.This might be in conflict with other options that affect the filemode, like fsGroup, and the result can be other mode bits set.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "items": schema.ListNestedAttribute{
- Description: "Items is a list of downward API volume file",
- MarkdownDescription: "Items is a list of downward API volume file",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "field_ref": schema.SingleNestedAttribute{
- Description: "Required: Selects a field of the pod: only annotations, labels, name and namespace are supported.",
- MarkdownDescription: "Required: Selects a field of the pod: only annotations, labels, name and namespace are supported.",
- Attributes: map[string]schema.Attribute{
- "api_version": schema.StringAttribute{
- Description: "Version of the schema the FieldPath is written in terms of, defaults to 'v1'.",
- MarkdownDescription: "Version of the schema the FieldPath is written in terms of, defaults to 'v1'.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "field_path": schema.StringAttribute{
- Description: "Path of the field to select in the specified API version.",
- MarkdownDescription: "Path of the field to select in the specified API version.",
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "mode": schema.Int64Attribute{
- Description: "Optional: mode bits used to set permissions on this file, must be an octal valuebetween 0000 and 0777 or a decimal value between 0 and 511.YAML accepts both octal and decimal values, JSON requires decimal values for mode bits.If not specified, the volume defaultMode will be used.This might be in conflict with other options that affect the filemode, like fsGroup, and the result can be other mode bits set.",
- MarkdownDescription: "Optional: mode bits used to set permissions on this file, must be an octal valuebetween 0000 and 0777 or a decimal value between 0 and 511.YAML accepts both octal and decimal values, JSON requires decimal values for mode bits.If not specified, the volume defaultMode will be used.This might be in conflict with other options that affect the filemode, like fsGroup, and the result can be other mode bits set.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "path": schema.StringAttribute{
- Description: "Required: Path is the relative path name of the file to be created. Must not be absolute or contain the '..' path. Must be utf-8 encoded. The first item of the relative path must not start with '..'",
- MarkdownDescription: "Required: Path is the relative path name of the file to be created. Must not be absolute or contain the '..' path. Must be utf-8 encoded. The first item of the relative path must not start with '..'",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "resource_field_ref": schema.SingleNestedAttribute{
- Description: "Selects a resource of the container: only resources limits and requests(limits.cpu, limits.memory, requests.cpu and requests.memory) are currently supported.",
- MarkdownDescription: "Selects a resource of the container: only resources limits and requests(limits.cpu, limits.memory, requests.cpu and requests.memory) are currently supported.",
- Attributes: map[string]schema.Attribute{
- "container_name": schema.StringAttribute{
- Description: "Container name: required for volumes, optional for env vars",
- MarkdownDescription: "Container name: required for volumes, optional for env vars",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "divisor": schema.StringAttribute{
- Description: "Specifies the output format of the exposed resources, defaults to '1'",
- MarkdownDescription: "Specifies the output format of the exposed resources, defaults to '1'",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "resource": schema.StringAttribute{
- Description: "Required: resource to select",
- MarkdownDescription: "Required: resource to select",
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "empty_dir": schema.SingleNestedAttribute{
- Description: "emptyDir represents a temporary directory that shares a pod's lifetime.More info: https://kubernetes.io/docs/concepts/storage/volumes#emptydir",
- MarkdownDescription: "emptyDir represents a temporary directory that shares a pod's lifetime.More info: https://kubernetes.io/docs/concepts/storage/volumes#emptydir",
- Attributes: map[string]schema.Attribute{
- "medium": schema.StringAttribute{
- Description: "medium represents what type of storage medium should back this directory.The default is '' which means to use the node's default medium.Must be an empty string (default) or Memory.More info: https://kubernetes.io/docs/concepts/storage/volumes#emptydir",
- MarkdownDescription: "medium represents what type of storage medium should back this directory.The default is '' which means to use the node's default medium.Must be an empty string (default) or Memory.More info: https://kubernetes.io/docs/concepts/storage/volumes#emptydir",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "size_limit": schema.StringAttribute{
- Description: "sizeLimit is the total amount of local storage required for this EmptyDir volume.The size limit is also applicable for memory medium.The maximum usage on memory medium EmptyDir would be the minimum value betweenthe SizeLimit specified here and the sum of memory limits of all containers in a pod.The default is nil which means that the limit is undefined.More info: https://kubernetes.io/docs/concepts/storage/volumes#emptydir",
- MarkdownDescription: "sizeLimit is the total amount of local storage required for this EmptyDir volume.The size limit is also applicable for memory medium.The maximum usage on memory medium EmptyDir would be the minimum value betweenthe SizeLimit specified here and the sum of memory limits of all containers in a pod.The default is nil which means that the limit is undefined.More info: https://kubernetes.io/docs/concepts/storage/volumes#emptydir",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "ephemeral": schema.SingleNestedAttribute{
- Description: "ephemeral represents a volume that is handled by a cluster storage driver.The volume's lifecycle is tied to the pod that defines it - it will be created before the pod starts,and deleted when the pod is removed.Use this if:a) the volume is only needed while the pod runs,b) features of normal volumes like restoring from snapshot or capacity tracking are needed,c) the storage driver is specified through a storage class, andd) the storage driver supports dynamic volume provisioning through a PersistentVolumeClaim (see EphemeralVolumeSource for more information on the connection between this volume type and PersistentVolumeClaim).Use PersistentVolumeClaim or one of the vendor-specificAPIs for volumes that persist for longer than the lifecycleof an individual pod.Use CSI for light-weight local ephemeral volumes if the CSI driver is meant tobe used that way - see the documentation of the driver formore information.A pod can use both types of ephemeral volumes andpersistent volumes at the same time.",
- MarkdownDescription: "ephemeral represents a volume that is handled by a cluster storage driver.The volume's lifecycle is tied to the pod that defines it - it will be created before the pod starts,and deleted when the pod is removed.Use this if:a) the volume is only needed while the pod runs,b) features of normal volumes like restoring from snapshot or capacity tracking are needed,c) the storage driver is specified through a storage class, andd) the storage driver supports dynamic volume provisioning through a PersistentVolumeClaim (see EphemeralVolumeSource for more information on the connection between this volume type and PersistentVolumeClaim).Use PersistentVolumeClaim or one of the vendor-specificAPIs for volumes that persist for longer than the lifecycleof an individual pod.Use CSI for light-weight local ephemeral volumes if the CSI driver is meant tobe used that way - see the documentation of the driver formore information.A pod can use both types of ephemeral volumes andpersistent volumes at the same time.",
- Attributes: map[string]schema.Attribute{
- "volume_claim_template": schema.SingleNestedAttribute{
- Description: "Will be used to create a stand-alone PVC to provision the volume.The pod in which this EphemeralVolumeSource is embedded will be theowner of the PVC, i.e. the PVC will be deleted together with thepod. The name of the PVC will be '-' where'' is the name from the 'PodSpec.Volumes' arrayentry. Pod validation will reject the pod if the concatenated nameis not valid for a PVC (for example, too long).An existing PVC with that name that is not owned by the podwill *not* be used for the pod to avoid using an unrelatedvolume by mistake. Starting the pod is then blocked untilthe unrelated PVC is removed. If such a pre-created PVC ismeant to be used by the pod, the PVC has to updated with anowner reference to the pod once the pod exists. Normallythis should not be necessary, but it may be useful whenmanually reconstructing a broken cluster.This field is read-only and no changes will be made by Kubernetesto the PVC after it has been created.Required, must not be nil.",
- MarkdownDescription: "Will be used to create a stand-alone PVC to provision the volume.The pod in which this EphemeralVolumeSource is embedded will be theowner of the PVC, i.e. the PVC will be deleted together with thepod. The name of the PVC will be '-' where'' is the name from the 'PodSpec.Volumes' arrayentry. Pod validation will reject the pod if the concatenated nameis not valid for a PVC (for example, too long).An existing PVC with that name that is not owned by the podwill *not* be used for the pod to avoid using an unrelatedvolume by mistake. Starting the pod is then blocked untilthe unrelated PVC is removed. If such a pre-created PVC ismeant to be used by the pod, the PVC has to updated with anowner reference to the pod once the pod exists. Normallythis should not be necessary, but it may be useful whenmanually reconstructing a broken cluster.This field is read-only and no changes will be made by Kubernetesto the PVC after it has been created.Required, must not be nil.",
- Attributes: map[string]schema.Attribute{
- "metadata": schema.SingleNestedAttribute{
- Description: "May contain labels and annotations that will be copied into the PVCwhen creating it. No other fields are allowed and will be rejected duringvalidation.",
- MarkdownDescription: "May contain labels and annotations that will be copied into the PVCwhen creating it. No other fields are allowed and will be rejected duringvalidation.",
- Attributes: map[string]schema.Attribute{
- "annotations": schema.MapAttribute{
- Description: "",
- MarkdownDescription: "",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "finalizers": schema.ListAttribute{
- Description: "",
- MarkdownDescription: "",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "labels": schema.MapAttribute{
- Description: "",
- MarkdownDescription: "",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "name": schema.StringAttribute{
- Description: "",
- MarkdownDescription: "",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "namespace": schema.StringAttribute{
- Description: "",
- MarkdownDescription: "",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "spec": schema.SingleNestedAttribute{
- Description: "The specification for the PersistentVolumeClaim. The entire content iscopied unchanged into the PVC that gets created from thistemplate. The same fields as in a PersistentVolumeClaimare also valid here.",
- MarkdownDescription: "The specification for the PersistentVolumeClaim. The entire content iscopied unchanged into the PVC that gets created from thistemplate. The same fields as in a PersistentVolumeClaimare also valid here.",
- Attributes: map[string]schema.Attribute{
- "access_modes": schema.ListAttribute{
- Description: "accessModes contains the desired access modes the volume should have.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#access-modes-1",
- MarkdownDescription: "accessModes contains the desired access modes the volume should have.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#access-modes-1",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "data_source": schema.SingleNestedAttribute{
- Description: "dataSource field can be used to specify either:* An existing VolumeSnapshot object (snapshot.storage.k8s.io/VolumeSnapshot)* An existing PVC (PersistentVolumeClaim)If the provisioner or an external controller can support the specified data source,it will create a new volume based on the contents of the specified data source.When the AnyVolumeDataSource feature gate is enabled, dataSource contents will be copied to dataSourceRef,and dataSourceRef contents will be copied to dataSource when dataSourceRef.namespace is not specified.If the namespace is specified, then dataSourceRef will not be copied to dataSource.",
- MarkdownDescription: "dataSource field can be used to specify either:* An existing VolumeSnapshot object (snapshot.storage.k8s.io/VolumeSnapshot)* An existing PVC (PersistentVolumeClaim)If the provisioner or an external controller can support the specified data source,it will create a new volume based on the contents of the specified data source.When the AnyVolumeDataSource feature gate is enabled, dataSource contents will be copied to dataSourceRef,and dataSourceRef contents will be copied to dataSource when dataSourceRef.namespace is not specified.If the namespace is specified, then dataSourceRef will not be copied to dataSource.",
- Attributes: map[string]schema.Attribute{
- "api_group": schema.StringAttribute{
- Description: "APIGroup is the group for the resource being referenced.If APIGroup is not specified, the specified Kind must be in the core API group.For any other third-party types, APIGroup is required.",
- MarkdownDescription: "APIGroup is the group for the resource being referenced.If APIGroup is not specified, the specified Kind must be in the core API group.For any other third-party types, APIGroup is required.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "kind": schema.StringAttribute{
- Description: "Kind is the type of resource being referenced",
- MarkdownDescription: "Kind is the type of resource being referenced",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "name": schema.StringAttribute{
- Description: "Name is the name of resource being referenced",
- MarkdownDescription: "Name is the name of resource being referenced",
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "data_source_ref": schema.SingleNestedAttribute{
- Description: "dataSourceRef specifies the object from which to populate the volume with data, if a non-emptyvolume is desired. This may be any object from a non-empty API group (noncore object) or a PersistentVolumeClaim object.When this field is specified, volume binding will only succeed if the type ofthe specified object matches some installed volume populator or dynamicprovisioner.This field will replace the functionality of the dataSource field and as suchif both fields are non-empty, they must have the same value. For backwardscompatibility, when namespace isn't specified in dataSourceRef,both fields (dataSource and dataSourceRef) will be set to the samevalue automatically if one of them is empty and the other is non-empty.When namespace is specified in dataSourceRef,dataSource isn't set to the same value and must be empty.There are three important differences between dataSource and dataSourceRef:* While dataSource only allows two specific types of objects, dataSourceRef allows any non-core object, as well as PersistentVolumeClaim objects.* While dataSource ignores disallowed values (dropping them), dataSourceRef preserves all values, and generates an error if a disallowed value is specified.* While dataSource only allows local objects, dataSourceRef allows objects in any namespaces.(Beta) Using this field requires the AnyVolumeDataSource feature gate to be enabled.(Alpha) Using the namespace field of dataSourceRef requires the CrossNamespaceVolumeDataSource feature gate to be enabled.",
- MarkdownDescription: "dataSourceRef specifies the object from which to populate the volume with data, if a non-emptyvolume is desired. This may be any object from a non-empty API group (noncore object) or a PersistentVolumeClaim object.When this field is specified, volume binding will only succeed if the type ofthe specified object matches some installed volume populator or dynamicprovisioner.This field will replace the functionality of the dataSource field and as suchif both fields are non-empty, they must have the same value. For backwardscompatibility, when namespace isn't specified in dataSourceRef,both fields (dataSource and dataSourceRef) will be set to the samevalue automatically if one of them is empty and the other is non-empty.When namespace is specified in dataSourceRef,dataSource isn't set to the same value and must be empty.There are three important differences between dataSource and dataSourceRef:* While dataSource only allows two specific types of objects, dataSourceRef allows any non-core object, as well as PersistentVolumeClaim objects.* While dataSource ignores disallowed values (dropping them), dataSourceRef preserves all values, and generates an error if a disallowed value is specified.* While dataSource only allows local objects, dataSourceRef allows objects in any namespaces.(Beta) Using this field requires the AnyVolumeDataSource feature gate to be enabled.(Alpha) Using the namespace field of dataSourceRef requires the CrossNamespaceVolumeDataSource feature gate to be enabled.",
- Attributes: map[string]schema.Attribute{
- "api_group": schema.StringAttribute{
- Description: "APIGroup is the group for the resource being referenced.If APIGroup is not specified, the specified Kind must be in the core API group.For any other third-party types, APIGroup is required.",
- MarkdownDescription: "APIGroup is the group for the resource being referenced.If APIGroup is not specified, the specified Kind must be in the core API group.For any other third-party types, APIGroup is required.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "kind": schema.StringAttribute{
- Description: "Kind is the type of resource being referenced",
- MarkdownDescription: "Kind is the type of resource being referenced",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "name": schema.StringAttribute{
- Description: "Name is the name of resource being referenced",
- MarkdownDescription: "Name is the name of resource being referenced",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "namespace": schema.StringAttribute{
- Description: "Namespace is the namespace of resource being referencedNote that when a namespace is specified, a gateway.networking.k8s.io/ReferenceGrant object is required in the referent namespace to allow that namespace's owner to accept the reference. See the ReferenceGrant documentation for details.(Alpha) This field requires the CrossNamespaceVolumeDataSource feature gate to be enabled.",
- MarkdownDescription: "Namespace is the namespace of resource being referencedNote that when a namespace is specified, a gateway.networking.k8s.io/ReferenceGrant object is required in the referent namespace to allow that namespace's owner to accept the reference. See the ReferenceGrant documentation for details.(Alpha) This field requires the CrossNamespaceVolumeDataSource feature gate to be enabled.",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "resources": schema.SingleNestedAttribute{
- Description: "resources represents the minimum resources the volume should have.If RecoverVolumeExpansionFailure feature is enabled users are allowed to specify resource requirementsthat are lower than previous value but must still be higher than capacity recorded in thestatus field of the claim.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources",
- MarkdownDescription: "resources represents the minimum resources the volume should have.If RecoverVolumeExpansionFailure feature is enabled users are allowed to specify resource requirementsthat are lower than previous value but must still be higher than capacity recorded in thestatus field of the claim.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources",
- Attributes: map[string]schema.Attribute{
- "claims": schema.ListNestedAttribute{
- Description: "Claims lists the names of resources, defined in spec.resourceClaims,that are used by this container.This is an alpha field and requires enabling theDynamicResourceAllocation feature gate.This field is immutable. It can only be set for containers.",
- MarkdownDescription: "Claims lists the names of resources, defined in spec.resourceClaims,that are used by this container.This is an alpha field and requires enabling theDynamicResourceAllocation feature gate.This field is immutable. It can only be set for containers.",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "name": schema.StringAttribute{
- Description: "Name must match the name of one entry in pod.spec.resourceClaims ofthe Pod where this field is used. It makes that resource availableinside a container.",
- MarkdownDescription: "Name must match the name of one entry in pod.spec.resourceClaims ofthe Pod where this field is used. It makes that resource availableinside a container.",
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "limits": schema.MapAttribute{
- Description: "Limits describes the maximum amount of compute resources allowed.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/",
- MarkdownDescription: "Limits describes the maximum amount of compute resources allowed.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "requests": schema.MapAttribute{
- Description: "Requests describes the minimum amount of compute resources required.If Requests is omitted for a container, it defaults to Limits if that is explicitly specified,otherwise to an implementation-defined value. Requests cannot exceed Limits.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/",
- MarkdownDescription: "Requests describes the minimum amount of compute resources required.If Requests is omitted for a container, it defaults to Limits if that is explicitly specified,otherwise to an implementation-defined value. Requests cannot exceed Limits.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "selector": schema.SingleNestedAttribute{
- Description: "selector is a label query over volumes to consider for binding.",
- MarkdownDescription: "selector is a label query over volumes to consider for binding.",
- Attributes: map[string]schema.Attribute{
- "match_expressions": schema.ListNestedAttribute{
- Description: "matchExpressions is a list of label selector requirements. The requirements are ANDed.",
- MarkdownDescription: "matchExpressions is a list of label selector requirements. The requirements are ANDed.",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "key": schema.StringAttribute{
- Description: "key is the label key that the selector applies to.",
- MarkdownDescription: "key is the label key that the selector applies to.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "operator": schema.StringAttribute{
- Description: "operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.",
- MarkdownDescription: "operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "values": schema.ListAttribute{
- Description: "values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.",
- MarkdownDescription: "values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "match_labels": schema.MapAttribute{
- Description: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.",
- MarkdownDescription: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "storage_class_name": schema.StringAttribute{
- Description: "storageClassName is the name of the StorageClass required by the claim.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#class-1",
- MarkdownDescription: "storageClassName is the name of the StorageClass required by the claim.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#class-1",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "volume_mode": schema.StringAttribute{
- Description: "volumeMode defines what type of volume is required by the claim.Value of Filesystem is implied when not included in claim spec.",
- MarkdownDescription: "volumeMode defines what type of volume is required by the claim.Value of Filesystem is implied when not included in claim spec.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "volume_name": schema.StringAttribute{
- Description: "volumeName is the binding reference to the PersistentVolume backing this claim.",
- MarkdownDescription: "volumeName is the binding reference to the PersistentVolume backing this claim.",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "fc": schema.SingleNestedAttribute{
- Description: "fc represents a Fibre Channel resource that is attached to a kubelet's host machine and then exposed to the pod.",
- MarkdownDescription: "fc represents a Fibre Channel resource that is attached to a kubelet's host machine and then exposed to the pod.",
- Attributes: map[string]schema.Attribute{
- "fs_type": schema.StringAttribute{
- Description: "fsType is the filesystem type to mount.Must be a filesystem type supported by the host operating system.Ex. 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified.TODO: how do we prevent errors in the filesystem from compromising the machine",
- MarkdownDescription: "fsType is the filesystem type to mount.Must be a filesystem type supported by the host operating system.Ex. 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified.TODO: how do we prevent errors in the filesystem from compromising the machine",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "lun": schema.Int64Attribute{
- Description: "lun is Optional: FC target lun number",
- MarkdownDescription: "lun is Optional: FC target lun number",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "read_only": schema.BoolAttribute{
- Description: "readOnly is Optional: Defaults to false (read/write). ReadOnly here will forcethe ReadOnly setting in VolumeMounts.",
- MarkdownDescription: "readOnly is Optional: Defaults to false (read/write). ReadOnly here will forcethe ReadOnly setting in VolumeMounts.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "target_ww_ns": schema.ListAttribute{
- Description: "targetWWNs is Optional: FC target worldwide names (WWNs)",
- MarkdownDescription: "targetWWNs is Optional: FC target worldwide names (WWNs)",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "wwids": schema.ListAttribute{
- Description: "wwids Optional: FC volume world wide identifiers (wwids)Either wwids or combination of targetWWNs and lun must be set, but not both simultaneously.",
- MarkdownDescription: "wwids Optional: FC volume world wide identifiers (wwids)Either wwids or combination of targetWWNs and lun must be set, but not both simultaneously.",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "flex_volume": schema.SingleNestedAttribute{
- Description: "flexVolume represents a generic volume resource that isprovisioned/attached using an exec based plugin.",
- MarkdownDescription: "flexVolume represents a generic volume resource that isprovisioned/attached using an exec based plugin.",
- Attributes: map[string]schema.Attribute{
- "driver": schema.StringAttribute{
- Description: "driver is the name of the driver to use for this volume.",
- MarkdownDescription: "driver is the name of the driver to use for this volume.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "fs_type": schema.StringAttribute{
- Description: "fsType is the filesystem type to mount.Must be a filesystem type supported by the host operating system.Ex. 'ext4', 'xfs', 'ntfs'. The default filesystem depends on FlexVolume script.",
- MarkdownDescription: "fsType is the filesystem type to mount.Must be a filesystem type supported by the host operating system.Ex. 'ext4', 'xfs', 'ntfs'. The default filesystem depends on FlexVolume script.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "options": schema.MapAttribute{
- Description: "options is Optional: this field holds extra command options if any.",
- MarkdownDescription: "options is Optional: this field holds extra command options if any.",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "read_only": schema.BoolAttribute{
- Description: "readOnly is Optional: defaults to false (read/write). ReadOnly here will forcethe ReadOnly setting in VolumeMounts.",
- MarkdownDescription: "readOnly is Optional: defaults to false (read/write). ReadOnly here will forcethe ReadOnly setting in VolumeMounts.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "secret_ref": schema.SingleNestedAttribute{
- Description: "secretRef is Optional: secretRef is reference to the secret object containingsensitive information to pass to the plugin scripts. This may beempty if no secret object is specified. If the secret objectcontains more than one secret, all secrets are passed to the pluginscripts.",
- MarkdownDescription: "secretRef is Optional: secretRef is reference to the secret object containingsensitive information to pass to the plugin scripts. This may beempty if no secret object is specified. If the secret objectcontains more than one secret, all secrets are passed to the pluginscripts.",
- Attributes: map[string]schema.Attribute{
- "name": schema.StringAttribute{
- Description: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?",
- MarkdownDescription: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "flocker": schema.SingleNestedAttribute{
- Description: "flocker represents a Flocker volume attached to a kubelet's host machine. This depends on the Flocker control service being running",
- MarkdownDescription: "flocker represents a Flocker volume attached to a kubelet's host machine. This depends on the Flocker control service being running",
- Attributes: map[string]schema.Attribute{
- "dataset_name": schema.StringAttribute{
- Description: "datasetName is Name of the dataset stored as metadata -> name on the dataset for Flockershould be considered as deprecated",
- MarkdownDescription: "datasetName is Name of the dataset stored as metadata -> name on the dataset for Flockershould be considered as deprecated",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "dataset_uuid": schema.StringAttribute{
- Description: "datasetUUID is the UUID of the dataset. This is unique identifier of a Flocker dataset",
- MarkdownDescription: "datasetUUID is the UUID of the dataset. This is unique identifier of a Flocker dataset",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "gce_persistent_disk": schema.SingleNestedAttribute{
- Description: "gcePersistentDisk represents a GCE Disk resource that is attached to akubelet's host machine and then exposed to the pod.More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk",
- MarkdownDescription: "gcePersistentDisk represents a GCE Disk resource that is attached to akubelet's host machine and then exposed to the pod.More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk",
- Attributes: map[string]schema.Attribute{
- "fs_type": schema.StringAttribute{
- Description: "fsType is filesystem type of the volume that you want to mount.Tip: Ensure that the filesystem type is supported by the host operating system.Examples: 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified.More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdiskTODO: how do we prevent errors in the filesystem from compromising the machine",
- MarkdownDescription: "fsType is filesystem type of the volume that you want to mount.Tip: Ensure that the filesystem type is supported by the host operating system.Examples: 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified.More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdiskTODO: how do we prevent errors in the filesystem from compromising the machine",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "partition": schema.Int64Attribute{
- Description: "partition is the partition in the volume that you want to mount.If omitted, the default is to mount by volume name.Examples: For volume /dev/sda1, you specify the partition as '1'.Similarly, the volume partition for /dev/sda is '0' (or you can leave the property empty).More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk",
- MarkdownDescription: "partition is the partition in the volume that you want to mount.If omitted, the default is to mount by volume name.Examples: For volume /dev/sda1, you specify the partition as '1'.Similarly, the volume partition for /dev/sda is '0' (or you can leave the property empty).More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "pd_name": schema.StringAttribute{
- Description: "pdName is unique name of the PD resource in GCE. Used to identify the disk in GCE.More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk",
- MarkdownDescription: "pdName is unique name of the PD resource in GCE. Used to identify the disk in GCE.More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "read_only": schema.BoolAttribute{
- Description: "readOnly here will force the ReadOnly setting in VolumeMounts.Defaults to false.More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk",
- MarkdownDescription: "readOnly here will force the ReadOnly setting in VolumeMounts.Defaults to false.More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "git_repo": schema.SingleNestedAttribute{
- Description: "gitRepo represents a git repository at a particular revision.DEPRECATED: GitRepo is deprecated. To provision a container with a git repo, mount anEmptyDir into an InitContainer that clones the repo using git, then mount the EmptyDirinto the Pod's container.",
- MarkdownDescription: "gitRepo represents a git repository at a particular revision.DEPRECATED: GitRepo is deprecated. To provision a container with a git repo, mount anEmptyDir into an InitContainer that clones the repo using git, then mount the EmptyDirinto the Pod's container.",
- Attributes: map[string]schema.Attribute{
- "directory": schema.StringAttribute{
- Description: "directory is the target directory name.Must not contain or start with '..'. If '.' is supplied, the volume directory will be thegit repository. Otherwise, if specified, the volume will contain the git repository inthe subdirectory with the given name.",
- MarkdownDescription: "directory is the target directory name.Must not contain or start with '..'. If '.' is supplied, the volume directory will be thegit repository. Otherwise, if specified, the volume will contain the git repository inthe subdirectory with the given name.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "repository": schema.StringAttribute{
- Description: "repository is the URL",
- MarkdownDescription: "repository is the URL",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "revision": schema.StringAttribute{
- Description: "revision is the commit hash for the specified revision.",
- MarkdownDescription: "revision is the commit hash for the specified revision.",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "glusterfs": schema.SingleNestedAttribute{
- Description: "glusterfs represents a Glusterfs mount on the host that shares a pod's lifetime.More info: https://examples.k8s.io/volumes/glusterfs/README.md",
- MarkdownDescription: "glusterfs represents a Glusterfs mount on the host that shares a pod's lifetime.More info: https://examples.k8s.io/volumes/glusterfs/README.md",
- Attributes: map[string]schema.Attribute{
- "endpoints": schema.StringAttribute{
- Description: "endpoints is the endpoint name that details Glusterfs topology.More info: https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod",
- MarkdownDescription: "endpoints is the endpoint name that details Glusterfs topology.More info: https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "path": schema.StringAttribute{
- Description: "path is the Glusterfs volume path.More info: https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod",
- MarkdownDescription: "path is the Glusterfs volume path.More info: https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "read_only": schema.BoolAttribute{
- Description: "readOnly here will force the Glusterfs volume to be mounted with read-only permissions.Defaults to false.More info: https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod",
- MarkdownDescription: "readOnly here will force the Glusterfs volume to be mounted with read-only permissions.Defaults to false.More info: https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "host_path": schema.SingleNestedAttribute{
- Description: "hostPath represents a pre-existing file or directory on the hostmachine that is directly exposed to the container. This is generallyused for system agents or other privileged things that are allowedto see the host machine. Most containers will NOT need this.More info: https://kubernetes.io/docs/concepts/storage/volumes#hostpath---TODO(jonesdl) We need to restrict who can use host directory mounts and who can/can notmount host directories as read/write.",
- MarkdownDescription: "hostPath represents a pre-existing file or directory on the hostmachine that is directly exposed to the container. This is generallyused for system agents or other privileged things that are allowedto see the host machine. Most containers will NOT need this.More info: https://kubernetes.io/docs/concepts/storage/volumes#hostpath---TODO(jonesdl) We need to restrict who can use host directory mounts and who can/can notmount host directories as read/write.",
- Attributes: map[string]schema.Attribute{
- "path": schema.StringAttribute{
- Description: "path of the directory on the host.If the path is a symlink, it will follow the link to the real path.More info: https://kubernetes.io/docs/concepts/storage/volumes#hostpath",
- MarkdownDescription: "path of the directory on the host.If the path is a symlink, it will follow the link to the real path.More info: https://kubernetes.io/docs/concepts/storage/volumes#hostpath",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "type": schema.StringAttribute{
- Description: "type for HostPath VolumeDefaults to ''More info: https://kubernetes.io/docs/concepts/storage/volumes#hostpath",
- MarkdownDescription: "type for HostPath VolumeDefaults to ''More info: https://kubernetes.io/docs/concepts/storage/volumes#hostpath",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "iscsi": schema.SingleNestedAttribute{
- Description: "iscsi represents an ISCSI Disk resource that is attached to akubelet's host machine and then exposed to the pod.More info: https://examples.k8s.io/volumes/iscsi/README.md",
- MarkdownDescription: "iscsi represents an ISCSI Disk resource that is attached to akubelet's host machine and then exposed to the pod.More info: https://examples.k8s.io/volumes/iscsi/README.md",
- Attributes: map[string]schema.Attribute{
- "chap_auth_discovery": schema.BoolAttribute{
- Description: "chapAuthDiscovery defines whether support iSCSI Discovery CHAP authentication",
- MarkdownDescription: "chapAuthDiscovery defines whether support iSCSI Discovery CHAP authentication",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "chap_auth_session": schema.BoolAttribute{
- Description: "chapAuthSession defines whether support iSCSI Session CHAP authentication",
- MarkdownDescription: "chapAuthSession defines whether support iSCSI Session CHAP authentication",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "fs_type": schema.StringAttribute{
- Description: "fsType is the filesystem type of the volume that you want to mount.Tip: Ensure that the filesystem type is supported by the host operating system.Examples: 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified.More info: https://kubernetes.io/docs/concepts/storage/volumes#iscsiTODO: how do we prevent errors in the filesystem from compromising the machine",
- MarkdownDescription: "fsType is the filesystem type of the volume that you want to mount.Tip: Ensure that the filesystem type is supported by the host operating system.Examples: 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified.More info: https://kubernetes.io/docs/concepts/storage/volumes#iscsiTODO: how do we prevent errors in the filesystem from compromising the machine",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "initiator_name": schema.StringAttribute{
- Description: "initiatorName is the custom iSCSI Initiator Name.If initiatorName is specified with iscsiInterface simultaneously, new iSCSI interface: will be created for the connection.",
- MarkdownDescription: "initiatorName is the custom iSCSI Initiator Name.If initiatorName is specified with iscsiInterface simultaneously, new iSCSI interface: will be created for the connection.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "iqn": schema.StringAttribute{
- Description: "iqn is the target iSCSI Qualified Name.",
- MarkdownDescription: "iqn is the target iSCSI Qualified Name.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "iscsi_interface": schema.StringAttribute{
- Description: "iscsiInterface is the interface Name that uses an iSCSI transport.Defaults to 'default' (tcp).",
- MarkdownDescription: "iscsiInterface is the interface Name that uses an iSCSI transport.Defaults to 'default' (tcp).",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "lun": schema.Int64Attribute{
- Description: "lun represents iSCSI Target Lun number.",
- MarkdownDescription: "lun represents iSCSI Target Lun number.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "portals": schema.ListAttribute{
- Description: "portals is the iSCSI Target Portal List. The portal is either an IP or ip_addr:port if the portis other than default (typically TCP ports 860 and 3260).",
- MarkdownDescription: "portals is the iSCSI Target Portal List. The portal is either an IP or ip_addr:port if the portis other than default (typically TCP ports 860 and 3260).",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "read_only": schema.BoolAttribute{
- Description: "readOnly here will force the ReadOnly setting in VolumeMounts.Defaults to false.",
- MarkdownDescription: "readOnly here will force the ReadOnly setting in VolumeMounts.Defaults to false.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "secret_ref": schema.SingleNestedAttribute{
- Description: "secretRef is the CHAP Secret for iSCSI target and initiator authentication",
- MarkdownDescription: "secretRef is the CHAP Secret for iSCSI target and initiator authentication",
- Attributes: map[string]schema.Attribute{
- "name": schema.StringAttribute{
- Description: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?",
- MarkdownDescription: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "target_portal": schema.StringAttribute{
- Description: "targetPortal is iSCSI Target Portal. The Portal is either an IP or ip_addr:port if the portis other than default (typically TCP ports 860 and 3260).",
- MarkdownDescription: "targetPortal is iSCSI Target Portal. The Portal is either an IP or ip_addr:port if the portis other than default (typically TCP ports 860 and 3260).",
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "name": schema.StringAttribute{
- Description: "name of the volume.Must be a DNS_LABEL and unique within the pod.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names",
- MarkdownDescription: "name of the volume.Must be a DNS_LABEL and unique within the pod.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "nfs": schema.SingleNestedAttribute{
- Description: "nfs represents an NFS mount on the host that shares a pod's lifetimeMore info: https://kubernetes.io/docs/concepts/storage/volumes#nfs",
- MarkdownDescription: "nfs represents an NFS mount on the host that shares a pod's lifetimeMore info: https://kubernetes.io/docs/concepts/storage/volumes#nfs",
- Attributes: map[string]schema.Attribute{
- "path": schema.StringAttribute{
- Description: "path that is exported by the NFS server.More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs",
- MarkdownDescription: "path that is exported by the NFS server.More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "read_only": schema.BoolAttribute{
- Description: "readOnly here will force the NFS export to be mounted with read-only permissions.Defaults to false.More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs",
- MarkdownDescription: "readOnly here will force the NFS export to be mounted with read-only permissions.Defaults to false.More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "server": schema.StringAttribute{
- Description: "server is the hostname or IP address of the NFS server.More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs",
- MarkdownDescription: "server is the hostname or IP address of the NFS server.More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs",
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "persistent_volume_claim": schema.SingleNestedAttribute{
- Description: "persistentVolumeClaimVolumeSource represents a reference to aPersistentVolumeClaim in the same namespace.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims",
- MarkdownDescription: "persistentVolumeClaimVolumeSource represents a reference to aPersistentVolumeClaim in the same namespace.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims",
- Attributes: map[string]schema.Attribute{
- "claim_name": schema.StringAttribute{
- Description: "claimName is the name of a PersistentVolumeClaim in the same namespace as the pod using this volume.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims",
- MarkdownDescription: "claimName is the name of a PersistentVolumeClaim in the same namespace as the pod using this volume.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "read_only": schema.BoolAttribute{
- Description: "readOnly Will force the ReadOnly setting in VolumeMounts.Default false.",
- MarkdownDescription: "readOnly Will force the ReadOnly setting in VolumeMounts.Default false.",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "photon_persistent_disk": schema.SingleNestedAttribute{
- Description: "photonPersistentDisk represents a PhotonController persistent disk attached and mounted on kubelets host machine",
- MarkdownDescription: "photonPersistentDisk represents a PhotonController persistent disk attached and mounted on kubelets host machine",
- Attributes: map[string]schema.Attribute{
- "fs_type": schema.StringAttribute{
- Description: "fsType is the filesystem type to mount.Must be a filesystem type supported by the host operating system.Ex. 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified.",
- MarkdownDescription: "fsType is the filesystem type to mount.Must be a filesystem type supported by the host operating system.Ex. 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "pd_id": schema.StringAttribute{
- Description: "pdID is the ID that identifies Photon Controller persistent disk",
- MarkdownDescription: "pdID is the ID that identifies Photon Controller persistent disk",
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "portworx_volume": schema.SingleNestedAttribute{
- Description: "portworxVolume represents a portworx volume attached and mounted on kubelets host machine",
- MarkdownDescription: "portworxVolume represents a portworx volume attached and mounted on kubelets host machine",
- Attributes: map[string]schema.Attribute{
- "fs_type": schema.StringAttribute{
- Description: "fSType represents the filesystem type to mountMust be a filesystem type supported by the host operating system.Ex. 'ext4', 'xfs'. Implicitly inferred to be 'ext4' if unspecified.",
- MarkdownDescription: "fSType represents the filesystem type to mountMust be a filesystem type supported by the host operating system.Ex. 'ext4', 'xfs'. Implicitly inferred to be 'ext4' if unspecified.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "read_only": schema.BoolAttribute{
- Description: "readOnly defaults to false (read/write). ReadOnly here will forcethe ReadOnly setting in VolumeMounts.",
- MarkdownDescription: "readOnly defaults to false (read/write). ReadOnly here will forcethe ReadOnly setting in VolumeMounts.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "volume_id": schema.StringAttribute{
- Description: "volumeID uniquely identifies a Portworx volume",
- MarkdownDescription: "volumeID uniquely identifies a Portworx volume",
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "projected": schema.SingleNestedAttribute{
- Description: "projected items for all in one resources secrets, configmaps, and downward API",
- MarkdownDescription: "projected items for all in one resources secrets, configmaps, and downward API",
- Attributes: map[string]schema.Attribute{
- "default_mode": schema.Int64Attribute{
- Description: "defaultMode are the mode bits used to set permissions on created files by default.Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511.YAML accepts both octal and decimal values, JSON requires decimal values for mode bits.Directories within the path are not affected by this setting.This might be in conflict with other options that affect the filemode, like fsGroup, and the result can be other mode bits set.",
- MarkdownDescription: "defaultMode are the mode bits used to set permissions on created files by default.Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511.YAML accepts both octal and decimal values, JSON requires decimal values for mode bits.Directories within the path are not affected by this setting.This might be in conflict with other options that affect the filemode, like fsGroup, and the result can be other mode bits set.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "sources": schema.ListNestedAttribute{
- Description: "sources is the list of volume projections",
- MarkdownDescription: "sources is the list of volume projections",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "config_map": schema.SingleNestedAttribute{
- Description: "configMap information about the configMap data to project",
- MarkdownDescription: "configMap information about the configMap data to project",
- Attributes: map[string]schema.Attribute{
- "items": schema.ListNestedAttribute{
- Description: "items if unspecified, each key-value pair in the Data field of the referencedConfigMap will be projected into the volume as a file whose name is thekey and content is the value. If specified, the listed keys will beprojected into the specified paths, and unlisted keys will not bepresent. If a key is specified which is not present in the ConfigMap,the volume setup will error unless it is marked optional. Paths must berelative and may not contain the '..' path or start with '..'.",
- MarkdownDescription: "items if unspecified, each key-value pair in the Data field of the referencedConfigMap will be projected into the volume as a file whose name is thekey and content is the value. If specified, the listed keys will beprojected into the specified paths, and unlisted keys will not bepresent. If a key is specified which is not present in the ConfigMap,the volume setup will error unless it is marked optional. Paths must berelative and may not contain the '..' path or start with '..'.",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "key": schema.StringAttribute{
- Description: "key is the key to project.",
- MarkdownDescription: "key is the key to project.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "mode": schema.Int64Attribute{
- Description: "mode is Optional: mode bits used to set permissions on this file.Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511.YAML accepts both octal and decimal values, JSON requires decimal values for mode bits.If not specified, the volume defaultMode will be used.This might be in conflict with other options that affect the filemode, like fsGroup, and the result can be other mode bits set.",
- MarkdownDescription: "mode is Optional: mode bits used to set permissions on this file.Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511.YAML accepts both octal and decimal values, JSON requires decimal values for mode bits.If not specified, the volume defaultMode will be used.This might be in conflict with other options that affect the filemode, like fsGroup, and the result can be other mode bits set.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "path": schema.StringAttribute{
- Description: "path is the relative path of the file to map the key to.May not be an absolute path.May not contain the path element '..'.May not start with the string '..'.",
- MarkdownDescription: "path is the relative path of the file to map the key to.May not be an absolute path.May not contain the path element '..'.May not start with the string '..'.",
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "name": schema.StringAttribute{
- Description: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?",
- MarkdownDescription: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "optional": schema.BoolAttribute{
- Description: "optional specify whether the ConfigMap or its keys must be defined",
- MarkdownDescription: "optional specify whether the ConfigMap or its keys must be defined",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "downward_api": schema.SingleNestedAttribute{
- Description: "downwardAPI information about the downwardAPI data to project",
- MarkdownDescription: "downwardAPI information about the downwardAPI data to project",
- Attributes: map[string]schema.Attribute{
- "items": schema.ListNestedAttribute{
- Description: "Items is a list of DownwardAPIVolume file",
- MarkdownDescription: "Items is a list of DownwardAPIVolume file",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "field_ref": schema.SingleNestedAttribute{
- Description: "Required: Selects a field of the pod: only annotations, labels, name and namespace are supported.",
- MarkdownDescription: "Required: Selects a field of the pod: only annotations, labels, name and namespace are supported.",
- Attributes: map[string]schema.Attribute{
- "api_version": schema.StringAttribute{
- Description: "Version of the schema the FieldPath is written in terms of, defaults to 'v1'.",
- MarkdownDescription: "Version of the schema the FieldPath is written in terms of, defaults to 'v1'.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "field_path": schema.StringAttribute{
- Description: "Path of the field to select in the specified API version.",
- MarkdownDescription: "Path of the field to select in the specified API version.",
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "mode": schema.Int64Attribute{
- Description: "Optional: mode bits used to set permissions on this file, must be an octal valuebetween 0000 and 0777 or a decimal value between 0 and 511.YAML accepts both octal and decimal values, JSON requires decimal values for mode bits.If not specified, the volume defaultMode will be used.This might be in conflict with other options that affect the filemode, like fsGroup, and the result can be other mode bits set.",
- MarkdownDescription: "Optional: mode bits used to set permissions on this file, must be an octal valuebetween 0000 and 0777 or a decimal value between 0 and 511.YAML accepts both octal and decimal values, JSON requires decimal values for mode bits.If not specified, the volume defaultMode will be used.This might be in conflict with other options that affect the filemode, like fsGroup, and the result can be other mode bits set.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "path": schema.StringAttribute{
- Description: "Required: Path is the relative path name of the file to be created. Must not be absolute or contain the '..' path. Must be utf-8 encoded. The first item of the relative path must not start with '..'",
- MarkdownDescription: "Required: Path is the relative path name of the file to be created. Must not be absolute or contain the '..' path. Must be utf-8 encoded. The first item of the relative path must not start with '..'",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "resource_field_ref": schema.SingleNestedAttribute{
- Description: "Selects a resource of the container: only resources limits and requests(limits.cpu, limits.memory, requests.cpu and requests.memory) are currently supported.",
- MarkdownDescription: "Selects a resource of the container: only resources limits and requests(limits.cpu, limits.memory, requests.cpu and requests.memory) are currently supported.",
- Attributes: map[string]schema.Attribute{
- "container_name": schema.StringAttribute{
- Description: "Container name: required for volumes, optional for env vars",
- MarkdownDescription: "Container name: required for volumes, optional for env vars",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "divisor": schema.StringAttribute{
- Description: "Specifies the output format of the exposed resources, defaults to '1'",
- MarkdownDescription: "Specifies the output format of the exposed resources, defaults to '1'",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "resource": schema.StringAttribute{
- Description: "Required: resource to select",
- MarkdownDescription: "Required: resource to select",
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "secret": schema.SingleNestedAttribute{
- Description: "secret information about the secret data to project",
- MarkdownDescription: "secret information about the secret data to project",
- Attributes: map[string]schema.Attribute{
- "items": schema.ListNestedAttribute{
- Description: "items if unspecified, each key-value pair in the Data field of the referencedSecret will be projected into the volume as a file whose name is thekey and content is the value. If specified, the listed keys will beprojected into the specified paths, and unlisted keys will not bepresent. If a key is specified which is not present in the Secret,the volume setup will error unless it is marked optional. Paths must berelative and may not contain the '..' path or start with '..'.",
- MarkdownDescription: "items if unspecified, each key-value pair in the Data field of the referencedSecret will be projected into the volume as a file whose name is thekey and content is the value. If specified, the listed keys will beprojected into the specified paths, and unlisted keys will not bepresent. If a key is specified which is not present in the Secret,the volume setup will error unless it is marked optional. Paths must berelative and may not contain the '..' path or start with '..'.",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "key": schema.StringAttribute{
- Description: "key is the key to project.",
- MarkdownDescription: "key is the key to project.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "mode": schema.Int64Attribute{
- Description: "mode is Optional: mode bits used to set permissions on this file.Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511.YAML accepts both octal and decimal values, JSON requires decimal values for mode bits.If not specified, the volume defaultMode will be used.This might be in conflict with other options that affect the filemode, like fsGroup, and the result can be other mode bits set.",
- MarkdownDescription: "mode is Optional: mode bits used to set permissions on this file.Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511.YAML accepts both octal and decimal values, JSON requires decimal values for mode bits.If not specified, the volume defaultMode will be used.This might be in conflict with other options that affect the filemode, like fsGroup, and the result can be other mode bits set.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "path": schema.StringAttribute{
- Description: "path is the relative path of the file to map the key to.May not be an absolute path.May not contain the path element '..'.May not start with the string '..'.",
- MarkdownDescription: "path is the relative path of the file to map the key to.May not be an absolute path.May not contain the path element '..'.May not start with the string '..'.",
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "name": schema.StringAttribute{
- Description: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?",
- MarkdownDescription: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "optional": schema.BoolAttribute{
- Description: "optional field specify whether the Secret or its key must be defined",
- MarkdownDescription: "optional field specify whether the Secret or its key must be defined",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "service_account_token": schema.SingleNestedAttribute{
- Description: "serviceAccountToken is information about the serviceAccountToken data to project",
- MarkdownDescription: "serviceAccountToken is information about the serviceAccountToken data to project",
- Attributes: map[string]schema.Attribute{
- "audience": schema.StringAttribute{
- Description: "audience is the intended audience of the token. A recipient of a tokenmust identify itself with an identifier specified in the audience of thetoken, and otherwise should reject the token. The audience defaults to theidentifier of the apiserver.",
- MarkdownDescription: "audience is the intended audience of the token. A recipient of a tokenmust identify itself with an identifier specified in the audience of thetoken, and otherwise should reject the token. The audience defaults to theidentifier of the apiserver.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "expiration_seconds": schema.Int64Attribute{
- Description: "expirationSeconds is the requested duration of validity of the serviceaccount token. As the token approaches expiration, the kubelet volumeplugin will proactively rotate the service account token. The kubelet willstart trying to rotate the token if the token is older than 80 percent ofits time to live or if the token is older than 24 hours.Defaults to 1 hourand must be at least 10 minutes.",
- MarkdownDescription: "expirationSeconds is the requested duration of validity of the serviceaccount token. As the token approaches expiration, the kubelet volumeplugin will proactively rotate the service account token. The kubelet willstart trying to rotate the token if the token is older than 80 percent ofits time to live or if the token is older than 24 hours.Defaults to 1 hourand must be at least 10 minutes.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "path": schema.StringAttribute{
- Description: "path is the path relative to the mount point of the file to project thetoken into.",
- MarkdownDescription: "path is the path relative to the mount point of the file to project thetoken into.",
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "quobyte": schema.SingleNestedAttribute{
- Description: "quobyte represents a Quobyte mount on the host that shares a pod's lifetime",
- MarkdownDescription: "quobyte represents a Quobyte mount on the host that shares a pod's lifetime",
- Attributes: map[string]schema.Attribute{
- "group": schema.StringAttribute{
- Description: "group to map volume access toDefault is no group",
- MarkdownDescription: "group to map volume access toDefault is no group",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "read_only": schema.BoolAttribute{
- Description: "readOnly here will force the Quobyte volume to be mounted with read-only permissions.Defaults to false.",
- MarkdownDescription: "readOnly here will force the Quobyte volume to be mounted with read-only permissions.Defaults to false.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "registry": schema.StringAttribute{
- Description: "registry represents a single or multiple Quobyte Registry servicesspecified as a string as host:port pair (multiple entries are separated with commas)which acts as the central registry for volumes",
- MarkdownDescription: "registry represents a single or multiple Quobyte Registry servicesspecified as a string as host:port pair (multiple entries are separated with commas)which acts as the central registry for volumes",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "tenant": schema.StringAttribute{
- Description: "tenant owning the given Quobyte volume in the BackendUsed with dynamically provisioned Quobyte volumes, value is set by the plugin",
- MarkdownDescription: "tenant owning the given Quobyte volume in the BackendUsed with dynamically provisioned Quobyte volumes, value is set by the plugin",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "user": schema.StringAttribute{
- Description: "user to map volume access toDefaults to serivceaccount user",
- MarkdownDescription: "user to map volume access toDefaults to serivceaccount user",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "volume": schema.StringAttribute{
- Description: "volume is a string that references an already created Quobyte volume by name.",
- MarkdownDescription: "volume is a string that references an already created Quobyte volume by name.",
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "rbd": schema.SingleNestedAttribute{
- Description: "rbd represents a Rados Block Device mount on the host that shares a pod's lifetime.More info: https://examples.k8s.io/volumes/rbd/README.md",
- MarkdownDescription: "rbd represents a Rados Block Device mount on the host that shares a pod's lifetime.More info: https://examples.k8s.io/volumes/rbd/README.md",
- Attributes: map[string]schema.Attribute{
- "fs_type": schema.StringAttribute{
- Description: "fsType is the filesystem type of the volume that you want to mount.Tip: Ensure that the filesystem type is supported by the host operating system.Examples: 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified.More info: https://kubernetes.io/docs/concepts/storage/volumes#rbdTODO: how do we prevent errors in the filesystem from compromising the machine",
- MarkdownDescription: "fsType is the filesystem type of the volume that you want to mount.Tip: Ensure that the filesystem type is supported by the host operating system.Examples: 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified.More info: https://kubernetes.io/docs/concepts/storage/volumes#rbdTODO: how do we prevent errors in the filesystem from compromising the machine",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "image": schema.StringAttribute{
- Description: "image is the rados image name.More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it",
- MarkdownDescription: "image is the rados image name.More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "keyring": schema.StringAttribute{
- Description: "keyring is the path to key ring for RBDUser.Default is /etc/ceph/keyring.More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it",
- MarkdownDescription: "keyring is the path to key ring for RBDUser.Default is /etc/ceph/keyring.More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "monitors": schema.ListAttribute{
- Description: "monitors is a collection of Ceph monitors.More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it",
- MarkdownDescription: "monitors is a collection of Ceph monitors.More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it",
- ElementType: types.StringType,
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "pool": schema.StringAttribute{
- Description: "pool is the rados pool name.Default is rbd.More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it",
- MarkdownDescription: "pool is the rados pool name.Default is rbd.More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "read_only": schema.BoolAttribute{
- Description: "readOnly here will force the ReadOnly setting in VolumeMounts.Defaults to false.More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it",
- MarkdownDescription: "readOnly here will force the ReadOnly setting in VolumeMounts.Defaults to false.More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "secret_ref": schema.SingleNestedAttribute{
- Description: "secretRef is name of the authentication secret for RBDUser. If providedoverrides keyring.Default is nil.More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it",
- MarkdownDescription: "secretRef is name of the authentication secret for RBDUser. If providedoverrides keyring.Default is nil.More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it",
- Attributes: map[string]schema.Attribute{
- "name": schema.StringAttribute{
- Description: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?",
- MarkdownDescription: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "user": schema.StringAttribute{
- Description: "user is the rados user name.Default is admin.More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it",
- MarkdownDescription: "user is the rados user name.Default is admin.More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "scale_io": schema.SingleNestedAttribute{
- Description: "scaleIO represents a ScaleIO persistent volume attached and mounted on Kubernetes nodes.",
- MarkdownDescription: "scaleIO represents a ScaleIO persistent volume attached and mounted on Kubernetes nodes.",
- Attributes: map[string]schema.Attribute{
- "fs_type": schema.StringAttribute{
- Description: "fsType is the filesystem type to mount.Must be a filesystem type supported by the host operating system.Ex. 'ext4', 'xfs', 'ntfs'.Default is 'xfs'.",
- MarkdownDescription: "fsType is the filesystem type to mount.Must be a filesystem type supported by the host operating system.Ex. 'ext4', 'xfs', 'ntfs'.Default is 'xfs'.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "gateway": schema.StringAttribute{
- Description: "gateway is the host address of the ScaleIO API Gateway.",
- MarkdownDescription: "gateway is the host address of the ScaleIO API Gateway.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "protection_domain": schema.StringAttribute{
- Description: "protectionDomain is the name of the ScaleIO Protection Domain for the configured storage.",
- MarkdownDescription: "protectionDomain is the name of the ScaleIO Protection Domain for the configured storage.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "read_only": schema.BoolAttribute{
- Description: "readOnly Defaults to false (read/write). ReadOnly here will forcethe ReadOnly setting in VolumeMounts.",
- MarkdownDescription: "readOnly Defaults to false (read/write). ReadOnly here will forcethe ReadOnly setting in VolumeMounts.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "secret_ref": schema.SingleNestedAttribute{
- Description: "secretRef references to the secret for ScaleIO user and othersensitive information. If this is not provided, Login operation will fail.",
- MarkdownDescription: "secretRef references to the secret for ScaleIO user and othersensitive information. If this is not provided, Login operation will fail.",
- Attributes: map[string]schema.Attribute{
- "name": schema.StringAttribute{
- Description: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?",
- MarkdownDescription: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "ssl_enabled": schema.BoolAttribute{
- Description: "sslEnabled Flag enable/disable SSL communication with Gateway, default false",
- MarkdownDescription: "sslEnabled Flag enable/disable SSL communication with Gateway, default false",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "storage_mode": schema.StringAttribute{
- Description: "storageMode indicates whether the storage for a volume should be ThickProvisioned or ThinProvisioned.Default is ThinProvisioned.",
- MarkdownDescription: "storageMode indicates whether the storage for a volume should be ThickProvisioned or ThinProvisioned.Default is ThinProvisioned.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "storage_pool": schema.StringAttribute{
- Description: "storagePool is the ScaleIO Storage Pool associated with the protection domain.",
- MarkdownDescription: "storagePool is the ScaleIO Storage Pool associated with the protection domain.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "system": schema.StringAttribute{
- Description: "system is the name of the storage system as configured in ScaleIO.",
- MarkdownDescription: "system is the name of the storage system as configured in ScaleIO.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "volume_name": schema.StringAttribute{
- Description: "volumeName is the name of a volume already created in the ScaleIO systemthat is associated with this volume source.",
- MarkdownDescription: "volumeName is the name of a volume already created in the ScaleIO systemthat is associated with this volume source.",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "secret": schema.SingleNestedAttribute{
- Description: "secret represents a secret that should populate this volume.More info: https://kubernetes.io/docs/concepts/storage/volumes#secret",
- MarkdownDescription: "secret represents a secret that should populate this volume.More info: https://kubernetes.io/docs/concepts/storage/volumes#secret",
- Attributes: map[string]schema.Attribute{
- "default_mode": schema.Int64Attribute{
- Description: "defaultMode is Optional: mode bits used to set permissions on created files by default.Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511.YAML accepts both octal and decimal values, JSON requires decimal valuesfor mode bits. Defaults to 0644.Directories within the path are not affected by this setting.This might be in conflict with other options that affect the filemode, like fsGroup, and the result can be other mode bits set.",
- MarkdownDescription: "defaultMode is Optional: mode bits used to set permissions on created files by default.Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511.YAML accepts both octal and decimal values, JSON requires decimal valuesfor mode bits. Defaults to 0644.Directories within the path are not affected by this setting.This might be in conflict with other options that affect the filemode, like fsGroup, and the result can be other mode bits set.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "items": schema.ListNestedAttribute{
- Description: "items If unspecified, each key-value pair in the Data field of the referencedSecret will be projected into the volume as a file whose name is thekey and content is the value. If specified, the listed keys will beprojected into the specified paths, and unlisted keys will not bepresent. If a key is specified which is not present in the Secret,the volume setup will error unless it is marked optional. Paths must berelative and may not contain the '..' path or start with '..'.",
- MarkdownDescription: "items If unspecified, each key-value pair in the Data field of the referencedSecret will be projected into the volume as a file whose name is thekey and content is the value. If specified, the listed keys will beprojected into the specified paths, and unlisted keys will not bepresent. If a key is specified which is not present in the Secret,the volume setup will error unless it is marked optional. Paths must berelative and may not contain the '..' path or start with '..'.",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "key": schema.StringAttribute{
- Description: "key is the key to project.",
- MarkdownDescription: "key is the key to project.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "mode": schema.Int64Attribute{
- Description: "mode is Optional: mode bits used to set permissions on this file.Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511.YAML accepts both octal and decimal values, JSON requires decimal values for mode bits.If not specified, the volume defaultMode will be used.This might be in conflict with other options that affect the filemode, like fsGroup, and the result can be other mode bits set.",
- MarkdownDescription: "mode is Optional: mode bits used to set permissions on this file.Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511.YAML accepts both octal and decimal values, JSON requires decimal values for mode bits.If not specified, the volume defaultMode will be used.This might be in conflict with other options that affect the filemode, like fsGroup, and the result can be other mode bits set.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "path": schema.StringAttribute{
- Description: "path is the relative path of the file to map the key to.May not be an absolute path.May not contain the path element '..'.May not start with the string '..'.",
- MarkdownDescription: "path is the relative path of the file to map the key to.May not be an absolute path.May not contain the path element '..'.May not start with the string '..'.",
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "optional": schema.BoolAttribute{
- Description: "optional field specify whether the Secret or its keys must be defined",
- MarkdownDescription: "optional field specify whether the Secret or its keys must be defined",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "secret_name": schema.StringAttribute{
- Description: "secretName is the name of the secret in the pod's namespace to use.More info: https://kubernetes.io/docs/concepts/storage/volumes#secret",
- MarkdownDescription: "secretName is the name of the secret in the pod's namespace to use.More info: https://kubernetes.io/docs/concepts/storage/volumes#secret",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "storageos": schema.SingleNestedAttribute{
- Description: "storageOS represents a StorageOS volume attached and mounted on Kubernetes nodes.",
- MarkdownDescription: "storageOS represents a StorageOS volume attached and mounted on Kubernetes nodes.",
- Attributes: map[string]schema.Attribute{
- "fs_type": schema.StringAttribute{
- Description: "fsType is the filesystem type to mount.Must be a filesystem type supported by the host operating system.Ex. 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified.",
- MarkdownDescription: "fsType is the filesystem type to mount.Must be a filesystem type supported by the host operating system.Ex. 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "read_only": schema.BoolAttribute{
- Description: "readOnly defaults to false (read/write). ReadOnly here will forcethe ReadOnly setting in VolumeMounts.",
- MarkdownDescription: "readOnly defaults to false (read/write). ReadOnly here will forcethe ReadOnly setting in VolumeMounts.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "secret_ref": schema.SingleNestedAttribute{
- Description: "secretRef specifies the secret to use for obtaining the StorageOS APIcredentials. If not specified, default values will be attempted.",
- MarkdownDescription: "secretRef specifies the secret to use for obtaining the StorageOS APIcredentials. If not specified, default values will be attempted.",
- Attributes: map[string]schema.Attribute{
- "name": schema.StringAttribute{
- Description: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?",
- MarkdownDescription: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "volume_name": schema.StringAttribute{
- Description: "volumeName is the human-readable name of the StorageOS volume. Volumenames are only unique within a namespace.",
- MarkdownDescription: "volumeName is the human-readable name of the StorageOS volume. Volumenames are only unique within a namespace.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "volume_namespace": schema.StringAttribute{
- Description: "volumeNamespace specifies the scope of the volume within StorageOS. If nonamespace is specified then the Pod's namespace will be used. This allows theKubernetes name scoping to be mirrored within StorageOS for tighter integration.Set VolumeName to any name to override the default behaviour.Set to 'default' if you are not using namespaces within StorageOS.Namespaces that do not pre-exist within StorageOS will be created.",
- MarkdownDescription: "volumeNamespace specifies the scope of the volume within StorageOS. If nonamespace is specified then the Pod's namespace will be used. This allows theKubernetes name scoping to be mirrored within StorageOS for tighter integration.Set VolumeName to any name to override the default behaviour.Set to 'default' if you are not using namespaces within StorageOS.Namespaces that do not pre-exist within StorageOS will be created.",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "vsphere_volume": schema.SingleNestedAttribute{
- Description: "vsphereVolume represents a vSphere volume attached and mounted on kubelets host machine",
- MarkdownDescription: "vsphereVolume represents a vSphere volume attached and mounted on kubelets host machine",
- Attributes: map[string]schema.Attribute{
- "fs_type": schema.StringAttribute{
- Description: "fsType is filesystem type to mount.Must be a filesystem type supported by the host operating system.Ex. 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified.",
- MarkdownDescription: "fsType is filesystem type to mount.Must be a filesystem type supported by the host operating system.Ex. 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "storage_policy_id": schema.StringAttribute{
- Description: "storagePolicyID is the storage Policy Based Management (SPBM) profile ID associated with the StoragePolicyName.",
- MarkdownDescription: "storagePolicyID is the storage Policy Based Management (SPBM) profile ID associated with the StoragePolicyName.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "storage_policy_name": schema.StringAttribute{
- Description: "storagePolicyName is the storage Policy Based Management (SPBM) profile name.",
- MarkdownDescription: "storagePolicyName is the storage Policy Based Management (SPBM) profile name.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "volume_path": schema.StringAttribute{
- Description: "volumePath is the path that identifies vSphere volume vmdk",
- MarkdownDescription: "volumePath is the path that identifies vSphere volume vmdk",
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "post_start_spec": schema.SingleNestedAttribute{
- Description: "Defines the command to be executed when the component is ready, and the command will only be executed once afterthe component becomes ready.",
- MarkdownDescription: "Defines the command to be executed when the component is ready, and the command will only be executed once afterthe component becomes ready.",
- Attributes: map[string]schema.Attribute{
- "cmd_executor_config": schema.SingleNestedAttribute{
- Description: "Specifies the post-start command to be executed.",
- MarkdownDescription: "Specifies the post-start command to be executed.",
- Attributes: map[string]schema.Attribute{
- "args": schema.ListAttribute{
- Description: "Additional parameters used in the execution of the command.",
- MarkdownDescription: "Additional parameters used in the execution of the command.",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "command": schema.ListAttribute{
- Description: "The command to be executed.",
- MarkdownDescription: "The command to be executed.",
- ElementType: types.StringType,
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "env": schema.MapAttribute{
- Description: "A list of environment variables that will be injected into the command execution context.",
- MarkdownDescription: "A list of environment variables that will be injected into the command execution context.",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "image": schema.StringAttribute{
- Description: "Specifies the image used to execute the command.",
- MarkdownDescription: "Specifies the image used to execute the command.",
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "script_spec_selectors": schema.ListNestedAttribute{
- Description: "Used to select the script that need to be referenced.When defined, the scripts defined in scriptSpecs can be referenced within the CmdExecutorConfig.",
- MarkdownDescription: "Used to select the script that need to be referenced.When defined, the scripts defined in scriptSpecs can be referenced within the CmdExecutorConfig.",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "name": schema.StringAttribute{
- Description: "Represents the name of the ScriptSpec referent.",
- MarkdownDescription: "Represents the name of the ScriptSpec referent.",
- Required: true,
- Optional: false,
- Computed: false,
- Validators: []validator.String{
- stringvalidator.LengthAtMost(63),
- stringvalidator.RegexMatches(regexp.MustCompile(`^[a-z0-9]([a-z0-9\.\-]*[a-z0-9])?$`), ""),
- },
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "probes": schema.SingleNestedAttribute{
- Description: "Settings for health checks.",
- MarkdownDescription: "Settings for health checks.",
- Attributes: map[string]schema.Attribute{
- "role_probe": schema.SingleNestedAttribute{
- Description: "Specifies the probe used for checking the role of the component.",
- MarkdownDescription: "Specifies the probe used for checking the role of the component.",
- Attributes: map[string]schema.Attribute{
- "commands": schema.SingleNestedAttribute{
- Description: "Commands used to execute for probe.",
- MarkdownDescription: "Commands used to execute for probe.",
- Attributes: map[string]schema.Attribute{
- "queries": schema.ListAttribute{
- Description: "Defines read checks that are executed on the probe sidecar.",
- MarkdownDescription: "Defines read checks that are executed on the probe sidecar.",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "writes": schema.ListAttribute{
- Description: "Defines write checks that are executed on the probe sidecar.",
- MarkdownDescription: "Defines write checks that are executed on the probe sidecar.",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "failure_threshold": schema.Int64Attribute{
- Description: "Minimum consecutive failures for the probe to be considered failed after having succeeded.",
- MarkdownDescription: "Minimum consecutive failures for the probe to be considered failed after having succeeded.",
- Required: false,
- Optional: true,
- Computed: false,
- Validators: []validator.Int64{
- int64validator.AtLeast(2),
- },
- },
-
- "period_seconds": schema.Int64Attribute{
- Description: "How often (in seconds) to perform the probe.",
- MarkdownDescription: "How often (in seconds) to perform the probe.",
- Required: false,
- Optional: true,
- Computed: false,
- Validators: []validator.Int64{
- int64validator.AtLeast(1),
- },
- },
-
- "timeout_seconds": schema.Int64Attribute{
- Description: "Number of seconds after which the probe times out. Defaults to 1 second.",
- MarkdownDescription: "Number of seconds after which the probe times out. Defaults to 1 second.",
- Required: false,
- Optional: true,
- Computed: false,
- Validators: []validator.Int64{
- int64validator.AtLeast(1),
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "role_probe_timeout_after_pods_ready": schema.Int64Attribute{
- Description: "Defines the timeout (in seconds) for the role probe after all pods of the component are ready.The system will check if the application is available in the pod.If pods exceed the InitializationTimeoutSeconds time without a role label, this component will enter theFailed/Abnormal phase.Note that this configuration will only take effect if the component supports RoleProbeand will not affect the life cycle of the pod. default values are 60 seconds.",
- MarkdownDescription: "Defines the timeout (in seconds) for the role probe after all pods of the component are ready.The system will check if the application is available in the pod.If pods exceed the InitializationTimeoutSeconds time without a role label, this component will enter theFailed/Abnormal phase.Note that this configuration will only take effect if the component supports RoleProbeand will not affect the life cycle of the pod. default values are 60 seconds.",
- Required: false,
- Optional: true,
- Computed: false,
- Validators: []validator.Int64{
- int64validator.AtLeast(30),
- },
- },
-
- "running_probe": schema.SingleNestedAttribute{
- Description: "Specifies the probe used for checking the running status of the component.",
- MarkdownDescription: "Specifies the probe used for checking the running status of the component.",
- Attributes: map[string]schema.Attribute{
- "commands": schema.SingleNestedAttribute{
- Description: "Commands used to execute for probe.",
- MarkdownDescription: "Commands used to execute for probe.",
- Attributes: map[string]schema.Attribute{
- "queries": schema.ListAttribute{
- Description: "Defines read checks that are executed on the probe sidecar.",
- MarkdownDescription: "Defines read checks that are executed on the probe sidecar.",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "writes": schema.ListAttribute{
- Description: "Defines write checks that are executed on the probe sidecar.",
- MarkdownDescription: "Defines write checks that are executed on the probe sidecar.",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "failure_threshold": schema.Int64Attribute{
- Description: "Minimum consecutive failures for the probe to be considered failed after having succeeded.",
- MarkdownDescription: "Minimum consecutive failures for the probe to be considered failed after having succeeded.",
- Required: false,
- Optional: true,
- Computed: false,
- Validators: []validator.Int64{
- int64validator.AtLeast(2),
- },
- },
-
- "period_seconds": schema.Int64Attribute{
- Description: "How often (in seconds) to perform the probe.",
- MarkdownDescription: "How often (in seconds) to perform the probe.",
- Required: false,
- Optional: true,
- Computed: false,
- Validators: []validator.Int64{
- int64validator.AtLeast(1),
- },
- },
-
- "timeout_seconds": schema.Int64Attribute{
- Description: "Number of seconds after which the probe times out. Defaults to 1 second.",
- MarkdownDescription: "Number of seconds after which the probe times out. Defaults to 1 second.",
- Required: false,
- Optional: true,
- Computed: false,
- Validators: []validator.Int64{
- int64validator.AtLeast(1),
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "status_probe": schema.SingleNestedAttribute{
- Description: "Specifies the probe used for checking the status of the component.",
- MarkdownDescription: "Specifies the probe used for checking the status of the component.",
- Attributes: map[string]schema.Attribute{
- "commands": schema.SingleNestedAttribute{
- Description: "Commands used to execute for probe.",
- MarkdownDescription: "Commands used to execute for probe.",
- Attributes: map[string]schema.Attribute{
- "queries": schema.ListAttribute{
- Description: "Defines read checks that are executed on the probe sidecar.",
- MarkdownDescription: "Defines read checks that are executed on the probe sidecar.",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "writes": schema.ListAttribute{
- Description: "Defines write checks that are executed on the probe sidecar.",
- MarkdownDescription: "Defines write checks that are executed on the probe sidecar.",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "failure_threshold": schema.Int64Attribute{
- Description: "Minimum consecutive failures for the probe to be considered failed after having succeeded.",
- MarkdownDescription: "Minimum consecutive failures for the probe to be considered failed after having succeeded.",
- Required: false,
- Optional: true,
- Computed: false,
- Validators: []validator.Int64{
- int64validator.AtLeast(2),
- },
- },
-
- "period_seconds": schema.Int64Attribute{
- Description: "How often (in seconds) to perform the probe.",
- MarkdownDescription: "How often (in seconds) to perform the probe.",
- Required: false,
- Optional: true,
- Computed: false,
- Validators: []validator.Int64{
- int64validator.AtLeast(1),
- },
- },
-
- "timeout_seconds": schema.Int64Attribute{
- Description: "Number of seconds after which the probe times out. Defaults to 1 second.",
- MarkdownDescription: "Number of seconds after which the probe times out. Defaults to 1 second.",
- Required: false,
- Optional: true,
- Computed: false,
- Validators: []validator.Int64{
- int64validator.AtLeast(1),
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "replication_spec": schema.SingleNestedAttribute{
- Description: "Defines spec for 'Replication' workloads.",
- MarkdownDescription: "Defines spec for 'Replication' workloads.",
- Attributes: map[string]schema.Attribute{
- "ll_pod_management_policy": schema.StringAttribute{
- Description: "Controls the creation of pods during initial scale up, replacement of pods on nodes, and scaling down.- 'OrderedReady': Creates pods in increasing order (pod-0, then pod-1, etc). The controller waits until each podis ready before continuing. Pods are removed in reverse order when scaling down.- 'Parallel': Creates pods in parallel to match the desired scale without waiting. All pods are deleted at oncewhen scaling down.",
- MarkdownDescription: "Controls the creation of pods during initial scale up, replacement of pods on nodes, and scaling down.- 'OrderedReady': Creates pods in increasing order (pod-0, then pod-1, etc). The controller waits until each podis ready before continuing. Pods are removed in reverse order when scaling down.- 'Parallel': Creates pods in parallel to match the desired scale without waiting. All pods are deleted at oncewhen scaling down.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "ll_update_strategy": schema.SingleNestedAttribute{
- Description: "Specifies the low-level StatefulSetUpdateStrategy to be used when updating Pods in the StatefulSet upon arevision to the Template.'UpdateStrategy' will be ignored if this is provided.",
- MarkdownDescription: "Specifies the low-level StatefulSetUpdateStrategy to be used when updating Pods in the StatefulSet upon arevision to the Template.'UpdateStrategy' will be ignored if this is provided.",
- Attributes: map[string]schema.Attribute{
- "rolling_update": schema.SingleNestedAttribute{
- Description: "RollingUpdate is used to communicate parameters when Type is RollingUpdateStatefulSetStrategyType.",
- MarkdownDescription: "RollingUpdate is used to communicate parameters when Type is RollingUpdateStatefulSetStrategyType.",
- Attributes: map[string]schema.Attribute{
- "max_unavailable": schema.StringAttribute{
- Description: "The maximum number of pods that can be unavailable during the update.Value can be an absolute number (ex: 5) or a percentage of desired pods (ex: 10%).Absolute number is calculated from percentage by rounding up. This can not be 0.Defaults to 1. This field is alpha-level and is only honored by servers that enable theMaxUnavailableStatefulSet feature. The field applies to all pods in the range 0 toReplicas-1. That means if there is any unavailable pod in the range 0 to Replicas-1, itwill be counted towards MaxUnavailable.",
- MarkdownDescription: "The maximum number of pods that can be unavailable during the update.Value can be an absolute number (ex: 5) or a percentage of desired pods (ex: 10%).Absolute number is calculated from percentage by rounding up. This can not be 0.Defaults to 1. This field is alpha-level and is only honored by servers that enable theMaxUnavailableStatefulSet feature. The field applies to all pods in the range 0 toReplicas-1. That means if there is any unavailable pod in the range 0 to Replicas-1, itwill be counted towards MaxUnavailable.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "partition": schema.Int64Attribute{
- Description: "Partition indicates the ordinal at which the StatefulSet should be partitionedfor updates. During a rolling update, all pods from ordinal Replicas-1 toPartition are updated. All pods from ordinal Partition-1 to 0 remain untouched.This is helpful in being able to do a canary based deployment. The default value is 0.",
- MarkdownDescription: "Partition indicates the ordinal at which the StatefulSet should be partitionedfor updates. During a rolling update, all pods from ordinal Replicas-1 toPartition are updated. All pods from ordinal Partition-1 to 0 remain untouched.This is helpful in being able to do a canary based deployment. The default value is 0.",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "type": schema.StringAttribute{
- Description: "Type indicates the type of the StatefulSetUpdateStrategy.Default is RollingUpdate.",
- MarkdownDescription: "Type indicates the type of the StatefulSetUpdateStrategy.Default is RollingUpdate.",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "update_strategy": schema.StringAttribute{
- Description: "Specifies the strategy for updating Pods.For workloadType='Consensus', the update strategy can be one of the following:- 'Serial': Updates Members sequentially to minimize component downtime.- 'BestEffortParallel': Updates Members in parallel to minimize component write downtime. Majority remains onlineat all times.- 'Parallel': Forces parallel updates.",
- MarkdownDescription: "Specifies the strategy for updating Pods.For workloadType='Consensus', the update strategy can be one of the following:- 'Serial': Updates Members sequentially to minimize component downtime.- 'BestEffortParallel': Updates Members in parallel to minimize component write downtime. Majority remains onlineat all times.- 'Parallel': Forces parallel updates.",
- Required: false,
- Optional: true,
- Computed: false,
- Validators: []validator.String{
- stringvalidator.OneOf("Serial", "BestEffortParallel", "Parallel"),
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "rsm_spec": schema.SingleNestedAttribute{
- Description: "Defines workload spec of this component.From KB 0.7.0, RSM(InstanceSetSpec) will be the underlying CR which powers all kinds of workload in KB.RSM is an enhanced stateful workload extension dedicated for heavy-state workloads like databases.",
- MarkdownDescription: "Defines workload spec of this component.From KB 0.7.0, RSM(InstanceSetSpec) will be the underlying CR which powers all kinds of workload in KB.RSM is an enhanced stateful workload extension dedicated for heavy-state workloads like databases.",
- Attributes: map[string]schema.Attribute{
- "member_update_strategy": schema.StringAttribute{
- Description: "Describes the strategy for updating Members (Pods).- 'Serial': Updates Members sequentially to ensure minimum component downtime.- 'BestEffortParallel': Updates Members in parallel to ensure minimum component write downtime.- 'Parallel': Forces parallel updates.",
- MarkdownDescription: "Describes the strategy for updating Members (Pods).- 'Serial': Updates Members sequentially to ensure minimum component downtime.- 'BestEffortParallel': Updates Members in parallel to ensure minimum component write downtime.- 'Parallel': Forces parallel updates.",
- Required: false,
- Optional: true,
- Computed: false,
- Validators: []validator.String{
- stringvalidator.OneOf("Serial", "BestEffortParallel", "Parallel"),
- },
- },
-
- "membership_reconfiguration": schema.SingleNestedAttribute{
- Description: "Indicates the actions required for dynamic membership reconfiguration.",
- MarkdownDescription: "Indicates the actions required for dynamic membership reconfiguration.",
- Attributes: map[string]schema.Attribute{
- "log_sync_action": schema.SingleNestedAttribute{
- Description: "Defines the action to trigger the new member to start log syncing.If the Image is not configured, the Image from the previous non-nil action will be used.",
- MarkdownDescription: "Defines the action to trigger the new member to start log syncing.If the Image is not configured, the Image from the previous non-nil action will be used.",
- Attributes: map[string]schema.Attribute{
- "args": schema.ListAttribute{
- Description: "Additional parameters used to perform specific statements. This field is optional.",
- MarkdownDescription: "Additional parameters used to perform specific statements. This field is optional.",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "command": schema.ListAttribute{
- Description: "A set of instructions that will be executed within the Container to retrieve or process role information. This field is required.",
- MarkdownDescription: "A set of instructions that will be executed within the Container to retrieve or process role information. This field is required.",
- ElementType: types.StringType,
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "image": schema.StringAttribute{
- Description: "Refers to the utility image that contains the command which can be utilized to retrieve or process role information.",
- MarkdownDescription: "Refers to the utility image that contains the command which can be utilized to retrieve or process role information.",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "member_join_action": schema.SingleNestedAttribute{
- Description: "Defines the action to add a member.If the Image is not configured, the Image from the previous non-nil action will be used.",
- MarkdownDescription: "Defines the action to add a member.If the Image is not configured, the Image from the previous non-nil action will be used.",
- Attributes: map[string]schema.Attribute{
- "args": schema.ListAttribute{
- Description: "Additional parameters used to perform specific statements. This field is optional.",
- MarkdownDescription: "Additional parameters used to perform specific statements. This field is optional.",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "command": schema.ListAttribute{
- Description: "A set of instructions that will be executed within the Container to retrieve or process role information. This field is required.",
- MarkdownDescription: "A set of instructions that will be executed within the Container to retrieve or process role information. This field is required.",
- ElementType: types.StringType,
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "image": schema.StringAttribute{
- Description: "Refers to the utility image that contains the command which can be utilized to retrieve or process role information.",
- MarkdownDescription: "Refers to the utility image that contains the command which can be utilized to retrieve or process role information.",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "member_leave_action": schema.SingleNestedAttribute{
- Description: "Defines the action to remove a member.If the Image is not configured, the Image from the previous non-nil action will be used.",
- MarkdownDescription: "Defines the action to remove a member.If the Image is not configured, the Image from the previous non-nil action will be used.",
- Attributes: map[string]schema.Attribute{
- "args": schema.ListAttribute{
- Description: "Additional parameters used to perform specific statements. This field is optional.",
- MarkdownDescription: "Additional parameters used to perform specific statements. This field is optional.",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "command": schema.ListAttribute{
- Description: "A set of instructions that will be executed within the Container to retrieve or process role information. This field is required.",
- MarkdownDescription: "A set of instructions that will be executed within the Container to retrieve or process role information. This field is required.",
- ElementType: types.StringType,
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "image": schema.StringAttribute{
- Description: "Refers to the utility image that contains the command which can be utilized to retrieve or process role information.",
- MarkdownDescription: "Refers to the utility image that contains the command which can be utilized to retrieve or process role information.",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "promote_action": schema.SingleNestedAttribute{
- Description: "Defines the action to inform the cluster that the new member can join voting now.If the Image is not configured, the Image from the previous non-nil action will be used.",
- MarkdownDescription: "Defines the action to inform the cluster that the new member can join voting now.If the Image is not configured, the Image from the previous non-nil action will be used.",
- Attributes: map[string]schema.Attribute{
- "args": schema.ListAttribute{
- Description: "Additional parameters used to perform specific statements. This field is optional.",
- MarkdownDescription: "Additional parameters used to perform specific statements. This field is optional.",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "command": schema.ListAttribute{
- Description: "A set of instructions that will be executed within the Container to retrieve or process role information. This field is required.",
- MarkdownDescription: "A set of instructions that will be executed within the Container to retrieve or process role information. This field is required.",
- ElementType: types.StringType,
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "image": schema.StringAttribute{
- Description: "Refers to the utility image that contains the command which can be utilized to retrieve or process role information.",
- MarkdownDescription: "Refers to the utility image that contains the command which can be utilized to retrieve or process role information.",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "switchover_action": schema.SingleNestedAttribute{
- Description: "Specifies the environment variables that can be used in all following Actions:- KB_ITS_USERNAME: Represents the username part of the credential- KB_ITS_PASSWORD: Represents the password part of the credential- KB_ITS_LEADER_HOST: Represents the leader host- KB_ITS_TARGET_HOST: Represents the target host- KB_ITS_SERVICE_PORT: Represents the service portDefines the action to perform a switchover.If the Image is not configured, the latest [BusyBox](https://busybox.net/) image will be used.",
- MarkdownDescription: "Specifies the environment variables that can be used in all following Actions:- KB_ITS_USERNAME: Represents the username part of the credential- KB_ITS_PASSWORD: Represents the password part of the credential- KB_ITS_LEADER_HOST: Represents the leader host- KB_ITS_TARGET_HOST: Represents the target host- KB_ITS_SERVICE_PORT: Represents the service portDefines the action to perform a switchover.If the Image is not configured, the latest [BusyBox](https://busybox.net/) image will be used.",
- Attributes: map[string]schema.Attribute{
- "args": schema.ListAttribute{
- Description: "Additional parameters used to perform specific statements. This field is optional.",
- MarkdownDescription: "Additional parameters used to perform specific statements. This field is optional.",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "command": schema.ListAttribute{
- Description: "A set of instructions that will be executed within the Container to retrieve or process role information. This field is required.",
- MarkdownDescription: "A set of instructions that will be executed within the Container to retrieve or process role information. This field is required.",
- ElementType: types.StringType,
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "image": schema.StringAttribute{
- Description: "Refers to the utility image that contains the command which can be utilized to retrieve or process role information.",
- MarkdownDescription: "Refers to the utility image that contains the command which can be utilized to retrieve or process role information.",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "role_probe": schema.SingleNestedAttribute{
- Description: "Defines the method used to probe a role.",
- MarkdownDescription: "Defines the method used to probe a role.",
- Attributes: map[string]schema.Attribute{
- "builtin_handler_name": schema.StringAttribute{
- Description: "Specifies the builtin handler name to use to probe the role of the main container.Available handlers include: mysql, postgres, mongodb, redis, etcd, kafka.Use CustomHandler to define a custom role probe function if none of the built-in handlers meet the requirement.",
- MarkdownDescription: "Specifies the builtin handler name to use to probe the role of the main container.Available handlers include: mysql, postgres, mongodb, redis, etcd, kafka.Use CustomHandler to define a custom role probe function if none of the built-in handlers meet the requirement.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "custom_handler": schema.ListNestedAttribute{
- Description: "Defines a custom method for role probing.If the BuiltinHandler meets the requirement, use it instead.Actions defined here are executed in series.Upon completion of all actions, the final output should be a single string representing the role name defined in spec.Roles.The latest [BusyBox](https://busybox.net/) image will be used if Image is not configured.Environment variables can be used in Command:- v_KB_ITS_LAST_STDOUT: stdout from the last action, watch for 'v_' prefix- KB_ITS_USERNAME: username part of the credential- KB_ITS_PASSWORD: password part of the credential",
- MarkdownDescription: "Defines a custom method for role probing.If the BuiltinHandler meets the requirement, use it instead.Actions defined here are executed in series.Upon completion of all actions, the final output should be a single string representing the role name defined in spec.Roles.The latest [BusyBox](https://busybox.net/) image will be used if Image is not configured.Environment variables can be used in Command:- v_KB_ITS_LAST_STDOUT: stdout from the last action, watch for 'v_' prefix- KB_ITS_USERNAME: username part of the credential- KB_ITS_PASSWORD: password part of the credential",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "args": schema.ListAttribute{
- Description: "Additional parameters used to perform specific statements. This field is optional.",
- MarkdownDescription: "Additional parameters used to perform specific statements. This field is optional.",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "command": schema.ListAttribute{
- Description: "A set of instructions that will be executed within the Container to retrieve or process role information. This field is required.",
- MarkdownDescription: "A set of instructions that will be executed within the Container to retrieve or process role information. This field is required.",
- ElementType: types.StringType,
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "image": schema.StringAttribute{
- Description: "Refers to the utility image that contains the command which can be utilized to retrieve or process role information.",
- MarkdownDescription: "Refers to the utility image that contains the command which can be utilized to retrieve or process role information.",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "failure_threshold": schema.Int64Attribute{
- Description: "Specifies the minimum number of consecutive failures for the probe to be considered failed after having succeeded.",
- MarkdownDescription: "Specifies the minimum number of consecutive failures for the probe to be considered failed after having succeeded.",
- Required: false,
- Optional: true,
- Computed: false,
- Validators: []validator.Int64{
- int64validator.AtLeast(1),
- },
- },
-
- "initial_delay_seconds": schema.Int64Attribute{
- Description: "Specifies the number of seconds to wait after the container has started before initiating role probing.",
- MarkdownDescription: "Specifies the number of seconds to wait after the container has started before initiating role probing.",
- Required: false,
- Optional: true,
- Computed: false,
- Validators: []validator.Int64{
- int64validator.AtLeast(0),
- },
- },
-
- "period_seconds": schema.Int64Attribute{
- Description: "Specifies the frequency (in seconds) of probe execution.",
- MarkdownDescription: "Specifies the frequency (in seconds) of probe execution.",
- Required: false,
- Optional: true,
- Computed: false,
- Validators: []validator.Int64{
- int64validator.AtLeast(1),
- },
- },
-
- "role_update_mechanism": schema.StringAttribute{
- Description: "Specifies the method for updating the pod role label.",
- MarkdownDescription: "Specifies the method for updating the pod role label.",
- Required: false,
- Optional: true,
- Computed: false,
- Validators: []validator.String{
- stringvalidator.OneOf("ReadinessProbeEventUpdate", "DirectAPIServerEventUpdate"),
- },
- },
-
- "success_threshold": schema.Int64Attribute{
- Description: "Specifies the minimum number of consecutive successes for the probe to be considered successful after having failed.",
- MarkdownDescription: "Specifies the minimum number of consecutive successes for the probe to be considered successful after having failed.",
- Required: false,
- Optional: true,
- Computed: false,
- Validators: []validator.Int64{
- int64validator.AtLeast(1),
- },
- },
-
- "timeout_seconds": schema.Int64Attribute{
- Description: "Specifies the number of seconds after which the probe times out.",
- MarkdownDescription: "Specifies the number of seconds after which the probe times out.",
- Required: false,
- Optional: true,
- Computed: false,
- Validators: []validator.Int64{
- int64validator.AtLeast(1),
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "roles": schema.ListNestedAttribute{
- Description: "Specifies a list of roles defined within the system.",
- MarkdownDescription: "Specifies a list of roles defined within the system.",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "access_mode": schema.StringAttribute{
- Description: "Specifies the service capabilities of this member.",
- MarkdownDescription: "Specifies the service capabilities of this member.",
- Required: true,
- Optional: false,
- Computed: false,
- Validators: []validator.String{
- stringvalidator.OneOf("None", "Readonly", "ReadWrite"),
- },
- },
-
- "can_vote": schema.BoolAttribute{
- Description: "Indicates if this member has voting rights.",
- MarkdownDescription: "Indicates if this member has voting rights.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "is_leader": schema.BoolAttribute{
- Description: "Determines if this member is the leader.",
- MarkdownDescription: "Determines if this member is the leader.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "name": schema.StringAttribute{
- Description: "Defines the role name of the replica.",
- MarkdownDescription: "Defines the role name of the replica.",
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "script_specs": schema.ListNestedAttribute{
- Description: "Defines the template of scripts.",
- MarkdownDescription: "Defines the template of scripts.",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "default_mode": schema.Int64Attribute{
- Description: "The operator attempts to set default file permissions for scripts (0555) and configurations (0444).However, certain database engines may require different file permissions.You can specify the desired file permissions here.Must be specified as an octal value between 0000 and 0777 (inclusive),or as a decimal value between 0 and 511 (inclusive).YAML supports both octal and decimal values for file permissions.Please note that this setting only affects the permissions of the files themselves.Directories within the specified path are not impacted by this setting.It's important to be aware that this setting might conflict with other optionsthat influence the file mode, such as fsGroup.In such cases, the resulting file mode may have additional bits set.Refers to documents of k8s.ConfigMapVolumeSource.defaultMode for more information.",
- MarkdownDescription: "The operator attempts to set default file permissions for scripts (0555) and configurations (0444).However, certain database engines may require different file permissions.You can specify the desired file permissions here.Must be specified as an octal value between 0000 and 0777 (inclusive),or as a decimal value between 0 and 511 (inclusive).YAML supports both octal and decimal values for file permissions.Please note that this setting only affects the permissions of the files themselves.Directories within the specified path are not impacted by this setting.It's important to be aware that this setting might conflict with other optionsthat influence the file mode, such as fsGroup.In such cases, the resulting file mode may have additional bits set.Refers to documents of k8s.ConfigMapVolumeSource.defaultMode for more information.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "name": schema.StringAttribute{
- Description: "Specifies the name of the configuration template.",
- MarkdownDescription: "Specifies the name of the configuration template.",
- Required: true,
- Optional: false,
- Computed: false,
- Validators: []validator.String{
- stringvalidator.LengthAtMost(63),
- stringvalidator.RegexMatches(regexp.MustCompile(`^[a-z0-9]([a-z0-9\.\-]*[a-z0-9])?$`), ""),
- },
- },
-
- "namespace": schema.StringAttribute{
- Description: "Specifies the namespace of the referenced configuration template ConfigMap object.An empty namespace is equivalent to the 'default' namespace.",
- MarkdownDescription: "Specifies the namespace of the referenced configuration template ConfigMap object.An empty namespace is equivalent to the 'default' namespace.",
- Required: false,
- Optional: true,
- Computed: false,
- Validators: []validator.String{
- stringvalidator.LengthAtMost(63),
- stringvalidator.RegexMatches(regexp.MustCompile(`^[a-z0-9]([a-z0-9\-]*[a-z0-9])?$`), ""),
- },
- },
-
- "template_ref": schema.StringAttribute{
- Description: "Specifies the name of the referenced configuration template ConfigMap object.",
- MarkdownDescription: "Specifies the name of the referenced configuration template ConfigMap object.",
- Required: false,
- Optional: true,
- Computed: false,
- Validators: []validator.String{
- stringvalidator.LengthAtMost(63),
- stringvalidator.RegexMatches(regexp.MustCompile(`^[a-z0-9]([a-z0-9\.\-]*[a-z0-9])?$`), ""),
- },
- },
-
- "volume_name": schema.StringAttribute{
- Description: "Refers to the volume name of PodTemplate. The configuration file produced through the configurationtemplate will be mounted to the corresponding volume. Must be a DNS_LABEL name.The volume name must be defined in podSpec.containers[*].volumeMounts.",
- MarkdownDescription: "Refers to the volume name of PodTemplate. The configuration file produced through the configurationtemplate will be mounted to the corresponding volume. Must be a DNS_LABEL name.The volume name must be defined in podSpec.containers[*].volumeMounts.",
- Required: true,
- Optional: false,
- Computed: false,
- Validators: []validator.String{
- stringvalidator.LengthAtMost(63),
- stringvalidator.RegexMatches(regexp.MustCompile(`^[a-z]([a-z0-9\-]*[a-z0-9])?$`), ""),
- },
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "service": schema.SingleNestedAttribute{
- Description: "Defines the service spec.",
- MarkdownDescription: "Defines the service spec.",
- Attributes: map[string]schema.Attribute{
- "ports": schema.ListNestedAttribute{
- Description: "The list of ports that are exposed by this service.More info: https://kubernetes.io/docs/concepts/services-networking/service/#virtual-ips-and-service-proxies",
- MarkdownDescription: "The list of ports that are exposed by this service.More info: https://kubernetes.io/docs/concepts/services-networking/service/#virtual-ips-and-service-proxies",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "app_protocol": schema.StringAttribute{
- Description: "The application protocol for this port.This field follows standard Kubernetes label syntax.Un-prefixed names are reserved for IANA standard service names (as perRFC-6335 and https://www.iana.org/assignments/service-names).Non-standard protocols should use prefixed names such asmycompany.com/my-custom-protocol.",
- MarkdownDescription: "The application protocol for this port.This field follows standard Kubernetes label syntax.Un-prefixed names are reserved for IANA standard service names (as perRFC-6335 and https://www.iana.org/assignments/service-names).Non-standard protocols should use prefixed names such asmycompany.com/my-custom-protocol.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "name": schema.StringAttribute{
- Description: "The name of this port within the service. This must be a DNS_LABEL.All ports within a ServiceSpec must have unique names. When consideringthe endpoints for a Service, this must match the 'name' field in theEndpointPort.",
- MarkdownDescription: "The name of this port within the service. This must be a DNS_LABEL.All ports within a ServiceSpec must have unique names. When consideringthe endpoints for a Service, this must match the 'name' field in theEndpointPort.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "port": schema.Int64Attribute{
- Description: "The port that will be exposed by this service.",
- MarkdownDescription: "The port that will be exposed by this service.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "protocol": schema.StringAttribute{
- Description: "The IP protocol for this port. Supports 'TCP', 'UDP', and 'SCTP'.Default is TCP.",
- MarkdownDescription: "The IP protocol for this port. Supports 'TCP', 'UDP', and 'SCTP'.Default is TCP.",
- Required: false,
- Optional: true,
- Computed: false,
- Validators: []validator.String{
- stringvalidator.OneOf("TCP", "UDP", "SCTP"),
- },
- },
-
- "target_port": schema.StringAttribute{
- Description: "Number or name of the port to access on the pods targeted by the service.Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.- If this is a string, it will be looked up as a named port in the target Pod's container ports.- If this is not specified, the value of the 'port' field is used (an identity map).This field is ignored for services with clusterIP=None, and should beomitted or set equal to the 'port' field.More info: https://kubernetes.io/docs/concepts/services-networking/service/#defining-a-service",
- MarkdownDescription: "Number or name of the port to access on the pods targeted by the service.Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.- If this is a string, it will be looked up as a named port in the target Pod's container ports.- If this is not specified, the value of the 'port' field is used (an identity map).This field is ignored for services with clusterIP=None, and should beomitted or set equal to the 'port' field.More info: https://kubernetes.io/docs/concepts/services-networking/service/#defining-a-service",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "service_ref_declarations": schema.ListNestedAttribute{
- Description: "Used to declare the service reference of the current component.",
- MarkdownDescription: "Used to declare the service reference of the current component.",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "name": schema.StringAttribute{
- Description: "Specifies the name of the ServiceRefDeclaration.",
- MarkdownDescription: "Specifies the name of the ServiceRefDeclaration.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "optional": schema.BoolAttribute{
- Description: "Specifies whether the service reference can be optional.For an optional service-ref, the component can still be created even if the service-ref is not provided.",
- MarkdownDescription: "Specifies whether the service reference can be optional.For an optional service-ref, the component can still be created even if the service-ref is not provided.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "service_ref_declaration_specs": schema.ListNestedAttribute{
- Description: "Defines a list of constraints and requirements for services that can be bound to this ServiceRefDeclarationupon Cluster creation.Each ServiceRefDeclarationSpec defines a ServiceKind and ServiceVersion,outlining the acceptable service types and versions that are compatible.This flexibility allows a ServiceRefDeclaration to be fulfilled by any one of the provided specs.For example, if it requires an OLTP database, specs for both MySQL and PostgreSQL are listed,either MySQL or PostgreSQL services can be used when binding.",
- MarkdownDescription: "Defines a list of constraints and requirements for services that can be bound to this ServiceRefDeclarationupon Cluster creation.Each ServiceRefDeclarationSpec defines a ServiceKind and ServiceVersion,outlining the acceptable service types and versions that are compatible.This flexibility allows a ServiceRefDeclaration to be fulfilled by any one of the provided specs.For example, if it requires an OLTP database, specs for both MySQL and PostgreSQL are listed,either MySQL or PostgreSQL services can be used when binding.",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "service_kind": schema.StringAttribute{
- Description: "Specifies the type or nature of the service. This should be a well-known application cluster type, such as{mysql, redis, mongodb}.The field is case-insensitive and supports abbreviations for some well-known databases.For instance, both 'zk' and 'zookeeper' are considered as a ZooKeeper cluster, while 'pg', 'postgres', 'postgresql'are all recognized as a PostgreSQL cluster.",
- MarkdownDescription: "Specifies the type or nature of the service. This should be a well-known application cluster type, such as{mysql, redis, mongodb}.The field is case-insensitive and supports abbreviations for some well-known databases.For instance, both 'zk' and 'zookeeper' are considered as a ZooKeeper cluster, while 'pg', 'postgres', 'postgresql'are all recognized as a PostgreSQL cluster.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "service_version": schema.StringAttribute{
- Description: "Defines the service version of the service reference. This is a regular expression that matches a version number pattern.For instance, '^8.0.8$', '8.0.d{1,2}$', '^[v-]*?(d{1,2}.){0,3}d{1,2}$' are all valid patterns.",
- MarkdownDescription: "Defines the service version of the service reference. This is a regular expression that matches a version number pattern.For instance, '^8.0.8$', '8.0.d{1,2}$', '^[v-]*?(d{1,2}.){0,3}d{1,2}$' are all valid patterns.",
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- },
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "stateful_spec": schema.SingleNestedAttribute{
- Description: "Defines spec for 'Stateful' workloads.",
- MarkdownDescription: "Defines spec for 'Stateful' workloads.",
- Attributes: map[string]schema.Attribute{
- "ll_pod_management_policy": schema.StringAttribute{
- Description: "Controls the creation of pods during initial scale up, replacement of pods on nodes, and scaling down.- 'OrderedReady': Creates pods in increasing order (pod-0, then pod-1, etc). The controller waits until each podis ready before continuing. Pods are removed in reverse order when scaling down.- 'Parallel': Creates pods in parallel to match the desired scale without waiting. All pods are deleted at oncewhen scaling down.",
- MarkdownDescription: "Controls the creation of pods during initial scale up, replacement of pods on nodes, and scaling down.- 'OrderedReady': Creates pods in increasing order (pod-0, then pod-1, etc). The controller waits until each podis ready before continuing. Pods are removed in reverse order when scaling down.- 'Parallel': Creates pods in parallel to match the desired scale without waiting. All pods are deleted at oncewhen scaling down.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "ll_update_strategy": schema.SingleNestedAttribute{
- Description: "Specifies the low-level StatefulSetUpdateStrategy to be used when updating Pods in the StatefulSet upon arevision to the Template.'UpdateStrategy' will be ignored if this is provided.",
- MarkdownDescription: "Specifies the low-level StatefulSetUpdateStrategy to be used when updating Pods in the StatefulSet upon arevision to the Template.'UpdateStrategy' will be ignored if this is provided.",
- Attributes: map[string]schema.Attribute{
- "rolling_update": schema.SingleNestedAttribute{
- Description: "RollingUpdate is used to communicate parameters when Type is RollingUpdateStatefulSetStrategyType.",
- MarkdownDescription: "RollingUpdate is used to communicate parameters when Type is RollingUpdateStatefulSetStrategyType.",
- Attributes: map[string]schema.Attribute{
- "max_unavailable": schema.StringAttribute{
- Description: "The maximum number of pods that can be unavailable during the update.Value can be an absolute number (ex: 5) or a percentage of desired pods (ex: 10%).Absolute number is calculated from percentage by rounding up. This can not be 0.Defaults to 1. This field is alpha-level and is only honored by servers that enable theMaxUnavailableStatefulSet feature. The field applies to all pods in the range 0 toReplicas-1. That means if there is any unavailable pod in the range 0 to Replicas-1, itwill be counted towards MaxUnavailable.",
- MarkdownDescription: "The maximum number of pods that can be unavailable during the update.Value can be an absolute number (ex: 5) or a percentage of desired pods (ex: 10%).Absolute number is calculated from percentage by rounding up. This can not be 0.Defaults to 1. This field is alpha-level and is only honored by servers that enable theMaxUnavailableStatefulSet feature. The field applies to all pods in the range 0 toReplicas-1. That means if there is any unavailable pod in the range 0 to Replicas-1, itwill be counted towards MaxUnavailable.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "partition": schema.Int64Attribute{
- Description: "Partition indicates the ordinal at which the StatefulSet should be partitionedfor updates. During a rolling update, all pods from ordinal Replicas-1 toPartition are updated. All pods from ordinal Partition-1 to 0 remain untouched.This is helpful in being able to do a canary based deployment. The default value is 0.",
- MarkdownDescription: "Partition indicates the ordinal at which the StatefulSet should be partitionedfor updates. During a rolling update, all pods from ordinal Replicas-1 toPartition are updated. All pods from ordinal Partition-1 to 0 remain untouched.This is helpful in being able to do a canary based deployment. The default value is 0.",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "type": schema.StringAttribute{
- Description: "Type indicates the type of the StatefulSetUpdateStrategy.Default is RollingUpdate.",
- MarkdownDescription: "Type indicates the type of the StatefulSetUpdateStrategy.Default is RollingUpdate.",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "update_strategy": schema.StringAttribute{
- Description: "Specifies the strategy for updating Pods.For workloadType='Consensus', the update strategy can be one of the following:- 'Serial': Updates Members sequentially to minimize component downtime.- 'BestEffortParallel': Updates Members in parallel to minimize component write downtime. Majority remains onlineat all times.- 'Parallel': Forces parallel updates.",
- MarkdownDescription: "Specifies the strategy for updating Pods.For workloadType='Consensus', the update strategy can be one of the following:- 'Serial': Updates Members sequentially to minimize component downtime.- 'BestEffortParallel': Updates Members in parallel to minimize component write downtime. Majority remains onlineat all times.- 'Parallel': Forces parallel updates.",
- Required: false,
- Optional: true,
- Computed: false,
- Validators: []validator.String{
- stringvalidator.OneOf("Serial", "BestEffortParallel", "Parallel"),
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "stateless_spec": schema.SingleNestedAttribute{
- Description: "Defines spec for 'Stateless' workloads.",
- MarkdownDescription: "Defines spec for 'Stateless' workloads.",
- Attributes: map[string]schema.Attribute{
- "update_strategy": schema.SingleNestedAttribute{
- Description: "Specifies the deployment strategy that will be used to replace existing pods with new ones.",
- MarkdownDescription: "Specifies the deployment strategy that will be used to replace existing pods with new ones.",
- Attributes: map[string]schema.Attribute{
- "rolling_update": schema.SingleNestedAttribute{
- Description: "Rolling update config params. Present only if DeploymentStrategyType =RollingUpdate.---TODO: Update this to follow our convention for oneOf, whatever we decide itto be.",
- MarkdownDescription: "Rolling update config params. Present only if DeploymentStrategyType =RollingUpdate.---TODO: Update this to follow our convention for oneOf, whatever we decide itto be.",
- Attributes: map[string]schema.Attribute{
- "max_surge": schema.StringAttribute{
- Description: "The maximum number of pods that can be scheduled above the desired number ofpods.Value can be an absolute number (ex: 5) or a percentage of desired pods (ex: 10%).This can not be 0 if MaxUnavailable is 0.Absolute number is calculated from percentage by rounding up.Defaults to 25%.Example: when this is set to 30%, the new ReplicaSet can be scaled up immediately whenthe rolling update starts, such that the total number of old and new pods do not exceed130% of desired pods. Once old pods have been killed,new ReplicaSet can be scaled up further, ensuring that total number of pods runningat any time during the update is at most 130% of desired pods.",
- MarkdownDescription: "The maximum number of pods that can be scheduled above the desired number ofpods.Value can be an absolute number (ex: 5) or a percentage of desired pods (ex: 10%).This can not be 0 if MaxUnavailable is 0.Absolute number is calculated from percentage by rounding up.Defaults to 25%.Example: when this is set to 30%, the new ReplicaSet can be scaled up immediately whenthe rolling update starts, such that the total number of old and new pods do not exceed130% of desired pods. Once old pods have been killed,new ReplicaSet can be scaled up further, ensuring that total number of pods runningat any time during the update is at most 130% of desired pods.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "max_unavailable": schema.StringAttribute{
- Description: "The maximum number of pods that can be unavailable during the update.Value can be an absolute number (ex: 5) or a percentage of desired pods (ex: 10%).Absolute number is calculated from percentage by rounding down.This can not be 0 if MaxSurge is 0.Defaults to 25%.Example: when this is set to 30%, the old ReplicaSet can be scaled down to 70% of desired podsimmediately when the rolling update starts. Once new pods are ready, old ReplicaSetcan be scaled down further, followed by scaling up the new ReplicaSet, ensuringthat the total number of pods available at all times during the update is atleast 70% of desired pods.",
- MarkdownDescription: "The maximum number of pods that can be unavailable during the update.Value can be an absolute number (ex: 5) or a percentage of desired pods (ex: 10%).Absolute number is calculated from percentage by rounding down.This can not be 0 if MaxSurge is 0.Defaults to 25%.Example: when this is set to 30%, the old ReplicaSet can be scaled down to 70% of desired podsimmediately when the rolling update starts. Once new pods are ready, old ReplicaSetcan be scaled down further, followed by scaling up the new ReplicaSet, ensuringthat the total number of pods available at all times during the update is atleast 70% of desired pods.",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "type": schema.StringAttribute{
- Description: "Type of deployment. Can be 'Recreate' or 'RollingUpdate'. Default is RollingUpdate.",
- MarkdownDescription: "Type of deployment. Can be 'Recreate' or 'RollingUpdate'. Default is RollingUpdate.",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "switchover_spec": schema.SingleNestedAttribute{
- Description: "Defines command to do switchover.In particular, when workloadType=Replication, the command defined in switchoverSpec will only be executed underthe condition of cluster.componentSpecs[x].SwitchPolicy.type=Noop.",
- MarkdownDescription: "Defines command to do switchover.In particular, when workloadType=Replication, the command defined in switchoverSpec will only be executed underthe condition of cluster.componentSpecs[x].SwitchPolicy.type=Noop.",
- Attributes: map[string]schema.Attribute{
- "with_candidate": schema.SingleNestedAttribute{
- Description: "Represents the action of switching over to a specified candidate primary or leader instance.",
- MarkdownDescription: "Represents the action of switching over to a specified candidate primary or leader instance.",
- Attributes: map[string]schema.Attribute{
- "cmd_executor_config": schema.SingleNestedAttribute{
- Description: "Specifies the switchover command.",
- MarkdownDescription: "Specifies the switchover command.",
- Attributes: map[string]schema.Attribute{
- "args": schema.ListAttribute{
- Description: "Additional parameters used in the execution of the command.",
- MarkdownDescription: "Additional parameters used in the execution of the command.",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "command": schema.ListAttribute{
- Description: "The command to be executed.",
- MarkdownDescription: "The command to be executed.",
- ElementType: types.StringType,
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "env": schema.MapAttribute{
- Description: "A list of environment variables that will be injected into the command execution context.",
- MarkdownDescription: "A list of environment variables that will be injected into the command execution context.",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "image": schema.StringAttribute{
- Description: "Specifies the image used to execute the command.",
- MarkdownDescription: "Specifies the image used to execute the command.",
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "script_spec_selectors": schema.ListNestedAttribute{
- Description: "Used to select the script that need to be referenced.When defined, the scripts defined in scriptSpecs can be referenced within the SwitchoverAction.CmdExecutorConfig.",
- MarkdownDescription: "Used to select the script that need to be referenced.When defined, the scripts defined in scriptSpecs can be referenced within the SwitchoverAction.CmdExecutorConfig.",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "name": schema.StringAttribute{
- Description: "Represents the name of the ScriptSpec referent.",
- MarkdownDescription: "Represents the name of the ScriptSpec referent.",
- Required: true,
- Optional: false,
- Computed: false,
- Validators: []validator.String{
- stringvalidator.LengthAtMost(63),
- stringvalidator.RegexMatches(regexp.MustCompile(`^[a-z0-9]([a-z0-9\.\-]*[a-z0-9])?$`), ""),
- },
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "without_candidate": schema.SingleNestedAttribute{
- Description: "Represents the action of switching over without specifying a candidate primary or leader instance.",
- MarkdownDescription: "Represents the action of switching over without specifying a candidate primary or leader instance.",
- Attributes: map[string]schema.Attribute{
- "cmd_executor_config": schema.SingleNestedAttribute{
- Description: "Specifies the switchover command.",
- MarkdownDescription: "Specifies the switchover command.",
- Attributes: map[string]schema.Attribute{
- "args": schema.ListAttribute{
- Description: "Additional parameters used in the execution of the command.",
- MarkdownDescription: "Additional parameters used in the execution of the command.",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "command": schema.ListAttribute{
- Description: "The command to be executed.",
- MarkdownDescription: "The command to be executed.",
- ElementType: types.StringType,
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "env": schema.MapAttribute{
- Description: "A list of environment variables that will be injected into the command execution context.",
- MarkdownDescription: "A list of environment variables that will be injected into the command execution context.",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "image": schema.StringAttribute{
- Description: "Specifies the image used to execute the command.",
- MarkdownDescription: "Specifies the image used to execute the command.",
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "script_spec_selectors": schema.ListNestedAttribute{
- Description: "Used to select the script that need to be referenced.When defined, the scripts defined in scriptSpecs can be referenced within the SwitchoverAction.CmdExecutorConfig.",
- MarkdownDescription: "Used to select the script that need to be referenced.When defined, the scripts defined in scriptSpecs can be referenced within the SwitchoverAction.CmdExecutorConfig.",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "name": schema.StringAttribute{
- Description: "Represents the name of the ScriptSpec referent.",
- MarkdownDescription: "Represents the name of the ScriptSpec referent.",
- Required: true,
- Optional: false,
- Computed: false,
- Validators: []validator.String{
- stringvalidator.LengthAtMost(63),
- stringvalidator.RegexMatches(regexp.MustCompile(`^[a-z0-9]([a-z0-9\.\-]*[a-z0-9])?$`), ""),
- },
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "system_accounts": schema.SingleNestedAttribute{
- Description: "Defines system accounts needed to manage the component, and the statement to create them.",
- MarkdownDescription: "Defines system accounts needed to manage the component, and the statement to create them.",
- Attributes: map[string]schema.Attribute{
- "accounts": schema.ListNestedAttribute{
- Description: "Defines the configuration settings for system accounts.",
- MarkdownDescription: "Defines the configuration settings for system accounts.",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "name": schema.StringAttribute{
- Description: "The unique identifier of a system account.",
- MarkdownDescription: "The unique identifier of a system account.",
- Required: true,
- Optional: false,
- Computed: false,
- Validators: []validator.String{
- stringvalidator.OneOf("kbadmin", "kbdataprotection", "kbprobe", "kbmonitoring", "kbreplicator"),
- },
- },
-
- "provision_policy": schema.SingleNestedAttribute{
- Description: "Outlines the strategy for creating the account.",
- MarkdownDescription: "Outlines the strategy for creating the account.",
- Attributes: map[string]schema.Attribute{
- "scope": schema.StringAttribute{
- Description: "Defines the scope within which the account is provisioned.",
- MarkdownDescription: "Defines the scope within which the account is provisioned.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "secret_ref": schema.SingleNestedAttribute{
- Description: "The external secret to refer.",
- MarkdownDescription: "The external secret to refer.",
- Attributes: map[string]schema.Attribute{
- "name": schema.StringAttribute{
- Description: "The unique identifier of the secret.",
- MarkdownDescription: "The unique identifier of the secret.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "namespace": schema.StringAttribute{
- Description: "The namespace where the secret is located.",
- MarkdownDescription: "The namespace where the secret is located.",
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "statements": schema.SingleNestedAttribute{
- Description: "The statement to provision an account.",
- MarkdownDescription: "The statement to provision an account.",
- Attributes: map[string]schema.Attribute{
- "creation": schema.StringAttribute{
- Description: "Specifies the statement required to create a new account with the necessary privileges.",
- MarkdownDescription: "Specifies the statement required to create a new account with the necessary privileges.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "deletion": schema.StringAttribute{
- Description: "Defines the statement required to delete an existing account.Typically used in conjunction with the creation statement to delete an account before recreating it.For example, one might use a 'drop user if exists' statement followed by a 'create user' statement to ensure a fresh account.Deprecated: This field is deprecated and the update statement should be used instead.",
- MarkdownDescription: "Defines the statement required to delete an existing account.Typically used in conjunction with the creation statement to delete an account before recreating it.For example, one might use a 'drop user if exists' statement followed by a 'create user' statement to ensure a fresh account.Deprecated: This field is deprecated and the update statement should be used instead.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "update": schema.StringAttribute{
- Description: "Defines the statement required to update the password of an existing account.",
- MarkdownDescription: "Defines the statement required to update the password of an existing account.",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "type": schema.StringAttribute{
- Description: "Specifies the method to provision an account.",
- MarkdownDescription: "Specifies the method to provision an account.",
- Required: true,
- Optional: false,
- Computed: false,
- Validators: []validator.String{
- stringvalidator.OneOf("CreateByStmt", "ReferToExisting"),
- },
- },
- },
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- },
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "cmd_executor_config": schema.SingleNestedAttribute{
- Description: "Configures how to obtain the client SDK and execute statements.",
- MarkdownDescription: "Configures how to obtain the client SDK and execute statements.",
- Attributes: map[string]schema.Attribute{
- "args": schema.ListAttribute{
- Description: "Additional parameters used in the execution of the command.",
- MarkdownDescription: "Additional parameters used in the execution of the command.",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "command": schema.ListAttribute{
- Description: "The command to be executed.",
- MarkdownDescription: "The command to be executed.",
- ElementType: types.StringType,
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "env": schema.MapAttribute{
- Description: "A list of environment variables that will be injected into the command execution context.",
- MarkdownDescription: "A list of environment variables that will be injected into the command execution context.",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "image": schema.StringAttribute{
- Description: "Specifies the image used to execute the command.",
- MarkdownDescription: "Specifies the image used to execute the command.",
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "password_config": schema.SingleNestedAttribute{
- Description: "Defines the pattern used to generate passwords for system accounts.",
- MarkdownDescription: "Defines the pattern used to generate passwords for system accounts.",
- Attributes: map[string]schema.Attribute{
- "length": schema.Int64Attribute{
- Description: "The length of the password.",
- MarkdownDescription: "The length of the password.",
- Required: false,
- Optional: true,
- Computed: false,
- Validators: []validator.Int64{
- int64validator.AtLeast(8),
- int64validator.AtMost(32),
- },
- },
-
- "letter_case": schema.StringAttribute{
- Description: "The case of the letters in the password.",
- MarkdownDescription: "The case of the letters in the password.",
- Required: false,
- Optional: true,
- Computed: false,
- Validators: []validator.String{
- stringvalidator.OneOf("LowerCases", "UpperCases", "MixedCases"),
- },
- },
-
- "num_digits": schema.Int64Attribute{
- Description: "The number of digits in the password.",
- MarkdownDescription: "The number of digits in the password.",
- Required: false,
- Optional: true,
- Computed: false,
- Validators: []validator.Int64{
- int64validator.AtLeast(0),
- int64validator.AtMost(8),
- },
- },
-
- "num_symbols": schema.Int64Attribute{
- Description: "The number of symbols in the password.",
- MarkdownDescription: "The number of symbols in the password.",
- Required: false,
- Optional: true,
- Computed: false,
- Validators: []validator.Int64{
- int64validator.AtLeast(0),
- int64validator.AtMost(8),
- },
- },
-
- "seed": schema.StringAttribute{
- Description: "Seed to generate the account's password.Cannot be updated.",
- MarkdownDescription: "Seed to generate the account's password.Cannot be updated.",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "volume_protection_spec": schema.SingleNestedAttribute{
- Description: "Defines settings to do volume protect.",
- MarkdownDescription: "Defines settings to do volume protect.",
- Attributes: map[string]schema.Attribute{
- "high_watermark": schema.Int64Attribute{
- Description: "The high watermark threshold for volume space usage.If there is any specified volumes who's space usage is over the threshold, the pre-defined 'LOCK' actionwill be triggered to degrade the service to protect volume from space exhaustion, such as to set the instanceas read-only. And after that, if all volumes' space usage drops under the threshold later, the pre-defined'UNLOCK' action will be performed to recover the service normally.",
- MarkdownDescription: "The high watermark threshold for volume space usage.If there is any specified volumes who's space usage is over the threshold, the pre-defined 'LOCK' actionwill be triggered to degrade the service to protect volume from space exhaustion, such as to set the instanceas read-only. And after that, if all volumes' space usage drops under the threshold later, the pre-defined'UNLOCK' action will be performed to recover the service normally.",
- Required: false,
- Optional: true,
- Computed: false,
- Validators: []validator.Int64{
- int64validator.AtLeast(0),
- int64validator.AtMost(100),
- },
- },
-
- "volumes": schema.ListNestedAttribute{
- Description: "The Volumes to be protected.",
- MarkdownDescription: "The Volumes to be protected.",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "high_watermark": schema.Int64Attribute{
- Description: "Defines the high watermark threshold for the volume, it will override the component level threshold.If the value is invalid, it will be ignored and the component level threshold will be used.",
- MarkdownDescription: "Defines the high watermark threshold for the volume, it will override the component level threshold.If the value is invalid, it will be ignored and the component level threshold will be used.",
- Required: false,
- Optional: true,
- Computed: false,
- Validators: []validator.Int64{
- int64validator.AtLeast(0),
- int64validator.AtMost(100),
- },
- },
-
- "name": schema.StringAttribute{
- Description: "The Name of the volume to protect.",
- MarkdownDescription: "The Name of the volume to protect.",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "volume_types": schema.ListNestedAttribute{
- Description: "Used to describe the purpose of the volumes mapping the name of the VolumeMounts in the PodSpec.Container field,such as data volume, log volume, etc. When backing up the volume, the volume can be correctly backed up accordingto the volumeType.For example:- 'name: data, type: data' means that the volume named 'data' is used to store 'data'.- 'name: binlog, type: log' means that the volume named 'binlog' is used to store 'log'.NOTE: When volumeTypes is not defined, the backup function will not be supported, even if a persistent volume hasbeen specified.",
- MarkdownDescription: "Used to describe the purpose of the volumes mapping the name of the VolumeMounts in the PodSpec.Container field,such as data volume, log volume, etc. When backing up the volume, the volume can be correctly backed up accordingto the volumeType.For example:- 'name: data, type: data' means that the volume named 'data' is used to store 'data'.- 'name: binlog, type: log' means that the volume named 'binlog' is used to store 'log'.NOTE: When volumeTypes is not defined, the backup function will not be supported, even if a persistent volume hasbeen specified.",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "name": schema.StringAttribute{
- Description: "Corresponds to the name of the VolumeMounts field in PodSpec.Container.",
- MarkdownDescription: "Corresponds to the name of the VolumeMounts field in PodSpec.Container.",
- Required: true,
- Optional: false,
- Computed: false,
- Validators: []validator.String{
- stringvalidator.RegexMatches(regexp.MustCompile(`^[a-z0-9]([a-z0-9\.\-]*[a-z0-9])?$`), ""),
- },
- },
-
- "type": schema.StringAttribute{
- Description: "Type of data the volume will persistent.",
- MarkdownDescription: "Type of data the volume will persistent.",
- Required: false,
- Optional: true,
- Computed: false,
- Validators: []validator.String{
- stringvalidator.OneOf("data", "log"),
- },
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "workload_type": schema.StringAttribute{
- Description: "Defines the type of the workload.- 'Stateless' describes stateless applications.- 'Stateful' describes common stateful applications.- 'Consensus' describes applications based on consensus protocols, such as raft and paxos.- 'Replication' describes applications based on the primary-secondary data replication protocol.",
- MarkdownDescription: "Defines the type of the workload.- 'Stateless' describes stateless applications.- 'Stateful' describes common stateful applications.- 'Consensus' describes applications based on consensus protocols, such as raft and paxos.- 'Replication' describes applications based on the primary-secondary data replication protocol.",
- Required: true,
- Optional: false,
- Computed: false,
- Validators: []validator.String{
- stringvalidator.OneOf("Stateless", "Stateful", "Consensus", "Replication"),
- },
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "connection_credential": schema.MapAttribute{
- Description: "Connection credential template used for creating a connection credential secret for cluster objects.Built-in objects are:- '$(RANDOM_PASSWD)' random 8 characters.- '$(STRONG_RANDOM_PASSWD)' random 16 characters, with mixed cases, digits and symbols.- '$(UUID)' generate a random UUID v4 string.- '$(UUID_B64)' generate a random UUID v4 BASE64 encoded string.- '$(UUID_STR_B64)' generate a random UUID v4 string then BASE64 encoded.- '$(UUID_HEX)' generate a random UUID v4 HEX representation.- '$(HEADLESS_SVC_FQDN)' headless service FQDN placeholder, value pattern is '$(CLUSTER_NAME)-$(1ST_COMP_NAME)-headless.$(NAMESPACE).svc', where 1ST_COMP_NAME is the 1st component that provide 'ClusterDefinition.spec.componentDefs[].service' attribute;- '$(SVC_FQDN)' service FQDN placeholder, value pattern is '$(CLUSTER_NAME)-$(1ST_COMP_NAME).$(NAMESPACE).svc', where 1ST_COMP_NAME is the 1st component that provide 'ClusterDefinition.spec.componentDefs[].service' attribute;- '$(SVC_PORT_{PORT-NAME})' is ServicePort's port value with specified port name, i.e, a servicePort JSON struct: '{'name': 'mysql', 'targetPort': 'mysqlContainerPort', 'port': 3306}', and '$(SVC_PORT_mysql)' in the connection credential value is 3306.Deprecated since v0.9.This field is maintained for backward compatibility and its use is discouraged.Existing usage should be updated to the current preferred approach to avoid compatibility issues in future releases.",
- MarkdownDescription: "Connection credential template used for creating a connection credential secret for cluster objects.Built-in objects are:- '$(RANDOM_PASSWD)' random 8 characters.- '$(STRONG_RANDOM_PASSWD)' random 16 characters, with mixed cases, digits and symbols.- '$(UUID)' generate a random UUID v4 string.- '$(UUID_B64)' generate a random UUID v4 BASE64 encoded string.- '$(UUID_STR_B64)' generate a random UUID v4 string then BASE64 encoded.- '$(UUID_HEX)' generate a random UUID v4 HEX representation.- '$(HEADLESS_SVC_FQDN)' headless service FQDN placeholder, value pattern is '$(CLUSTER_NAME)-$(1ST_COMP_NAME)-headless.$(NAMESPACE).svc', where 1ST_COMP_NAME is the 1st component that provide 'ClusterDefinition.spec.componentDefs[].service' attribute;- '$(SVC_FQDN)' service FQDN placeholder, value pattern is '$(CLUSTER_NAME)-$(1ST_COMP_NAME).$(NAMESPACE).svc', where 1ST_COMP_NAME is the 1st component that provide 'ClusterDefinition.spec.componentDefs[].service' attribute;- '$(SVC_PORT_{PORT-NAME})' is ServicePort's port value with specified port name, i.e, a servicePort JSON struct: '{'name': 'mysql', 'targetPort': 'mysqlContainerPort', 'port': 3306}', and '$(SVC_PORT_mysql)' in the connection credential value is 3306.Deprecated since v0.9.This field is maintained for backward compatibility and its use is discouraged.Existing usage should be updated to the current preferred approach to avoid compatibility issues in future releases.",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
-
"topologies": schema.ListNestedAttribute{
Description: "Topologies defines all possible topologies within the cluster.",
MarkdownDescription: "Topologies defines all possible topologies within the cluster.",
diff --git a/internal/provider/apps_kubeblocks_io_v1alpha1/apps_kubeblocks_io_cluster_v1alpha1_manifest.go b/internal/provider/apps_kubeblocks_io_v1alpha1/apps_kubeblocks_io_cluster_v1alpha1_manifest.go
index cf81d945a..e2a0ab021 100644
--- a/internal/provider/apps_kubeblocks_io_v1alpha1/apps_kubeblocks_io_cluster_v1alpha1_manifest.go
+++ b/internal/provider/apps_kubeblocks_io_v1alpha1/apps_kubeblocks_io_cluster_v1alpha1_manifest.go
@@ -195,6 +195,8 @@ type AppsKubeblocksIoClusterV1Alpha1ManifestData struct {
} `tfsdk:"match_expressions" json:"matchExpressions,omitempty"`
MatchLabels *map[string]string `tfsdk:"match_labels" json:"matchLabels,omitempty"`
} `tfsdk:"label_selector" json:"labelSelector,omitempty"`
+ MatchLabelKeys *[]string `tfsdk:"match_label_keys" json:"matchLabelKeys,omitempty"`
+ MismatchLabelKeys *[]string `tfsdk:"mismatch_label_keys" json:"mismatchLabelKeys,omitempty"`
NamespaceSelector *struct {
MatchExpressions *[]struct {
Key *string `tfsdk:"key" json:"key,omitempty"`
@@ -217,6 +219,8 @@ type AppsKubeblocksIoClusterV1Alpha1ManifestData struct {
} `tfsdk:"match_expressions" json:"matchExpressions,omitempty"`
MatchLabels *map[string]string `tfsdk:"match_labels" json:"matchLabels,omitempty"`
} `tfsdk:"label_selector" json:"labelSelector,omitempty"`
+ MatchLabelKeys *[]string `tfsdk:"match_label_keys" json:"matchLabelKeys,omitempty"`
+ MismatchLabelKeys *[]string `tfsdk:"mismatch_label_keys" json:"mismatchLabelKeys,omitempty"`
NamespaceSelector *struct {
MatchExpressions *[]struct {
Key *string `tfsdk:"key" json:"key,omitempty"`
@@ -240,6 +244,8 @@ type AppsKubeblocksIoClusterV1Alpha1ManifestData struct {
} `tfsdk:"match_expressions" json:"matchExpressions,omitempty"`
MatchLabels *map[string]string `tfsdk:"match_labels" json:"matchLabels,omitempty"`
} `tfsdk:"label_selector" json:"labelSelector,omitempty"`
+ MatchLabelKeys *[]string `tfsdk:"match_label_keys" json:"matchLabelKeys,omitempty"`
+ MismatchLabelKeys *[]string `tfsdk:"mismatch_label_keys" json:"mismatchLabelKeys,omitempty"`
NamespaceSelector *struct {
MatchExpressions *[]struct {
Key *string `tfsdk:"key" json:"key,omitempty"`
@@ -262,6 +268,8 @@ type AppsKubeblocksIoClusterV1Alpha1ManifestData struct {
} `tfsdk:"match_expressions" json:"matchExpressions,omitempty"`
MatchLabels *map[string]string `tfsdk:"match_labels" json:"matchLabels,omitempty"`
} `tfsdk:"label_selector" json:"labelSelector,omitempty"`
+ MatchLabelKeys *[]string `tfsdk:"match_label_keys" json:"matchLabelKeys,omitempty"`
+ MismatchLabelKeys *[]string `tfsdk:"mismatch_label_keys" json:"mismatchLabelKeys,omitempty"`
NamespaceSelector *struct {
MatchExpressions *[]struct {
Key *string `tfsdk:"key" json:"key,omitempty"`
@@ -308,9 +316,6 @@ type AppsKubeblocksIoClusterV1Alpha1ManifestData struct {
Spec *struct {
AccessModes *map[string]string `tfsdk:"access_modes" json:"accessModes,omitempty"`
Resources *struct {
- Claims *[]struct {
- Name *string `tfsdk:"name" json:"name,omitempty"`
- } `tfsdk:"claims" json:"claims,omitempty"`
Limits *map[string]string `tfsdk:"limits" json:"limits,omitempty"`
Requests *map[string]string `tfsdk:"requests" json:"requests,omitempty"`
} `tfsdk:"resources" json:"resources,omitempty"`
@@ -426,9 +431,6 @@ type AppsKubeblocksIoClusterV1Alpha1ManifestData struct {
Namespace *string `tfsdk:"namespace" json:"namespace,omitempty"`
} `tfsdk:"data_source_ref" json:"dataSourceRef,omitempty"`
Resources *struct {
- Claims *[]struct {
- Name *string `tfsdk:"name" json:"name,omitempty"`
- } `tfsdk:"claims" json:"claims,omitempty"`
Limits *map[string]string `tfsdk:"limits" json:"limits,omitempty"`
Requests *map[string]string `tfsdk:"requests" json:"requests,omitempty"`
} `tfsdk:"resources" json:"resources,omitempty"`
@@ -440,9 +442,10 @@ type AppsKubeblocksIoClusterV1Alpha1ManifestData struct {
} `tfsdk:"match_expressions" json:"matchExpressions,omitempty"`
MatchLabels *map[string]string `tfsdk:"match_labels" json:"matchLabels,omitempty"`
} `tfsdk:"selector" json:"selector,omitempty"`
- StorageClassName *string `tfsdk:"storage_class_name" json:"storageClassName,omitempty"`
- VolumeMode *string `tfsdk:"volume_mode" json:"volumeMode,omitempty"`
- VolumeName *string `tfsdk:"volume_name" json:"volumeName,omitempty"`
+ StorageClassName *string `tfsdk:"storage_class_name" json:"storageClassName,omitempty"`
+ VolumeAttributesClassName *string `tfsdk:"volume_attributes_class_name" json:"volumeAttributesClassName,omitempty"`
+ VolumeMode *string `tfsdk:"volume_mode" json:"volumeMode,omitempty"`
+ VolumeName *string `tfsdk:"volume_name" json:"volumeName,omitempty"`
} `tfsdk:"spec" json:"spec,omitempty"`
} `tfsdk:"volume_claim_template" json:"volumeClaimTemplate,omitempty"`
} `tfsdk:"ephemeral" json:"ephemeral,omitempty"`
@@ -523,6 +526,20 @@ type AppsKubeblocksIoClusterV1Alpha1ManifestData struct {
Projected *struct {
DefaultMode *int64 `tfsdk:"default_mode" json:"defaultMode,omitempty"`
Sources *[]struct {
+ ClusterTrustBundle *struct {
+ LabelSelector *struct {
+ MatchExpressions *[]struct {
+ Key *string `tfsdk:"key" json:"key,omitempty"`
+ Operator *string `tfsdk:"operator" json:"operator,omitempty"`
+ Values *[]string `tfsdk:"values" json:"values,omitempty"`
+ } `tfsdk:"match_expressions" json:"matchExpressions,omitempty"`
+ MatchLabels *map[string]string `tfsdk:"match_labels" json:"matchLabels,omitempty"`
+ } `tfsdk:"label_selector" json:"labelSelector,omitempty"`
+ Name *string `tfsdk:"name" json:"name,omitempty"`
+ Optional *bool `tfsdk:"optional" json:"optional,omitempty"`
+ Path *string `tfsdk:"path" json:"path,omitempty"`
+ SignerName *string `tfsdk:"signer_name" json:"signerName,omitempty"`
+ } `tfsdk:"cluster_trust_bundle" json:"clusterTrustBundle,omitempty"`
ConfigMap *struct {
Items *[]struct {
Key *string `tfsdk:"key" json:"key,omitempty"`
@@ -691,6 +708,8 @@ type AppsKubeblocksIoClusterV1Alpha1ManifestData struct {
} `tfsdk:"match_expressions" json:"matchExpressions,omitempty"`
MatchLabels *map[string]string `tfsdk:"match_labels" json:"matchLabels,omitempty"`
} `tfsdk:"label_selector" json:"labelSelector,omitempty"`
+ MatchLabelKeys *[]string `tfsdk:"match_label_keys" json:"matchLabelKeys,omitempty"`
+ MismatchLabelKeys *[]string `tfsdk:"mismatch_label_keys" json:"mismatchLabelKeys,omitempty"`
NamespaceSelector *struct {
MatchExpressions *[]struct {
Key *string `tfsdk:"key" json:"key,omitempty"`
@@ -713,6 +732,8 @@ type AppsKubeblocksIoClusterV1Alpha1ManifestData struct {
} `tfsdk:"match_expressions" json:"matchExpressions,omitempty"`
MatchLabels *map[string]string `tfsdk:"match_labels" json:"matchLabels,omitempty"`
} `tfsdk:"label_selector" json:"labelSelector,omitempty"`
+ MatchLabelKeys *[]string `tfsdk:"match_label_keys" json:"matchLabelKeys,omitempty"`
+ MismatchLabelKeys *[]string `tfsdk:"mismatch_label_keys" json:"mismatchLabelKeys,omitempty"`
NamespaceSelector *struct {
MatchExpressions *[]struct {
Key *string `tfsdk:"key" json:"key,omitempty"`
@@ -736,6 +757,8 @@ type AppsKubeblocksIoClusterV1Alpha1ManifestData struct {
} `tfsdk:"match_expressions" json:"matchExpressions,omitempty"`
MatchLabels *map[string]string `tfsdk:"match_labels" json:"matchLabels,omitempty"`
} `tfsdk:"label_selector" json:"labelSelector,omitempty"`
+ MatchLabelKeys *[]string `tfsdk:"match_label_keys" json:"matchLabelKeys,omitempty"`
+ MismatchLabelKeys *[]string `tfsdk:"mismatch_label_keys" json:"mismatchLabelKeys,omitempty"`
NamespaceSelector *struct {
MatchExpressions *[]struct {
Key *string `tfsdk:"key" json:"key,omitempty"`
@@ -758,6 +781,8 @@ type AppsKubeblocksIoClusterV1Alpha1ManifestData struct {
} `tfsdk:"match_expressions" json:"matchExpressions,omitempty"`
MatchLabels *map[string]string `tfsdk:"match_labels" json:"matchLabels,omitempty"`
} `tfsdk:"label_selector" json:"labelSelector,omitempty"`
+ MatchLabelKeys *[]string `tfsdk:"match_label_keys" json:"matchLabelKeys,omitempty"`
+ MismatchLabelKeys *[]string `tfsdk:"mismatch_label_keys" json:"mismatchLabelKeys,omitempty"`
NamespaceSelector *struct {
MatchExpressions *[]struct {
Key *string `tfsdk:"key" json:"key,omitempty"`
@@ -885,9 +910,6 @@ type AppsKubeblocksIoClusterV1Alpha1ManifestData struct {
Spec *struct {
AccessModes *map[string]string `tfsdk:"access_modes" json:"accessModes,omitempty"`
Resources *struct {
- Claims *[]struct {
- Name *string `tfsdk:"name" json:"name,omitempty"`
- } `tfsdk:"claims" json:"claims,omitempty"`
Limits *map[string]string `tfsdk:"limits" json:"limits,omitempty"`
Requests *map[string]string `tfsdk:"requests" json:"requests,omitempty"`
} `tfsdk:"resources" json:"resources,omitempty"`
@@ -995,9 +1017,6 @@ type AppsKubeblocksIoClusterV1Alpha1ManifestData struct {
Namespace *string `tfsdk:"namespace" json:"namespace,omitempty"`
} `tfsdk:"data_source_ref" json:"dataSourceRef,omitempty"`
Resources *struct {
- Claims *[]struct {
- Name *string `tfsdk:"name" json:"name,omitempty"`
- } `tfsdk:"claims" json:"claims,omitempty"`
Limits *map[string]string `tfsdk:"limits" json:"limits,omitempty"`
Requests *map[string]string `tfsdk:"requests" json:"requests,omitempty"`
} `tfsdk:"resources" json:"resources,omitempty"`
@@ -1009,9 +1028,10 @@ type AppsKubeblocksIoClusterV1Alpha1ManifestData struct {
} `tfsdk:"match_expressions" json:"matchExpressions,omitempty"`
MatchLabels *map[string]string `tfsdk:"match_labels" json:"matchLabels,omitempty"`
} `tfsdk:"selector" json:"selector,omitempty"`
- StorageClassName *string `tfsdk:"storage_class_name" json:"storageClassName,omitempty"`
- VolumeMode *string `tfsdk:"volume_mode" json:"volumeMode,omitempty"`
- VolumeName *string `tfsdk:"volume_name" json:"volumeName,omitempty"`
+ StorageClassName *string `tfsdk:"storage_class_name" json:"storageClassName,omitempty"`
+ VolumeAttributesClassName *string `tfsdk:"volume_attributes_class_name" json:"volumeAttributesClassName,omitempty"`
+ VolumeMode *string `tfsdk:"volume_mode" json:"volumeMode,omitempty"`
+ VolumeName *string `tfsdk:"volume_name" json:"volumeName,omitempty"`
} `tfsdk:"spec" json:"spec,omitempty"`
} `tfsdk:"volume_claim_template" json:"volumeClaimTemplate,omitempty"`
} `tfsdk:"ephemeral" json:"ephemeral,omitempty"`
@@ -1092,6 +1112,20 @@ type AppsKubeblocksIoClusterV1Alpha1ManifestData struct {
Projected *struct {
DefaultMode *int64 `tfsdk:"default_mode" json:"defaultMode,omitempty"`
Sources *[]struct {
+ ClusterTrustBundle *struct {
+ LabelSelector *struct {
+ MatchExpressions *[]struct {
+ Key *string `tfsdk:"key" json:"key,omitempty"`
+ Operator *string `tfsdk:"operator" json:"operator,omitempty"`
+ Values *[]string `tfsdk:"values" json:"values,omitempty"`
+ } `tfsdk:"match_expressions" json:"matchExpressions,omitempty"`
+ MatchLabels *map[string]string `tfsdk:"match_labels" json:"matchLabels,omitempty"`
+ } `tfsdk:"label_selector" json:"labelSelector,omitempty"`
+ Name *string `tfsdk:"name" json:"name,omitempty"`
+ Optional *bool `tfsdk:"optional" json:"optional,omitempty"`
+ Path *string `tfsdk:"path" json:"path,omitempty"`
+ SignerName *string `tfsdk:"signer_name" json:"signerName,omitempty"`
+ } `tfsdk:"cluster_trust_bundle" json:"clusterTrustBundle,omitempty"`
ConfigMap *struct {
Items *[]struct {
Key *string `tfsdk:"key" json:"key,omitempty"`
@@ -1247,6 +1281,8 @@ type AppsKubeblocksIoClusterV1Alpha1ManifestData struct {
} `tfsdk:"match_expressions" json:"matchExpressions,omitempty"`
MatchLabels *map[string]string `tfsdk:"match_labels" json:"matchLabels,omitempty"`
} `tfsdk:"label_selector" json:"labelSelector,omitempty"`
+ MatchLabelKeys *[]string `tfsdk:"match_label_keys" json:"matchLabelKeys,omitempty"`
+ MismatchLabelKeys *[]string `tfsdk:"mismatch_label_keys" json:"mismatchLabelKeys,omitempty"`
NamespaceSelector *struct {
MatchExpressions *[]struct {
Key *string `tfsdk:"key" json:"key,omitempty"`
@@ -1269,6 +1305,8 @@ type AppsKubeblocksIoClusterV1Alpha1ManifestData struct {
} `tfsdk:"match_expressions" json:"matchExpressions,omitempty"`
MatchLabels *map[string]string `tfsdk:"match_labels" json:"matchLabels,omitempty"`
} `tfsdk:"label_selector" json:"labelSelector,omitempty"`
+ MatchLabelKeys *[]string `tfsdk:"match_label_keys" json:"matchLabelKeys,omitempty"`
+ MismatchLabelKeys *[]string `tfsdk:"mismatch_label_keys" json:"mismatchLabelKeys,omitempty"`
NamespaceSelector *struct {
MatchExpressions *[]struct {
Key *string `tfsdk:"key" json:"key,omitempty"`
@@ -1292,6 +1330,8 @@ type AppsKubeblocksIoClusterV1Alpha1ManifestData struct {
} `tfsdk:"match_expressions" json:"matchExpressions,omitempty"`
MatchLabels *map[string]string `tfsdk:"match_labels" json:"matchLabels,omitempty"`
} `tfsdk:"label_selector" json:"labelSelector,omitempty"`
+ MatchLabelKeys *[]string `tfsdk:"match_label_keys" json:"matchLabelKeys,omitempty"`
+ MismatchLabelKeys *[]string `tfsdk:"mismatch_label_keys" json:"mismatchLabelKeys,omitempty"`
NamespaceSelector *struct {
MatchExpressions *[]struct {
Key *string `tfsdk:"key" json:"key,omitempty"`
@@ -1314,6 +1354,8 @@ type AppsKubeblocksIoClusterV1Alpha1ManifestData struct {
} `tfsdk:"match_expressions" json:"matchExpressions,omitempty"`
MatchLabels *map[string]string `tfsdk:"match_labels" json:"matchLabels,omitempty"`
} `tfsdk:"label_selector" json:"labelSelector,omitempty"`
+ MatchLabelKeys *[]string `tfsdk:"match_label_keys" json:"matchLabelKeys,omitempty"`
+ MismatchLabelKeys *[]string `tfsdk:"mismatch_label_keys" json:"mismatchLabelKeys,omitempty"`
NamespaceSelector *struct {
MatchExpressions *[]struct {
Key *string `tfsdk:"key" json:"key,omitempty"`
@@ -1491,6 +1533,8 @@ type AppsKubeblocksIoClusterV1Alpha1ManifestData struct {
} `tfsdk:"match_expressions" json:"matchExpressions,omitempty"`
MatchLabels *map[string]string `tfsdk:"match_labels" json:"matchLabels,omitempty"`
} `tfsdk:"label_selector" json:"labelSelector,omitempty"`
+ MatchLabelKeys *[]string `tfsdk:"match_label_keys" json:"matchLabelKeys,omitempty"`
+ MismatchLabelKeys *[]string `tfsdk:"mismatch_label_keys" json:"mismatchLabelKeys,omitempty"`
NamespaceSelector *struct {
MatchExpressions *[]struct {
Key *string `tfsdk:"key" json:"key,omitempty"`
@@ -1513,6 +1557,8 @@ type AppsKubeblocksIoClusterV1Alpha1ManifestData struct {
} `tfsdk:"match_expressions" json:"matchExpressions,omitempty"`
MatchLabels *map[string]string `tfsdk:"match_labels" json:"matchLabels,omitempty"`
} `tfsdk:"label_selector" json:"labelSelector,omitempty"`
+ MatchLabelKeys *[]string `tfsdk:"match_label_keys" json:"matchLabelKeys,omitempty"`
+ MismatchLabelKeys *[]string `tfsdk:"mismatch_label_keys" json:"mismatchLabelKeys,omitempty"`
NamespaceSelector *struct {
MatchExpressions *[]struct {
Key *string `tfsdk:"key" json:"key,omitempty"`
@@ -1536,6 +1582,8 @@ type AppsKubeblocksIoClusterV1Alpha1ManifestData struct {
} `tfsdk:"match_expressions" json:"matchExpressions,omitempty"`
MatchLabels *map[string]string `tfsdk:"match_labels" json:"matchLabels,omitempty"`
} `tfsdk:"label_selector" json:"labelSelector,omitempty"`
+ MatchLabelKeys *[]string `tfsdk:"match_label_keys" json:"matchLabelKeys,omitempty"`
+ MismatchLabelKeys *[]string `tfsdk:"mismatch_label_keys" json:"mismatchLabelKeys,omitempty"`
NamespaceSelector *struct {
MatchExpressions *[]struct {
Key *string `tfsdk:"key" json:"key,omitempty"`
@@ -1558,6 +1606,8 @@ type AppsKubeblocksIoClusterV1Alpha1ManifestData struct {
} `tfsdk:"match_expressions" json:"matchExpressions,omitempty"`
MatchLabels *map[string]string `tfsdk:"match_labels" json:"matchLabels,omitempty"`
} `tfsdk:"label_selector" json:"labelSelector,omitempty"`
+ MatchLabelKeys *[]string `tfsdk:"match_label_keys" json:"matchLabelKeys,omitempty"`
+ MismatchLabelKeys *[]string `tfsdk:"mismatch_label_keys" json:"mismatchLabelKeys,omitempty"`
NamespaceSelector *struct {
MatchExpressions *[]struct {
Key *string `tfsdk:"key" json:"key,omitempty"`
@@ -1604,9 +1654,6 @@ type AppsKubeblocksIoClusterV1Alpha1ManifestData struct {
Spec *struct {
AccessModes *map[string]string `tfsdk:"access_modes" json:"accessModes,omitempty"`
Resources *struct {
- Claims *[]struct {
- Name *string `tfsdk:"name" json:"name,omitempty"`
- } `tfsdk:"claims" json:"claims,omitempty"`
Limits *map[string]string `tfsdk:"limits" json:"limits,omitempty"`
Requests *map[string]string `tfsdk:"requests" json:"requests,omitempty"`
} `tfsdk:"resources" json:"resources,omitempty"`
@@ -1722,9 +1769,6 @@ type AppsKubeblocksIoClusterV1Alpha1ManifestData struct {
Namespace *string `tfsdk:"namespace" json:"namespace,omitempty"`
} `tfsdk:"data_source_ref" json:"dataSourceRef,omitempty"`
Resources *struct {
- Claims *[]struct {
- Name *string `tfsdk:"name" json:"name,omitempty"`
- } `tfsdk:"claims" json:"claims,omitempty"`
Limits *map[string]string `tfsdk:"limits" json:"limits,omitempty"`
Requests *map[string]string `tfsdk:"requests" json:"requests,omitempty"`
} `tfsdk:"resources" json:"resources,omitempty"`
@@ -1736,9 +1780,10 @@ type AppsKubeblocksIoClusterV1Alpha1ManifestData struct {
} `tfsdk:"match_expressions" json:"matchExpressions,omitempty"`
MatchLabels *map[string]string `tfsdk:"match_labels" json:"matchLabels,omitempty"`
} `tfsdk:"selector" json:"selector,omitempty"`
- StorageClassName *string `tfsdk:"storage_class_name" json:"storageClassName,omitempty"`
- VolumeMode *string `tfsdk:"volume_mode" json:"volumeMode,omitempty"`
- VolumeName *string `tfsdk:"volume_name" json:"volumeName,omitempty"`
+ StorageClassName *string `tfsdk:"storage_class_name" json:"storageClassName,omitempty"`
+ VolumeAttributesClassName *string `tfsdk:"volume_attributes_class_name" json:"volumeAttributesClassName,omitempty"`
+ VolumeMode *string `tfsdk:"volume_mode" json:"volumeMode,omitempty"`
+ VolumeName *string `tfsdk:"volume_name" json:"volumeName,omitempty"`
} `tfsdk:"spec" json:"spec,omitempty"`
} `tfsdk:"volume_claim_template" json:"volumeClaimTemplate,omitempty"`
} `tfsdk:"ephemeral" json:"ephemeral,omitempty"`
@@ -1819,6 +1864,20 @@ type AppsKubeblocksIoClusterV1Alpha1ManifestData struct {
Projected *struct {
DefaultMode *int64 `tfsdk:"default_mode" json:"defaultMode,omitempty"`
Sources *[]struct {
+ ClusterTrustBundle *struct {
+ LabelSelector *struct {
+ MatchExpressions *[]struct {
+ Key *string `tfsdk:"key" json:"key,omitempty"`
+ Operator *string `tfsdk:"operator" json:"operator,omitempty"`
+ Values *[]string `tfsdk:"values" json:"values,omitempty"`
+ } `tfsdk:"match_expressions" json:"matchExpressions,omitempty"`
+ MatchLabels *map[string]string `tfsdk:"match_labels" json:"matchLabels,omitempty"`
+ } `tfsdk:"label_selector" json:"labelSelector,omitempty"`
+ Name *string `tfsdk:"name" json:"name,omitempty"`
+ Optional *bool `tfsdk:"optional" json:"optional,omitempty"`
+ Path *string `tfsdk:"path" json:"path,omitempty"`
+ SignerName *string `tfsdk:"signer_name" json:"signerName,omitempty"`
+ } `tfsdk:"cluster_trust_bundle" json:"clusterTrustBundle,omitempty"`
ConfigMap *struct {
Items *[]struct {
Key *string `tfsdk:"key" json:"key,omitempty"`
@@ -1987,6 +2046,8 @@ type AppsKubeblocksIoClusterV1Alpha1ManifestData struct {
} `tfsdk:"match_expressions" json:"matchExpressions,omitempty"`
MatchLabels *map[string]string `tfsdk:"match_labels" json:"matchLabels,omitempty"`
} `tfsdk:"label_selector" json:"labelSelector,omitempty"`
+ MatchLabelKeys *[]string `tfsdk:"match_label_keys" json:"matchLabelKeys,omitempty"`
+ MismatchLabelKeys *[]string `tfsdk:"mismatch_label_keys" json:"mismatchLabelKeys,omitempty"`
NamespaceSelector *struct {
MatchExpressions *[]struct {
Key *string `tfsdk:"key" json:"key,omitempty"`
@@ -2009,6 +2070,8 @@ type AppsKubeblocksIoClusterV1Alpha1ManifestData struct {
} `tfsdk:"match_expressions" json:"matchExpressions,omitempty"`
MatchLabels *map[string]string `tfsdk:"match_labels" json:"matchLabels,omitempty"`
} `tfsdk:"label_selector" json:"labelSelector,omitempty"`
+ MatchLabelKeys *[]string `tfsdk:"match_label_keys" json:"matchLabelKeys,omitempty"`
+ MismatchLabelKeys *[]string `tfsdk:"mismatch_label_keys" json:"mismatchLabelKeys,omitempty"`
NamespaceSelector *struct {
MatchExpressions *[]struct {
Key *string `tfsdk:"key" json:"key,omitempty"`
@@ -2032,6 +2095,8 @@ type AppsKubeblocksIoClusterV1Alpha1ManifestData struct {
} `tfsdk:"match_expressions" json:"matchExpressions,omitempty"`
MatchLabels *map[string]string `tfsdk:"match_labels" json:"matchLabels,omitempty"`
} `tfsdk:"label_selector" json:"labelSelector,omitempty"`
+ MatchLabelKeys *[]string `tfsdk:"match_label_keys" json:"matchLabelKeys,omitempty"`
+ MismatchLabelKeys *[]string `tfsdk:"mismatch_label_keys" json:"mismatchLabelKeys,omitempty"`
NamespaceSelector *struct {
MatchExpressions *[]struct {
Key *string `tfsdk:"key" json:"key,omitempty"`
@@ -2054,6 +2119,8 @@ type AppsKubeblocksIoClusterV1Alpha1ManifestData struct {
} `tfsdk:"match_expressions" json:"matchExpressions,omitempty"`
MatchLabels *map[string]string `tfsdk:"match_labels" json:"matchLabels,omitempty"`
} `tfsdk:"label_selector" json:"labelSelector,omitempty"`
+ MatchLabelKeys *[]string `tfsdk:"match_label_keys" json:"matchLabelKeys,omitempty"`
+ MismatchLabelKeys *[]string `tfsdk:"mismatch_label_keys" json:"mismatchLabelKeys,omitempty"`
NamespaceSelector *struct {
MatchExpressions *[]struct {
Key *string `tfsdk:"key" json:"key,omitempty"`
@@ -2181,9 +2248,6 @@ type AppsKubeblocksIoClusterV1Alpha1ManifestData struct {
Spec *struct {
AccessModes *map[string]string `tfsdk:"access_modes" json:"accessModes,omitempty"`
Resources *struct {
- Claims *[]struct {
- Name *string `tfsdk:"name" json:"name,omitempty"`
- } `tfsdk:"claims" json:"claims,omitempty"`
Limits *map[string]string `tfsdk:"limits" json:"limits,omitempty"`
Requests *map[string]string `tfsdk:"requests" json:"requests,omitempty"`
} `tfsdk:"resources" json:"resources,omitempty"`
@@ -2291,9 +2355,6 @@ type AppsKubeblocksIoClusterV1Alpha1ManifestData struct {
Namespace *string `tfsdk:"namespace" json:"namespace,omitempty"`
} `tfsdk:"data_source_ref" json:"dataSourceRef,omitempty"`
Resources *struct {
- Claims *[]struct {
- Name *string `tfsdk:"name" json:"name,omitempty"`
- } `tfsdk:"claims" json:"claims,omitempty"`
Limits *map[string]string `tfsdk:"limits" json:"limits,omitempty"`
Requests *map[string]string `tfsdk:"requests" json:"requests,omitempty"`
} `tfsdk:"resources" json:"resources,omitempty"`
@@ -2305,9 +2366,10 @@ type AppsKubeblocksIoClusterV1Alpha1ManifestData struct {
} `tfsdk:"match_expressions" json:"matchExpressions,omitempty"`
MatchLabels *map[string]string `tfsdk:"match_labels" json:"matchLabels,omitempty"`
} `tfsdk:"selector" json:"selector,omitempty"`
- StorageClassName *string `tfsdk:"storage_class_name" json:"storageClassName,omitempty"`
- VolumeMode *string `tfsdk:"volume_mode" json:"volumeMode,omitempty"`
- VolumeName *string `tfsdk:"volume_name" json:"volumeName,omitempty"`
+ StorageClassName *string `tfsdk:"storage_class_name" json:"storageClassName,omitempty"`
+ VolumeAttributesClassName *string `tfsdk:"volume_attributes_class_name" json:"volumeAttributesClassName,omitempty"`
+ VolumeMode *string `tfsdk:"volume_mode" json:"volumeMode,omitempty"`
+ VolumeName *string `tfsdk:"volume_name" json:"volumeName,omitempty"`
} `tfsdk:"spec" json:"spec,omitempty"`
} `tfsdk:"volume_claim_template" json:"volumeClaimTemplate,omitempty"`
} `tfsdk:"ephemeral" json:"ephemeral,omitempty"`
@@ -2388,6 +2450,20 @@ type AppsKubeblocksIoClusterV1Alpha1ManifestData struct {
Projected *struct {
DefaultMode *int64 `tfsdk:"default_mode" json:"defaultMode,omitempty"`
Sources *[]struct {
+ ClusterTrustBundle *struct {
+ LabelSelector *struct {
+ MatchExpressions *[]struct {
+ Key *string `tfsdk:"key" json:"key,omitempty"`
+ Operator *string `tfsdk:"operator" json:"operator,omitempty"`
+ Values *[]string `tfsdk:"values" json:"values,omitempty"`
+ } `tfsdk:"match_expressions" json:"matchExpressions,omitempty"`
+ MatchLabels *map[string]string `tfsdk:"match_labels" json:"matchLabels,omitempty"`
+ } `tfsdk:"label_selector" json:"labelSelector,omitempty"`
+ Name *string `tfsdk:"name" json:"name,omitempty"`
+ Optional *bool `tfsdk:"optional" json:"optional,omitempty"`
+ Path *string `tfsdk:"path" json:"path,omitempty"`
+ SignerName *string `tfsdk:"signer_name" json:"signerName,omitempty"`
+ } `tfsdk:"cluster_trust_bundle" json:"clusterTrustBundle,omitempty"`
ConfigMap *struct {
Items *[]struct {
Key *string `tfsdk:"key" json:"key,omitempty"`
@@ -3564,8 +3640,8 @@ func (r *AppsKubeblocksIoClusterV1Alpha1Manifest) Schema(_ context.Context, _ da
MarkdownDescription: "Required. A pod affinity term, associated with the corresponding weight.",
Attributes: map[string]schema.Attribute{
"label_selector": schema.SingleNestedAttribute{
- Description: "A label query over a set of resources, in this case pods.",
- MarkdownDescription: "A label query over a set of resources, in this case pods.",
+ Description: "A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods.",
+ MarkdownDescription: "A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods.",
Attributes: map[string]schema.Attribute{
"match_expressions": schema.ListNestedAttribute{
Description: "matchExpressions is a list of label selector requirements. The requirements are ANDed.",
@@ -3617,6 +3693,24 @@ func (r *AppsKubeblocksIoClusterV1Alpha1Manifest) Schema(_ context.Context, _ da
Computed: false,
},
+ "match_label_keys": schema.ListAttribute{
+ Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "mismatch_label_keys": schema.ListAttribute{
+ Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
"namespace_selector": schema.SingleNestedAttribute{
Description: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.",
MarkdownDescription: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.",
@@ -3713,8 +3807,8 @@ func (r *AppsKubeblocksIoClusterV1Alpha1Manifest) Schema(_ context.Context, _ da
NestedObject: schema.NestedAttributeObject{
Attributes: map[string]schema.Attribute{
"label_selector": schema.SingleNestedAttribute{
- Description: "A label query over a set of resources, in this case pods.",
- MarkdownDescription: "A label query over a set of resources, in this case pods.",
+ Description: "A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods.",
+ MarkdownDescription: "A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods.",
Attributes: map[string]schema.Attribute{
"match_expressions": schema.ListNestedAttribute{
Description: "matchExpressions is a list of label selector requirements. The requirements are ANDed.",
@@ -3766,6 +3860,24 @@ func (r *AppsKubeblocksIoClusterV1Alpha1Manifest) Schema(_ context.Context, _ da
Computed: false,
},
+ "match_label_keys": schema.ListAttribute{
+ Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "mismatch_label_keys": schema.ListAttribute{
+ Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
"namespace_selector": schema.SingleNestedAttribute{
Description: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.",
MarkdownDescription: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.",
@@ -3862,8 +3974,8 @@ func (r *AppsKubeblocksIoClusterV1Alpha1Manifest) Schema(_ context.Context, _ da
MarkdownDescription: "Required. A pod affinity term, associated with the corresponding weight.",
Attributes: map[string]schema.Attribute{
"label_selector": schema.SingleNestedAttribute{
- Description: "A label query over a set of resources, in this case pods.",
- MarkdownDescription: "A label query over a set of resources, in this case pods.",
+ Description: "A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods.",
+ MarkdownDescription: "A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods.",
Attributes: map[string]schema.Attribute{
"match_expressions": schema.ListNestedAttribute{
Description: "matchExpressions is a list of label selector requirements. The requirements are ANDed.",
@@ -3915,6 +4027,24 @@ func (r *AppsKubeblocksIoClusterV1Alpha1Manifest) Schema(_ context.Context, _ da
Computed: false,
},
+ "match_label_keys": schema.ListAttribute{
+ Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "mismatch_label_keys": schema.ListAttribute{
+ Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
"namespace_selector": schema.SingleNestedAttribute{
Description: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.",
MarkdownDescription: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.",
@@ -4011,8 +4141,8 @@ func (r *AppsKubeblocksIoClusterV1Alpha1Manifest) Schema(_ context.Context, _ da
NestedObject: schema.NestedAttributeObject{
Attributes: map[string]schema.Attribute{
"label_selector": schema.SingleNestedAttribute{
- Description: "A label query over a set of resources, in this case pods.",
- MarkdownDescription: "A label query over a set of resources, in this case pods.",
+ Description: "A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods.",
+ MarkdownDescription: "A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods.",
Attributes: map[string]schema.Attribute{
"match_expressions": schema.ListNestedAttribute{
Description: "matchExpressions is a list of label selector requirements. The requirements are ANDed.",
@@ -4064,6 +4194,24 @@ func (r *AppsKubeblocksIoClusterV1Alpha1Manifest) Schema(_ context.Context, _ da
Computed: false,
},
+ "match_label_keys": schema.ListAttribute{
+ Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "mismatch_label_keys": schema.ListAttribute{
+ Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
"namespace_selector": schema.SingleNestedAttribute{
Description: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.",
MarkdownDescription: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.",
@@ -4384,25 +4532,6 @@ func (r *AppsKubeblocksIoClusterV1Alpha1Manifest) Schema(_ context.Context, _ da
Description: "Represents the minimum resources the volume should have.If the RecoverVolumeExpansionFailure feature is enabled, users are allowed to specify resource requirements thatare lower than the previous value but must still be higher than the capacity recorded in the status field of the claim.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources.",
MarkdownDescription: "Represents the minimum resources the volume should have.If the RecoverVolumeExpansionFailure feature is enabled, users are allowed to specify resource requirements thatare lower than the previous value but must still be higher than the capacity recorded in the status field of the claim.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources.",
Attributes: map[string]schema.Attribute{
- "claims": schema.ListNestedAttribute{
- Description: "Claims lists the names of resources, defined in spec.resourceClaims,that are used by this container.This is an alpha field and requires enabling theDynamicResourceAllocation feature gate.This field is immutable. It can only be set for containers.",
- MarkdownDescription: "Claims lists the names of resources, defined in spec.resourceClaims,that are used by this container.This is an alpha field and requires enabling theDynamicResourceAllocation feature gate.This field is immutable. It can only be set for containers.",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "name": schema.StringAttribute{
- Description: "Name must match the name of one entry in pod.spec.resourceClaims ofthe Pod where this field is used. It makes that resource availableinside a container.",
- MarkdownDescription: "Name must match the name of one entry in pod.spec.resourceClaims ofthe Pod where this field is used. It makes that resource availableinside a container.",
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
"limits": schema.MapAttribute{
Description: "Limits describes the maximum amount of compute resources allowed.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/",
MarkdownDescription: "Limits describes the maximum amount of compute resources allowed.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/",
@@ -5170,25 +5299,6 @@ func (r *AppsKubeblocksIoClusterV1Alpha1Manifest) Schema(_ context.Context, _ da
Description: "resources represents the minimum resources the volume should have.If RecoverVolumeExpansionFailure feature is enabled users are allowed to specify resource requirementsthat are lower than previous value but must still be higher than capacity recorded in thestatus field of the claim.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources",
MarkdownDescription: "resources represents the minimum resources the volume should have.If RecoverVolumeExpansionFailure feature is enabled users are allowed to specify resource requirementsthat are lower than previous value but must still be higher than capacity recorded in thestatus field of the claim.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources",
Attributes: map[string]schema.Attribute{
- "claims": schema.ListNestedAttribute{
- Description: "Claims lists the names of resources, defined in spec.resourceClaims,that are used by this container.This is an alpha field and requires enabling theDynamicResourceAllocation feature gate.This field is immutable. It can only be set for containers.",
- MarkdownDescription: "Claims lists the names of resources, defined in spec.resourceClaims,that are used by this container.This is an alpha field and requires enabling theDynamicResourceAllocation feature gate.This field is immutable. It can only be set for containers.",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "name": schema.StringAttribute{
- Description: "Name must match the name of one entry in pod.spec.resourceClaims ofthe Pod where this field is used. It makes that resource availableinside a container.",
- MarkdownDescription: "Name must match the name of one entry in pod.spec.resourceClaims ofthe Pod where this field is used. It makes that resource availableinside a container.",
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
"limits": schema.MapAttribute{
Description: "Limits describes the maximum amount of compute resources allowed.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/",
MarkdownDescription: "Limits describes the maximum amount of compute resources allowed.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/",
@@ -5274,6 +5384,14 @@ func (r *AppsKubeblocksIoClusterV1Alpha1Manifest) Schema(_ context.Context, _ da
Computed: false,
},
+ "volume_attributes_class_name": schema.StringAttribute{
+ Description: "volumeAttributesClassName may be used to set the VolumeAttributesClass used by this claim.If specified, the CSI driver will create or update the volume with the attributes definedin the corresponding VolumeAttributesClass. This has a different purpose than storageClassName,it can be changed after the claim is created. An empty string value means that no VolumeAttributesClasswill be applied to the claim but it's not allowed to reset this field to empty string once it is set.If unspecified and the PersistentVolumeClaim is unbound, the default VolumeAttributesClasswill be set by the persistentvolume controller if it exists.If the resource referred to by volumeAttributesClass does not exist, this PersistentVolumeClaim will beset to a Pending state, as reflected by the modifyVolumeStatus field, until such as a resourceexists.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#volumeattributesclass(Alpha) Using this field requires the VolumeAttributesClass feature gate to be enabled.",
+ MarkdownDescription: "volumeAttributesClassName may be used to set the VolumeAttributesClass used by this claim.If specified, the CSI driver will create or update the volume with the attributes definedin the corresponding VolumeAttributesClass. This has a different purpose than storageClassName,it can be changed after the claim is created. An empty string value means that no VolumeAttributesClasswill be applied to the claim but it's not allowed to reset this field to empty string once it is set.If unspecified and the PersistentVolumeClaim is unbound, the default VolumeAttributesClasswill be set by the persistentvolume controller if it exists.If the resource referred to by volumeAttributesClass does not exist, this PersistentVolumeClaim will beset to a Pending state, as reflected by the modifyVolumeStatus field, until such as a resourceexists.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#volumeattributesclass(Alpha) Using this field requires the VolumeAttributesClass feature gate to be enabled.",
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
"volume_mode": schema.StringAttribute{
Description: "volumeMode defines what type of volume is required by the claim.Value of Filesystem is implied when not included in claim spec.",
MarkdownDescription: "volumeMode defines what type of volume is required by the claim.Value of Filesystem is implied when not included in claim spec.",
@@ -5820,6 +5938,101 @@ func (r *AppsKubeblocksIoClusterV1Alpha1Manifest) Schema(_ context.Context, _ da
MarkdownDescription: "sources is the list of volume projections",
NestedObject: schema.NestedAttributeObject{
Attributes: map[string]schema.Attribute{
+ "cluster_trust_bundle": schema.SingleNestedAttribute{
+ Description: "ClusterTrustBundle allows a pod to access the '.spec.trustBundle' fieldof ClusterTrustBundle objects in an auto-updating file.Alpha, gated by the ClusterTrustBundleProjection feature gate.ClusterTrustBundle objects can either be selected by name, or by thecombination of signer name and a label selector.Kubelet performs aggressive normalization of the PEM contents writteninto the pod filesystem. Esoteric PEM features such as inter-blockcomments and block headers are stripped. Certificates are deduplicated.The ordering of certificates within the file is arbitrary, and Kubeletmay change the order over time.",
+ MarkdownDescription: "ClusterTrustBundle allows a pod to access the '.spec.trustBundle' fieldof ClusterTrustBundle objects in an auto-updating file.Alpha, gated by the ClusterTrustBundleProjection feature gate.ClusterTrustBundle objects can either be selected by name, or by thecombination of signer name and a label selector.Kubelet performs aggressive normalization of the PEM contents writteninto the pod filesystem. Esoteric PEM features such as inter-blockcomments and block headers are stripped. Certificates are deduplicated.The ordering of certificates within the file is arbitrary, and Kubeletmay change the order over time.",
+ Attributes: map[string]schema.Attribute{
+ "label_selector": schema.SingleNestedAttribute{
+ Description: "Select all ClusterTrustBundles that match this label selector. Only haseffect if signerName is set. Mutually-exclusive with name. If unset,interpreted as 'match nothing'. If set but empty, interpreted as 'matcheverything'.",
+ MarkdownDescription: "Select all ClusterTrustBundles that match this label selector. Only haseffect if signerName is set. Mutually-exclusive with name. If unset,interpreted as 'match nothing'. If set but empty, interpreted as 'matcheverything'.",
+ Attributes: map[string]schema.Attribute{
+ "match_expressions": schema.ListNestedAttribute{
+ Description: "matchExpressions is a list of label selector requirements. The requirements are ANDed.",
+ MarkdownDescription: "matchExpressions is a list of label selector requirements. The requirements are ANDed.",
+ NestedObject: schema.NestedAttributeObject{
+ Attributes: map[string]schema.Attribute{
+ "key": schema.StringAttribute{
+ Description: "key is the label key that the selector applies to.",
+ MarkdownDescription: "key is the label key that the selector applies to.",
+ Required: true,
+ Optional: false,
+ Computed: false,
+ },
+
+ "operator": schema.StringAttribute{
+ Description: "operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.",
+ MarkdownDescription: "operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.",
+ Required: true,
+ Optional: false,
+ Computed: false,
+ },
+
+ "values": schema.ListAttribute{
+ Description: "values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.",
+ MarkdownDescription: "values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+ },
+ },
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "match_labels": schema.MapAttribute{
+ Description: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.",
+ MarkdownDescription: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+ },
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "name": schema.StringAttribute{
+ Description: "Select a single ClusterTrustBundle by object name. Mutually-exclusivewith signerName and labelSelector.",
+ MarkdownDescription: "Select a single ClusterTrustBundle by object name. Mutually-exclusivewith signerName and labelSelector.",
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "optional": schema.BoolAttribute{
+ Description: "If true, don't block pod startup if the referenced ClusterTrustBundle(s)aren't available. If using name, then the named ClusterTrustBundle isallowed not to exist. If using signerName, then the combination ofsignerName and labelSelector is allowed to match zeroClusterTrustBundles.",
+ MarkdownDescription: "If true, don't block pod startup if the referenced ClusterTrustBundle(s)aren't available. If using name, then the named ClusterTrustBundle isallowed not to exist. If using signerName, then the combination ofsignerName and labelSelector is allowed to match zeroClusterTrustBundles.",
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "path": schema.StringAttribute{
+ Description: "Relative path from the volume root to write the bundle.",
+ MarkdownDescription: "Relative path from the volume root to write the bundle.",
+ Required: true,
+ Optional: false,
+ Computed: false,
+ },
+
+ "signer_name": schema.StringAttribute{
+ Description: "Select all ClusterTrustBundles that match this signer name.Mutually-exclusive with name. The contents of all selectedClusterTrustBundles will be unified and deduplicated.",
+ MarkdownDescription: "Select all ClusterTrustBundles that match this signer name.Mutually-exclusive with name. The contents of all selectedClusterTrustBundles will be unified and deduplicated.",
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+ },
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
"config_map": schema.SingleNestedAttribute{
Description: "configMap information about the configMap data to project",
MarkdownDescription: "configMap information about the configMap data to project",
@@ -6887,8 +7100,8 @@ func (r *AppsKubeblocksIoClusterV1Alpha1Manifest) Schema(_ context.Context, _ da
MarkdownDescription: "Required. A pod affinity term, associated with the corresponding weight.",
Attributes: map[string]schema.Attribute{
"label_selector": schema.SingleNestedAttribute{
- Description: "A label query over a set of resources, in this case pods.",
- MarkdownDescription: "A label query over a set of resources, in this case pods.",
+ Description: "A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods.",
+ MarkdownDescription: "A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods.",
Attributes: map[string]schema.Attribute{
"match_expressions": schema.ListNestedAttribute{
Description: "matchExpressions is a list of label selector requirements. The requirements are ANDed.",
@@ -6940,6 +7153,24 @@ func (r *AppsKubeblocksIoClusterV1Alpha1Manifest) Schema(_ context.Context, _ da
Computed: false,
},
+ "match_label_keys": schema.ListAttribute{
+ Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "mismatch_label_keys": schema.ListAttribute{
+ Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
"namespace_selector": schema.SingleNestedAttribute{
Description: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.",
MarkdownDescription: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.",
@@ -7036,8 +7267,8 @@ func (r *AppsKubeblocksIoClusterV1Alpha1Manifest) Schema(_ context.Context, _ da
NestedObject: schema.NestedAttributeObject{
Attributes: map[string]schema.Attribute{
"label_selector": schema.SingleNestedAttribute{
- Description: "A label query over a set of resources, in this case pods.",
- MarkdownDescription: "A label query over a set of resources, in this case pods.",
+ Description: "A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods.",
+ MarkdownDescription: "A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods.",
Attributes: map[string]schema.Attribute{
"match_expressions": schema.ListNestedAttribute{
Description: "matchExpressions is a list of label selector requirements. The requirements are ANDed.",
@@ -7089,6 +7320,24 @@ func (r *AppsKubeblocksIoClusterV1Alpha1Manifest) Schema(_ context.Context, _ da
Computed: false,
},
+ "match_label_keys": schema.ListAttribute{
+ Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "mismatch_label_keys": schema.ListAttribute{
+ Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
"namespace_selector": schema.SingleNestedAttribute{
Description: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.",
MarkdownDescription: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.",
@@ -7185,8 +7434,8 @@ func (r *AppsKubeblocksIoClusterV1Alpha1Manifest) Schema(_ context.Context, _ da
MarkdownDescription: "Required. A pod affinity term, associated with the corresponding weight.",
Attributes: map[string]schema.Attribute{
"label_selector": schema.SingleNestedAttribute{
- Description: "A label query over a set of resources, in this case pods.",
- MarkdownDescription: "A label query over a set of resources, in this case pods.",
+ Description: "A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods.",
+ MarkdownDescription: "A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods.",
Attributes: map[string]schema.Attribute{
"match_expressions": schema.ListNestedAttribute{
Description: "matchExpressions is a list of label selector requirements. The requirements are ANDed.",
@@ -7238,6 +7487,24 @@ func (r *AppsKubeblocksIoClusterV1Alpha1Manifest) Schema(_ context.Context, _ da
Computed: false,
},
+ "match_label_keys": schema.ListAttribute{
+ Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "mismatch_label_keys": schema.ListAttribute{
+ Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
"namespace_selector": schema.SingleNestedAttribute{
Description: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.",
MarkdownDescription: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.",
@@ -7334,8 +7601,8 @@ func (r *AppsKubeblocksIoClusterV1Alpha1Manifest) Schema(_ context.Context, _ da
NestedObject: schema.NestedAttributeObject{
Attributes: map[string]schema.Attribute{
"label_selector": schema.SingleNestedAttribute{
- Description: "A label query over a set of resources, in this case pods.",
- MarkdownDescription: "A label query over a set of resources, in this case pods.",
+ Description: "A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods.",
+ MarkdownDescription: "A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods.",
Attributes: map[string]schema.Attribute{
"match_expressions": schema.ListNestedAttribute{
Description: "matchExpressions is a list of label selector requirements. The requirements are ANDed.",
@@ -7387,6 +7654,24 @@ func (r *AppsKubeblocksIoClusterV1Alpha1Manifest) Schema(_ context.Context, _ da
Computed: false,
},
+ "match_label_keys": schema.ListAttribute{
+ Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "mismatch_label_keys": schema.ListAttribute{
+ Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
"namespace_selector": schema.SingleNestedAttribute{
Description: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.",
MarkdownDescription: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.",
@@ -7873,8 +8158,8 @@ func (r *AppsKubeblocksIoClusterV1Alpha1Manifest) Schema(_ context.Context, _ da
},
"switch_policy": schema.SingleNestedAttribute{
- Description: "Defines the strategy for switchover and failover when workloadType is Replication.Deprecated since v0.9.This field is maintained for backward compatibility and its use is discouraged.Existing usage should be updated to the current preferred approach to avoid compatibility issues in future releases.",
- MarkdownDescription: "Defines the strategy for switchover and failover when workloadType is Replication.Deprecated since v0.9.This field is maintained for backward compatibility and its use is discouraged.Existing usage should be updated to the current preferred approach to avoid compatibility issues in future releases.",
+ Description: "Defines the strategy for switchover and failover.Deprecated since v0.9.This field is maintained for backward compatibility and its use is discouraged.Existing usage should be updated to the current preferred approach to avoid compatibility issues in future releases.",
+ MarkdownDescription: "Defines the strategy for switchover and failover.Deprecated since v0.9.This field is maintained for backward compatibility and its use is discouraged.Existing usage should be updated to the current preferred approach to avoid compatibility issues in future releases.",
Attributes: map[string]schema.Attribute{
"type": schema.StringAttribute{
Description: "Type specifies the type of switch policy to be applied.",
@@ -8307,25 +8592,6 @@ func (r *AppsKubeblocksIoClusterV1Alpha1Manifest) Schema(_ context.Context, _ da
Description: "Represents the minimum resources the volume should have.If the RecoverVolumeExpansionFailure feature is enabled, users are allowed to specify resource requirements thatare lower than the previous value but must still be higher than the capacity recorded in the status field of the claim.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources.",
MarkdownDescription: "Represents the minimum resources the volume should have.If the RecoverVolumeExpansionFailure feature is enabled, users are allowed to specify resource requirements thatare lower than the previous value but must still be higher than the capacity recorded in the status field of the claim.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources.",
Attributes: map[string]schema.Attribute{
- "claims": schema.ListNestedAttribute{
- Description: "Claims lists the names of resources, defined in spec.resourceClaims,that are used by this container.This is an alpha field and requires enabling theDynamicResourceAllocation feature gate.This field is immutable. It can only be set for containers.",
- MarkdownDescription: "Claims lists the names of resources, defined in spec.resourceClaims,that are used by this container.This is an alpha field and requires enabling theDynamicResourceAllocation feature gate.This field is immutable. It can only be set for containers.",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "name": schema.StringAttribute{
- Description: "Name must match the name of one entry in pod.spec.resourceClaims ofthe Pod where this field is used. It makes that resource availableinside a container.",
- MarkdownDescription: "Name must match the name of one entry in pod.spec.resourceClaims ofthe Pod where this field is used. It makes that resource availableinside a container.",
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
"limits": schema.MapAttribute{
Description: "Limits describes the maximum amount of compute resources allowed.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/",
MarkdownDescription: "Limits describes the maximum amount of compute resources allowed.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/",
@@ -9034,25 +9300,6 @@ func (r *AppsKubeblocksIoClusterV1Alpha1Manifest) Schema(_ context.Context, _ da
Description: "resources represents the minimum resources the volume should have.If RecoverVolumeExpansionFailure feature is enabled users are allowed to specify resource requirementsthat are lower than previous value but must still be higher than capacity recorded in thestatus field of the claim.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources",
MarkdownDescription: "resources represents the minimum resources the volume should have.If RecoverVolumeExpansionFailure feature is enabled users are allowed to specify resource requirementsthat are lower than previous value but must still be higher than capacity recorded in thestatus field of the claim.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources",
Attributes: map[string]schema.Attribute{
- "claims": schema.ListNestedAttribute{
- Description: "Claims lists the names of resources, defined in spec.resourceClaims,that are used by this container.This is an alpha field and requires enabling theDynamicResourceAllocation feature gate.This field is immutable. It can only be set for containers.",
- MarkdownDescription: "Claims lists the names of resources, defined in spec.resourceClaims,that are used by this container.This is an alpha field and requires enabling theDynamicResourceAllocation feature gate.This field is immutable. It can only be set for containers.",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "name": schema.StringAttribute{
- Description: "Name must match the name of one entry in pod.spec.resourceClaims ofthe Pod where this field is used. It makes that resource availableinside a container.",
- MarkdownDescription: "Name must match the name of one entry in pod.spec.resourceClaims ofthe Pod where this field is used. It makes that resource availableinside a container.",
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
"limits": schema.MapAttribute{
Description: "Limits describes the maximum amount of compute resources allowed.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/",
MarkdownDescription: "Limits describes the maximum amount of compute resources allowed.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/",
@@ -9138,6 +9385,14 @@ func (r *AppsKubeblocksIoClusterV1Alpha1Manifest) Schema(_ context.Context, _ da
Computed: false,
},
+ "volume_attributes_class_name": schema.StringAttribute{
+ Description: "volumeAttributesClassName may be used to set the VolumeAttributesClass used by this claim.If specified, the CSI driver will create or update the volume with the attributes definedin the corresponding VolumeAttributesClass. This has a different purpose than storageClassName,it can be changed after the claim is created. An empty string value means that no VolumeAttributesClasswill be applied to the claim but it's not allowed to reset this field to empty string once it is set.If unspecified and the PersistentVolumeClaim is unbound, the default VolumeAttributesClasswill be set by the persistentvolume controller if it exists.If the resource referred to by volumeAttributesClass does not exist, this PersistentVolumeClaim will beset to a Pending state, as reflected by the modifyVolumeStatus field, until such as a resourceexists.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#volumeattributesclass(Alpha) Using this field requires the VolumeAttributesClass feature gate to be enabled.",
+ MarkdownDescription: "volumeAttributesClassName may be used to set the VolumeAttributesClass used by this claim.If specified, the CSI driver will create or update the volume with the attributes definedin the corresponding VolumeAttributesClass. This has a different purpose than storageClassName,it can be changed after the claim is created. An empty string value means that no VolumeAttributesClasswill be applied to the claim but it's not allowed to reset this field to empty string once it is set.If unspecified and the PersistentVolumeClaim is unbound, the default VolumeAttributesClasswill be set by the persistentvolume controller if it exists.If the resource referred to by volumeAttributesClass does not exist, this PersistentVolumeClaim will beset to a Pending state, as reflected by the modifyVolumeStatus field, until such as a resourceexists.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#volumeattributesclass(Alpha) Using this field requires the VolumeAttributesClass feature gate to be enabled.",
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
"volume_mode": schema.StringAttribute{
Description: "volumeMode defines what type of volume is required by the claim.Value of Filesystem is implied when not included in claim spec.",
MarkdownDescription: "volumeMode defines what type of volume is required by the claim.Value of Filesystem is implied when not included in claim spec.",
@@ -9684,6 +9939,101 @@ func (r *AppsKubeblocksIoClusterV1Alpha1Manifest) Schema(_ context.Context, _ da
MarkdownDescription: "sources is the list of volume projections",
NestedObject: schema.NestedAttributeObject{
Attributes: map[string]schema.Attribute{
+ "cluster_trust_bundle": schema.SingleNestedAttribute{
+ Description: "ClusterTrustBundle allows a pod to access the '.spec.trustBundle' fieldof ClusterTrustBundle objects in an auto-updating file.Alpha, gated by the ClusterTrustBundleProjection feature gate.ClusterTrustBundle objects can either be selected by name, or by thecombination of signer name and a label selector.Kubelet performs aggressive normalization of the PEM contents writteninto the pod filesystem. Esoteric PEM features such as inter-blockcomments and block headers are stripped. Certificates are deduplicated.The ordering of certificates within the file is arbitrary, and Kubeletmay change the order over time.",
+ MarkdownDescription: "ClusterTrustBundle allows a pod to access the '.spec.trustBundle' fieldof ClusterTrustBundle objects in an auto-updating file.Alpha, gated by the ClusterTrustBundleProjection feature gate.ClusterTrustBundle objects can either be selected by name, or by thecombination of signer name and a label selector.Kubelet performs aggressive normalization of the PEM contents writteninto the pod filesystem. Esoteric PEM features such as inter-blockcomments and block headers are stripped. Certificates are deduplicated.The ordering of certificates within the file is arbitrary, and Kubeletmay change the order over time.",
+ Attributes: map[string]schema.Attribute{
+ "label_selector": schema.SingleNestedAttribute{
+ Description: "Select all ClusterTrustBundles that match this label selector. Only haseffect if signerName is set. Mutually-exclusive with name. If unset,interpreted as 'match nothing'. If set but empty, interpreted as 'matcheverything'.",
+ MarkdownDescription: "Select all ClusterTrustBundles that match this label selector. Only haseffect if signerName is set. Mutually-exclusive with name. If unset,interpreted as 'match nothing'. If set but empty, interpreted as 'matcheverything'.",
+ Attributes: map[string]schema.Attribute{
+ "match_expressions": schema.ListNestedAttribute{
+ Description: "matchExpressions is a list of label selector requirements. The requirements are ANDed.",
+ MarkdownDescription: "matchExpressions is a list of label selector requirements. The requirements are ANDed.",
+ NestedObject: schema.NestedAttributeObject{
+ Attributes: map[string]schema.Attribute{
+ "key": schema.StringAttribute{
+ Description: "key is the label key that the selector applies to.",
+ MarkdownDescription: "key is the label key that the selector applies to.",
+ Required: true,
+ Optional: false,
+ Computed: false,
+ },
+
+ "operator": schema.StringAttribute{
+ Description: "operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.",
+ MarkdownDescription: "operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.",
+ Required: true,
+ Optional: false,
+ Computed: false,
+ },
+
+ "values": schema.ListAttribute{
+ Description: "values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.",
+ MarkdownDescription: "values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+ },
+ },
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "match_labels": schema.MapAttribute{
+ Description: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.",
+ MarkdownDescription: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+ },
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "name": schema.StringAttribute{
+ Description: "Select a single ClusterTrustBundle by object name. Mutually-exclusivewith signerName and labelSelector.",
+ MarkdownDescription: "Select a single ClusterTrustBundle by object name. Mutually-exclusivewith signerName and labelSelector.",
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "optional": schema.BoolAttribute{
+ Description: "If true, don't block pod startup if the referenced ClusterTrustBundle(s)aren't available. If using name, then the named ClusterTrustBundle isallowed not to exist. If using signerName, then the combination ofsignerName and labelSelector is allowed to match zeroClusterTrustBundles.",
+ MarkdownDescription: "If true, don't block pod startup if the referenced ClusterTrustBundle(s)aren't available. If using name, then the named ClusterTrustBundle isallowed not to exist. If using signerName, then the combination ofsignerName and labelSelector is allowed to match zeroClusterTrustBundles.",
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "path": schema.StringAttribute{
+ Description: "Relative path from the volume root to write the bundle.",
+ MarkdownDescription: "Relative path from the volume root to write the bundle.",
+ Required: true,
+ Optional: false,
+ Computed: false,
+ },
+
+ "signer_name": schema.StringAttribute{
+ Description: "Select all ClusterTrustBundles that match this signer name.Mutually-exclusive with name. The contents of all selectedClusterTrustBundles will be unified and deduplicated.",
+ MarkdownDescription: "Select all ClusterTrustBundles that match this signer name.Mutually-exclusive with name. The contents of all selectedClusterTrustBundles will be unified and deduplicated.",
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+ },
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
"config_map": schema.SingleNestedAttribute{
Description: "configMap information about the configMap data to project",
MarkdownDescription: "configMap information about the configMap data to project",
@@ -10648,8 +10998,8 @@ func (r *AppsKubeblocksIoClusterV1Alpha1Manifest) Schema(_ context.Context, _ da
MarkdownDescription: "Required. A pod affinity term, associated with the corresponding weight.",
Attributes: map[string]schema.Attribute{
"label_selector": schema.SingleNestedAttribute{
- Description: "A label query over a set of resources, in this case pods.",
- MarkdownDescription: "A label query over a set of resources, in this case pods.",
+ Description: "A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods.",
+ MarkdownDescription: "A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods.",
Attributes: map[string]schema.Attribute{
"match_expressions": schema.ListNestedAttribute{
Description: "matchExpressions is a list of label selector requirements. The requirements are ANDed.",
@@ -10701,6 +11051,24 @@ func (r *AppsKubeblocksIoClusterV1Alpha1Manifest) Schema(_ context.Context, _ da
Computed: false,
},
+ "match_label_keys": schema.ListAttribute{
+ Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "mismatch_label_keys": schema.ListAttribute{
+ Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
"namespace_selector": schema.SingleNestedAttribute{
Description: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.",
MarkdownDescription: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.",
@@ -10797,8 +11165,8 @@ func (r *AppsKubeblocksIoClusterV1Alpha1Manifest) Schema(_ context.Context, _ da
NestedObject: schema.NestedAttributeObject{
Attributes: map[string]schema.Attribute{
"label_selector": schema.SingleNestedAttribute{
- Description: "A label query over a set of resources, in this case pods.",
- MarkdownDescription: "A label query over a set of resources, in this case pods.",
+ Description: "A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods.",
+ MarkdownDescription: "A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods.",
Attributes: map[string]schema.Attribute{
"match_expressions": schema.ListNestedAttribute{
Description: "matchExpressions is a list of label selector requirements. The requirements are ANDed.",
@@ -10850,6 +11218,24 @@ func (r *AppsKubeblocksIoClusterV1Alpha1Manifest) Schema(_ context.Context, _ da
Computed: false,
},
+ "match_label_keys": schema.ListAttribute{
+ Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "mismatch_label_keys": schema.ListAttribute{
+ Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
"namespace_selector": schema.SingleNestedAttribute{
Description: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.",
MarkdownDescription: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.",
@@ -10946,8 +11332,8 @@ func (r *AppsKubeblocksIoClusterV1Alpha1Manifest) Schema(_ context.Context, _ da
MarkdownDescription: "Required. A pod affinity term, associated with the corresponding weight.",
Attributes: map[string]schema.Attribute{
"label_selector": schema.SingleNestedAttribute{
- Description: "A label query over a set of resources, in this case pods.",
- MarkdownDescription: "A label query over a set of resources, in this case pods.",
+ Description: "A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods.",
+ MarkdownDescription: "A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods.",
Attributes: map[string]schema.Attribute{
"match_expressions": schema.ListNestedAttribute{
Description: "matchExpressions is a list of label selector requirements. The requirements are ANDed.",
@@ -10999,6 +11385,24 @@ func (r *AppsKubeblocksIoClusterV1Alpha1Manifest) Schema(_ context.Context, _ da
Computed: false,
},
+ "match_label_keys": schema.ListAttribute{
+ Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "mismatch_label_keys": schema.ListAttribute{
+ Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
"namespace_selector": schema.SingleNestedAttribute{
Description: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.",
MarkdownDescription: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.",
@@ -11095,8 +11499,8 @@ func (r *AppsKubeblocksIoClusterV1Alpha1Manifest) Schema(_ context.Context, _ da
NestedObject: schema.NestedAttributeObject{
Attributes: map[string]schema.Attribute{
"label_selector": schema.SingleNestedAttribute{
- Description: "A label query over a set of resources, in this case pods.",
- MarkdownDescription: "A label query over a set of resources, in this case pods.",
+ Description: "A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods.",
+ MarkdownDescription: "A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods.",
Attributes: map[string]schema.Attribute{
"match_expressions": schema.ListNestedAttribute{
Description: "matchExpressions is a list of label selector requirements. The requirements are ANDed.",
@@ -11148,6 +11552,24 @@ func (r *AppsKubeblocksIoClusterV1Alpha1Manifest) Schema(_ context.Context, _ da
Computed: false,
},
+ "match_label_keys": schema.ListAttribute{
+ Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "mismatch_label_keys": schema.ListAttribute{
+ Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
"namespace_selector": schema.SingleNestedAttribute{
Description: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.",
MarkdownDescription: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.",
@@ -12309,8 +12731,8 @@ func (r *AppsKubeblocksIoClusterV1Alpha1Manifest) Schema(_ context.Context, _ da
MarkdownDescription: "Required. A pod affinity term, associated with the corresponding weight.",
Attributes: map[string]schema.Attribute{
"label_selector": schema.SingleNestedAttribute{
- Description: "A label query over a set of resources, in this case pods.",
- MarkdownDescription: "A label query over a set of resources, in this case pods.",
+ Description: "A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods.",
+ MarkdownDescription: "A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods.",
Attributes: map[string]schema.Attribute{
"match_expressions": schema.ListNestedAttribute{
Description: "matchExpressions is a list of label selector requirements. The requirements are ANDed.",
@@ -12362,6 +12784,24 @@ func (r *AppsKubeblocksIoClusterV1Alpha1Manifest) Schema(_ context.Context, _ da
Computed: false,
},
+ "match_label_keys": schema.ListAttribute{
+ Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "mismatch_label_keys": schema.ListAttribute{
+ Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
"namespace_selector": schema.SingleNestedAttribute{
Description: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.",
MarkdownDescription: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.",
@@ -12458,8 +12898,8 @@ func (r *AppsKubeblocksIoClusterV1Alpha1Manifest) Schema(_ context.Context, _ da
NestedObject: schema.NestedAttributeObject{
Attributes: map[string]schema.Attribute{
"label_selector": schema.SingleNestedAttribute{
- Description: "A label query over a set of resources, in this case pods.",
- MarkdownDescription: "A label query over a set of resources, in this case pods.",
+ Description: "A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods.",
+ MarkdownDescription: "A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods.",
Attributes: map[string]schema.Attribute{
"match_expressions": schema.ListNestedAttribute{
Description: "matchExpressions is a list of label selector requirements. The requirements are ANDed.",
@@ -12511,6 +12951,24 @@ func (r *AppsKubeblocksIoClusterV1Alpha1Manifest) Schema(_ context.Context, _ da
Computed: false,
},
+ "match_label_keys": schema.ListAttribute{
+ Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "mismatch_label_keys": schema.ListAttribute{
+ Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
"namespace_selector": schema.SingleNestedAttribute{
Description: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.",
MarkdownDescription: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.",
@@ -12607,8 +13065,8 @@ func (r *AppsKubeblocksIoClusterV1Alpha1Manifest) Schema(_ context.Context, _ da
MarkdownDescription: "Required. A pod affinity term, associated with the corresponding weight.",
Attributes: map[string]schema.Attribute{
"label_selector": schema.SingleNestedAttribute{
- Description: "A label query over a set of resources, in this case pods.",
- MarkdownDescription: "A label query over a set of resources, in this case pods.",
+ Description: "A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods.",
+ MarkdownDescription: "A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods.",
Attributes: map[string]schema.Attribute{
"match_expressions": schema.ListNestedAttribute{
Description: "matchExpressions is a list of label selector requirements. The requirements are ANDed.",
@@ -12660,6 +13118,24 @@ func (r *AppsKubeblocksIoClusterV1Alpha1Manifest) Schema(_ context.Context, _ da
Computed: false,
},
+ "match_label_keys": schema.ListAttribute{
+ Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "mismatch_label_keys": schema.ListAttribute{
+ Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
"namespace_selector": schema.SingleNestedAttribute{
Description: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.",
MarkdownDescription: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.",
@@ -12756,8 +13232,8 @@ func (r *AppsKubeblocksIoClusterV1Alpha1Manifest) Schema(_ context.Context, _ da
NestedObject: schema.NestedAttributeObject{
Attributes: map[string]schema.Attribute{
"label_selector": schema.SingleNestedAttribute{
- Description: "A label query over a set of resources, in this case pods.",
- MarkdownDescription: "A label query over a set of resources, in this case pods.",
+ Description: "A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods.",
+ MarkdownDescription: "A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods.",
Attributes: map[string]schema.Attribute{
"match_expressions": schema.ListNestedAttribute{
Description: "matchExpressions is a list of label selector requirements. The requirements are ANDed.",
@@ -12809,6 +13285,24 @@ func (r *AppsKubeblocksIoClusterV1Alpha1Manifest) Schema(_ context.Context, _ da
Computed: false,
},
+ "match_label_keys": schema.ListAttribute{
+ Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "mismatch_label_keys": schema.ListAttribute{
+ Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
"namespace_selector": schema.SingleNestedAttribute{
Description: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.",
MarkdownDescription: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.",
@@ -13129,25 +13623,6 @@ func (r *AppsKubeblocksIoClusterV1Alpha1Manifest) Schema(_ context.Context, _ da
Description: "Represents the minimum resources the volume should have.If the RecoverVolumeExpansionFailure feature is enabled, users are allowed to specify resource requirements thatare lower than the previous value but must still be higher than the capacity recorded in the status field of the claim.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources.",
MarkdownDescription: "Represents the minimum resources the volume should have.If the RecoverVolumeExpansionFailure feature is enabled, users are allowed to specify resource requirements thatare lower than the previous value but must still be higher than the capacity recorded in the status field of the claim.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources.",
Attributes: map[string]schema.Attribute{
- "claims": schema.ListNestedAttribute{
- Description: "Claims lists the names of resources, defined in spec.resourceClaims,that are used by this container.This is an alpha field and requires enabling theDynamicResourceAllocation feature gate.This field is immutable. It can only be set for containers.",
- MarkdownDescription: "Claims lists the names of resources, defined in spec.resourceClaims,that are used by this container.This is an alpha field and requires enabling theDynamicResourceAllocation feature gate.This field is immutable. It can only be set for containers.",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "name": schema.StringAttribute{
- Description: "Name must match the name of one entry in pod.spec.resourceClaims ofthe Pod where this field is used. It makes that resource availableinside a container.",
- MarkdownDescription: "Name must match the name of one entry in pod.spec.resourceClaims ofthe Pod where this field is used. It makes that resource availableinside a container.",
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
"limits": schema.MapAttribute{
Description: "Limits describes the maximum amount of compute resources allowed.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/",
MarkdownDescription: "Limits describes the maximum amount of compute resources allowed.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/",
@@ -13915,25 +14390,6 @@ func (r *AppsKubeblocksIoClusterV1Alpha1Manifest) Schema(_ context.Context, _ da
Description: "resources represents the minimum resources the volume should have.If RecoverVolumeExpansionFailure feature is enabled users are allowed to specify resource requirementsthat are lower than previous value but must still be higher than capacity recorded in thestatus field of the claim.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources",
MarkdownDescription: "resources represents the minimum resources the volume should have.If RecoverVolumeExpansionFailure feature is enabled users are allowed to specify resource requirementsthat are lower than previous value but must still be higher than capacity recorded in thestatus field of the claim.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources",
Attributes: map[string]schema.Attribute{
- "claims": schema.ListNestedAttribute{
- Description: "Claims lists the names of resources, defined in spec.resourceClaims,that are used by this container.This is an alpha field and requires enabling theDynamicResourceAllocation feature gate.This field is immutable. It can only be set for containers.",
- MarkdownDescription: "Claims lists the names of resources, defined in spec.resourceClaims,that are used by this container.This is an alpha field and requires enabling theDynamicResourceAllocation feature gate.This field is immutable. It can only be set for containers.",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "name": schema.StringAttribute{
- Description: "Name must match the name of one entry in pod.spec.resourceClaims ofthe Pod where this field is used. It makes that resource availableinside a container.",
- MarkdownDescription: "Name must match the name of one entry in pod.spec.resourceClaims ofthe Pod where this field is used. It makes that resource availableinside a container.",
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
"limits": schema.MapAttribute{
Description: "Limits describes the maximum amount of compute resources allowed.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/",
MarkdownDescription: "Limits describes the maximum amount of compute resources allowed.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/",
@@ -14019,6 +14475,14 @@ func (r *AppsKubeblocksIoClusterV1Alpha1Manifest) Schema(_ context.Context, _ da
Computed: false,
},
+ "volume_attributes_class_name": schema.StringAttribute{
+ Description: "volumeAttributesClassName may be used to set the VolumeAttributesClass used by this claim.If specified, the CSI driver will create or update the volume with the attributes definedin the corresponding VolumeAttributesClass. This has a different purpose than storageClassName,it can be changed after the claim is created. An empty string value means that no VolumeAttributesClasswill be applied to the claim but it's not allowed to reset this field to empty string once it is set.If unspecified and the PersistentVolumeClaim is unbound, the default VolumeAttributesClasswill be set by the persistentvolume controller if it exists.If the resource referred to by volumeAttributesClass does not exist, this PersistentVolumeClaim will beset to a Pending state, as reflected by the modifyVolumeStatus field, until such as a resourceexists.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#volumeattributesclass(Alpha) Using this field requires the VolumeAttributesClass feature gate to be enabled.",
+ MarkdownDescription: "volumeAttributesClassName may be used to set the VolumeAttributesClass used by this claim.If specified, the CSI driver will create or update the volume with the attributes definedin the corresponding VolumeAttributesClass. This has a different purpose than storageClassName,it can be changed after the claim is created. An empty string value means that no VolumeAttributesClasswill be applied to the claim but it's not allowed to reset this field to empty string once it is set.If unspecified and the PersistentVolumeClaim is unbound, the default VolumeAttributesClasswill be set by the persistentvolume controller if it exists.If the resource referred to by volumeAttributesClass does not exist, this PersistentVolumeClaim will beset to a Pending state, as reflected by the modifyVolumeStatus field, until such as a resourceexists.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#volumeattributesclass(Alpha) Using this field requires the VolumeAttributesClass feature gate to be enabled.",
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
"volume_mode": schema.StringAttribute{
Description: "volumeMode defines what type of volume is required by the claim.Value of Filesystem is implied when not included in claim spec.",
MarkdownDescription: "volumeMode defines what type of volume is required by the claim.Value of Filesystem is implied when not included in claim spec.",
@@ -14565,6 +15029,101 @@ func (r *AppsKubeblocksIoClusterV1Alpha1Manifest) Schema(_ context.Context, _ da
MarkdownDescription: "sources is the list of volume projections",
NestedObject: schema.NestedAttributeObject{
Attributes: map[string]schema.Attribute{
+ "cluster_trust_bundle": schema.SingleNestedAttribute{
+ Description: "ClusterTrustBundle allows a pod to access the '.spec.trustBundle' fieldof ClusterTrustBundle objects in an auto-updating file.Alpha, gated by the ClusterTrustBundleProjection feature gate.ClusterTrustBundle objects can either be selected by name, or by thecombination of signer name and a label selector.Kubelet performs aggressive normalization of the PEM contents writteninto the pod filesystem. Esoteric PEM features such as inter-blockcomments and block headers are stripped. Certificates are deduplicated.The ordering of certificates within the file is arbitrary, and Kubeletmay change the order over time.",
+ MarkdownDescription: "ClusterTrustBundle allows a pod to access the '.spec.trustBundle' fieldof ClusterTrustBundle objects in an auto-updating file.Alpha, gated by the ClusterTrustBundleProjection feature gate.ClusterTrustBundle objects can either be selected by name, or by thecombination of signer name and a label selector.Kubelet performs aggressive normalization of the PEM contents writteninto the pod filesystem. Esoteric PEM features such as inter-blockcomments and block headers are stripped. Certificates are deduplicated.The ordering of certificates within the file is arbitrary, and Kubeletmay change the order over time.",
+ Attributes: map[string]schema.Attribute{
+ "label_selector": schema.SingleNestedAttribute{
+ Description: "Select all ClusterTrustBundles that match this label selector. Only haseffect if signerName is set. Mutually-exclusive with name. If unset,interpreted as 'match nothing'. If set but empty, interpreted as 'matcheverything'.",
+ MarkdownDescription: "Select all ClusterTrustBundles that match this label selector. Only haseffect if signerName is set. Mutually-exclusive with name. If unset,interpreted as 'match nothing'. If set but empty, interpreted as 'matcheverything'.",
+ Attributes: map[string]schema.Attribute{
+ "match_expressions": schema.ListNestedAttribute{
+ Description: "matchExpressions is a list of label selector requirements. The requirements are ANDed.",
+ MarkdownDescription: "matchExpressions is a list of label selector requirements. The requirements are ANDed.",
+ NestedObject: schema.NestedAttributeObject{
+ Attributes: map[string]schema.Attribute{
+ "key": schema.StringAttribute{
+ Description: "key is the label key that the selector applies to.",
+ MarkdownDescription: "key is the label key that the selector applies to.",
+ Required: true,
+ Optional: false,
+ Computed: false,
+ },
+
+ "operator": schema.StringAttribute{
+ Description: "operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.",
+ MarkdownDescription: "operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.",
+ Required: true,
+ Optional: false,
+ Computed: false,
+ },
+
+ "values": schema.ListAttribute{
+ Description: "values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.",
+ MarkdownDescription: "values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+ },
+ },
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "match_labels": schema.MapAttribute{
+ Description: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.",
+ MarkdownDescription: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+ },
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "name": schema.StringAttribute{
+ Description: "Select a single ClusterTrustBundle by object name. Mutually-exclusivewith signerName and labelSelector.",
+ MarkdownDescription: "Select a single ClusterTrustBundle by object name. Mutually-exclusivewith signerName and labelSelector.",
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "optional": schema.BoolAttribute{
+ Description: "If true, don't block pod startup if the referenced ClusterTrustBundle(s)aren't available. If using name, then the named ClusterTrustBundle isallowed not to exist. If using signerName, then the combination ofsignerName and labelSelector is allowed to match zeroClusterTrustBundles.",
+ MarkdownDescription: "If true, don't block pod startup if the referenced ClusterTrustBundle(s)aren't available. If using name, then the named ClusterTrustBundle isallowed not to exist. If using signerName, then the combination ofsignerName and labelSelector is allowed to match zeroClusterTrustBundles.",
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "path": schema.StringAttribute{
+ Description: "Relative path from the volume root to write the bundle.",
+ MarkdownDescription: "Relative path from the volume root to write the bundle.",
+ Required: true,
+ Optional: false,
+ Computed: false,
+ },
+
+ "signer_name": schema.StringAttribute{
+ Description: "Select all ClusterTrustBundles that match this signer name.Mutually-exclusive with name. The contents of all selectedClusterTrustBundles will be unified and deduplicated.",
+ MarkdownDescription: "Select all ClusterTrustBundles that match this signer name.Mutually-exclusive with name. The contents of all selectedClusterTrustBundles will be unified and deduplicated.",
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+ },
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
"config_map": schema.SingleNestedAttribute{
Description: "configMap information about the configMap data to project",
MarkdownDescription: "configMap information about the configMap data to project",
@@ -15632,8 +16191,8 @@ func (r *AppsKubeblocksIoClusterV1Alpha1Manifest) Schema(_ context.Context, _ da
MarkdownDescription: "Required. A pod affinity term, associated with the corresponding weight.",
Attributes: map[string]schema.Attribute{
"label_selector": schema.SingleNestedAttribute{
- Description: "A label query over a set of resources, in this case pods.",
- MarkdownDescription: "A label query over a set of resources, in this case pods.",
+ Description: "A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods.",
+ MarkdownDescription: "A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods.",
Attributes: map[string]schema.Attribute{
"match_expressions": schema.ListNestedAttribute{
Description: "matchExpressions is a list of label selector requirements. The requirements are ANDed.",
@@ -15685,6 +16244,24 @@ func (r *AppsKubeblocksIoClusterV1Alpha1Manifest) Schema(_ context.Context, _ da
Computed: false,
},
+ "match_label_keys": schema.ListAttribute{
+ Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "mismatch_label_keys": schema.ListAttribute{
+ Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
"namespace_selector": schema.SingleNestedAttribute{
Description: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.",
MarkdownDescription: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.",
@@ -15781,8 +16358,8 @@ func (r *AppsKubeblocksIoClusterV1Alpha1Manifest) Schema(_ context.Context, _ da
NestedObject: schema.NestedAttributeObject{
Attributes: map[string]schema.Attribute{
"label_selector": schema.SingleNestedAttribute{
- Description: "A label query over a set of resources, in this case pods.",
- MarkdownDescription: "A label query over a set of resources, in this case pods.",
+ Description: "A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods.",
+ MarkdownDescription: "A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods.",
Attributes: map[string]schema.Attribute{
"match_expressions": schema.ListNestedAttribute{
Description: "matchExpressions is a list of label selector requirements. The requirements are ANDed.",
@@ -15834,6 +16411,24 @@ func (r *AppsKubeblocksIoClusterV1Alpha1Manifest) Schema(_ context.Context, _ da
Computed: false,
},
+ "match_label_keys": schema.ListAttribute{
+ Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "mismatch_label_keys": schema.ListAttribute{
+ Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
"namespace_selector": schema.SingleNestedAttribute{
Description: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.",
MarkdownDescription: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.",
@@ -15930,8 +16525,8 @@ func (r *AppsKubeblocksIoClusterV1Alpha1Manifest) Schema(_ context.Context, _ da
MarkdownDescription: "Required. A pod affinity term, associated with the corresponding weight.",
Attributes: map[string]schema.Attribute{
"label_selector": schema.SingleNestedAttribute{
- Description: "A label query over a set of resources, in this case pods.",
- MarkdownDescription: "A label query over a set of resources, in this case pods.",
+ Description: "A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods.",
+ MarkdownDescription: "A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods.",
Attributes: map[string]schema.Attribute{
"match_expressions": schema.ListNestedAttribute{
Description: "matchExpressions is a list of label selector requirements. The requirements are ANDed.",
@@ -15983,6 +16578,24 @@ func (r *AppsKubeblocksIoClusterV1Alpha1Manifest) Schema(_ context.Context, _ da
Computed: false,
},
+ "match_label_keys": schema.ListAttribute{
+ Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "mismatch_label_keys": schema.ListAttribute{
+ Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
"namespace_selector": schema.SingleNestedAttribute{
Description: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.",
MarkdownDescription: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.",
@@ -16079,8 +16692,8 @@ func (r *AppsKubeblocksIoClusterV1Alpha1Manifest) Schema(_ context.Context, _ da
NestedObject: schema.NestedAttributeObject{
Attributes: map[string]schema.Attribute{
"label_selector": schema.SingleNestedAttribute{
- Description: "A label query over a set of resources, in this case pods.",
- MarkdownDescription: "A label query over a set of resources, in this case pods.",
+ Description: "A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods.",
+ MarkdownDescription: "A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods.",
Attributes: map[string]schema.Attribute{
"match_expressions": schema.ListNestedAttribute{
Description: "matchExpressions is a list of label selector requirements. The requirements are ANDed.",
@@ -16132,6 +16745,24 @@ func (r *AppsKubeblocksIoClusterV1Alpha1Manifest) Schema(_ context.Context, _ da
Computed: false,
},
+ "match_label_keys": schema.ListAttribute{
+ Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "mismatch_label_keys": schema.ListAttribute{
+ Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
"namespace_selector": schema.SingleNestedAttribute{
Description: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.",
MarkdownDescription: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.",
@@ -16618,8 +17249,8 @@ func (r *AppsKubeblocksIoClusterV1Alpha1Manifest) Schema(_ context.Context, _ da
},
"switch_policy": schema.SingleNestedAttribute{
- Description: "Defines the strategy for switchover and failover when workloadType is Replication.Deprecated since v0.9.This field is maintained for backward compatibility and its use is discouraged.Existing usage should be updated to the current preferred approach to avoid compatibility issues in future releases.",
- MarkdownDescription: "Defines the strategy for switchover and failover when workloadType is Replication.Deprecated since v0.9.This field is maintained for backward compatibility and its use is discouraged.Existing usage should be updated to the current preferred approach to avoid compatibility issues in future releases.",
+ Description: "Defines the strategy for switchover and failover.Deprecated since v0.9.This field is maintained for backward compatibility and its use is discouraged.Existing usage should be updated to the current preferred approach to avoid compatibility issues in future releases.",
+ MarkdownDescription: "Defines the strategy for switchover and failover.Deprecated since v0.9.This field is maintained for backward compatibility and its use is discouraged.Existing usage should be updated to the current preferred approach to avoid compatibility issues in future releases.",
Attributes: map[string]schema.Attribute{
"type": schema.StringAttribute{
Description: "Type specifies the type of switch policy to be applied.",
@@ -17052,25 +17683,6 @@ func (r *AppsKubeblocksIoClusterV1Alpha1Manifest) Schema(_ context.Context, _ da
Description: "Represents the minimum resources the volume should have.If the RecoverVolumeExpansionFailure feature is enabled, users are allowed to specify resource requirements thatare lower than the previous value but must still be higher than the capacity recorded in the status field of the claim.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources.",
MarkdownDescription: "Represents the minimum resources the volume should have.If the RecoverVolumeExpansionFailure feature is enabled, users are allowed to specify resource requirements thatare lower than the previous value but must still be higher than the capacity recorded in the status field of the claim.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources.",
Attributes: map[string]schema.Attribute{
- "claims": schema.ListNestedAttribute{
- Description: "Claims lists the names of resources, defined in spec.resourceClaims,that are used by this container.This is an alpha field and requires enabling theDynamicResourceAllocation feature gate.This field is immutable. It can only be set for containers.",
- MarkdownDescription: "Claims lists the names of resources, defined in spec.resourceClaims,that are used by this container.This is an alpha field and requires enabling theDynamicResourceAllocation feature gate.This field is immutable. It can only be set for containers.",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "name": schema.StringAttribute{
- Description: "Name must match the name of one entry in pod.spec.resourceClaims ofthe Pod where this field is used. It makes that resource availableinside a container.",
- MarkdownDescription: "Name must match the name of one entry in pod.spec.resourceClaims ofthe Pod where this field is used. It makes that resource availableinside a container.",
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
"limits": schema.MapAttribute{
Description: "Limits describes the maximum amount of compute resources allowed.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/",
MarkdownDescription: "Limits describes the maximum amount of compute resources allowed.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/",
@@ -17779,25 +18391,6 @@ func (r *AppsKubeblocksIoClusterV1Alpha1Manifest) Schema(_ context.Context, _ da
Description: "resources represents the minimum resources the volume should have.If RecoverVolumeExpansionFailure feature is enabled users are allowed to specify resource requirementsthat are lower than previous value but must still be higher than capacity recorded in thestatus field of the claim.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources",
MarkdownDescription: "resources represents the minimum resources the volume should have.If RecoverVolumeExpansionFailure feature is enabled users are allowed to specify resource requirementsthat are lower than previous value but must still be higher than capacity recorded in thestatus field of the claim.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources",
Attributes: map[string]schema.Attribute{
- "claims": schema.ListNestedAttribute{
- Description: "Claims lists the names of resources, defined in spec.resourceClaims,that are used by this container.This is an alpha field and requires enabling theDynamicResourceAllocation feature gate.This field is immutable. It can only be set for containers.",
- MarkdownDescription: "Claims lists the names of resources, defined in spec.resourceClaims,that are used by this container.This is an alpha field and requires enabling theDynamicResourceAllocation feature gate.This field is immutable. It can only be set for containers.",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "name": schema.StringAttribute{
- Description: "Name must match the name of one entry in pod.spec.resourceClaims ofthe Pod where this field is used. It makes that resource availableinside a container.",
- MarkdownDescription: "Name must match the name of one entry in pod.spec.resourceClaims ofthe Pod where this field is used. It makes that resource availableinside a container.",
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
"limits": schema.MapAttribute{
Description: "Limits describes the maximum amount of compute resources allowed.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/",
MarkdownDescription: "Limits describes the maximum amount of compute resources allowed.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/",
@@ -17883,6 +18476,14 @@ func (r *AppsKubeblocksIoClusterV1Alpha1Manifest) Schema(_ context.Context, _ da
Computed: false,
},
+ "volume_attributes_class_name": schema.StringAttribute{
+ Description: "volumeAttributesClassName may be used to set the VolumeAttributesClass used by this claim.If specified, the CSI driver will create or update the volume with the attributes definedin the corresponding VolumeAttributesClass. This has a different purpose than storageClassName,it can be changed after the claim is created. An empty string value means that no VolumeAttributesClasswill be applied to the claim but it's not allowed to reset this field to empty string once it is set.If unspecified and the PersistentVolumeClaim is unbound, the default VolumeAttributesClasswill be set by the persistentvolume controller if it exists.If the resource referred to by volumeAttributesClass does not exist, this PersistentVolumeClaim will beset to a Pending state, as reflected by the modifyVolumeStatus field, until such as a resourceexists.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#volumeattributesclass(Alpha) Using this field requires the VolumeAttributesClass feature gate to be enabled.",
+ MarkdownDescription: "volumeAttributesClassName may be used to set the VolumeAttributesClass used by this claim.If specified, the CSI driver will create or update the volume with the attributes definedin the corresponding VolumeAttributesClass. This has a different purpose than storageClassName,it can be changed after the claim is created. An empty string value means that no VolumeAttributesClasswill be applied to the claim but it's not allowed to reset this field to empty string once it is set.If unspecified and the PersistentVolumeClaim is unbound, the default VolumeAttributesClasswill be set by the persistentvolume controller if it exists.If the resource referred to by volumeAttributesClass does not exist, this PersistentVolumeClaim will beset to a Pending state, as reflected by the modifyVolumeStatus field, until such as a resourceexists.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#volumeattributesclass(Alpha) Using this field requires the VolumeAttributesClass feature gate to be enabled.",
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
"volume_mode": schema.StringAttribute{
Description: "volumeMode defines what type of volume is required by the claim.Value of Filesystem is implied when not included in claim spec.",
MarkdownDescription: "volumeMode defines what type of volume is required by the claim.Value of Filesystem is implied when not included in claim spec.",
@@ -18429,6 +19030,101 @@ func (r *AppsKubeblocksIoClusterV1Alpha1Manifest) Schema(_ context.Context, _ da
MarkdownDescription: "sources is the list of volume projections",
NestedObject: schema.NestedAttributeObject{
Attributes: map[string]schema.Attribute{
+ "cluster_trust_bundle": schema.SingleNestedAttribute{
+ Description: "ClusterTrustBundle allows a pod to access the '.spec.trustBundle' fieldof ClusterTrustBundle objects in an auto-updating file.Alpha, gated by the ClusterTrustBundleProjection feature gate.ClusterTrustBundle objects can either be selected by name, or by thecombination of signer name and a label selector.Kubelet performs aggressive normalization of the PEM contents writteninto the pod filesystem. Esoteric PEM features such as inter-blockcomments and block headers are stripped. Certificates are deduplicated.The ordering of certificates within the file is arbitrary, and Kubeletmay change the order over time.",
+ MarkdownDescription: "ClusterTrustBundle allows a pod to access the '.spec.trustBundle' fieldof ClusterTrustBundle objects in an auto-updating file.Alpha, gated by the ClusterTrustBundleProjection feature gate.ClusterTrustBundle objects can either be selected by name, or by thecombination of signer name and a label selector.Kubelet performs aggressive normalization of the PEM contents writteninto the pod filesystem. Esoteric PEM features such as inter-blockcomments and block headers are stripped. Certificates are deduplicated.The ordering of certificates within the file is arbitrary, and Kubeletmay change the order over time.",
+ Attributes: map[string]schema.Attribute{
+ "label_selector": schema.SingleNestedAttribute{
+ Description: "Select all ClusterTrustBundles that match this label selector. Only haseffect if signerName is set. Mutually-exclusive with name. If unset,interpreted as 'match nothing'. If set but empty, interpreted as 'matcheverything'.",
+ MarkdownDescription: "Select all ClusterTrustBundles that match this label selector. Only haseffect if signerName is set. Mutually-exclusive with name. If unset,interpreted as 'match nothing'. If set but empty, interpreted as 'matcheverything'.",
+ Attributes: map[string]schema.Attribute{
+ "match_expressions": schema.ListNestedAttribute{
+ Description: "matchExpressions is a list of label selector requirements. The requirements are ANDed.",
+ MarkdownDescription: "matchExpressions is a list of label selector requirements. The requirements are ANDed.",
+ NestedObject: schema.NestedAttributeObject{
+ Attributes: map[string]schema.Attribute{
+ "key": schema.StringAttribute{
+ Description: "key is the label key that the selector applies to.",
+ MarkdownDescription: "key is the label key that the selector applies to.",
+ Required: true,
+ Optional: false,
+ Computed: false,
+ },
+
+ "operator": schema.StringAttribute{
+ Description: "operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.",
+ MarkdownDescription: "operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.",
+ Required: true,
+ Optional: false,
+ Computed: false,
+ },
+
+ "values": schema.ListAttribute{
+ Description: "values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.",
+ MarkdownDescription: "values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+ },
+ },
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "match_labels": schema.MapAttribute{
+ Description: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.",
+ MarkdownDescription: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+ },
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "name": schema.StringAttribute{
+ Description: "Select a single ClusterTrustBundle by object name. Mutually-exclusivewith signerName and labelSelector.",
+ MarkdownDescription: "Select a single ClusterTrustBundle by object name. Mutually-exclusivewith signerName and labelSelector.",
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "optional": schema.BoolAttribute{
+ Description: "If true, don't block pod startup if the referenced ClusterTrustBundle(s)aren't available. If using name, then the named ClusterTrustBundle isallowed not to exist. If using signerName, then the combination ofsignerName and labelSelector is allowed to match zeroClusterTrustBundles.",
+ MarkdownDescription: "If true, don't block pod startup if the referenced ClusterTrustBundle(s)aren't available. If using name, then the named ClusterTrustBundle isallowed not to exist. If using signerName, then the combination ofsignerName and labelSelector is allowed to match zeroClusterTrustBundles.",
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "path": schema.StringAttribute{
+ Description: "Relative path from the volume root to write the bundle.",
+ MarkdownDescription: "Relative path from the volume root to write the bundle.",
+ Required: true,
+ Optional: false,
+ Computed: false,
+ },
+
+ "signer_name": schema.StringAttribute{
+ Description: "Select all ClusterTrustBundles that match this signer name.Mutually-exclusive with name. The contents of all selectedClusterTrustBundles will be unified and deduplicated.",
+ MarkdownDescription: "Select all ClusterTrustBundles that match this signer name.Mutually-exclusive with name. The contents of all selectedClusterTrustBundles will be unified and deduplicated.",
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+ },
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
"config_map": schema.SingleNestedAttribute{
Description: "configMap information about the configMap data to project",
MarkdownDescription: "configMap information about the configMap data to project",
diff --git a/internal/provider/apps_kubeblocks_io_v1alpha1/apps_kubeblocks_io_component_definition_v1alpha1_manifest.go b/internal/provider/apps_kubeblocks_io_v1alpha1/apps_kubeblocks_io_component_definition_v1alpha1_manifest.go
index ff95ee321..e5938fbc8 100644
--- a/internal/provider/apps_kubeblocks_io_v1alpha1/apps_kubeblocks_io_component_definition_v1alpha1_manifest.go
+++ b/internal/provider/apps_kubeblocks_io_v1alpha1/apps_kubeblocks_io_component_definition_v1alpha1_manifest.go
@@ -720,6 +720,8 @@ type AppsKubeblocksIoComponentDefinitionV1Alpha1ManifestData struct {
} `tfsdk:"match_expressions" json:"matchExpressions,omitempty"`
MatchLabels *map[string]string `tfsdk:"match_labels" json:"matchLabels,omitempty"`
} `tfsdk:"label_selector" json:"labelSelector,omitempty"`
+ MatchLabelKeys *[]string `tfsdk:"match_label_keys" json:"matchLabelKeys,omitempty"`
+ MismatchLabelKeys *[]string `tfsdk:"mismatch_label_keys" json:"mismatchLabelKeys,omitempty"`
NamespaceSelector *struct {
MatchExpressions *[]struct {
Key *string `tfsdk:"key" json:"key,omitempty"`
@@ -742,6 +744,8 @@ type AppsKubeblocksIoComponentDefinitionV1Alpha1ManifestData struct {
} `tfsdk:"match_expressions" json:"matchExpressions,omitempty"`
MatchLabels *map[string]string `tfsdk:"match_labels" json:"matchLabels,omitempty"`
} `tfsdk:"label_selector" json:"labelSelector,omitempty"`
+ MatchLabelKeys *[]string `tfsdk:"match_label_keys" json:"matchLabelKeys,omitempty"`
+ MismatchLabelKeys *[]string `tfsdk:"mismatch_label_keys" json:"mismatchLabelKeys,omitempty"`
NamespaceSelector *struct {
MatchExpressions *[]struct {
Key *string `tfsdk:"key" json:"key,omitempty"`
@@ -765,6 +769,8 @@ type AppsKubeblocksIoComponentDefinitionV1Alpha1ManifestData struct {
} `tfsdk:"match_expressions" json:"matchExpressions,omitempty"`
MatchLabels *map[string]string `tfsdk:"match_labels" json:"matchLabels,omitempty"`
} `tfsdk:"label_selector" json:"labelSelector,omitempty"`
+ MatchLabelKeys *[]string `tfsdk:"match_label_keys" json:"matchLabelKeys,omitempty"`
+ MismatchLabelKeys *[]string `tfsdk:"mismatch_label_keys" json:"mismatchLabelKeys,omitempty"`
NamespaceSelector *struct {
MatchExpressions *[]struct {
Key *string `tfsdk:"key" json:"key,omitempty"`
@@ -787,6 +793,8 @@ type AppsKubeblocksIoComponentDefinitionV1Alpha1ManifestData struct {
} `tfsdk:"match_expressions" json:"matchExpressions,omitempty"`
MatchLabels *map[string]string `tfsdk:"match_labels" json:"matchLabels,omitempty"`
} `tfsdk:"label_selector" json:"labelSelector,omitempty"`
+ MatchLabelKeys *[]string `tfsdk:"match_label_keys" json:"matchLabelKeys,omitempty"`
+ MismatchLabelKeys *[]string `tfsdk:"mismatch_label_keys" json:"mismatchLabelKeys,omitempty"`
NamespaceSelector *struct {
MatchExpressions *[]struct {
Key *string `tfsdk:"key" json:"key,omitempty"`
@@ -857,6 +865,9 @@ type AppsKubeblocksIoComponentDefinitionV1Alpha1ManifestData struct {
Port *string `tfsdk:"port" json:"port,omitempty"`
Scheme *string `tfsdk:"scheme" json:"scheme,omitempty"`
} `tfsdk:"http_get" json:"httpGet,omitempty"`
+ Sleep *struct {
+ Seconds *int64 `tfsdk:"seconds" json:"seconds,omitempty"`
+ } `tfsdk:"sleep" json:"sleep,omitempty"`
TcpSocket *struct {
Host *string `tfsdk:"host" json:"host,omitempty"`
Port *string `tfsdk:"port" json:"port,omitempty"`
@@ -876,6 +887,9 @@ type AppsKubeblocksIoComponentDefinitionV1Alpha1ManifestData struct {
Port *string `tfsdk:"port" json:"port,omitempty"`
Scheme *string `tfsdk:"scheme" json:"scheme,omitempty"`
} `tfsdk:"http_get" json:"httpGet,omitempty"`
+ Sleep *struct {
+ Seconds *int64 `tfsdk:"seconds" json:"seconds,omitempty"`
+ } `tfsdk:"sleep" json:"sleep,omitempty"`
TcpSocket *struct {
Host *string `tfsdk:"host" json:"host,omitempty"`
Port *string `tfsdk:"port" json:"port,omitempty"`
@@ -1103,6 +1117,9 @@ type AppsKubeblocksIoComponentDefinitionV1Alpha1ManifestData struct {
Port *string `tfsdk:"port" json:"port,omitempty"`
Scheme *string `tfsdk:"scheme" json:"scheme,omitempty"`
} `tfsdk:"http_get" json:"httpGet,omitempty"`
+ Sleep *struct {
+ Seconds *int64 `tfsdk:"seconds" json:"seconds,omitempty"`
+ } `tfsdk:"sleep" json:"sleep,omitempty"`
TcpSocket *struct {
Host *string `tfsdk:"host" json:"host,omitempty"`
Port *string `tfsdk:"port" json:"port,omitempty"`
@@ -1122,6 +1139,9 @@ type AppsKubeblocksIoComponentDefinitionV1Alpha1ManifestData struct {
Port *string `tfsdk:"port" json:"port,omitempty"`
Scheme *string `tfsdk:"scheme" json:"scheme,omitempty"`
} `tfsdk:"http_get" json:"httpGet,omitempty"`
+ Sleep *struct {
+ Seconds *int64 `tfsdk:"seconds" json:"seconds,omitempty"`
+ } `tfsdk:"sleep" json:"sleep,omitempty"`
TcpSocket *struct {
Host *string `tfsdk:"host" json:"host,omitempty"`
Port *string `tfsdk:"port" json:"port,omitempty"`
@@ -1352,6 +1372,9 @@ type AppsKubeblocksIoComponentDefinitionV1Alpha1ManifestData struct {
Port *string `tfsdk:"port" json:"port,omitempty"`
Scheme *string `tfsdk:"scheme" json:"scheme,omitempty"`
} `tfsdk:"http_get" json:"httpGet,omitempty"`
+ Sleep *struct {
+ Seconds *int64 `tfsdk:"seconds" json:"seconds,omitempty"`
+ } `tfsdk:"sleep" json:"sleep,omitempty"`
TcpSocket *struct {
Host *string `tfsdk:"host" json:"host,omitempty"`
Port *string `tfsdk:"port" json:"port,omitempty"`
@@ -1371,6 +1394,9 @@ type AppsKubeblocksIoComponentDefinitionV1Alpha1ManifestData struct {
Port *string `tfsdk:"port" json:"port,omitempty"`
Scheme *string `tfsdk:"scheme" json:"scheme,omitempty"`
} `tfsdk:"http_get" json:"httpGet,omitempty"`
+ Sleep *struct {
+ Seconds *int64 `tfsdk:"seconds" json:"seconds,omitempty"`
+ } `tfsdk:"sleep" json:"sleep,omitempty"`
TcpSocket *struct {
Host *string `tfsdk:"host" json:"host,omitempty"`
Port *string `tfsdk:"port" json:"port,omitempty"`
@@ -1715,9 +1741,6 @@ type AppsKubeblocksIoComponentDefinitionV1Alpha1ManifestData struct {
Namespace *string `tfsdk:"namespace" json:"namespace,omitempty"`
} `tfsdk:"data_source_ref" json:"dataSourceRef,omitempty"`
Resources *struct {
- Claims *[]struct {
- Name *string `tfsdk:"name" json:"name,omitempty"`
- } `tfsdk:"claims" json:"claims,omitempty"`
Limits *map[string]string `tfsdk:"limits" json:"limits,omitempty"`
Requests *map[string]string `tfsdk:"requests" json:"requests,omitempty"`
} `tfsdk:"resources" json:"resources,omitempty"`
@@ -1729,9 +1752,10 @@ type AppsKubeblocksIoComponentDefinitionV1Alpha1ManifestData struct {
} `tfsdk:"match_expressions" json:"matchExpressions,omitempty"`
MatchLabels *map[string]string `tfsdk:"match_labels" json:"matchLabels,omitempty"`
} `tfsdk:"selector" json:"selector,omitempty"`
- StorageClassName *string `tfsdk:"storage_class_name" json:"storageClassName,omitempty"`
- VolumeMode *string `tfsdk:"volume_mode" json:"volumeMode,omitempty"`
- VolumeName *string `tfsdk:"volume_name" json:"volumeName,omitempty"`
+ StorageClassName *string `tfsdk:"storage_class_name" json:"storageClassName,omitempty"`
+ VolumeAttributesClassName *string `tfsdk:"volume_attributes_class_name" json:"volumeAttributesClassName,omitempty"`
+ VolumeMode *string `tfsdk:"volume_mode" json:"volumeMode,omitempty"`
+ VolumeName *string `tfsdk:"volume_name" json:"volumeName,omitempty"`
} `tfsdk:"spec" json:"spec,omitempty"`
} `tfsdk:"volume_claim_template" json:"volumeClaimTemplate,omitempty"`
} `tfsdk:"ephemeral" json:"ephemeral,omitempty"`
@@ -1812,6 +1836,20 @@ type AppsKubeblocksIoComponentDefinitionV1Alpha1ManifestData struct {
Projected *struct {
DefaultMode *int64 `tfsdk:"default_mode" json:"defaultMode,omitempty"`
Sources *[]struct {
+ ClusterTrustBundle *struct {
+ LabelSelector *struct {
+ MatchExpressions *[]struct {
+ Key *string `tfsdk:"key" json:"key,omitempty"`
+ Operator *string `tfsdk:"operator" json:"operator,omitempty"`
+ Values *[]string `tfsdk:"values" json:"values,omitempty"`
+ } `tfsdk:"match_expressions" json:"matchExpressions,omitempty"`
+ MatchLabels *map[string]string `tfsdk:"match_labels" json:"matchLabels,omitempty"`
+ } `tfsdk:"label_selector" json:"labelSelector,omitempty"`
+ Name *string `tfsdk:"name" json:"name,omitempty"`
+ Optional *bool `tfsdk:"optional" json:"optional,omitempty"`
+ Path *string `tfsdk:"path" json:"path,omitempty"`
+ SignerName *string `tfsdk:"signer_name" json:"signerName,omitempty"`
+ } `tfsdk:"cluster_trust_bundle" json:"clusterTrustBundle,omitempty"`
ConfigMap *struct {
Items *[]struct {
Key *string `tfsdk:"key" json:"key,omitempty"`
@@ -6657,8 +6695,8 @@ func (r *AppsKubeblocksIoComponentDefinitionV1Alpha1Manifest) Schema(_ context.C
MarkdownDescription: "Required. A pod affinity term, associated with the corresponding weight.",
Attributes: map[string]schema.Attribute{
"label_selector": schema.SingleNestedAttribute{
- Description: "A label query over a set of resources, in this case pods.",
- MarkdownDescription: "A label query over a set of resources, in this case pods.",
+ Description: "A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods.",
+ MarkdownDescription: "A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods.",
Attributes: map[string]schema.Attribute{
"match_expressions": schema.ListNestedAttribute{
Description: "matchExpressions is a list of label selector requirements. The requirements are ANDed.",
@@ -6710,6 +6748,24 @@ func (r *AppsKubeblocksIoComponentDefinitionV1Alpha1Manifest) Schema(_ context.C
Computed: false,
},
+ "match_label_keys": schema.ListAttribute{
+ Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "mismatch_label_keys": schema.ListAttribute{
+ Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
"namespace_selector": schema.SingleNestedAttribute{
Description: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.",
MarkdownDescription: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.",
@@ -6806,8 +6862,8 @@ func (r *AppsKubeblocksIoComponentDefinitionV1Alpha1Manifest) Schema(_ context.C
NestedObject: schema.NestedAttributeObject{
Attributes: map[string]schema.Attribute{
"label_selector": schema.SingleNestedAttribute{
- Description: "A label query over a set of resources, in this case pods.",
- MarkdownDescription: "A label query over a set of resources, in this case pods.",
+ Description: "A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods.",
+ MarkdownDescription: "A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods.",
Attributes: map[string]schema.Attribute{
"match_expressions": schema.ListNestedAttribute{
Description: "matchExpressions is a list of label selector requirements. The requirements are ANDed.",
@@ -6859,6 +6915,24 @@ func (r *AppsKubeblocksIoComponentDefinitionV1Alpha1Manifest) Schema(_ context.C
Computed: false,
},
+ "match_label_keys": schema.ListAttribute{
+ Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "mismatch_label_keys": schema.ListAttribute{
+ Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
"namespace_selector": schema.SingleNestedAttribute{
Description: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.",
MarkdownDescription: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.",
@@ -6955,8 +7029,8 @@ func (r *AppsKubeblocksIoComponentDefinitionV1Alpha1Manifest) Schema(_ context.C
MarkdownDescription: "Required. A pod affinity term, associated with the corresponding weight.",
Attributes: map[string]schema.Attribute{
"label_selector": schema.SingleNestedAttribute{
- Description: "A label query over a set of resources, in this case pods.",
- MarkdownDescription: "A label query over a set of resources, in this case pods.",
+ Description: "A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods.",
+ MarkdownDescription: "A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods.",
Attributes: map[string]schema.Attribute{
"match_expressions": schema.ListNestedAttribute{
Description: "matchExpressions is a list of label selector requirements. The requirements are ANDed.",
@@ -7008,6 +7082,24 @@ func (r *AppsKubeblocksIoComponentDefinitionV1Alpha1Manifest) Schema(_ context.C
Computed: false,
},
+ "match_label_keys": schema.ListAttribute{
+ Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "mismatch_label_keys": schema.ListAttribute{
+ Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
"namespace_selector": schema.SingleNestedAttribute{
Description: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.",
MarkdownDescription: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.",
@@ -7104,8 +7196,8 @@ func (r *AppsKubeblocksIoComponentDefinitionV1Alpha1Manifest) Schema(_ context.C
NestedObject: schema.NestedAttributeObject{
Attributes: map[string]schema.Attribute{
"label_selector": schema.SingleNestedAttribute{
- Description: "A label query over a set of resources, in this case pods.",
- MarkdownDescription: "A label query over a set of resources, in this case pods.",
+ Description: "A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods.",
+ MarkdownDescription: "A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods.",
Attributes: map[string]schema.Attribute{
"match_expressions": schema.ListNestedAttribute{
Description: "matchExpressions is a list of label selector requirements. The requirements are ANDed.",
@@ -7157,6 +7249,24 @@ func (r *AppsKubeblocksIoComponentDefinitionV1Alpha1Manifest) Schema(_ context.C
Computed: false,
},
+ "match_label_keys": schema.ListAttribute{
+ Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "mismatch_label_keys": schema.ListAttribute{
+ Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
"namespace_selector": schema.SingleNestedAttribute{
Description: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.",
MarkdownDescription: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.",
@@ -7614,6 +7724,23 @@ func (r *AppsKubeblocksIoComponentDefinitionV1Alpha1Manifest) Schema(_ context.C
Computed: false,
},
+ "sleep": schema.SingleNestedAttribute{
+ Description: "Sleep represents the duration that the container should sleep before being terminated.",
+ MarkdownDescription: "Sleep represents the duration that the container should sleep before being terminated.",
+ Attributes: map[string]schema.Attribute{
+ "seconds": schema.Int64Attribute{
+ Description: "Seconds is the number of seconds to sleep.",
+ MarkdownDescription: "Seconds is the number of seconds to sleep.",
+ Required: true,
+ Optional: false,
+ Computed: false,
+ },
+ },
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
"tcp_socket": schema.SingleNestedAttribute{
Description: "Deprecated. TCPSocket is NOT supported as a LifecycleHandler and keptfor the backward compatibility. There are no validation of this field andlifecycle hooks will fail in runtime when tcp handler is specified.",
MarkdownDescription: "Deprecated. TCPSocket is NOT supported as a LifecycleHandler and keptfor the backward compatibility. There are no validation of this field andlifecycle hooks will fail in runtime when tcp handler is specified.",
@@ -7734,6 +7861,23 @@ func (r *AppsKubeblocksIoComponentDefinitionV1Alpha1Manifest) Schema(_ context.C
Computed: false,
},
+ "sleep": schema.SingleNestedAttribute{
+ Description: "Sleep represents the duration that the container should sleep before being terminated.",
+ MarkdownDescription: "Sleep represents the duration that the container should sleep before being terminated.",
+ Attributes: map[string]schema.Attribute{
+ "seconds": schema.Int64Attribute{
+ Description: "Seconds is the number of seconds to sleep.",
+ MarkdownDescription: "Seconds is the number of seconds to sleep.",
+ Required: true,
+ Optional: false,
+ Computed: false,
+ },
+ },
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
"tcp_socket": schema.SingleNestedAttribute{
Description: "Deprecated. TCPSocket is NOT supported as a LifecycleHandler and keptfor the backward compatibility. There are no validation of this field andlifecycle hooks will fail in runtime when tcp handler is specified.",
MarkdownDescription: "Deprecated. TCPSocket is NOT supported as a LifecycleHandler and keptfor the backward compatibility. There are no validation of this field andlifecycle hooks will fail in runtime when tcp handler is specified.",
@@ -9259,6 +9403,23 @@ func (r *AppsKubeblocksIoComponentDefinitionV1Alpha1Manifest) Schema(_ context.C
Computed: false,
},
+ "sleep": schema.SingleNestedAttribute{
+ Description: "Sleep represents the duration that the container should sleep before being terminated.",
+ MarkdownDescription: "Sleep represents the duration that the container should sleep before being terminated.",
+ Attributes: map[string]schema.Attribute{
+ "seconds": schema.Int64Attribute{
+ Description: "Seconds is the number of seconds to sleep.",
+ MarkdownDescription: "Seconds is the number of seconds to sleep.",
+ Required: true,
+ Optional: false,
+ Computed: false,
+ },
+ },
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
"tcp_socket": schema.SingleNestedAttribute{
Description: "Deprecated. TCPSocket is NOT supported as a LifecycleHandler and keptfor the backward compatibility. There are no validation of this field andlifecycle hooks will fail in runtime when tcp handler is specified.",
MarkdownDescription: "Deprecated. TCPSocket is NOT supported as a LifecycleHandler and keptfor the backward compatibility. There are no validation of this field andlifecycle hooks will fail in runtime when tcp handler is specified.",
@@ -9379,6 +9540,23 @@ func (r *AppsKubeblocksIoComponentDefinitionV1Alpha1Manifest) Schema(_ context.C
Computed: false,
},
+ "sleep": schema.SingleNestedAttribute{
+ Description: "Sleep represents the duration that the container should sleep before being terminated.",
+ MarkdownDescription: "Sleep represents the duration that the container should sleep before being terminated.",
+ Attributes: map[string]schema.Attribute{
+ "seconds": schema.Int64Attribute{
+ Description: "Seconds is the number of seconds to sleep.",
+ MarkdownDescription: "Seconds is the number of seconds to sleep.",
+ Required: true,
+ Optional: false,
+ Computed: false,
+ },
+ },
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
"tcp_socket": schema.SingleNestedAttribute{
Description: "Deprecated. TCPSocket is NOT supported as a LifecycleHandler and keptfor the backward compatibility. There are no validation of this field andlifecycle hooks will fail in runtime when tcp handler is specified.",
MarkdownDescription: "Deprecated. TCPSocket is NOT supported as a LifecycleHandler and keptfor the backward compatibility. There are no validation of this field andlifecycle hooks will fail in runtime when tcp handler is specified.",
@@ -10929,6 +11107,23 @@ func (r *AppsKubeblocksIoComponentDefinitionV1Alpha1Manifest) Schema(_ context.C
Computed: false,
},
+ "sleep": schema.SingleNestedAttribute{
+ Description: "Sleep represents the duration that the container should sleep before being terminated.",
+ MarkdownDescription: "Sleep represents the duration that the container should sleep before being terminated.",
+ Attributes: map[string]schema.Attribute{
+ "seconds": schema.Int64Attribute{
+ Description: "Seconds is the number of seconds to sleep.",
+ MarkdownDescription: "Seconds is the number of seconds to sleep.",
+ Required: true,
+ Optional: false,
+ Computed: false,
+ },
+ },
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
"tcp_socket": schema.SingleNestedAttribute{
Description: "Deprecated. TCPSocket is NOT supported as a LifecycleHandler and keptfor the backward compatibility. There are no validation of this field andlifecycle hooks will fail in runtime when tcp handler is specified.",
MarkdownDescription: "Deprecated. TCPSocket is NOT supported as a LifecycleHandler and keptfor the backward compatibility. There are no validation of this field andlifecycle hooks will fail in runtime when tcp handler is specified.",
@@ -11049,6 +11244,23 @@ func (r *AppsKubeblocksIoComponentDefinitionV1Alpha1Manifest) Schema(_ context.C
Computed: false,
},
+ "sleep": schema.SingleNestedAttribute{
+ Description: "Sleep represents the duration that the container should sleep before being terminated.",
+ MarkdownDescription: "Sleep represents the duration that the container should sleep before being terminated.",
+ Attributes: map[string]schema.Attribute{
+ "seconds": schema.Int64Attribute{
+ Description: "Seconds is the number of seconds to sleep.",
+ MarkdownDescription: "Seconds is the number of seconds to sleep.",
+ Required: true,
+ Optional: false,
+ Computed: false,
+ },
+ },
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
"tcp_socket": schema.SingleNestedAttribute{
Description: "Deprecated. TCPSocket is NOT supported as a LifecycleHandler and keptfor the backward compatibility. There are no validation of this field andlifecycle hooks will fail in runtime when tcp handler is specified.",
MarkdownDescription: "Deprecated. TCPSocket is NOT supported as a LifecycleHandler and keptfor the backward compatibility. There are no validation of this field andlifecycle hooks will fail in runtime when tcp handler is specified.",
@@ -13386,25 +13598,6 @@ func (r *AppsKubeblocksIoComponentDefinitionV1Alpha1Manifest) Schema(_ context.C
Description: "resources represents the minimum resources the volume should have.If RecoverVolumeExpansionFailure feature is enabled users are allowed to specify resource requirementsthat are lower than previous value but must still be higher than capacity recorded in thestatus field of the claim.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources",
MarkdownDescription: "resources represents the minimum resources the volume should have.If RecoverVolumeExpansionFailure feature is enabled users are allowed to specify resource requirementsthat are lower than previous value but must still be higher than capacity recorded in thestatus field of the claim.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources",
Attributes: map[string]schema.Attribute{
- "claims": schema.ListNestedAttribute{
- Description: "Claims lists the names of resources, defined in spec.resourceClaims,that are used by this container.This is an alpha field and requires enabling theDynamicResourceAllocation feature gate.This field is immutable. It can only be set for containers.",
- MarkdownDescription: "Claims lists the names of resources, defined in spec.resourceClaims,that are used by this container.This is an alpha field and requires enabling theDynamicResourceAllocation feature gate.This field is immutable. It can only be set for containers.",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "name": schema.StringAttribute{
- Description: "Name must match the name of one entry in pod.spec.resourceClaims ofthe Pod where this field is used. It makes that resource availableinside a container.",
- MarkdownDescription: "Name must match the name of one entry in pod.spec.resourceClaims ofthe Pod where this field is used. It makes that resource availableinside a container.",
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
"limits": schema.MapAttribute{
Description: "Limits describes the maximum amount of compute resources allowed.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/",
MarkdownDescription: "Limits describes the maximum amount of compute resources allowed.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/",
@@ -13490,6 +13683,14 @@ func (r *AppsKubeblocksIoComponentDefinitionV1Alpha1Manifest) Schema(_ context.C
Computed: false,
},
+ "volume_attributes_class_name": schema.StringAttribute{
+ Description: "volumeAttributesClassName may be used to set the VolumeAttributesClass used by this claim.If specified, the CSI driver will create or update the volume with the attributes definedin the corresponding VolumeAttributesClass. This has a different purpose than storageClassName,it can be changed after the claim is created. An empty string value means that no VolumeAttributesClasswill be applied to the claim but it's not allowed to reset this field to empty string once it is set.If unspecified and the PersistentVolumeClaim is unbound, the default VolumeAttributesClasswill be set by the persistentvolume controller if it exists.If the resource referred to by volumeAttributesClass does not exist, this PersistentVolumeClaim will beset to a Pending state, as reflected by the modifyVolumeStatus field, until such as a resourceexists.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#volumeattributesclass(Alpha) Using this field requires the VolumeAttributesClass feature gate to be enabled.",
+ MarkdownDescription: "volumeAttributesClassName may be used to set the VolumeAttributesClass used by this claim.If specified, the CSI driver will create or update the volume with the attributes definedin the corresponding VolumeAttributesClass. This has a different purpose than storageClassName,it can be changed after the claim is created. An empty string value means that no VolumeAttributesClasswill be applied to the claim but it's not allowed to reset this field to empty string once it is set.If unspecified and the PersistentVolumeClaim is unbound, the default VolumeAttributesClasswill be set by the persistentvolume controller if it exists.If the resource referred to by volumeAttributesClass does not exist, this PersistentVolumeClaim will beset to a Pending state, as reflected by the modifyVolumeStatus field, until such as a resourceexists.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#volumeattributesclass(Alpha) Using this field requires the VolumeAttributesClass feature gate to be enabled.",
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
"volume_mode": schema.StringAttribute{
Description: "volumeMode defines what type of volume is required by the claim.Value of Filesystem is implied when not included in claim spec.",
MarkdownDescription: "volumeMode defines what type of volume is required by the claim.Value of Filesystem is implied when not included in claim spec.",
@@ -14036,6 +14237,101 @@ func (r *AppsKubeblocksIoComponentDefinitionV1Alpha1Manifest) Schema(_ context.C
MarkdownDescription: "sources is the list of volume projections",
NestedObject: schema.NestedAttributeObject{
Attributes: map[string]schema.Attribute{
+ "cluster_trust_bundle": schema.SingleNestedAttribute{
+ Description: "ClusterTrustBundle allows a pod to access the '.spec.trustBundle' fieldof ClusterTrustBundle objects in an auto-updating file.Alpha, gated by the ClusterTrustBundleProjection feature gate.ClusterTrustBundle objects can either be selected by name, or by thecombination of signer name and a label selector.Kubelet performs aggressive normalization of the PEM contents writteninto the pod filesystem. Esoteric PEM features such as inter-blockcomments and block headers are stripped. Certificates are deduplicated.The ordering of certificates within the file is arbitrary, and Kubeletmay change the order over time.",
+ MarkdownDescription: "ClusterTrustBundle allows a pod to access the '.spec.trustBundle' fieldof ClusterTrustBundle objects in an auto-updating file.Alpha, gated by the ClusterTrustBundleProjection feature gate.ClusterTrustBundle objects can either be selected by name, or by thecombination of signer name and a label selector.Kubelet performs aggressive normalization of the PEM contents writteninto the pod filesystem. Esoteric PEM features such as inter-blockcomments and block headers are stripped. Certificates are deduplicated.The ordering of certificates within the file is arbitrary, and Kubeletmay change the order over time.",
+ Attributes: map[string]schema.Attribute{
+ "label_selector": schema.SingleNestedAttribute{
+ Description: "Select all ClusterTrustBundles that match this label selector. Only haseffect if signerName is set. Mutually-exclusive with name. If unset,interpreted as 'match nothing'. If set but empty, interpreted as 'matcheverything'.",
+ MarkdownDescription: "Select all ClusterTrustBundles that match this label selector. Only haseffect if signerName is set. Mutually-exclusive with name. If unset,interpreted as 'match nothing'. If set but empty, interpreted as 'matcheverything'.",
+ Attributes: map[string]schema.Attribute{
+ "match_expressions": schema.ListNestedAttribute{
+ Description: "matchExpressions is a list of label selector requirements. The requirements are ANDed.",
+ MarkdownDescription: "matchExpressions is a list of label selector requirements. The requirements are ANDed.",
+ NestedObject: schema.NestedAttributeObject{
+ Attributes: map[string]schema.Attribute{
+ "key": schema.StringAttribute{
+ Description: "key is the label key that the selector applies to.",
+ MarkdownDescription: "key is the label key that the selector applies to.",
+ Required: true,
+ Optional: false,
+ Computed: false,
+ },
+
+ "operator": schema.StringAttribute{
+ Description: "operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.",
+ MarkdownDescription: "operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.",
+ Required: true,
+ Optional: false,
+ Computed: false,
+ },
+
+ "values": schema.ListAttribute{
+ Description: "values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.",
+ MarkdownDescription: "values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+ },
+ },
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "match_labels": schema.MapAttribute{
+ Description: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.",
+ MarkdownDescription: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+ },
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "name": schema.StringAttribute{
+ Description: "Select a single ClusterTrustBundle by object name. Mutually-exclusivewith signerName and labelSelector.",
+ MarkdownDescription: "Select a single ClusterTrustBundle by object name. Mutually-exclusivewith signerName and labelSelector.",
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "optional": schema.BoolAttribute{
+ Description: "If true, don't block pod startup if the referenced ClusterTrustBundle(s)aren't available. If using name, then the named ClusterTrustBundle isallowed not to exist. If using signerName, then the combination ofsignerName and labelSelector is allowed to match zeroClusterTrustBundles.",
+ MarkdownDescription: "If true, don't block pod startup if the referenced ClusterTrustBundle(s)aren't available. If using name, then the named ClusterTrustBundle isallowed not to exist. If using signerName, then the combination ofsignerName and labelSelector is allowed to match zeroClusterTrustBundles.",
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "path": schema.StringAttribute{
+ Description: "Relative path from the volume root to write the bundle.",
+ MarkdownDescription: "Relative path from the volume root to write the bundle.",
+ Required: true,
+ Optional: false,
+ Computed: false,
+ },
+
+ "signer_name": schema.StringAttribute{
+ Description: "Select all ClusterTrustBundles that match this signer name.Mutually-exclusive with name. The contents of all selectedClusterTrustBundles will be unified and deduplicated.",
+ MarkdownDescription: "Select all ClusterTrustBundles that match this signer name.Mutually-exclusive with name. The contents of all selectedClusterTrustBundles will be unified and deduplicated.",
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+ },
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
"config_map": schema.SingleNestedAttribute{
Description: "configMap information about the configMap data to project",
MarkdownDescription: "configMap information about the configMap data to project",
@@ -15032,8 +15328,8 @@ func (r *AppsKubeblocksIoComponentDefinitionV1Alpha1Manifest) Schema(_ context.C
NestedObject: schema.NestedAttributeObject{
Attributes: map[string]schema.Attribute{
"app_protocol": schema.StringAttribute{
- Description: "The application protocol for this port.This is used as a hint for implementations to offer richer behavior for protocols that they understand.This field follows standard Kubernetes label syntax.Valid values are either:* Un-prefixed protocol names - reserved for IANA standard service names (as perRFC-6335 and https://www.iana.org/assignments/service-names).* Kubernetes-defined prefixed names: * 'kubernetes.io/h2c' - HTTP/2 over cleartext as described in https://www.rfc-editor.org/rfc/rfc7540 * 'kubernetes.io/ws' - WebSocket over cleartext as described in https://www.rfc-editor.org/rfc/rfc6455 * 'kubernetes.io/wss' - WebSocket over TLS as described in https://www.rfc-editor.org/rfc/rfc6455* Other protocols should use implementation-defined prefixed names such asmycompany.com/my-custom-protocol.",
- MarkdownDescription: "The application protocol for this port.This is used as a hint for implementations to offer richer behavior for protocols that they understand.This field follows standard Kubernetes label syntax.Valid values are either:* Un-prefixed protocol names - reserved for IANA standard service names (as perRFC-6335 and https://www.iana.org/assignments/service-names).* Kubernetes-defined prefixed names: * 'kubernetes.io/h2c' - HTTP/2 over cleartext as described in https://www.rfc-editor.org/rfc/rfc7540 * 'kubernetes.io/ws' - WebSocket over cleartext as described in https://www.rfc-editor.org/rfc/rfc6455 * 'kubernetes.io/wss' - WebSocket over TLS as described in https://www.rfc-editor.org/rfc/rfc6455* Other protocols should use implementation-defined prefixed names such asmycompany.com/my-custom-protocol.",
+ Description: "The application protocol for this port.This is used as a hint for implementations to offer richer behavior for protocols that they understand.This field follows standard Kubernetes label syntax.Valid values are either:* Un-prefixed protocol names - reserved for IANA standard service names (as perRFC-6335 and https://www.iana.org/assignments/service-names).* Kubernetes-defined prefixed names: * 'kubernetes.io/h2c' - HTTP/2 prior knowledge over cleartext as described in https://www.rfc-editor.org/rfc/rfc9113.html#name-starting-http-2-with-prior- * 'kubernetes.io/ws' - WebSocket over cleartext as described in https://www.rfc-editor.org/rfc/rfc6455 * 'kubernetes.io/wss' - WebSocket over TLS as described in https://www.rfc-editor.org/rfc/rfc6455* Other protocols should use implementation-defined prefixed names such asmycompany.com/my-custom-protocol.",
+ MarkdownDescription: "The application protocol for this port.This is used as a hint for implementations to offer richer behavior for protocols that they understand.This field follows standard Kubernetes label syntax.Valid values are either:* Un-prefixed protocol names - reserved for IANA standard service names (as perRFC-6335 and https://www.iana.org/assignments/service-names).* Kubernetes-defined prefixed names: * 'kubernetes.io/h2c' - HTTP/2 prior knowledge over cleartext as described in https://www.rfc-editor.org/rfc/rfc9113.html#name-starting-http-2-with-prior- * 'kubernetes.io/ws' - WebSocket over cleartext as described in https://www.rfc-editor.org/rfc/rfc6455 * 'kubernetes.io/wss' - WebSocket over TLS as described in https://www.rfc-editor.org/rfc/rfc6455* Other protocols should use implementation-defined prefixed names such asmycompany.com/my-custom-protocol.",
Required: false,
Optional: true,
Computed: false,
diff --git a/internal/provider/apps_kubeblocks_io_v1alpha1/apps_kubeblocks_io_component_v1alpha1_manifest.go b/internal/provider/apps_kubeblocks_io_v1alpha1/apps_kubeblocks_io_component_v1alpha1_manifest.go
index e66d93a69..ca10b8ba8 100644
--- a/internal/provider/apps_kubeblocks_io_v1alpha1/apps_kubeblocks_io_component_v1alpha1_manifest.go
+++ b/internal/provider/apps_kubeblocks_io_v1alpha1/apps_kubeblocks_io_component_v1alpha1_manifest.go
@@ -175,6 +175,8 @@ type AppsKubeblocksIoComponentV1Alpha1ManifestData struct {
} `tfsdk:"match_expressions" json:"matchExpressions,omitempty"`
MatchLabels *map[string]string `tfsdk:"match_labels" json:"matchLabels,omitempty"`
} `tfsdk:"label_selector" json:"labelSelector,omitempty"`
+ MatchLabelKeys *[]string `tfsdk:"match_label_keys" json:"matchLabelKeys,omitempty"`
+ MismatchLabelKeys *[]string `tfsdk:"mismatch_label_keys" json:"mismatchLabelKeys,omitempty"`
NamespaceSelector *struct {
MatchExpressions *[]struct {
Key *string `tfsdk:"key" json:"key,omitempty"`
@@ -197,6 +199,8 @@ type AppsKubeblocksIoComponentV1Alpha1ManifestData struct {
} `tfsdk:"match_expressions" json:"matchExpressions,omitempty"`
MatchLabels *map[string]string `tfsdk:"match_labels" json:"matchLabels,omitempty"`
} `tfsdk:"label_selector" json:"labelSelector,omitempty"`
+ MatchLabelKeys *[]string `tfsdk:"match_label_keys" json:"matchLabelKeys,omitempty"`
+ MismatchLabelKeys *[]string `tfsdk:"mismatch_label_keys" json:"mismatchLabelKeys,omitempty"`
NamespaceSelector *struct {
MatchExpressions *[]struct {
Key *string `tfsdk:"key" json:"key,omitempty"`
@@ -220,6 +224,8 @@ type AppsKubeblocksIoComponentV1Alpha1ManifestData struct {
} `tfsdk:"match_expressions" json:"matchExpressions,omitempty"`
MatchLabels *map[string]string `tfsdk:"match_labels" json:"matchLabels,omitempty"`
} `tfsdk:"label_selector" json:"labelSelector,omitempty"`
+ MatchLabelKeys *[]string `tfsdk:"match_label_keys" json:"matchLabelKeys,omitempty"`
+ MismatchLabelKeys *[]string `tfsdk:"mismatch_label_keys" json:"mismatchLabelKeys,omitempty"`
NamespaceSelector *struct {
MatchExpressions *[]struct {
Key *string `tfsdk:"key" json:"key,omitempty"`
@@ -242,6 +248,8 @@ type AppsKubeblocksIoComponentV1Alpha1ManifestData struct {
} `tfsdk:"match_expressions" json:"matchExpressions,omitempty"`
MatchLabels *map[string]string `tfsdk:"match_labels" json:"matchLabels,omitempty"`
} `tfsdk:"label_selector" json:"labelSelector,omitempty"`
+ MatchLabelKeys *[]string `tfsdk:"match_label_keys" json:"matchLabelKeys,omitempty"`
+ MismatchLabelKeys *[]string `tfsdk:"mismatch_label_keys" json:"mismatchLabelKeys,omitempty"`
NamespaceSelector *struct {
MatchExpressions *[]struct {
Key *string `tfsdk:"key" json:"key,omitempty"`
@@ -288,9 +296,6 @@ type AppsKubeblocksIoComponentV1Alpha1ManifestData struct {
Spec *struct {
AccessModes *map[string]string `tfsdk:"access_modes" json:"accessModes,omitempty"`
Resources *struct {
- Claims *[]struct {
- Name *string `tfsdk:"name" json:"name,omitempty"`
- } `tfsdk:"claims" json:"claims,omitempty"`
Limits *map[string]string `tfsdk:"limits" json:"limits,omitempty"`
Requests *map[string]string `tfsdk:"requests" json:"requests,omitempty"`
} `tfsdk:"resources" json:"resources,omitempty"`
@@ -406,9 +411,6 @@ type AppsKubeblocksIoComponentV1Alpha1ManifestData struct {
Namespace *string `tfsdk:"namespace" json:"namespace,omitempty"`
} `tfsdk:"data_source_ref" json:"dataSourceRef,omitempty"`
Resources *struct {
- Claims *[]struct {
- Name *string `tfsdk:"name" json:"name,omitempty"`
- } `tfsdk:"claims" json:"claims,omitempty"`
Limits *map[string]string `tfsdk:"limits" json:"limits,omitempty"`
Requests *map[string]string `tfsdk:"requests" json:"requests,omitempty"`
} `tfsdk:"resources" json:"resources,omitempty"`
@@ -420,9 +422,10 @@ type AppsKubeblocksIoComponentV1Alpha1ManifestData struct {
} `tfsdk:"match_expressions" json:"matchExpressions,omitempty"`
MatchLabels *map[string]string `tfsdk:"match_labels" json:"matchLabels,omitempty"`
} `tfsdk:"selector" json:"selector,omitempty"`
- StorageClassName *string `tfsdk:"storage_class_name" json:"storageClassName,omitempty"`
- VolumeMode *string `tfsdk:"volume_mode" json:"volumeMode,omitempty"`
- VolumeName *string `tfsdk:"volume_name" json:"volumeName,omitempty"`
+ StorageClassName *string `tfsdk:"storage_class_name" json:"storageClassName,omitempty"`
+ VolumeAttributesClassName *string `tfsdk:"volume_attributes_class_name" json:"volumeAttributesClassName,omitempty"`
+ VolumeMode *string `tfsdk:"volume_mode" json:"volumeMode,omitempty"`
+ VolumeName *string `tfsdk:"volume_name" json:"volumeName,omitempty"`
} `tfsdk:"spec" json:"spec,omitempty"`
} `tfsdk:"volume_claim_template" json:"volumeClaimTemplate,omitempty"`
} `tfsdk:"ephemeral" json:"ephemeral,omitempty"`
@@ -503,6 +506,20 @@ type AppsKubeblocksIoComponentV1Alpha1ManifestData struct {
Projected *struct {
DefaultMode *int64 `tfsdk:"default_mode" json:"defaultMode,omitempty"`
Sources *[]struct {
+ ClusterTrustBundle *struct {
+ LabelSelector *struct {
+ MatchExpressions *[]struct {
+ Key *string `tfsdk:"key" json:"key,omitempty"`
+ Operator *string `tfsdk:"operator" json:"operator,omitempty"`
+ Values *[]string `tfsdk:"values" json:"values,omitempty"`
+ } `tfsdk:"match_expressions" json:"matchExpressions,omitempty"`
+ MatchLabels *map[string]string `tfsdk:"match_labels" json:"matchLabels,omitempty"`
+ } `tfsdk:"label_selector" json:"labelSelector,omitempty"`
+ Name *string `tfsdk:"name" json:"name,omitempty"`
+ Optional *bool `tfsdk:"optional" json:"optional,omitempty"`
+ Path *string `tfsdk:"path" json:"path,omitempty"`
+ SignerName *string `tfsdk:"signer_name" json:"signerName,omitempty"`
+ } `tfsdk:"cluster_trust_bundle" json:"clusterTrustBundle,omitempty"`
ConfigMap *struct {
Items *[]struct {
Key *string `tfsdk:"key" json:"key,omitempty"`
@@ -661,6 +678,8 @@ type AppsKubeblocksIoComponentV1Alpha1ManifestData struct {
} `tfsdk:"match_expressions" json:"matchExpressions,omitempty"`
MatchLabels *map[string]string `tfsdk:"match_labels" json:"matchLabels,omitempty"`
} `tfsdk:"label_selector" json:"labelSelector,omitempty"`
+ MatchLabelKeys *[]string `tfsdk:"match_label_keys" json:"matchLabelKeys,omitempty"`
+ MismatchLabelKeys *[]string `tfsdk:"mismatch_label_keys" json:"mismatchLabelKeys,omitempty"`
NamespaceSelector *struct {
MatchExpressions *[]struct {
Key *string `tfsdk:"key" json:"key,omitempty"`
@@ -683,6 +702,8 @@ type AppsKubeblocksIoComponentV1Alpha1ManifestData struct {
} `tfsdk:"match_expressions" json:"matchExpressions,omitempty"`
MatchLabels *map[string]string `tfsdk:"match_labels" json:"matchLabels,omitempty"`
} `tfsdk:"label_selector" json:"labelSelector,omitempty"`
+ MatchLabelKeys *[]string `tfsdk:"match_label_keys" json:"matchLabelKeys,omitempty"`
+ MismatchLabelKeys *[]string `tfsdk:"mismatch_label_keys" json:"mismatchLabelKeys,omitempty"`
NamespaceSelector *struct {
MatchExpressions *[]struct {
Key *string `tfsdk:"key" json:"key,omitempty"`
@@ -706,6 +727,8 @@ type AppsKubeblocksIoComponentV1Alpha1ManifestData struct {
} `tfsdk:"match_expressions" json:"matchExpressions,omitempty"`
MatchLabels *map[string]string `tfsdk:"match_labels" json:"matchLabels,omitempty"`
} `tfsdk:"label_selector" json:"labelSelector,omitempty"`
+ MatchLabelKeys *[]string `tfsdk:"match_label_keys" json:"matchLabelKeys,omitempty"`
+ MismatchLabelKeys *[]string `tfsdk:"mismatch_label_keys" json:"mismatchLabelKeys,omitempty"`
NamespaceSelector *struct {
MatchExpressions *[]struct {
Key *string `tfsdk:"key" json:"key,omitempty"`
@@ -728,6 +751,8 @@ type AppsKubeblocksIoComponentV1Alpha1ManifestData struct {
} `tfsdk:"match_expressions" json:"matchExpressions,omitempty"`
MatchLabels *map[string]string `tfsdk:"match_labels" json:"matchLabels,omitempty"`
} `tfsdk:"label_selector" json:"labelSelector,omitempty"`
+ MatchLabelKeys *[]string `tfsdk:"match_label_keys" json:"matchLabelKeys,omitempty"`
+ MismatchLabelKeys *[]string `tfsdk:"mismatch_label_keys" json:"mismatchLabelKeys,omitempty"`
NamespaceSelector *struct {
MatchExpressions *[]struct {
Key *string `tfsdk:"key" json:"key,omitempty"`
@@ -868,9 +893,6 @@ type AppsKubeblocksIoComponentV1Alpha1ManifestData struct {
Spec *struct {
AccessModes *map[string]string `tfsdk:"access_modes" json:"accessModes,omitempty"`
Resources *struct {
- Claims *[]struct {
- Name *string `tfsdk:"name" json:"name,omitempty"`
- } `tfsdk:"claims" json:"claims,omitempty"`
Limits *map[string]string `tfsdk:"limits" json:"limits,omitempty"`
Requests *map[string]string `tfsdk:"requests" json:"requests,omitempty"`
} `tfsdk:"resources" json:"resources,omitempty"`
@@ -978,9 +1000,6 @@ type AppsKubeblocksIoComponentV1Alpha1ManifestData struct {
Namespace *string `tfsdk:"namespace" json:"namespace,omitempty"`
} `tfsdk:"data_source_ref" json:"dataSourceRef,omitempty"`
Resources *struct {
- Claims *[]struct {
- Name *string `tfsdk:"name" json:"name,omitempty"`
- } `tfsdk:"claims" json:"claims,omitempty"`
Limits *map[string]string `tfsdk:"limits" json:"limits,omitempty"`
Requests *map[string]string `tfsdk:"requests" json:"requests,omitempty"`
} `tfsdk:"resources" json:"resources,omitempty"`
@@ -992,9 +1011,10 @@ type AppsKubeblocksIoComponentV1Alpha1ManifestData struct {
} `tfsdk:"match_expressions" json:"matchExpressions,omitempty"`
MatchLabels *map[string]string `tfsdk:"match_labels" json:"matchLabels,omitempty"`
} `tfsdk:"selector" json:"selector,omitempty"`
- StorageClassName *string `tfsdk:"storage_class_name" json:"storageClassName,omitempty"`
- VolumeMode *string `tfsdk:"volume_mode" json:"volumeMode,omitempty"`
- VolumeName *string `tfsdk:"volume_name" json:"volumeName,omitempty"`
+ StorageClassName *string `tfsdk:"storage_class_name" json:"storageClassName,omitempty"`
+ VolumeAttributesClassName *string `tfsdk:"volume_attributes_class_name" json:"volumeAttributesClassName,omitempty"`
+ VolumeMode *string `tfsdk:"volume_mode" json:"volumeMode,omitempty"`
+ VolumeName *string `tfsdk:"volume_name" json:"volumeName,omitempty"`
} `tfsdk:"spec" json:"spec,omitempty"`
} `tfsdk:"volume_claim_template" json:"volumeClaimTemplate,omitempty"`
} `tfsdk:"ephemeral" json:"ephemeral,omitempty"`
@@ -1075,6 +1095,20 @@ type AppsKubeblocksIoComponentV1Alpha1ManifestData struct {
Projected *struct {
DefaultMode *int64 `tfsdk:"default_mode" json:"defaultMode,omitempty"`
Sources *[]struct {
+ ClusterTrustBundle *struct {
+ LabelSelector *struct {
+ MatchExpressions *[]struct {
+ Key *string `tfsdk:"key" json:"key,omitempty"`
+ Operator *string `tfsdk:"operator" json:"operator,omitempty"`
+ Values *[]string `tfsdk:"values" json:"values,omitempty"`
+ } `tfsdk:"match_expressions" json:"matchExpressions,omitempty"`
+ MatchLabels *map[string]string `tfsdk:"match_labels" json:"matchLabels,omitempty"`
+ } `tfsdk:"label_selector" json:"labelSelector,omitempty"`
+ Name *string `tfsdk:"name" json:"name,omitempty"`
+ Optional *bool `tfsdk:"optional" json:"optional,omitempty"`
+ Path *string `tfsdk:"path" json:"path,omitempty"`
+ SignerName *string `tfsdk:"signer_name" json:"signerName,omitempty"`
+ } `tfsdk:"cluster_trust_bundle" json:"clusterTrustBundle,omitempty"`
ConfigMap *struct {
Items *[]struct {
Key *string `tfsdk:"key" json:"key,omitempty"`
@@ -2071,8 +2105,8 @@ func (r *AppsKubeblocksIoComponentV1Alpha1Manifest) Schema(_ context.Context, _
MarkdownDescription: "Required. A pod affinity term, associated with the corresponding weight.",
Attributes: map[string]schema.Attribute{
"label_selector": schema.SingleNestedAttribute{
- Description: "A label query over a set of resources, in this case pods.",
- MarkdownDescription: "A label query over a set of resources, in this case pods.",
+ Description: "A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods.",
+ MarkdownDescription: "A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods.",
Attributes: map[string]schema.Attribute{
"match_expressions": schema.ListNestedAttribute{
Description: "matchExpressions is a list of label selector requirements. The requirements are ANDed.",
@@ -2124,6 +2158,24 @@ func (r *AppsKubeblocksIoComponentV1Alpha1Manifest) Schema(_ context.Context, _
Computed: false,
},
+ "match_label_keys": schema.ListAttribute{
+ Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "mismatch_label_keys": schema.ListAttribute{
+ Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
"namespace_selector": schema.SingleNestedAttribute{
Description: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.",
MarkdownDescription: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.",
@@ -2220,8 +2272,8 @@ func (r *AppsKubeblocksIoComponentV1Alpha1Manifest) Schema(_ context.Context, _
NestedObject: schema.NestedAttributeObject{
Attributes: map[string]schema.Attribute{
"label_selector": schema.SingleNestedAttribute{
- Description: "A label query over a set of resources, in this case pods.",
- MarkdownDescription: "A label query over a set of resources, in this case pods.",
+ Description: "A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods.",
+ MarkdownDescription: "A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods.",
Attributes: map[string]schema.Attribute{
"match_expressions": schema.ListNestedAttribute{
Description: "matchExpressions is a list of label selector requirements. The requirements are ANDed.",
@@ -2273,6 +2325,24 @@ func (r *AppsKubeblocksIoComponentV1Alpha1Manifest) Schema(_ context.Context, _
Computed: false,
},
+ "match_label_keys": schema.ListAttribute{
+ Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "mismatch_label_keys": schema.ListAttribute{
+ Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
"namespace_selector": schema.SingleNestedAttribute{
Description: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.",
MarkdownDescription: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.",
@@ -2369,8 +2439,8 @@ func (r *AppsKubeblocksIoComponentV1Alpha1Manifest) Schema(_ context.Context, _
MarkdownDescription: "Required. A pod affinity term, associated with the corresponding weight.",
Attributes: map[string]schema.Attribute{
"label_selector": schema.SingleNestedAttribute{
- Description: "A label query over a set of resources, in this case pods.",
- MarkdownDescription: "A label query over a set of resources, in this case pods.",
+ Description: "A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods.",
+ MarkdownDescription: "A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods.",
Attributes: map[string]schema.Attribute{
"match_expressions": schema.ListNestedAttribute{
Description: "matchExpressions is a list of label selector requirements. The requirements are ANDed.",
@@ -2422,6 +2492,24 @@ func (r *AppsKubeblocksIoComponentV1Alpha1Manifest) Schema(_ context.Context, _
Computed: false,
},
+ "match_label_keys": schema.ListAttribute{
+ Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "mismatch_label_keys": schema.ListAttribute{
+ Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
"namespace_selector": schema.SingleNestedAttribute{
Description: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.",
MarkdownDescription: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.",
@@ -2518,8 +2606,8 @@ func (r *AppsKubeblocksIoComponentV1Alpha1Manifest) Schema(_ context.Context, _
NestedObject: schema.NestedAttributeObject{
Attributes: map[string]schema.Attribute{
"label_selector": schema.SingleNestedAttribute{
- Description: "A label query over a set of resources, in this case pods.",
- MarkdownDescription: "A label query over a set of resources, in this case pods.",
+ Description: "A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods.",
+ MarkdownDescription: "A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods.",
Attributes: map[string]schema.Attribute{
"match_expressions": schema.ListNestedAttribute{
Description: "matchExpressions is a list of label selector requirements. The requirements are ANDed.",
@@ -2571,6 +2659,24 @@ func (r *AppsKubeblocksIoComponentV1Alpha1Manifest) Schema(_ context.Context, _
Computed: false,
},
+ "match_label_keys": schema.ListAttribute{
+ Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "mismatch_label_keys": schema.ListAttribute{
+ Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
"namespace_selector": schema.SingleNestedAttribute{
Description: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.",
MarkdownDescription: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.",
@@ -2891,25 +2997,6 @@ func (r *AppsKubeblocksIoComponentV1Alpha1Manifest) Schema(_ context.Context, _
Description: "Represents the minimum resources the volume should have.If the RecoverVolumeExpansionFailure feature is enabled, users are allowed to specify resource requirements thatare lower than the previous value but must still be higher than the capacity recorded in the status field of the claim.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources.",
MarkdownDescription: "Represents the minimum resources the volume should have.If the RecoverVolumeExpansionFailure feature is enabled, users are allowed to specify resource requirements thatare lower than the previous value but must still be higher than the capacity recorded in the status field of the claim.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources.",
Attributes: map[string]schema.Attribute{
- "claims": schema.ListNestedAttribute{
- Description: "Claims lists the names of resources, defined in spec.resourceClaims,that are used by this container.This is an alpha field and requires enabling theDynamicResourceAllocation feature gate.This field is immutable. It can only be set for containers.",
- MarkdownDescription: "Claims lists the names of resources, defined in spec.resourceClaims,that are used by this container.This is an alpha field and requires enabling theDynamicResourceAllocation feature gate.This field is immutable. It can only be set for containers.",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "name": schema.StringAttribute{
- Description: "Name must match the name of one entry in pod.spec.resourceClaims ofthe Pod where this field is used. It makes that resource availableinside a container.",
- MarkdownDescription: "Name must match the name of one entry in pod.spec.resourceClaims ofthe Pod where this field is used. It makes that resource availableinside a container.",
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
"limits": schema.MapAttribute{
Description: "Limits describes the maximum amount of compute resources allowed.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/",
MarkdownDescription: "Limits describes the maximum amount of compute resources allowed.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/",
@@ -3677,25 +3764,6 @@ func (r *AppsKubeblocksIoComponentV1Alpha1Manifest) Schema(_ context.Context, _
Description: "resources represents the minimum resources the volume should have.If RecoverVolumeExpansionFailure feature is enabled users are allowed to specify resource requirementsthat are lower than previous value but must still be higher than capacity recorded in thestatus field of the claim.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources",
MarkdownDescription: "resources represents the minimum resources the volume should have.If RecoverVolumeExpansionFailure feature is enabled users are allowed to specify resource requirementsthat are lower than previous value but must still be higher than capacity recorded in thestatus field of the claim.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources",
Attributes: map[string]schema.Attribute{
- "claims": schema.ListNestedAttribute{
- Description: "Claims lists the names of resources, defined in spec.resourceClaims,that are used by this container.This is an alpha field and requires enabling theDynamicResourceAllocation feature gate.This field is immutable. It can only be set for containers.",
- MarkdownDescription: "Claims lists the names of resources, defined in spec.resourceClaims,that are used by this container.This is an alpha field and requires enabling theDynamicResourceAllocation feature gate.This field is immutable. It can only be set for containers.",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "name": schema.StringAttribute{
- Description: "Name must match the name of one entry in pod.spec.resourceClaims ofthe Pod where this field is used. It makes that resource availableinside a container.",
- MarkdownDescription: "Name must match the name of one entry in pod.spec.resourceClaims ofthe Pod where this field is used. It makes that resource availableinside a container.",
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
"limits": schema.MapAttribute{
Description: "Limits describes the maximum amount of compute resources allowed.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/",
MarkdownDescription: "Limits describes the maximum amount of compute resources allowed.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/",
@@ -3781,6 +3849,14 @@ func (r *AppsKubeblocksIoComponentV1Alpha1Manifest) Schema(_ context.Context, _
Computed: false,
},
+ "volume_attributes_class_name": schema.StringAttribute{
+ Description: "volumeAttributesClassName may be used to set the VolumeAttributesClass used by this claim.If specified, the CSI driver will create or update the volume with the attributes definedin the corresponding VolumeAttributesClass. This has a different purpose than storageClassName,it can be changed after the claim is created. An empty string value means that no VolumeAttributesClasswill be applied to the claim but it's not allowed to reset this field to empty string once it is set.If unspecified and the PersistentVolumeClaim is unbound, the default VolumeAttributesClasswill be set by the persistentvolume controller if it exists.If the resource referred to by volumeAttributesClass does not exist, this PersistentVolumeClaim will beset to a Pending state, as reflected by the modifyVolumeStatus field, until such as a resourceexists.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#volumeattributesclass(Alpha) Using this field requires the VolumeAttributesClass feature gate to be enabled.",
+ MarkdownDescription: "volumeAttributesClassName may be used to set the VolumeAttributesClass used by this claim.If specified, the CSI driver will create or update the volume with the attributes definedin the corresponding VolumeAttributesClass. This has a different purpose than storageClassName,it can be changed after the claim is created. An empty string value means that no VolumeAttributesClasswill be applied to the claim but it's not allowed to reset this field to empty string once it is set.If unspecified and the PersistentVolumeClaim is unbound, the default VolumeAttributesClasswill be set by the persistentvolume controller if it exists.If the resource referred to by volumeAttributesClass does not exist, this PersistentVolumeClaim will beset to a Pending state, as reflected by the modifyVolumeStatus field, until such as a resourceexists.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#volumeattributesclass(Alpha) Using this field requires the VolumeAttributesClass feature gate to be enabled.",
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
"volume_mode": schema.StringAttribute{
Description: "volumeMode defines what type of volume is required by the claim.Value of Filesystem is implied when not included in claim spec.",
MarkdownDescription: "volumeMode defines what type of volume is required by the claim.Value of Filesystem is implied when not included in claim spec.",
@@ -4327,6 +4403,101 @@ func (r *AppsKubeblocksIoComponentV1Alpha1Manifest) Schema(_ context.Context, _
MarkdownDescription: "sources is the list of volume projections",
NestedObject: schema.NestedAttributeObject{
Attributes: map[string]schema.Attribute{
+ "cluster_trust_bundle": schema.SingleNestedAttribute{
+ Description: "ClusterTrustBundle allows a pod to access the '.spec.trustBundle' fieldof ClusterTrustBundle objects in an auto-updating file.Alpha, gated by the ClusterTrustBundleProjection feature gate.ClusterTrustBundle objects can either be selected by name, or by thecombination of signer name and a label selector.Kubelet performs aggressive normalization of the PEM contents writteninto the pod filesystem. Esoteric PEM features such as inter-blockcomments and block headers are stripped. Certificates are deduplicated.The ordering of certificates within the file is arbitrary, and Kubeletmay change the order over time.",
+ MarkdownDescription: "ClusterTrustBundle allows a pod to access the '.spec.trustBundle' fieldof ClusterTrustBundle objects in an auto-updating file.Alpha, gated by the ClusterTrustBundleProjection feature gate.ClusterTrustBundle objects can either be selected by name, or by thecombination of signer name and a label selector.Kubelet performs aggressive normalization of the PEM contents writteninto the pod filesystem. Esoteric PEM features such as inter-blockcomments and block headers are stripped. Certificates are deduplicated.The ordering of certificates within the file is arbitrary, and Kubeletmay change the order over time.",
+ Attributes: map[string]schema.Attribute{
+ "label_selector": schema.SingleNestedAttribute{
+ Description: "Select all ClusterTrustBundles that match this label selector. Only haseffect if signerName is set. Mutually-exclusive with name. If unset,interpreted as 'match nothing'. If set but empty, interpreted as 'matcheverything'.",
+ MarkdownDescription: "Select all ClusterTrustBundles that match this label selector. Only haseffect if signerName is set. Mutually-exclusive with name. If unset,interpreted as 'match nothing'. If set but empty, interpreted as 'matcheverything'.",
+ Attributes: map[string]schema.Attribute{
+ "match_expressions": schema.ListNestedAttribute{
+ Description: "matchExpressions is a list of label selector requirements. The requirements are ANDed.",
+ MarkdownDescription: "matchExpressions is a list of label selector requirements. The requirements are ANDed.",
+ NestedObject: schema.NestedAttributeObject{
+ Attributes: map[string]schema.Attribute{
+ "key": schema.StringAttribute{
+ Description: "key is the label key that the selector applies to.",
+ MarkdownDescription: "key is the label key that the selector applies to.",
+ Required: true,
+ Optional: false,
+ Computed: false,
+ },
+
+ "operator": schema.StringAttribute{
+ Description: "operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.",
+ MarkdownDescription: "operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.",
+ Required: true,
+ Optional: false,
+ Computed: false,
+ },
+
+ "values": schema.ListAttribute{
+ Description: "values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.",
+ MarkdownDescription: "values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+ },
+ },
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "match_labels": schema.MapAttribute{
+ Description: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.",
+ MarkdownDescription: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+ },
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "name": schema.StringAttribute{
+ Description: "Select a single ClusterTrustBundle by object name. Mutually-exclusivewith signerName and labelSelector.",
+ MarkdownDescription: "Select a single ClusterTrustBundle by object name. Mutually-exclusivewith signerName and labelSelector.",
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "optional": schema.BoolAttribute{
+ Description: "If true, don't block pod startup if the referenced ClusterTrustBundle(s)aren't available. If using name, then the named ClusterTrustBundle isallowed not to exist. If using signerName, then the combination ofsignerName and labelSelector is allowed to match zeroClusterTrustBundles.",
+ MarkdownDescription: "If true, don't block pod startup if the referenced ClusterTrustBundle(s)aren't available. If using name, then the named ClusterTrustBundle isallowed not to exist. If using signerName, then the combination ofsignerName and labelSelector is allowed to match zeroClusterTrustBundles.",
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "path": schema.StringAttribute{
+ Description: "Relative path from the volume root to write the bundle.",
+ MarkdownDescription: "Relative path from the volume root to write the bundle.",
+ Required: true,
+ Optional: false,
+ Computed: false,
+ },
+
+ "signer_name": schema.StringAttribute{
+ Description: "Select all ClusterTrustBundles that match this signer name.Mutually-exclusive with name. The contents of all selectedClusterTrustBundles will be unified and deduplicated.",
+ MarkdownDescription: "Select all ClusterTrustBundles that match this signer name.Mutually-exclusive with name. The contents of all selectedClusterTrustBundles will be unified and deduplicated.",
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+ },
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
"config_map": schema.SingleNestedAttribute{
Description: "configMap information about the configMap data to project",
MarkdownDescription: "configMap information about the configMap data to project",
@@ -5324,8 +5495,8 @@ func (r *AppsKubeblocksIoComponentV1Alpha1Manifest) Schema(_ context.Context, _
MarkdownDescription: "Required. A pod affinity term, associated with the corresponding weight.",
Attributes: map[string]schema.Attribute{
"label_selector": schema.SingleNestedAttribute{
- Description: "A label query over a set of resources, in this case pods.",
- MarkdownDescription: "A label query over a set of resources, in this case pods.",
+ Description: "A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods.",
+ MarkdownDescription: "A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods.",
Attributes: map[string]schema.Attribute{
"match_expressions": schema.ListNestedAttribute{
Description: "matchExpressions is a list of label selector requirements. The requirements are ANDed.",
@@ -5377,6 +5548,24 @@ func (r *AppsKubeblocksIoComponentV1Alpha1Manifest) Schema(_ context.Context, _
Computed: false,
},
+ "match_label_keys": schema.ListAttribute{
+ Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "mismatch_label_keys": schema.ListAttribute{
+ Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
"namespace_selector": schema.SingleNestedAttribute{
Description: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.",
MarkdownDescription: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.",
@@ -5473,8 +5662,8 @@ func (r *AppsKubeblocksIoComponentV1Alpha1Manifest) Schema(_ context.Context, _
NestedObject: schema.NestedAttributeObject{
Attributes: map[string]schema.Attribute{
"label_selector": schema.SingleNestedAttribute{
- Description: "A label query over a set of resources, in this case pods.",
- MarkdownDescription: "A label query over a set of resources, in this case pods.",
+ Description: "A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods.",
+ MarkdownDescription: "A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods.",
Attributes: map[string]schema.Attribute{
"match_expressions": schema.ListNestedAttribute{
Description: "matchExpressions is a list of label selector requirements. The requirements are ANDed.",
@@ -5526,6 +5715,24 @@ func (r *AppsKubeblocksIoComponentV1Alpha1Manifest) Schema(_ context.Context, _
Computed: false,
},
+ "match_label_keys": schema.ListAttribute{
+ Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "mismatch_label_keys": schema.ListAttribute{
+ Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
"namespace_selector": schema.SingleNestedAttribute{
Description: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.",
MarkdownDescription: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.",
@@ -5622,8 +5829,8 @@ func (r *AppsKubeblocksIoComponentV1Alpha1Manifest) Schema(_ context.Context, _
MarkdownDescription: "Required. A pod affinity term, associated with the corresponding weight.",
Attributes: map[string]schema.Attribute{
"label_selector": schema.SingleNestedAttribute{
- Description: "A label query over a set of resources, in this case pods.",
- MarkdownDescription: "A label query over a set of resources, in this case pods.",
+ Description: "A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods.",
+ MarkdownDescription: "A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods.",
Attributes: map[string]schema.Attribute{
"match_expressions": schema.ListNestedAttribute{
Description: "matchExpressions is a list of label selector requirements. The requirements are ANDed.",
@@ -5675,6 +5882,24 @@ func (r *AppsKubeblocksIoComponentV1Alpha1Manifest) Schema(_ context.Context, _
Computed: false,
},
+ "match_label_keys": schema.ListAttribute{
+ Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "mismatch_label_keys": schema.ListAttribute{
+ Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
"namespace_selector": schema.SingleNestedAttribute{
Description: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.",
MarkdownDescription: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.",
@@ -5771,8 +5996,8 @@ func (r *AppsKubeblocksIoComponentV1Alpha1Manifest) Schema(_ context.Context, _
NestedObject: schema.NestedAttributeObject{
Attributes: map[string]schema.Attribute{
"label_selector": schema.SingleNestedAttribute{
- Description: "A label query over a set of resources, in this case pods.",
- MarkdownDescription: "A label query over a set of resources, in this case pods.",
+ Description: "A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods.",
+ MarkdownDescription: "A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods.",
Attributes: map[string]schema.Attribute{
"match_expressions": schema.ListNestedAttribute{
Description: "matchExpressions is a list of label selector requirements. The requirements are ANDed.",
@@ -5824,6 +6049,24 @@ func (r *AppsKubeblocksIoComponentV1Alpha1Manifest) Schema(_ context.Context, _
Computed: false,
},
+ "match_label_keys": schema.ListAttribute{
+ Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "mismatch_label_keys": schema.ListAttribute{
+ Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
"namespace_selector": schema.SingleNestedAttribute{
Description: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.",
MarkdownDescription: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.",
@@ -6430,8 +6673,8 @@ func (r *AppsKubeblocksIoComponentV1Alpha1Manifest) Schema(_ context.Context, _
NestedObject: schema.NestedAttributeObject{
Attributes: map[string]schema.Attribute{
"app_protocol": schema.StringAttribute{
- Description: "The application protocol for this port.This is used as a hint for implementations to offer richer behavior for protocols that they understand.This field follows standard Kubernetes label syntax.Valid values are either:* Un-prefixed protocol names - reserved for IANA standard service names (as perRFC-6335 and https://www.iana.org/assignments/service-names).* Kubernetes-defined prefixed names: * 'kubernetes.io/h2c' - HTTP/2 over cleartext as described in https://www.rfc-editor.org/rfc/rfc7540 * 'kubernetes.io/ws' - WebSocket over cleartext as described in https://www.rfc-editor.org/rfc/rfc6455 * 'kubernetes.io/wss' - WebSocket over TLS as described in https://www.rfc-editor.org/rfc/rfc6455* Other protocols should use implementation-defined prefixed names such asmycompany.com/my-custom-protocol.",
- MarkdownDescription: "The application protocol for this port.This is used as a hint for implementations to offer richer behavior for protocols that they understand.This field follows standard Kubernetes label syntax.Valid values are either:* Un-prefixed protocol names - reserved for IANA standard service names (as perRFC-6335 and https://www.iana.org/assignments/service-names).* Kubernetes-defined prefixed names: * 'kubernetes.io/h2c' - HTTP/2 over cleartext as described in https://www.rfc-editor.org/rfc/rfc7540 * 'kubernetes.io/ws' - WebSocket over cleartext as described in https://www.rfc-editor.org/rfc/rfc6455 * 'kubernetes.io/wss' - WebSocket over TLS as described in https://www.rfc-editor.org/rfc/rfc6455* Other protocols should use implementation-defined prefixed names such asmycompany.com/my-custom-protocol.",
+ Description: "The application protocol for this port.This is used as a hint for implementations to offer richer behavior for protocols that they understand.This field follows standard Kubernetes label syntax.Valid values are either:* Un-prefixed protocol names - reserved for IANA standard service names (as perRFC-6335 and https://www.iana.org/assignments/service-names).* Kubernetes-defined prefixed names: * 'kubernetes.io/h2c' - HTTP/2 prior knowledge over cleartext as described in https://www.rfc-editor.org/rfc/rfc9113.html#name-starting-http-2-with-prior- * 'kubernetes.io/ws' - WebSocket over cleartext as described in https://www.rfc-editor.org/rfc/rfc6455 * 'kubernetes.io/wss' - WebSocket over TLS as described in https://www.rfc-editor.org/rfc/rfc6455* Other protocols should use implementation-defined prefixed names such asmycompany.com/my-custom-protocol.",
+ MarkdownDescription: "The application protocol for this port.This is used as a hint for implementations to offer richer behavior for protocols that they understand.This field follows standard Kubernetes label syntax.Valid values are either:* Un-prefixed protocol names - reserved for IANA standard service names (as perRFC-6335 and https://www.iana.org/assignments/service-names).* Kubernetes-defined prefixed names: * 'kubernetes.io/h2c' - HTTP/2 prior knowledge over cleartext as described in https://www.rfc-editor.org/rfc/rfc9113.html#name-starting-http-2-with-prior- * 'kubernetes.io/ws' - WebSocket over cleartext as described in https://www.rfc-editor.org/rfc/rfc6455 * 'kubernetes.io/wss' - WebSocket over TLS as described in https://www.rfc-editor.org/rfc/rfc6455* Other protocols should use implementation-defined prefixed names such asmycompany.com/my-custom-protocol.",
Required: false,
Optional: true,
Computed: false,
@@ -6825,25 +7068,6 @@ func (r *AppsKubeblocksIoComponentV1Alpha1Manifest) Schema(_ context.Context, _
Description: "Represents the minimum resources the volume should have.If the RecoverVolumeExpansionFailure feature is enabled, users are allowed to specify resource requirements thatare lower than the previous value but must still be higher than the capacity recorded in the status field of the claim.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources.",
MarkdownDescription: "Represents the minimum resources the volume should have.If the RecoverVolumeExpansionFailure feature is enabled, users are allowed to specify resource requirements thatare lower than the previous value but must still be higher than the capacity recorded in the status field of the claim.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources.",
Attributes: map[string]schema.Attribute{
- "claims": schema.ListNestedAttribute{
- Description: "Claims lists the names of resources, defined in spec.resourceClaims,that are used by this container.This is an alpha field and requires enabling theDynamicResourceAllocation feature gate.This field is immutable. It can only be set for containers.",
- MarkdownDescription: "Claims lists the names of resources, defined in spec.resourceClaims,that are used by this container.This is an alpha field and requires enabling theDynamicResourceAllocation feature gate.This field is immutable. It can only be set for containers.",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "name": schema.StringAttribute{
- Description: "Name must match the name of one entry in pod.spec.resourceClaims ofthe Pod where this field is used. It makes that resource availableinside a container.",
- MarkdownDescription: "Name must match the name of one entry in pod.spec.resourceClaims ofthe Pod where this field is used. It makes that resource availableinside a container.",
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
"limits": schema.MapAttribute{
Description: "Limits describes the maximum amount of compute resources allowed.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/",
MarkdownDescription: "Limits describes the maximum amount of compute resources allowed.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/",
@@ -7552,25 +7776,6 @@ func (r *AppsKubeblocksIoComponentV1Alpha1Manifest) Schema(_ context.Context, _
Description: "resources represents the minimum resources the volume should have.If RecoverVolumeExpansionFailure feature is enabled users are allowed to specify resource requirementsthat are lower than previous value but must still be higher than capacity recorded in thestatus field of the claim.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources",
MarkdownDescription: "resources represents the minimum resources the volume should have.If RecoverVolumeExpansionFailure feature is enabled users are allowed to specify resource requirementsthat are lower than previous value but must still be higher than capacity recorded in thestatus field of the claim.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources",
Attributes: map[string]schema.Attribute{
- "claims": schema.ListNestedAttribute{
- Description: "Claims lists the names of resources, defined in spec.resourceClaims,that are used by this container.This is an alpha field and requires enabling theDynamicResourceAllocation feature gate.This field is immutable. It can only be set for containers.",
- MarkdownDescription: "Claims lists the names of resources, defined in spec.resourceClaims,that are used by this container.This is an alpha field and requires enabling theDynamicResourceAllocation feature gate.This field is immutable. It can only be set for containers.",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "name": schema.StringAttribute{
- Description: "Name must match the name of one entry in pod.spec.resourceClaims ofthe Pod where this field is used. It makes that resource availableinside a container.",
- MarkdownDescription: "Name must match the name of one entry in pod.spec.resourceClaims ofthe Pod where this field is used. It makes that resource availableinside a container.",
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
"limits": schema.MapAttribute{
Description: "Limits describes the maximum amount of compute resources allowed.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/",
MarkdownDescription: "Limits describes the maximum amount of compute resources allowed.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/",
@@ -7656,6 +7861,14 @@ func (r *AppsKubeblocksIoComponentV1Alpha1Manifest) Schema(_ context.Context, _
Computed: false,
},
+ "volume_attributes_class_name": schema.StringAttribute{
+ Description: "volumeAttributesClassName may be used to set the VolumeAttributesClass used by this claim.If specified, the CSI driver will create or update the volume with the attributes definedin the corresponding VolumeAttributesClass. This has a different purpose than storageClassName,it can be changed after the claim is created. An empty string value means that no VolumeAttributesClasswill be applied to the claim but it's not allowed to reset this field to empty string once it is set.If unspecified and the PersistentVolumeClaim is unbound, the default VolumeAttributesClasswill be set by the persistentvolume controller if it exists.If the resource referred to by volumeAttributesClass does not exist, this PersistentVolumeClaim will beset to a Pending state, as reflected by the modifyVolumeStatus field, until such as a resourceexists.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#volumeattributesclass(Alpha) Using this field requires the VolumeAttributesClass feature gate to be enabled.",
+ MarkdownDescription: "volumeAttributesClassName may be used to set the VolumeAttributesClass used by this claim.If specified, the CSI driver will create or update the volume with the attributes definedin the corresponding VolumeAttributesClass. This has a different purpose than storageClassName,it can be changed after the claim is created. An empty string value means that no VolumeAttributesClasswill be applied to the claim but it's not allowed to reset this field to empty string once it is set.If unspecified and the PersistentVolumeClaim is unbound, the default VolumeAttributesClasswill be set by the persistentvolume controller if it exists.If the resource referred to by volumeAttributesClass does not exist, this PersistentVolumeClaim will beset to a Pending state, as reflected by the modifyVolumeStatus field, until such as a resourceexists.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#volumeattributesclass(Alpha) Using this field requires the VolumeAttributesClass feature gate to be enabled.",
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
"volume_mode": schema.StringAttribute{
Description: "volumeMode defines what type of volume is required by the claim.Value of Filesystem is implied when not included in claim spec.",
MarkdownDescription: "volumeMode defines what type of volume is required by the claim.Value of Filesystem is implied when not included in claim spec.",
@@ -8202,6 +8415,101 @@ func (r *AppsKubeblocksIoComponentV1Alpha1Manifest) Schema(_ context.Context, _
MarkdownDescription: "sources is the list of volume projections",
NestedObject: schema.NestedAttributeObject{
Attributes: map[string]schema.Attribute{
+ "cluster_trust_bundle": schema.SingleNestedAttribute{
+ Description: "ClusterTrustBundle allows a pod to access the '.spec.trustBundle' fieldof ClusterTrustBundle objects in an auto-updating file.Alpha, gated by the ClusterTrustBundleProjection feature gate.ClusterTrustBundle objects can either be selected by name, or by thecombination of signer name and a label selector.Kubelet performs aggressive normalization of the PEM contents writteninto the pod filesystem. Esoteric PEM features such as inter-blockcomments and block headers are stripped. Certificates are deduplicated.The ordering of certificates within the file is arbitrary, and Kubeletmay change the order over time.",
+ MarkdownDescription: "ClusterTrustBundle allows a pod to access the '.spec.trustBundle' fieldof ClusterTrustBundle objects in an auto-updating file.Alpha, gated by the ClusterTrustBundleProjection feature gate.ClusterTrustBundle objects can either be selected by name, or by thecombination of signer name and a label selector.Kubelet performs aggressive normalization of the PEM contents writteninto the pod filesystem. Esoteric PEM features such as inter-blockcomments and block headers are stripped. Certificates are deduplicated.The ordering of certificates within the file is arbitrary, and Kubeletmay change the order over time.",
+ Attributes: map[string]schema.Attribute{
+ "label_selector": schema.SingleNestedAttribute{
+ Description: "Select all ClusterTrustBundles that match this label selector. Only haseffect if signerName is set. Mutually-exclusive with name. If unset,interpreted as 'match nothing'. If set but empty, interpreted as 'matcheverything'.",
+ MarkdownDescription: "Select all ClusterTrustBundles that match this label selector. Only haseffect if signerName is set. Mutually-exclusive with name. If unset,interpreted as 'match nothing'. If set but empty, interpreted as 'matcheverything'.",
+ Attributes: map[string]schema.Attribute{
+ "match_expressions": schema.ListNestedAttribute{
+ Description: "matchExpressions is a list of label selector requirements. The requirements are ANDed.",
+ MarkdownDescription: "matchExpressions is a list of label selector requirements. The requirements are ANDed.",
+ NestedObject: schema.NestedAttributeObject{
+ Attributes: map[string]schema.Attribute{
+ "key": schema.StringAttribute{
+ Description: "key is the label key that the selector applies to.",
+ MarkdownDescription: "key is the label key that the selector applies to.",
+ Required: true,
+ Optional: false,
+ Computed: false,
+ },
+
+ "operator": schema.StringAttribute{
+ Description: "operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.",
+ MarkdownDescription: "operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.",
+ Required: true,
+ Optional: false,
+ Computed: false,
+ },
+
+ "values": schema.ListAttribute{
+ Description: "values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.",
+ MarkdownDescription: "values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+ },
+ },
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "match_labels": schema.MapAttribute{
+ Description: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.",
+ MarkdownDescription: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+ },
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "name": schema.StringAttribute{
+ Description: "Select a single ClusterTrustBundle by object name. Mutually-exclusivewith signerName and labelSelector.",
+ MarkdownDescription: "Select a single ClusterTrustBundle by object name. Mutually-exclusivewith signerName and labelSelector.",
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "optional": schema.BoolAttribute{
+ Description: "If true, don't block pod startup if the referenced ClusterTrustBundle(s)aren't available. If using name, then the named ClusterTrustBundle isallowed not to exist. If using signerName, then the combination ofsignerName and labelSelector is allowed to match zeroClusterTrustBundles.",
+ MarkdownDescription: "If true, don't block pod startup if the referenced ClusterTrustBundle(s)aren't available. If using name, then the named ClusterTrustBundle isallowed not to exist. If using signerName, then the combination ofsignerName and labelSelector is allowed to match zeroClusterTrustBundles.",
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "path": schema.StringAttribute{
+ Description: "Relative path from the volume root to write the bundle.",
+ MarkdownDescription: "Relative path from the volume root to write the bundle.",
+ Required: true,
+ Optional: false,
+ Computed: false,
+ },
+
+ "signer_name": schema.StringAttribute{
+ Description: "Select all ClusterTrustBundles that match this signer name.Mutually-exclusive with name. The contents of all selectedClusterTrustBundles will be unified and deduplicated.",
+ MarkdownDescription: "Select all ClusterTrustBundles that match this signer name.Mutually-exclusive with name. The contents of all selectedClusterTrustBundles will be unified and deduplicated.",
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+ },
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
"config_map": schema.SingleNestedAttribute{
Description: "configMap information about the configMap data to project",
MarkdownDescription: "configMap information about the configMap data to project",
diff --git a/internal/provider/apps_kubeblocks_io_v1alpha1/apps_kubeblocks_io_ops_definition_v1alpha1_manifest.go b/internal/provider/apps_kubeblocks_io_v1alpha1/apps_kubeblocks_io_ops_definition_v1alpha1_manifest.go
index a55c8c6a7..172ed2df6 100644
--- a/internal/provider/apps_kubeblocks_io_v1alpha1/apps_kubeblocks_io_ops_definition_v1alpha1_manifest.go
+++ b/internal/provider/apps_kubeblocks_io_v1alpha1/apps_kubeblocks_io_ops_definition_v1alpha1_manifest.go
@@ -122,6 +122,8 @@ type AppsKubeblocksIoOpsDefinitionV1Alpha1ManifestData struct {
} `tfsdk:"match_expressions" json:"matchExpressions,omitempty"`
MatchLabels *map[string]string `tfsdk:"match_labels" json:"matchLabels,omitempty"`
} `tfsdk:"label_selector" json:"labelSelector,omitempty"`
+ MatchLabelKeys *[]string `tfsdk:"match_label_keys" json:"matchLabelKeys,omitempty"`
+ MismatchLabelKeys *[]string `tfsdk:"mismatch_label_keys" json:"mismatchLabelKeys,omitempty"`
NamespaceSelector *struct {
MatchExpressions *[]struct {
Key *string `tfsdk:"key" json:"key,omitempty"`
@@ -144,6 +146,8 @@ type AppsKubeblocksIoOpsDefinitionV1Alpha1ManifestData struct {
} `tfsdk:"match_expressions" json:"matchExpressions,omitempty"`
MatchLabels *map[string]string `tfsdk:"match_labels" json:"matchLabels,omitempty"`
} `tfsdk:"label_selector" json:"labelSelector,omitempty"`
+ MatchLabelKeys *[]string `tfsdk:"match_label_keys" json:"matchLabelKeys,omitempty"`
+ MismatchLabelKeys *[]string `tfsdk:"mismatch_label_keys" json:"mismatchLabelKeys,omitempty"`
NamespaceSelector *struct {
MatchExpressions *[]struct {
Key *string `tfsdk:"key" json:"key,omitempty"`
@@ -167,6 +171,8 @@ type AppsKubeblocksIoOpsDefinitionV1Alpha1ManifestData struct {
} `tfsdk:"match_expressions" json:"matchExpressions,omitempty"`
MatchLabels *map[string]string `tfsdk:"match_labels" json:"matchLabels,omitempty"`
} `tfsdk:"label_selector" json:"labelSelector,omitempty"`
+ MatchLabelKeys *[]string `tfsdk:"match_label_keys" json:"matchLabelKeys,omitempty"`
+ MismatchLabelKeys *[]string `tfsdk:"mismatch_label_keys" json:"mismatchLabelKeys,omitempty"`
NamespaceSelector *struct {
MatchExpressions *[]struct {
Key *string `tfsdk:"key" json:"key,omitempty"`
@@ -189,6 +195,8 @@ type AppsKubeblocksIoOpsDefinitionV1Alpha1ManifestData struct {
} `tfsdk:"match_expressions" json:"matchExpressions,omitempty"`
MatchLabels *map[string]string `tfsdk:"match_labels" json:"matchLabels,omitempty"`
} `tfsdk:"label_selector" json:"labelSelector,omitempty"`
+ MatchLabelKeys *[]string `tfsdk:"match_label_keys" json:"matchLabelKeys,omitempty"`
+ MismatchLabelKeys *[]string `tfsdk:"mismatch_label_keys" json:"mismatchLabelKeys,omitempty"`
NamespaceSelector *struct {
MatchExpressions *[]struct {
Key *string `tfsdk:"key" json:"key,omitempty"`
@@ -259,6 +267,9 @@ type AppsKubeblocksIoOpsDefinitionV1Alpha1ManifestData struct {
Port *string `tfsdk:"port" json:"port,omitempty"`
Scheme *string `tfsdk:"scheme" json:"scheme,omitempty"`
} `tfsdk:"http_get" json:"httpGet,omitempty"`
+ Sleep *struct {
+ Seconds *int64 `tfsdk:"seconds" json:"seconds,omitempty"`
+ } `tfsdk:"sleep" json:"sleep,omitempty"`
TcpSocket *struct {
Host *string `tfsdk:"host" json:"host,omitempty"`
Port *string `tfsdk:"port" json:"port,omitempty"`
@@ -278,6 +289,9 @@ type AppsKubeblocksIoOpsDefinitionV1Alpha1ManifestData struct {
Port *string `tfsdk:"port" json:"port,omitempty"`
Scheme *string `tfsdk:"scheme" json:"scheme,omitempty"`
} `tfsdk:"http_get" json:"httpGet,omitempty"`
+ Sleep *struct {
+ Seconds *int64 `tfsdk:"seconds" json:"seconds,omitempty"`
+ } `tfsdk:"sleep" json:"sleep,omitempty"`
TcpSocket *struct {
Host *string `tfsdk:"host" json:"host,omitempty"`
Port *string `tfsdk:"port" json:"port,omitempty"`
@@ -505,6 +519,9 @@ type AppsKubeblocksIoOpsDefinitionV1Alpha1ManifestData struct {
Port *string `tfsdk:"port" json:"port,omitempty"`
Scheme *string `tfsdk:"scheme" json:"scheme,omitempty"`
} `tfsdk:"http_get" json:"httpGet,omitempty"`
+ Sleep *struct {
+ Seconds *int64 `tfsdk:"seconds" json:"seconds,omitempty"`
+ } `tfsdk:"sleep" json:"sleep,omitempty"`
TcpSocket *struct {
Host *string `tfsdk:"host" json:"host,omitempty"`
Port *string `tfsdk:"port" json:"port,omitempty"`
@@ -524,6 +541,9 @@ type AppsKubeblocksIoOpsDefinitionV1Alpha1ManifestData struct {
Port *string `tfsdk:"port" json:"port,omitempty"`
Scheme *string `tfsdk:"scheme" json:"scheme,omitempty"`
} `tfsdk:"http_get" json:"httpGet,omitempty"`
+ Sleep *struct {
+ Seconds *int64 `tfsdk:"seconds" json:"seconds,omitempty"`
+ } `tfsdk:"sleep" json:"sleep,omitempty"`
TcpSocket *struct {
Host *string `tfsdk:"host" json:"host,omitempty"`
Port *string `tfsdk:"port" json:"port,omitempty"`
@@ -754,6 +774,9 @@ type AppsKubeblocksIoOpsDefinitionV1Alpha1ManifestData struct {
Port *string `tfsdk:"port" json:"port,omitempty"`
Scheme *string `tfsdk:"scheme" json:"scheme,omitempty"`
} `tfsdk:"http_get" json:"httpGet,omitempty"`
+ Sleep *struct {
+ Seconds *int64 `tfsdk:"seconds" json:"seconds,omitempty"`
+ } `tfsdk:"sleep" json:"sleep,omitempty"`
TcpSocket *struct {
Host *string `tfsdk:"host" json:"host,omitempty"`
Port *string `tfsdk:"port" json:"port,omitempty"`
@@ -773,6 +796,9 @@ type AppsKubeblocksIoOpsDefinitionV1Alpha1ManifestData struct {
Port *string `tfsdk:"port" json:"port,omitempty"`
Scheme *string `tfsdk:"scheme" json:"scheme,omitempty"`
} `tfsdk:"http_get" json:"httpGet,omitempty"`
+ Sleep *struct {
+ Seconds *int64 `tfsdk:"seconds" json:"seconds,omitempty"`
+ } `tfsdk:"sleep" json:"sleep,omitempty"`
TcpSocket *struct {
Host *string `tfsdk:"host" json:"host,omitempty"`
Port *string `tfsdk:"port" json:"port,omitempty"`
@@ -1117,9 +1143,6 @@ type AppsKubeblocksIoOpsDefinitionV1Alpha1ManifestData struct {
Namespace *string `tfsdk:"namespace" json:"namespace,omitempty"`
} `tfsdk:"data_source_ref" json:"dataSourceRef,omitempty"`
Resources *struct {
- Claims *[]struct {
- Name *string `tfsdk:"name" json:"name,omitempty"`
- } `tfsdk:"claims" json:"claims,omitempty"`
Limits *map[string]string `tfsdk:"limits" json:"limits,omitempty"`
Requests *map[string]string `tfsdk:"requests" json:"requests,omitempty"`
} `tfsdk:"resources" json:"resources,omitempty"`
@@ -1131,9 +1154,10 @@ type AppsKubeblocksIoOpsDefinitionV1Alpha1ManifestData struct {
} `tfsdk:"match_expressions" json:"matchExpressions,omitempty"`
MatchLabels *map[string]string `tfsdk:"match_labels" json:"matchLabels,omitempty"`
} `tfsdk:"selector" json:"selector,omitempty"`
- StorageClassName *string `tfsdk:"storage_class_name" json:"storageClassName,omitempty"`
- VolumeMode *string `tfsdk:"volume_mode" json:"volumeMode,omitempty"`
- VolumeName *string `tfsdk:"volume_name" json:"volumeName,omitempty"`
+ StorageClassName *string `tfsdk:"storage_class_name" json:"storageClassName,omitempty"`
+ VolumeAttributesClassName *string `tfsdk:"volume_attributes_class_name" json:"volumeAttributesClassName,omitempty"`
+ VolumeMode *string `tfsdk:"volume_mode" json:"volumeMode,omitempty"`
+ VolumeName *string `tfsdk:"volume_name" json:"volumeName,omitempty"`
} `tfsdk:"spec" json:"spec,omitempty"`
} `tfsdk:"volume_claim_template" json:"volumeClaimTemplate,omitempty"`
} `tfsdk:"ephemeral" json:"ephemeral,omitempty"`
@@ -1214,6 +1238,20 @@ type AppsKubeblocksIoOpsDefinitionV1Alpha1ManifestData struct {
Projected *struct {
DefaultMode *int64 `tfsdk:"default_mode" json:"defaultMode,omitempty"`
Sources *[]struct {
+ ClusterTrustBundle *struct {
+ LabelSelector *struct {
+ MatchExpressions *[]struct {
+ Key *string `tfsdk:"key" json:"key,omitempty"`
+ Operator *string `tfsdk:"operator" json:"operator,omitempty"`
+ Values *[]string `tfsdk:"values" json:"values,omitempty"`
+ } `tfsdk:"match_expressions" json:"matchExpressions,omitempty"`
+ MatchLabels *map[string]string `tfsdk:"match_labels" json:"matchLabels,omitempty"`
+ } `tfsdk:"label_selector" json:"labelSelector,omitempty"`
+ Name *string `tfsdk:"name" json:"name,omitempty"`
+ Optional *bool `tfsdk:"optional" json:"optional,omitempty"`
+ Path *string `tfsdk:"path" json:"path,omitempty"`
+ SignerName *string `tfsdk:"signer_name" json:"signerName,omitempty"`
+ } `tfsdk:"cluster_trust_bundle" json:"clusterTrustBundle,omitempty"`
ConfigMap *struct {
Items *[]struct {
Key *string `tfsdk:"key" json:"key,omitempty"`
@@ -1907,8 +1945,8 @@ func (r *AppsKubeblocksIoOpsDefinitionV1Alpha1Manifest) Schema(_ context.Context
MarkdownDescription: "Required. A pod affinity term, associated with the corresponding weight.",
Attributes: map[string]schema.Attribute{
"label_selector": schema.SingleNestedAttribute{
- Description: "A label query over a set of resources, in this case pods.",
- MarkdownDescription: "A label query over a set of resources, in this case pods.",
+ Description: "A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods.",
+ MarkdownDescription: "A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods.",
Attributes: map[string]schema.Attribute{
"match_expressions": schema.ListNestedAttribute{
Description: "matchExpressions is a list of label selector requirements. The requirements are ANDed.",
@@ -1960,6 +1998,24 @@ func (r *AppsKubeblocksIoOpsDefinitionV1Alpha1Manifest) Schema(_ context.Context
Computed: false,
},
+ "match_label_keys": schema.ListAttribute{
+ Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "mismatch_label_keys": schema.ListAttribute{
+ Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
"namespace_selector": schema.SingleNestedAttribute{
Description: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.",
MarkdownDescription: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.",
@@ -2056,8 +2112,8 @@ func (r *AppsKubeblocksIoOpsDefinitionV1Alpha1Manifest) Schema(_ context.Context
NestedObject: schema.NestedAttributeObject{
Attributes: map[string]schema.Attribute{
"label_selector": schema.SingleNestedAttribute{
- Description: "A label query over a set of resources, in this case pods.",
- MarkdownDescription: "A label query over a set of resources, in this case pods.",
+ Description: "A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods.",
+ MarkdownDescription: "A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods.",
Attributes: map[string]schema.Attribute{
"match_expressions": schema.ListNestedAttribute{
Description: "matchExpressions is a list of label selector requirements. The requirements are ANDed.",
@@ -2109,6 +2165,24 @@ func (r *AppsKubeblocksIoOpsDefinitionV1Alpha1Manifest) Schema(_ context.Context
Computed: false,
},
+ "match_label_keys": schema.ListAttribute{
+ Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "mismatch_label_keys": schema.ListAttribute{
+ Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
"namespace_selector": schema.SingleNestedAttribute{
Description: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.",
MarkdownDescription: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.",
@@ -2205,8 +2279,8 @@ func (r *AppsKubeblocksIoOpsDefinitionV1Alpha1Manifest) Schema(_ context.Context
MarkdownDescription: "Required. A pod affinity term, associated with the corresponding weight.",
Attributes: map[string]schema.Attribute{
"label_selector": schema.SingleNestedAttribute{
- Description: "A label query over a set of resources, in this case pods.",
- MarkdownDescription: "A label query over a set of resources, in this case pods.",
+ Description: "A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods.",
+ MarkdownDescription: "A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods.",
Attributes: map[string]schema.Attribute{
"match_expressions": schema.ListNestedAttribute{
Description: "matchExpressions is a list of label selector requirements. The requirements are ANDed.",
@@ -2258,6 +2332,24 @@ func (r *AppsKubeblocksIoOpsDefinitionV1Alpha1Manifest) Schema(_ context.Context
Computed: false,
},
+ "match_label_keys": schema.ListAttribute{
+ Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "mismatch_label_keys": schema.ListAttribute{
+ Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
"namespace_selector": schema.SingleNestedAttribute{
Description: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.",
MarkdownDescription: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.",
@@ -2354,8 +2446,8 @@ func (r *AppsKubeblocksIoOpsDefinitionV1Alpha1Manifest) Schema(_ context.Context
NestedObject: schema.NestedAttributeObject{
Attributes: map[string]schema.Attribute{
"label_selector": schema.SingleNestedAttribute{
- Description: "A label query over a set of resources, in this case pods.",
- MarkdownDescription: "A label query over a set of resources, in this case pods.",
+ Description: "A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods.",
+ MarkdownDescription: "A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods.",
Attributes: map[string]schema.Attribute{
"match_expressions": schema.ListNestedAttribute{
Description: "matchExpressions is a list of label selector requirements. The requirements are ANDed.",
@@ -2407,6 +2499,24 @@ func (r *AppsKubeblocksIoOpsDefinitionV1Alpha1Manifest) Schema(_ context.Context
Computed: false,
},
+ "match_label_keys": schema.ListAttribute{
+ Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "mismatch_label_keys": schema.ListAttribute{
+ Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
"namespace_selector": schema.SingleNestedAttribute{
Description: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.",
MarkdownDescription: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.",
@@ -2864,6 +2974,23 @@ func (r *AppsKubeblocksIoOpsDefinitionV1Alpha1Manifest) Schema(_ context.Context
Computed: false,
},
+ "sleep": schema.SingleNestedAttribute{
+ Description: "Sleep represents the duration that the container should sleep before being terminated.",
+ MarkdownDescription: "Sleep represents the duration that the container should sleep before being terminated.",
+ Attributes: map[string]schema.Attribute{
+ "seconds": schema.Int64Attribute{
+ Description: "Seconds is the number of seconds to sleep.",
+ MarkdownDescription: "Seconds is the number of seconds to sleep.",
+ Required: true,
+ Optional: false,
+ Computed: false,
+ },
+ },
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
"tcp_socket": schema.SingleNestedAttribute{
Description: "Deprecated. TCPSocket is NOT supported as a LifecycleHandler and keptfor the backward compatibility. There are no validation of this field andlifecycle hooks will fail in runtime when tcp handler is specified.",
MarkdownDescription: "Deprecated. TCPSocket is NOT supported as a LifecycleHandler and keptfor the backward compatibility. There are no validation of this field andlifecycle hooks will fail in runtime when tcp handler is specified.",
@@ -2984,6 +3111,23 @@ func (r *AppsKubeblocksIoOpsDefinitionV1Alpha1Manifest) Schema(_ context.Context
Computed: false,
},
+ "sleep": schema.SingleNestedAttribute{
+ Description: "Sleep represents the duration that the container should sleep before being terminated.",
+ MarkdownDescription: "Sleep represents the duration that the container should sleep before being terminated.",
+ Attributes: map[string]schema.Attribute{
+ "seconds": schema.Int64Attribute{
+ Description: "Seconds is the number of seconds to sleep.",
+ MarkdownDescription: "Seconds is the number of seconds to sleep.",
+ Required: true,
+ Optional: false,
+ Computed: false,
+ },
+ },
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
"tcp_socket": schema.SingleNestedAttribute{
Description: "Deprecated. TCPSocket is NOT supported as a LifecycleHandler and keptfor the backward compatibility. There are no validation of this field andlifecycle hooks will fail in runtime when tcp handler is specified.",
MarkdownDescription: "Deprecated. TCPSocket is NOT supported as a LifecycleHandler and keptfor the backward compatibility. There are no validation of this field andlifecycle hooks will fail in runtime when tcp handler is specified.",
@@ -4509,6 +4653,23 @@ func (r *AppsKubeblocksIoOpsDefinitionV1Alpha1Manifest) Schema(_ context.Context
Computed: false,
},
+ "sleep": schema.SingleNestedAttribute{
+ Description: "Sleep represents the duration that the container should sleep before being terminated.",
+ MarkdownDescription: "Sleep represents the duration that the container should sleep before being terminated.",
+ Attributes: map[string]schema.Attribute{
+ "seconds": schema.Int64Attribute{
+ Description: "Seconds is the number of seconds to sleep.",
+ MarkdownDescription: "Seconds is the number of seconds to sleep.",
+ Required: true,
+ Optional: false,
+ Computed: false,
+ },
+ },
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
"tcp_socket": schema.SingleNestedAttribute{
Description: "Deprecated. TCPSocket is NOT supported as a LifecycleHandler and keptfor the backward compatibility. There are no validation of this field andlifecycle hooks will fail in runtime when tcp handler is specified.",
MarkdownDescription: "Deprecated. TCPSocket is NOT supported as a LifecycleHandler and keptfor the backward compatibility. There are no validation of this field andlifecycle hooks will fail in runtime when tcp handler is specified.",
@@ -4629,6 +4790,23 @@ func (r *AppsKubeblocksIoOpsDefinitionV1Alpha1Manifest) Schema(_ context.Context
Computed: false,
},
+ "sleep": schema.SingleNestedAttribute{
+ Description: "Sleep represents the duration that the container should sleep before being terminated.",
+ MarkdownDescription: "Sleep represents the duration that the container should sleep before being terminated.",
+ Attributes: map[string]schema.Attribute{
+ "seconds": schema.Int64Attribute{
+ Description: "Seconds is the number of seconds to sleep.",
+ MarkdownDescription: "Seconds is the number of seconds to sleep.",
+ Required: true,
+ Optional: false,
+ Computed: false,
+ },
+ },
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
"tcp_socket": schema.SingleNestedAttribute{
Description: "Deprecated. TCPSocket is NOT supported as a LifecycleHandler and keptfor the backward compatibility. There are no validation of this field andlifecycle hooks will fail in runtime when tcp handler is specified.",
MarkdownDescription: "Deprecated. TCPSocket is NOT supported as a LifecycleHandler and keptfor the backward compatibility. There are no validation of this field andlifecycle hooks will fail in runtime when tcp handler is specified.",
@@ -6179,6 +6357,23 @@ func (r *AppsKubeblocksIoOpsDefinitionV1Alpha1Manifest) Schema(_ context.Context
Computed: false,
},
+ "sleep": schema.SingleNestedAttribute{
+ Description: "Sleep represents the duration that the container should sleep before being terminated.",
+ MarkdownDescription: "Sleep represents the duration that the container should sleep before being terminated.",
+ Attributes: map[string]schema.Attribute{
+ "seconds": schema.Int64Attribute{
+ Description: "Seconds is the number of seconds to sleep.",
+ MarkdownDescription: "Seconds is the number of seconds to sleep.",
+ Required: true,
+ Optional: false,
+ Computed: false,
+ },
+ },
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
"tcp_socket": schema.SingleNestedAttribute{
Description: "Deprecated. TCPSocket is NOT supported as a LifecycleHandler and keptfor the backward compatibility. There are no validation of this field andlifecycle hooks will fail in runtime when tcp handler is specified.",
MarkdownDescription: "Deprecated. TCPSocket is NOT supported as a LifecycleHandler and keptfor the backward compatibility. There are no validation of this field andlifecycle hooks will fail in runtime when tcp handler is specified.",
@@ -6299,6 +6494,23 @@ func (r *AppsKubeblocksIoOpsDefinitionV1Alpha1Manifest) Schema(_ context.Context
Computed: false,
},
+ "sleep": schema.SingleNestedAttribute{
+ Description: "Sleep represents the duration that the container should sleep before being terminated.",
+ MarkdownDescription: "Sleep represents the duration that the container should sleep before being terminated.",
+ Attributes: map[string]schema.Attribute{
+ "seconds": schema.Int64Attribute{
+ Description: "Seconds is the number of seconds to sleep.",
+ MarkdownDescription: "Seconds is the number of seconds to sleep.",
+ Required: true,
+ Optional: false,
+ Computed: false,
+ },
+ },
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
"tcp_socket": schema.SingleNestedAttribute{
Description: "Deprecated. TCPSocket is NOT supported as a LifecycleHandler and keptfor the backward compatibility. There are no validation of this field andlifecycle hooks will fail in runtime when tcp handler is specified.",
MarkdownDescription: "Deprecated. TCPSocket is NOT supported as a LifecycleHandler and keptfor the backward compatibility. There are no validation of this field andlifecycle hooks will fail in runtime when tcp handler is specified.",
@@ -8636,25 +8848,6 @@ func (r *AppsKubeblocksIoOpsDefinitionV1Alpha1Manifest) Schema(_ context.Context
Description: "resources represents the minimum resources the volume should have.If RecoverVolumeExpansionFailure feature is enabled users are allowed to specify resource requirementsthat are lower than previous value but must still be higher than capacity recorded in thestatus field of the claim.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources",
MarkdownDescription: "resources represents the minimum resources the volume should have.If RecoverVolumeExpansionFailure feature is enabled users are allowed to specify resource requirementsthat are lower than previous value but must still be higher than capacity recorded in thestatus field of the claim.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources",
Attributes: map[string]schema.Attribute{
- "claims": schema.ListNestedAttribute{
- Description: "Claims lists the names of resources, defined in spec.resourceClaims,that are used by this container.This is an alpha field and requires enabling theDynamicResourceAllocation feature gate.This field is immutable. It can only be set for containers.",
- MarkdownDescription: "Claims lists the names of resources, defined in spec.resourceClaims,that are used by this container.This is an alpha field and requires enabling theDynamicResourceAllocation feature gate.This field is immutable. It can only be set for containers.",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "name": schema.StringAttribute{
- Description: "Name must match the name of one entry in pod.spec.resourceClaims ofthe Pod where this field is used. It makes that resource availableinside a container.",
- MarkdownDescription: "Name must match the name of one entry in pod.spec.resourceClaims ofthe Pod where this field is used. It makes that resource availableinside a container.",
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
"limits": schema.MapAttribute{
Description: "Limits describes the maximum amount of compute resources allowed.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/",
MarkdownDescription: "Limits describes the maximum amount of compute resources allowed.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/",
@@ -8740,6 +8933,14 @@ func (r *AppsKubeblocksIoOpsDefinitionV1Alpha1Manifest) Schema(_ context.Context
Computed: false,
},
+ "volume_attributes_class_name": schema.StringAttribute{
+ Description: "volumeAttributesClassName may be used to set the VolumeAttributesClass used by this claim.If specified, the CSI driver will create or update the volume with the attributes definedin the corresponding VolumeAttributesClass. This has a different purpose than storageClassName,it can be changed after the claim is created. An empty string value means that no VolumeAttributesClasswill be applied to the claim but it's not allowed to reset this field to empty string once it is set.If unspecified and the PersistentVolumeClaim is unbound, the default VolumeAttributesClasswill be set by the persistentvolume controller if it exists.If the resource referred to by volumeAttributesClass does not exist, this PersistentVolumeClaim will beset to a Pending state, as reflected by the modifyVolumeStatus field, until such as a resourceexists.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#volumeattributesclass(Alpha) Using this field requires the VolumeAttributesClass feature gate to be enabled.",
+ MarkdownDescription: "volumeAttributesClassName may be used to set the VolumeAttributesClass used by this claim.If specified, the CSI driver will create or update the volume with the attributes definedin the corresponding VolumeAttributesClass. This has a different purpose than storageClassName,it can be changed after the claim is created. An empty string value means that no VolumeAttributesClasswill be applied to the claim but it's not allowed to reset this field to empty string once it is set.If unspecified and the PersistentVolumeClaim is unbound, the default VolumeAttributesClasswill be set by the persistentvolume controller if it exists.If the resource referred to by volumeAttributesClass does not exist, this PersistentVolumeClaim will beset to a Pending state, as reflected by the modifyVolumeStatus field, until such as a resourceexists.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#volumeattributesclass(Alpha) Using this field requires the VolumeAttributesClass feature gate to be enabled.",
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
"volume_mode": schema.StringAttribute{
Description: "volumeMode defines what type of volume is required by the claim.Value of Filesystem is implied when not included in claim spec.",
MarkdownDescription: "volumeMode defines what type of volume is required by the claim.Value of Filesystem is implied when not included in claim spec.",
@@ -9286,6 +9487,101 @@ func (r *AppsKubeblocksIoOpsDefinitionV1Alpha1Manifest) Schema(_ context.Context
MarkdownDescription: "sources is the list of volume projections",
NestedObject: schema.NestedAttributeObject{
Attributes: map[string]schema.Attribute{
+ "cluster_trust_bundle": schema.SingleNestedAttribute{
+ Description: "ClusterTrustBundle allows a pod to access the '.spec.trustBundle' fieldof ClusterTrustBundle objects in an auto-updating file.Alpha, gated by the ClusterTrustBundleProjection feature gate.ClusterTrustBundle objects can either be selected by name, or by thecombination of signer name and a label selector.Kubelet performs aggressive normalization of the PEM contents writteninto the pod filesystem. Esoteric PEM features such as inter-blockcomments and block headers are stripped. Certificates are deduplicated.The ordering of certificates within the file is arbitrary, and Kubeletmay change the order over time.",
+ MarkdownDescription: "ClusterTrustBundle allows a pod to access the '.spec.trustBundle' fieldof ClusterTrustBundle objects in an auto-updating file.Alpha, gated by the ClusterTrustBundleProjection feature gate.ClusterTrustBundle objects can either be selected by name, or by thecombination of signer name and a label selector.Kubelet performs aggressive normalization of the PEM contents writteninto the pod filesystem. Esoteric PEM features such as inter-blockcomments and block headers are stripped. Certificates are deduplicated.The ordering of certificates within the file is arbitrary, and Kubeletmay change the order over time.",
+ Attributes: map[string]schema.Attribute{
+ "label_selector": schema.SingleNestedAttribute{
+ Description: "Select all ClusterTrustBundles that match this label selector. Only haseffect if signerName is set. Mutually-exclusive with name. If unset,interpreted as 'match nothing'. If set but empty, interpreted as 'matcheverything'.",
+ MarkdownDescription: "Select all ClusterTrustBundles that match this label selector. Only haseffect if signerName is set. Mutually-exclusive with name. If unset,interpreted as 'match nothing'. If set but empty, interpreted as 'matcheverything'.",
+ Attributes: map[string]schema.Attribute{
+ "match_expressions": schema.ListNestedAttribute{
+ Description: "matchExpressions is a list of label selector requirements. The requirements are ANDed.",
+ MarkdownDescription: "matchExpressions is a list of label selector requirements. The requirements are ANDed.",
+ NestedObject: schema.NestedAttributeObject{
+ Attributes: map[string]schema.Attribute{
+ "key": schema.StringAttribute{
+ Description: "key is the label key that the selector applies to.",
+ MarkdownDescription: "key is the label key that the selector applies to.",
+ Required: true,
+ Optional: false,
+ Computed: false,
+ },
+
+ "operator": schema.StringAttribute{
+ Description: "operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.",
+ MarkdownDescription: "operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.",
+ Required: true,
+ Optional: false,
+ Computed: false,
+ },
+
+ "values": schema.ListAttribute{
+ Description: "values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.",
+ MarkdownDescription: "values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+ },
+ },
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "match_labels": schema.MapAttribute{
+ Description: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.",
+ MarkdownDescription: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+ },
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "name": schema.StringAttribute{
+ Description: "Select a single ClusterTrustBundle by object name. Mutually-exclusivewith signerName and labelSelector.",
+ MarkdownDescription: "Select a single ClusterTrustBundle by object name. Mutually-exclusivewith signerName and labelSelector.",
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "optional": schema.BoolAttribute{
+ Description: "If true, don't block pod startup if the referenced ClusterTrustBundle(s)aren't available. If using name, then the named ClusterTrustBundle isallowed not to exist. If using signerName, then the combination ofsignerName and labelSelector is allowed to match zeroClusterTrustBundles.",
+ MarkdownDescription: "If true, don't block pod startup if the referenced ClusterTrustBundle(s)aren't available. If using name, then the named ClusterTrustBundle isallowed not to exist. If using signerName, then the combination ofsignerName and labelSelector is allowed to match zeroClusterTrustBundles.",
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "path": schema.StringAttribute{
+ Description: "Relative path from the volume root to write the bundle.",
+ MarkdownDescription: "Relative path from the volume root to write the bundle.",
+ Required: true,
+ Optional: false,
+ Computed: false,
+ },
+
+ "signer_name": schema.StringAttribute{
+ Description: "Select all ClusterTrustBundles that match this signer name.Mutually-exclusive with name. The contents of all selectedClusterTrustBundles will be unified and deduplicated.",
+ MarkdownDescription: "Select all ClusterTrustBundles that match this signer name.Mutually-exclusive with name. The contents of all selectedClusterTrustBundles will be unified and deduplicated.",
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+ },
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
"config_map": schema.SingleNestedAttribute{
Description: "configMap information about the configMap data to project",
MarkdownDescription: "configMap information about the configMap data to project",
diff --git a/internal/provider/apps_kubeblocks_io_v1alpha1/apps_kubeblocks_io_ops_request_v1alpha1_manifest.go b/internal/provider/apps_kubeblocks_io_v1alpha1/apps_kubeblocks_io_ops_request_v1alpha1_manifest.go
index e9e9e0fb4..3279455f0 100644
--- a/internal/provider/apps_kubeblocks_io_v1alpha1/apps_kubeblocks_io_ops_request_v1alpha1_manifest.go
+++ b/internal/provider/apps_kubeblocks_io_v1alpha1/apps_kubeblocks_io_ops_request_v1alpha1_manifest.go
@@ -76,7 +76,8 @@ type AppsKubeblocksIoOpsRequestV1Alpha1ManifestData struct {
OpsDefinitionName *string `tfsdk:"ops_definition_name" json:"opsDefinitionName,omitempty"`
ServiceAccountName *string `tfsdk:"service_account_name" json:"serviceAccountName,omitempty"`
} `tfsdk:"custom" json:"custom,omitempty"`
- Expose *[]struct {
+ EnqueueOnForce *bool `tfsdk:"enqueue_on_force" json:"enqueueOnForce,omitempty"`
+ Expose *[]struct {
ComponentName *string `tfsdk:"component_name" json:"componentName,omitempty"`
Services *[]struct {
Annotations *map[string]string `tfsdk:"annotations" json:"annotations,omitempty"`
@@ -196,6 +197,8 @@ type AppsKubeblocksIoOpsRequestV1Alpha1ManifestData struct {
} `tfsdk:"match_expressions" json:"matchExpressions,omitempty"`
MatchLabels *map[string]string `tfsdk:"match_labels" json:"matchLabels,omitempty"`
} `tfsdk:"label_selector" json:"labelSelector,omitempty"`
+ MatchLabelKeys *[]string `tfsdk:"match_label_keys" json:"matchLabelKeys,omitempty"`
+ MismatchLabelKeys *[]string `tfsdk:"mismatch_label_keys" json:"mismatchLabelKeys,omitempty"`
NamespaceSelector *struct {
MatchExpressions *[]struct {
Key *string `tfsdk:"key" json:"key,omitempty"`
@@ -218,6 +221,8 @@ type AppsKubeblocksIoOpsRequestV1Alpha1ManifestData struct {
} `tfsdk:"match_expressions" json:"matchExpressions,omitempty"`
MatchLabels *map[string]string `tfsdk:"match_labels" json:"matchLabels,omitempty"`
} `tfsdk:"label_selector" json:"labelSelector,omitempty"`
+ MatchLabelKeys *[]string `tfsdk:"match_label_keys" json:"matchLabelKeys,omitempty"`
+ MismatchLabelKeys *[]string `tfsdk:"mismatch_label_keys" json:"mismatchLabelKeys,omitempty"`
NamespaceSelector *struct {
MatchExpressions *[]struct {
Key *string `tfsdk:"key" json:"key,omitempty"`
@@ -241,6 +246,8 @@ type AppsKubeblocksIoOpsRequestV1Alpha1ManifestData struct {
} `tfsdk:"match_expressions" json:"matchExpressions,omitempty"`
MatchLabels *map[string]string `tfsdk:"match_labels" json:"matchLabels,omitempty"`
} `tfsdk:"label_selector" json:"labelSelector,omitempty"`
+ MatchLabelKeys *[]string `tfsdk:"match_label_keys" json:"matchLabelKeys,omitempty"`
+ MismatchLabelKeys *[]string `tfsdk:"mismatch_label_keys" json:"mismatchLabelKeys,omitempty"`
NamespaceSelector *struct {
MatchExpressions *[]struct {
Key *string `tfsdk:"key" json:"key,omitempty"`
@@ -263,6 +270,8 @@ type AppsKubeblocksIoOpsRequestV1Alpha1ManifestData struct {
} `tfsdk:"match_expressions" json:"matchExpressions,omitempty"`
MatchLabels *map[string]string `tfsdk:"match_labels" json:"matchLabels,omitempty"`
} `tfsdk:"label_selector" json:"labelSelector,omitempty"`
+ MatchLabelKeys *[]string `tfsdk:"match_label_keys" json:"matchLabelKeys,omitempty"`
+ MismatchLabelKeys *[]string `tfsdk:"mismatch_label_keys" json:"mismatchLabelKeys,omitempty"`
NamespaceSelector *struct {
MatchExpressions *[]struct {
Key *string `tfsdk:"key" json:"key,omitempty"`
@@ -309,9 +318,6 @@ type AppsKubeblocksIoOpsRequestV1Alpha1ManifestData struct {
Spec *struct {
AccessModes *map[string]string `tfsdk:"access_modes" json:"accessModes,omitempty"`
Resources *struct {
- Claims *[]struct {
- Name *string `tfsdk:"name" json:"name,omitempty"`
- } `tfsdk:"claims" json:"claims,omitempty"`
Limits *map[string]string `tfsdk:"limits" json:"limits,omitempty"`
Requests *map[string]string `tfsdk:"requests" json:"requests,omitempty"`
} `tfsdk:"resources" json:"resources,omitempty"`
@@ -427,9 +433,6 @@ type AppsKubeblocksIoOpsRequestV1Alpha1ManifestData struct {
Namespace *string `tfsdk:"namespace" json:"namespace,omitempty"`
} `tfsdk:"data_source_ref" json:"dataSourceRef,omitempty"`
Resources *struct {
- Claims *[]struct {
- Name *string `tfsdk:"name" json:"name,omitempty"`
- } `tfsdk:"claims" json:"claims,omitempty"`
Limits *map[string]string `tfsdk:"limits" json:"limits,omitempty"`
Requests *map[string]string `tfsdk:"requests" json:"requests,omitempty"`
} `tfsdk:"resources" json:"resources,omitempty"`
@@ -441,9 +444,10 @@ type AppsKubeblocksIoOpsRequestV1Alpha1ManifestData struct {
} `tfsdk:"match_expressions" json:"matchExpressions,omitempty"`
MatchLabels *map[string]string `tfsdk:"match_labels" json:"matchLabels,omitempty"`
} `tfsdk:"selector" json:"selector,omitempty"`
- StorageClassName *string `tfsdk:"storage_class_name" json:"storageClassName,omitempty"`
- VolumeMode *string `tfsdk:"volume_mode" json:"volumeMode,omitempty"`
- VolumeName *string `tfsdk:"volume_name" json:"volumeName,omitempty"`
+ StorageClassName *string `tfsdk:"storage_class_name" json:"storageClassName,omitempty"`
+ VolumeAttributesClassName *string `tfsdk:"volume_attributes_class_name" json:"volumeAttributesClassName,omitempty"`
+ VolumeMode *string `tfsdk:"volume_mode" json:"volumeMode,omitempty"`
+ VolumeName *string `tfsdk:"volume_name" json:"volumeName,omitempty"`
} `tfsdk:"spec" json:"spec,omitempty"`
} `tfsdk:"volume_claim_template" json:"volumeClaimTemplate,omitempty"`
} `tfsdk:"ephemeral" json:"ephemeral,omitempty"`
@@ -524,6 +528,20 @@ type AppsKubeblocksIoOpsRequestV1Alpha1ManifestData struct {
Projected *struct {
DefaultMode *int64 `tfsdk:"default_mode" json:"defaultMode,omitempty"`
Sources *[]struct {
+ ClusterTrustBundle *struct {
+ LabelSelector *struct {
+ MatchExpressions *[]struct {
+ Key *string `tfsdk:"key" json:"key,omitempty"`
+ Operator *string `tfsdk:"operator" json:"operator,omitempty"`
+ Values *[]string `tfsdk:"values" json:"values,omitempty"`
+ } `tfsdk:"match_expressions" json:"matchExpressions,omitempty"`
+ MatchLabels *map[string]string `tfsdk:"match_labels" json:"matchLabels,omitempty"`
+ } `tfsdk:"label_selector" json:"labelSelector,omitempty"`
+ Name *string `tfsdk:"name" json:"name,omitempty"`
+ Optional *bool `tfsdk:"optional" json:"optional,omitempty"`
+ Path *string `tfsdk:"path" json:"path,omitempty"`
+ SignerName *string `tfsdk:"signer_name" json:"signerName,omitempty"`
+ } `tfsdk:"cluster_trust_bundle" json:"clusterTrustBundle,omitempty"`
ConfigMap *struct {
Items *[]struct {
Key *string `tfsdk:"key" json:"key,omitempty"`
@@ -1049,6 +1067,14 @@ func (r *AppsKubeblocksIoOpsRequestV1Alpha1Manifest) Schema(_ context.Context, _
Computed: false,
},
+ "enqueue_on_force": schema.BoolAttribute{
+ Description: "Indicates whether opsRequest should continue to queue when 'force' is set to true.",
+ MarkdownDescription: "Indicates whether opsRequest should continue to queue when 'force' is set to true.",
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
"expose": schema.ListNestedAttribute{
Description: "Lists Expose objects, each specifying a Component and its services to be exposed.",
MarkdownDescription: "Lists Expose objects, each specifying a Component and its services to be exposed.",
@@ -1116,8 +1142,8 @@ func (r *AppsKubeblocksIoOpsRequestV1Alpha1Manifest) Schema(_ context.Context, _
NestedObject: schema.NestedAttributeObject{
Attributes: map[string]schema.Attribute{
"app_protocol": schema.StringAttribute{
- Description: "The application protocol for this port.This is used as a hint for implementations to offer richer behavior for protocols that they understand.This field follows standard Kubernetes label syntax.Valid values are either:* Un-prefixed protocol names - reserved for IANA standard service names (as perRFC-6335 and https://www.iana.org/assignments/service-names).* Kubernetes-defined prefixed names: * 'kubernetes.io/h2c' - HTTP/2 over cleartext as described in https://www.rfc-editor.org/rfc/rfc7540 * 'kubernetes.io/ws' - WebSocket over cleartext as described in https://www.rfc-editor.org/rfc/rfc6455 * 'kubernetes.io/wss' - WebSocket over TLS as described in https://www.rfc-editor.org/rfc/rfc6455* Other protocols should use implementation-defined prefixed names such asmycompany.com/my-custom-protocol.",
- MarkdownDescription: "The application protocol for this port.This is used as a hint for implementations to offer richer behavior for protocols that they understand.This field follows standard Kubernetes label syntax.Valid values are either:* Un-prefixed protocol names - reserved for IANA standard service names (as perRFC-6335 and https://www.iana.org/assignments/service-names).* Kubernetes-defined prefixed names: * 'kubernetes.io/h2c' - HTTP/2 over cleartext as described in https://www.rfc-editor.org/rfc/rfc7540 * 'kubernetes.io/ws' - WebSocket over cleartext as described in https://www.rfc-editor.org/rfc/rfc6455 * 'kubernetes.io/wss' - WebSocket over TLS as described in https://www.rfc-editor.org/rfc/rfc6455* Other protocols should use implementation-defined prefixed names such asmycompany.com/my-custom-protocol.",
+ Description: "The application protocol for this port.This is used as a hint for implementations to offer richer behavior for protocols that they understand.This field follows standard Kubernetes label syntax.Valid values are either:* Un-prefixed protocol names - reserved for IANA standard service names (as perRFC-6335 and https://www.iana.org/assignments/service-names).* Kubernetes-defined prefixed names: * 'kubernetes.io/h2c' - HTTP/2 prior knowledge over cleartext as described in https://www.rfc-editor.org/rfc/rfc9113.html#name-starting-http-2-with-prior- * 'kubernetes.io/ws' - WebSocket over cleartext as described in https://www.rfc-editor.org/rfc/rfc6455 * 'kubernetes.io/wss' - WebSocket over TLS as described in https://www.rfc-editor.org/rfc/rfc6455* Other protocols should use implementation-defined prefixed names such asmycompany.com/my-custom-protocol.",
+ MarkdownDescription: "The application protocol for this port.This is used as a hint for implementations to offer richer behavior for protocols that they understand.This field follows standard Kubernetes label syntax.Valid values are either:* Un-prefixed protocol names - reserved for IANA standard service names (as perRFC-6335 and https://www.iana.org/assignments/service-names).* Kubernetes-defined prefixed names: * 'kubernetes.io/h2c' - HTTP/2 prior knowledge over cleartext as described in https://www.rfc-editor.org/rfc/rfc9113.html#name-starting-http-2-with-prior- * 'kubernetes.io/ws' - WebSocket over cleartext as described in https://www.rfc-editor.org/rfc/rfc6455 * 'kubernetes.io/wss' - WebSocket over TLS as described in https://www.rfc-editor.org/rfc/rfc6455* Other protocols should use implementation-defined prefixed names such asmycompany.com/my-custom-protocol.",
Required: false,
Optional: true,
Computed: false,
@@ -1816,8 +1842,8 @@ func (r *AppsKubeblocksIoOpsRequestV1Alpha1Manifest) Schema(_ context.Context, _
MarkdownDescription: "Required. A pod affinity term, associated with the corresponding weight.",
Attributes: map[string]schema.Attribute{
"label_selector": schema.SingleNestedAttribute{
- Description: "A label query over a set of resources, in this case pods.",
- MarkdownDescription: "A label query over a set of resources, in this case pods.",
+ Description: "A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods.",
+ MarkdownDescription: "A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods.",
Attributes: map[string]schema.Attribute{
"match_expressions": schema.ListNestedAttribute{
Description: "matchExpressions is a list of label selector requirements. The requirements are ANDed.",
@@ -1869,6 +1895,24 @@ func (r *AppsKubeblocksIoOpsRequestV1Alpha1Manifest) Schema(_ context.Context, _
Computed: false,
},
+ "match_label_keys": schema.ListAttribute{
+ Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "mismatch_label_keys": schema.ListAttribute{
+ Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
"namespace_selector": schema.SingleNestedAttribute{
Description: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.",
MarkdownDescription: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.",
@@ -1965,8 +2009,8 @@ func (r *AppsKubeblocksIoOpsRequestV1Alpha1Manifest) Schema(_ context.Context, _
NestedObject: schema.NestedAttributeObject{
Attributes: map[string]schema.Attribute{
"label_selector": schema.SingleNestedAttribute{
- Description: "A label query over a set of resources, in this case pods.",
- MarkdownDescription: "A label query over a set of resources, in this case pods.",
+ Description: "A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods.",
+ MarkdownDescription: "A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods.",
Attributes: map[string]schema.Attribute{
"match_expressions": schema.ListNestedAttribute{
Description: "matchExpressions is a list of label selector requirements. The requirements are ANDed.",
@@ -2018,6 +2062,24 @@ func (r *AppsKubeblocksIoOpsRequestV1Alpha1Manifest) Schema(_ context.Context, _
Computed: false,
},
+ "match_label_keys": schema.ListAttribute{
+ Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "mismatch_label_keys": schema.ListAttribute{
+ Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
"namespace_selector": schema.SingleNestedAttribute{
Description: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.",
MarkdownDescription: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.",
@@ -2114,8 +2176,8 @@ func (r *AppsKubeblocksIoOpsRequestV1Alpha1Manifest) Schema(_ context.Context, _
MarkdownDescription: "Required. A pod affinity term, associated with the corresponding weight.",
Attributes: map[string]schema.Attribute{
"label_selector": schema.SingleNestedAttribute{
- Description: "A label query over a set of resources, in this case pods.",
- MarkdownDescription: "A label query over a set of resources, in this case pods.",
+ Description: "A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods.",
+ MarkdownDescription: "A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods.",
Attributes: map[string]schema.Attribute{
"match_expressions": schema.ListNestedAttribute{
Description: "matchExpressions is a list of label selector requirements. The requirements are ANDed.",
@@ -2167,6 +2229,24 @@ func (r *AppsKubeblocksIoOpsRequestV1Alpha1Manifest) Schema(_ context.Context, _
Computed: false,
},
+ "match_label_keys": schema.ListAttribute{
+ Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "mismatch_label_keys": schema.ListAttribute{
+ Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
"namespace_selector": schema.SingleNestedAttribute{
Description: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.",
MarkdownDescription: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.",
@@ -2263,8 +2343,8 @@ func (r *AppsKubeblocksIoOpsRequestV1Alpha1Manifest) Schema(_ context.Context, _
NestedObject: schema.NestedAttributeObject{
Attributes: map[string]schema.Attribute{
"label_selector": schema.SingleNestedAttribute{
- Description: "A label query over a set of resources, in this case pods.",
- MarkdownDescription: "A label query over a set of resources, in this case pods.",
+ Description: "A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods.",
+ MarkdownDescription: "A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods.",
Attributes: map[string]schema.Attribute{
"match_expressions": schema.ListNestedAttribute{
Description: "matchExpressions is a list of label selector requirements. The requirements are ANDed.",
@@ -2316,6 +2396,24 @@ func (r *AppsKubeblocksIoOpsRequestV1Alpha1Manifest) Schema(_ context.Context, _
Computed: false,
},
+ "match_label_keys": schema.ListAttribute{
+ Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.Also, MatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "mismatch_label_keys": schema.ListAttribute{
+ Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'LabelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both MismatchLabelKeys and LabelSelector.Also, MismatchLabelKeys cannot be set when LabelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
"namespace_selector": schema.SingleNestedAttribute{
Description: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.",
MarkdownDescription: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.",
@@ -2636,25 +2734,6 @@ func (r *AppsKubeblocksIoOpsRequestV1Alpha1Manifest) Schema(_ context.Context, _
Description: "Represents the minimum resources the volume should have.If the RecoverVolumeExpansionFailure feature is enabled, users are allowed to specify resource requirements thatare lower than the previous value but must still be higher than the capacity recorded in the status field of the claim.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources.",
MarkdownDescription: "Represents the minimum resources the volume should have.If the RecoverVolumeExpansionFailure feature is enabled, users are allowed to specify resource requirements thatare lower than the previous value but must still be higher than the capacity recorded in the status field of the claim.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources.",
Attributes: map[string]schema.Attribute{
- "claims": schema.ListNestedAttribute{
- Description: "Claims lists the names of resources, defined in spec.resourceClaims,that are used by this container.This is an alpha field and requires enabling theDynamicResourceAllocation feature gate.This field is immutable. It can only be set for containers.",
- MarkdownDescription: "Claims lists the names of resources, defined in spec.resourceClaims,that are used by this container.This is an alpha field and requires enabling theDynamicResourceAllocation feature gate.This field is immutable. It can only be set for containers.",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "name": schema.StringAttribute{
- Description: "Name must match the name of one entry in pod.spec.resourceClaims ofthe Pod where this field is used. It makes that resource availableinside a container.",
- MarkdownDescription: "Name must match the name of one entry in pod.spec.resourceClaims ofthe Pod where this field is used. It makes that resource availableinside a container.",
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
"limits": schema.MapAttribute{
Description: "Limits describes the maximum amount of compute resources allowed.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/",
MarkdownDescription: "Limits describes the maximum amount of compute resources allowed.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/",
@@ -3422,25 +3501,6 @@ func (r *AppsKubeblocksIoOpsRequestV1Alpha1Manifest) Schema(_ context.Context, _
Description: "resources represents the minimum resources the volume should have.If RecoverVolumeExpansionFailure feature is enabled users are allowed to specify resource requirementsthat are lower than previous value but must still be higher than capacity recorded in thestatus field of the claim.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources",
MarkdownDescription: "resources represents the minimum resources the volume should have.If RecoverVolumeExpansionFailure feature is enabled users are allowed to specify resource requirementsthat are lower than previous value but must still be higher than capacity recorded in thestatus field of the claim.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources",
Attributes: map[string]schema.Attribute{
- "claims": schema.ListNestedAttribute{
- Description: "Claims lists the names of resources, defined in spec.resourceClaims,that are used by this container.This is an alpha field and requires enabling theDynamicResourceAllocation feature gate.This field is immutable. It can only be set for containers.",
- MarkdownDescription: "Claims lists the names of resources, defined in spec.resourceClaims,that are used by this container.This is an alpha field and requires enabling theDynamicResourceAllocation feature gate.This field is immutable. It can only be set for containers.",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "name": schema.StringAttribute{
- Description: "Name must match the name of one entry in pod.spec.resourceClaims ofthe Pod where this field is used. It makes that resource availableinside a container.",
- MarkdownDescription: "Name must match the name of one entry in pod.spec.resourceClaims ofthe Pod where this field is used. It makes that resource availableinside a container.",
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
"limits": schema.MapAttribute{
Description: "Limits describes the maximum amount of compute resources allowed.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/",
MarkdownDescription: "Limits describes the maximum amount of compute resources allowed.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/",
@@ -3526,6 +3586,14 @@ func (r *AppsKubeblocksIoOpsRequestV1Alpha1Manifest) Schema(_ context.Context, _
Computed: false,
},
+ "volume_attributes_class_name": schema.StringAttribute{
+ Description: "volumeAttributesClassName may be used to set the VolumeAttributesClass used by this claim.If specified, the CSI driver will create or update the volume with the attributes definedin the corresponding VolumeAttributesClass. This has a different purpose than storageClassName,it can be changed after the claim is created. An empty string value means that no VolumeAttributesClasswill be applied to the claim but it's not allowed to reset this field to empty string once it is set.If unspecified and the PersistentVolumeClaim is unbound, the default VolumeAttributesClasswill be set by the persistentvolume controller if it exists.If the resource referred to by volumeAttributesClass does not exist, this PersistentVolumeClaim will beset to a Pending state, as reflected by the modifyVolumeStatus field, until such as a resourceexists.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#volumeattributesclass(Alpha) Using this field requires the VolumeAttributesClass feature gate to be enabled.",
+ MarkdownDescription: "volumeAttributesClassName may be used to set the VolumeAttributesClass used by this claim.If specified, the CSI driver will create or update the volume with the attributes definedin the corresponding VolumeAttributesClass. This has a different purpose than storageClassName,it can be changed after the claim is created. An empty string value means that no VolumeAttributesClasswill be applied to the claim but it's not allowed to reset this field to empty string once it is set.If unspecified and the PersistentVolumeClaim is unbound, the default VolumeAttributesClasswill be set by the persistentvolume controller if it exists.If the resource referred to by volumeAttributesClass does not exist, this PersistentVolumeClaim will beset to a Pending state, as reflected by the modifyVolumeStatus field, until such as a resourceexists.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#volumeattributesclass(Alpha) Using this field requires the VolumeAttributesClass feature gate to be enabled.",
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
"volume_mode": schema.StringAttribute{
Description: "volumeMode defines what type of volume is required by the claim.Value of Filesystem is implied when not included in claim spec.",
MarkdownDescription: "volumeMode defines what type of volume is required by the claim.Value of Filesystem is implied when not included in claim spec.",
@@ -4072,6 +4140,101 @@ func (r *AppsKubeblocksIoOpsRequestV1Alpha1Manifest) Schema(_ context.Context, _
MarkdownDescription: "sources is the list of volume projections",
NestedObject: schema.NestedAttributeObject{
Attributes: map[string]schema.Attribute{
+ "cluster_trust_bundle": schema.SingleNestedAttribute{
+ Description: "ClusterTrustBundle allows a pod to access the '.spec.trustBundle' fieldof ClusterTrustBundle objects in an auto-updating file.Alpha, gated by the ClusterTrustBundleProjection feature gate.ClusterTrustBundle objects can either be selected by name, or by thecombination of signer name and a label selector.Kubelet performs aggressive normalization of the PEM contents writteninto the pod filesystem. Esoteric PEM features such as inter-blockcomments and block headers are stripped. Certificates are deduplicated.The ordering of certificates within the file is arbitrary, and Kubeletmay change the order over time.",
+ MarkdownDescription: "ClusterTrustBundle allows a pod to access the '.spec.trustBundle' fieldof ClusterTrustBundle objects in an auto-updating file.Alpha, gated by the ClusterTrustBundleProjection feature gate.ClusterTrustBundle objects can either be selected by name, or by thecombination of signer name and a label selector.Kubelet performs aggressive normalization of the PEM contents writteninto the pod filesystem. Esoteric PEM features such as inter-blockcomments and block headers are stripped. Certificates are deduplicated.The ordering of certificates within the file is arbitrary, and Kubeletmay change the order over time.",
+ Attributes: map[string]schema.Attribute{
+ "label_selector": schema.SingleNestedAttribute{
+ Description: "Select all ClusterTrustBundles that match this label selector. Only haseffect if signerName is set. Mutually-exclusive with name. If unset,interpreted as 'match nothing'. If set but empty, interpreted as 'matcheverything'.",
+ MarkdownDescription: "Select all ClusterTrustBundles that match this label selector. Only haseffect if signerName is set. Mutually-exclusive with name. If unset,interpreted as 'match nothing'. If set but empty, interpreted as 'matcheverything'.",
+ Attributes: map[string]schema.Attribute{
+ "match_expressions": schema.ListNestedAttribute{
+ Description: "matchExpressions is a list of label selector requirements. The requirements are ANDed.",
+ MarkdownDescription: "matchExpressions is a list of label selector requirements. The requirements are ANDed.",
+ NestedObject: schema.NestedAttributeObject{
+ Attributes: map[string]schema.Attribute{
+ "key": schema.StringAttribute{
+ Description: "key is the label key that the selector applies to.",
+ MarkdownDescription: "key is the label key that the selector applies to.",
+ Required: true,
+ Optional: false,
+ Computed: false,
+ },
+
+ "operator": schema.StringAttribute{
+ Description: "operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.",
+ MarkdownDescription: "operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.",
+ Required: true,
+ Optional: false,
+ Computed: false,
+ },
+
+ "values": schema.ListAttribute{
+ Description: "values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.",
+ MarkdownDescription: "values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+ },
+ },
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "match_labels": schema.MapAttribute{
+ Description: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.",
+ MarkdownDescription: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.",
+ ElementType: types.StringType,
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+ },
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "name": schema.StringAttribute{
+ Description: "Select a single ClusterTrustBundle by object name. Mutually-exclusivewith signerName and labelSelector.",
+ MarkdownDescription: "Select a single ClusterTrustBundle by object name. Mutually-exclusivewith signerName and labelSelector.",
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "optional": schema.BoolAttribute{
+ Description: "If true, don't block pod startup if the referenced ClusterTrustBundle(s)aren't available. If using name, then the named ClusterTrustBundle isallowed not to exist. If using signerName, then the combination ofsignerName and labelSelector is allowed to match zeroClusterTrustBundles.",
+ MarkdownDescription: "If true, don't block pod startup if the referenced ClusterTrustBundle(s)aren't available. If using name, then the named ClusterTrustBundle isallowed not to exist. If using signerName, then the combination ofsignerName and labelSelector is allowed to match zeroClusterTrustBundles.",
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
+ "path": schema.StringAttribute{
+ Description: "Relative path from the volume root to write the bundle.",
+ MarkdownDescription: "Relative path from the volume root to write the bundle.",
+ Required: true,
+ Optional: false,
+ Computed: false,
+ },
+
+ "signer_name": schema.StringAttribute{
+ Description: "Select all ClusterTrustBundles that match this signer name.Mutually-exclusive with name. The contents of all selectedClusterTrustBundles will be unified and deduplicated.",
+ MarkdownDescription: "Select all ClusterTrustBundles that match this signer name.Mutually-exclusive with name. The contents of all selectedClusterTrustBundles will be unified and deduplicated.",
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+ },
+ Required: false,
+ Optional: true,
+ Computed: false,
+ },
+
"config_map": schema.SingleNestedAttribute{
Description: "configMap information about the configMap data to project",
MarkdownDescription: "configMap information about the configMap data to project",
diff --git a/internal/provider/apps_v1/apps_stateful_set_v1_manifest.go b/internal/provider/apps_v1/apps_stateful_set_v1_manifest.go
index c64ef6dd0..9b29c3a49 100644
--- a/internal/provider/apps_v1/apps_stateful_set_v1_manifest.go
+++ b/internal/provider/apps_v1/apps_stateful_set_v1_manifest.go
@@ -1432,40 +1432,6 @@ type AppsStatefulSetV1ManifestData struct {
Type *string `tfsdk:"type" json:"type,omitempty"`
} `tfsdk:"update_strategy" json:"updateStrategy,omitempty"`
VolumeClaimTemplates *[]struct {
- ApiVersion *string `tfsdk:"api_version" json:"apiVersion,omitempty"`
- Kind *string `tfsdk:"kind" json:"kind,omitempty"`
- Metadata *struct {
- Annotations *map[string]string `tfsdk:"annotations" json:"annotations,omitempty"`
- CreationTimestamp *string `tfsdk:"creation_timestamp" json:"creationTimestamp,omitempty"`
- DeletionGracePeriodSeconds *int64 `tfsdk:"deletion_grace_period_seconds" json:"deletionGracePeriodSeconds,omitempty"`
- DeletionTimestamp *string `tfsdk:"deletion_timestamp" json:"deletionTimestamp,omitempty"`
- Finalizers *[]string `tfsdk:"finalizers" json:"finalizers,omitempty"`
- GenerateName *string `tfsdk:"generate_name" json:"generateName,omitempty"`
- Generation *int64 `tfsdk:"generation" json:"generation,omitempty"`
- Labels *map[string]string `tfsdk:"labels" json:"labels,omitempty"`
- ManagedFields *[]struct {
- ApiVersion *string `tfsdk:"api_version" json:"apiVersion,omitempty"`
- FieldsType *string `tfsdk:"fields_type" json:"fieldsType,omitempty"`
- FieldsV1 *map[string]string `tfsdk:"fields_v1" json:"fieldsV1,omitempty"`
- Manager *string `tfsdk:"manager" json:"manager,omitempty"`
- Operation *string `tfsdk:"operation" json:"operation,omitempty"`
- Subresource *string `tfsdk:"subresource" json:"subresource,omitempty"`
- Time *string `tfsdk:"time" json:"time,omitempty"`
- } `tfsdk:"managed_fields" json:"managedFields,omitempty"`
- Name *string `tfsdk:"name" json:"name,omitempty"`
- Namespace *string `tfsdk:"namespace" json:"namespace,omitempty"`
- OwnerReferences *[]struct {
- ApiVersion *string `tfsdk:"api_version" json:"apiVersion,omitempty"`
- BlockOwnerDeletion *bool `tfsdk:"block_owner_deletion" json:"blockOwnerDeletion,omitempty"`
- Controller *bool `tfsdk:"controller" json:"controller,omitempty"`
- Kind *string `tfsdk:"kind" json:"kind,omitempty"`
- Name *string `tfsdk:"name" json:"name,omitempty"`
- Uid *string `tfsdk:"uid" json:"uid,omitempty"`
- } `tfsdk:"owner_references" json:"ownerReferences,omitempty"`
- ResourceVersion *string `tfsdk:"resource_version" json:"resourceVersion,omitempty"`
- SelfLink *string `tfsdk:"self_link" json:"selfLink,omitempty"`
- Uid *string `tfsdk:"uid" json:"uid,omitempty"`
- } `tfsdk:"metadata" json:"metadata,omitempty"`
Spec *struct {
AccessModes *[]string `tfsdk:"access_modes" json:"accessModes,omitempty"`
DataSource *struct {
@@ -1496,26 +1462,6 @@ type AppsStatefulSetV1ManifestData struct {
VolumeMode *string `tfsdk:"volume_mode" json:"volumeMode,omitempty"`
VolumeName *string `tfsdk:"volume_name" json:"volumeName,omitempty"`
} `tfsdk:"spec" json:"spec,omitempty"`
- Status *struct {
- AccessModes *[]string `tfsdk:"access_modes" json:"accessModes,omitempty"`
- AllocatedResourceStatuses *map[string]string `tfsdk:"allocated_resource_statuses" json:"allocatedResourceStatuses,omitempty"`
- AllocatedResources *map[string]string `tfsdk:"allocated_resources" json:"allocatedResources,omitempty"`
- Capacity *map[string]string `tfsdk:"capacity" json:"capacity,omitempty"`
- Conditions *[]struct {
- LastProbeTime *string `tfsdk:"last_probe_time" json:"lastProbeTime,omitempty"`
- LastTransitionTime *string `tfsdk:"last_transition_time" json:"lastTransitionTime,omitempty"`
- Message *string `tfsdk:"message" json:"message,omitempty"`
- Reason *string `tfsdk:"reason" json:"reason,omitempty"`
- Status *string `tfsdk:"status" json:"status,omitempty"`
- Type *string `tfsdk:"type" json:"type,omitempty"`
- } `tfsdk:"conditions" json:"conditions,omitempty"`
- CurrentVolumeAttributesClassName *string `tfsdk:"current_volume_attributes_class_name" json:"currentVolumeAttributesClassName,omitempty"`
- ModifyVolumeStatus *struct {
- Status *string `tfsdk:"status" json:"status,omitempty"`
- TargetVolumeAttributesClassName *string `tfsdk:"target_volume_attributes_class_name" json:"targetVolumeAttributesClassName,omitempty"`
- } `tfsdk:"modify_volume_status" json:"modifyVolumeStatus,omitempty"`
- Phase *string `tfsdk:"phase" json:"phase,omitempty"`
- } `tfsdk:"status" json:"status,omitempty"`
} `tfsdk:"volume_claim_templates" json:"volumeClaimTemplates,omitempty"`
} `tfsdk:"spec" json:"spec,omitempty"`
}
@@ -11027,274 +10973,6 @@ func (r *AppsStatefulSetV1Manifest) Schema(_ context.Context, _ datasource.Schem
MarkdownDescription: "volumeClaimTemplates is a list of claims that pods are allowed to reference. The StatefulSet controller is responsible for mapping network identities to claims in a way that maintains the identity of a pod. Every claim in this list must have at least one matching (by name) volumeMount in one container in the template. A claim in this list takes precedence over any volumes in the template, with the same name.",
NestedObject: schema.NestedAttributeObject{
Attributes: map[string]schema.Attribute{
- "api_version": schema.StringAttribute{
- Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- MarkdownDescription: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "kind": schema.StringAttribute{
- Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- MarkdownDescription: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "metadata": schema.SingleNestedAttribute{
- Description: "ObjectMeta is metadata that all persisted resources must have, which includes all objects users must create.",
- MarkdownDescription: "ObjectMeta is metadata that all persisted resources must have, which includes all objects users must create.",
- Attributes: map[string]schema.Attribute{
- "annotations": schema.MapAttribute{
- Description: "Annotations is an unstructured key value map stored with a resource that may be set by external tools to store and retrieve arbitrary metadata. They are not queryable and should be preserved when modifying objects. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/annotations",
- MarkdownDescription: "Annotations is an unstructured key value map stored with a resource that may be set by external tools to store and retrieve arbitrary metadata. They are not queryable and should be preserved when modifying objects. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/annotations",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "creation_timestamp": schema.StringAttribute{
- Description: "Time is a wrapper around time.Time which supports correct marshaling to YAML and JSON. Wrappers are provided for many of the factory methods that the time package offers.",
- MarkdownDescription: "Time is a wrapper around time.Time which supports correct marshaling to YAML and JSON. Wrappers are provided for many of the factory methods that the time package offers.",
- Required: false,
- Optional: true,
- Computed: false,
- Validators: []validator.String{
- validators.DateTime64Validator(),
- },
- },
-
- "deletion_grace_period_seconds": schema.Int64Attribute{
- Description: "Number of seconds allowed for this object to gracefully terminate before it will be removed from the system. Only set when deletionTimestamp is also set. May only be shortened. Read-only.",
- MarkdownDescription: "Number of seconds allowed for this object to gracefully terminate before it will be removed from the system. Only set when deletionTimestamp is also set. May only be shortened. Read-only.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "deletion_timestamp": schema.StringAttribute{
- Description: "Time is a wrapper around time.Time which supports correct marshaling to YAML and JSON. Wrappers are provided for many of the factory methods that the time package offers.",
- MarkdownDescription: "Time is a wrapper around time.Time which supports correct marshaling to YAML and JSON. Wrappers are provided for many of the factory methods that the time package offers.",
- Required: false,
- Optional: true,
- Computed: false,
- Validators: []validator.String{
- validators.DateTime64Validator(),
- },
- },
-
- "finalizers": schema.ListAttribute{
- Description: "Must be empty before the object is deleted from the registry. Each entry is an identifier for the responsible component that will remove the entry from the list. If the deletionTimestamp of the object is non-nil, entries in this list can only be removed. Finalizers may be processed and removed in any order. Order is NOT enforced because it introduces significant risk of stuck finalizers. finalizers is a shared field, any actor with permission can reorder it. If the finalizer list is processed in order, then this can lead to a situation in which the component responsible for the first finalizer in the list is waiting for a signal (field value, external system, or other) produced by a component responsible for a finalizer later in the list, resulting in a deadlock. Without enforced ordering finalizers are free to order amongst themselves and are not vulnerable to ordering changes in the list.",
- MarkdownDescription: "Must be empty before the object is deleted from the registry. Each entry is an identifier for the responsible component that will remove the entry from the list. If the deletionTimestamp of the object is non-nil, entries in this list can only be removed. Finalizers may be processed and removed in any order. Order is NOT enforced because it introduces significant risk of stuck finalizers. finalizers is a shared field, any actor with permission can reorder it. If the finalizer list is processed in order, then this can lead to a situation in which the component responsible for the first finalizer in the list is waiting for a signal (field value, external system, or other) produced by a component responsible for a finalizer later in the list, resulting in a deadlock. Without enforced ordering finalizers are free to order amongst themselves and are not vulnerable to ordering changes in the list.",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "generate_name": schema.StringAttribute{
- Description: "GenerateName is an optional prefix, used by the server, to generate a unique name ONLY IF the Name field has not been provided. If this field is used, the name returned to the client will be different than the name passed. This value will also be combined with a unique suffix. The provided value has the same validation rules as the Name field, and may be truncated by the length of the suffix required to make the value unique on the server.If this field is specified and the generated name exists, the server will return a 409.Applied only if Name is not specified. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#idempotency",
- MarkdownDescription: "GenerateName is an optional prefix, used by the server, to generate a unique name ONLY IF the Name field has not been provided. If this field is used, the name returned to the client will be different than the name passed. This value will also be combined with a unique suffix. The provided value has the same validation rules as the Name field, and may be truncated by the length of the suffix required to make the value unique on the server.If this field is specified and the generated name exists, the server will return a 409.Applied only if Name is not specified. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#idempotency",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "generation": schema.Int64Attribute{
- Description: "A sequence number representing a specific generation of the desired state. Populated by the system. Read-only.",
- MarkdownDescription: "A sequence number representing a specific generation of the desired state. Populated by the system. Read-only.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "labels": schema.MapAttribute{
- Description: "Map of string keys and values that can be used to organize and categorize (scope and select) objects. May match selectors of replication controllers and services. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels",
- MarkdownDescription: "Map of string keys and values that can be used to organize and categorize (scope and select) objects. May match selectors of replication controllers and services. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "managed_fields": schema.ListNestedAttribute{
- Description: "ManagedFields maps workflow-id and version to the set of fields that are managed by that workflow. This is mostly for internal housekeeping, and users typically shouldn't need to set or understand this field. A workflow can be the user's name, a controller's name, or the name of a specific apply path like 'ci-cd'. The set of fields is always in the version that the workflow used when modifying the object.",
- MarkdownDescription: "ManagedFields maps workflow-id and version to the set of fields that are managed by that workflow. This is mostly for internal housekeeping, and users typically shouldn't need to set or understand this field. A workflow can be the user's name, a controller's name, or the name of a specific apply path like 'ci-cd'. The set of fields is always in the version that the workflow used when modifying the object.",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "api_version": schema.StringAttribute{
- Description: "APIVersion defines the version of this resource that this field set applies to. The format is 'group/version' just like the top-level APIVersion field. It is necessary to track the version of a field set because it cannot be automatically converted.",
- MarkdownDescription: "APIVersion defines the version of this resource that this field set applies to. The format is 'group/version' just like the top-level APIVersion field. It is necessary to track the version of a field set because it cannot be automatically converted.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "fields_type": schema.StringAttribute{
- Description: "FieldsType is the discriminator for the different fields format and version. There is currently only one possible value: 'FieldsV1'",
- MarkdownDescription: "FieldsType is the discriminator for the different fields format and version. There is currently only one possible value: 'FieldsV1'",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "fields_v1": schema.MapAttribute{
- Description: "FieldsV1 stores a set of fields in a data structure like a Trie, in JSON format.Each key is either a '.' representing the field itself, and will always map to an empty set, or a string representing a sub-field or item. The string will follow one of these four formats: 'f:', where is the name of a field in a struct, or key in a map 'v:', where is the exact json formatted value of a list item 'i:', where is position of a item in a list 'k:', where is a map of a list item's key fields to their unique values If a key maps to an empty Fields value, the field that key represents is part of the set.The exact format is defined in sigs.k8s.io/structured-merge-diff",
- MarkdownDescription: "FieldsV1 stores a set of fields in a data structure like a Trie, in JSON format.Each key is either a '.' representing the field itself, and will always map to an empty set, or a string representing a sub-field or item. The string will follow one of these four formats: 'f:', where is the name of a field in a struct, or key in a map 'v:', where is the exact json formatted value of a list item 'i:', where is position of a item in a list 'k:', where is a map of a list item's key fields to their unique values If a key maps to an empty Fields value, the field that key represents is part of the set.The exact format is defined in sigs.k8s.io/structured-merge-diff",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "manager": schema.StringAttribute{
- Description: "Manager is an identifier of the workflow managing these fields.",
- MarkdownDescription: "Manager is an identifier of the workflow managing these fields.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "operation": schema.StringAttribute{
- Description: "Operation is the type of operation which lead to this ManagedFieldsEntry being created. The only valid values for this field are 'Apply' and 'Update'.",
- MarkdownDescription: "Operation is the type of operation which lead to this ManagedFieldsEntry being created. The only valid values for this field are 'Apply' and 'Update'.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "subresource": schema.StringAttribute{
- Description: "Subresource is the name of the subresource used to update that object, or empty string if the object was updated through the main resource. The value of this field is used to distinguish between managers, even if they share the same name. For example, a status update will be distinct from a regular update using the same manager name. Note that the APIVersion field is not related to the Subresource field and it always corresponds to the version of the main resource.",
- MarkdownDescription: "Subresource is the name of the subresource used to update that object, or empty string if the object was updated through the main resource. The value of this field is used to distinguish between managers, even if they share the same name. For example, a status update will be distinct from a regular update using the same manager name. Note that the APIVersion field is not related to the Subresource field and it always corresponds to the version of the main resource.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "time": schema.StringAttribute{
- Description: "Time is a wrapper around time.Time which supports correct marshaling to YAML and JSON. Wrappers are provided for many of the factory methods that the time package offers.",
- MarkdownDescription: "Time is a wrapper around time.Time which supports correct marshaling to YAML and JSON. Wrappers are provided for many of the factory methods that the time package offers.",
- Required: false,
- Optional: true,
- Computed: false,
- Validators: []validator.String{
- validators.DateTime64Validator(),
- },
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "name": schema.StringAttribute{
- Description: "Name must be unique within a namespace. Is required when creating resources, although some resources may allow a client to request the generation of an appropriate name automatically. Name is primarily intended for creation idempotence and configuration definition. Cannot be updated. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#names",
- MarkdownDescription: "Name must be unique within a namespace. Is required when creating resources, although some resources may allow a client to request the generation of an appropriate name automatically. Name is primarily intended for creation idempotence and configuration definition. Cannot be updated. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#names",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "namespace": schema.StringAttribute{
- Description: "Namespace defines the space within which each name must be unique. An empty namespace is equivalent to the 'default' namespace, but 'default' is the canonical representation. Not all objects are required to be scoped to a namespace - the value of this field for those objects will be empty.Must be a DNS_LABEL. Cannot be updated. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces",
- MarkdownDescription: "Namespace defines the space within which each name must be unique. An empty namespace is equivalent to the 'default' namespace, but 'default' is the canonical representation. Not all objects are required to be scoped to a namespace - the value of this field for those objects will be empty.Must be a DNS_LABEL. Cannot be updated. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "owner_references": schema.ListNestedAttribute{
- Description: "List of objects depended by this object. If ALL objects in the list have been deleted, this object will be garbage collected. If this object is managed by a controller, then an entry in this list will point to this controller, with the controller field set to true. There cannot be more than one managing controller.",
- MarkdownDescription: "List of objects depended by this object. If ALL objects in the list have been deleted, this object will be garbage collected. If this object is managed by a controller, then an entry in this list will point to this controller, with the controller field set to true. There cannot be more than one managing controller.",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "api_version": schema.StringAttribute{
- Description: "API version of the referent.",
- MarkdownDescription: "API version of the referent.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "block_owner_deletion": schema.BoolAttribute{
- Description: "If true, AND if the owner has the 'foregroundDeletion' finalizer, then the owner cannot be deleted from the key-value store until this reference is removed. See https://kubernetes.io/docs/concepts/architecture/garbage-collection/#foreground-deletion for how the garbage collector interacts with this field and enforces the foreground deletion. Defaults to false. To set this field, a user needs 'delete' permission of the owner, otherwise 422 (Unprocessable Entity) will be returned.",
- MarkdownDescription: "If true, AND if the owner has the 'foregroundDeletion' finalizer, then the owner cannot be deleted from the key-value store until this reference is removed. See https://kubernetes.io/docs/concepts/architecture/garbage-collection/#foreground-deletion for how the garbage collector interacts with this field and enforces the foreground deletion. Defaults to false. To set this field, a user needs 'delete' permission of the owner, otherwise 422 (Unprocessable Entity) will be returned.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "controller": schema.BoolAttribute{
- Description: "If true, this reference points to the managing controller.",
- MarkdownDescription: "If true, this reference points to the managing controller.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "kind": schema.StringAttribute{
- Description: "Kind of the referent. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- MarkdownDescription: "Kind of the referent. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "name": schema.StringAttribute{
- Description: "Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#names",
- MarkdownDescription: "Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#names",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "uid": schema.StringAttribute{
- Description: "UID of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#uids",
- MarkdownDescription: "UID of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#uids",
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "resource_version": schema.StringAttribute{
- Description: "An opaque value that represents the internal version of this object that can be used by clients to determine when objects have changed. May be used for optimistic concurrency, change detection, and the watch operation on a resource or set of resources. Clients must treat these values as opaque and passed unmodified back to the server. They may only be valid for a particular resource or set of resources.Populated by the system. Read-only. Value must be treated as opaque by clients and . More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency",
- MarkdownDescription: "An opaque value that represents the internal version of this object that can be used by clients to determine when objects have changed. May be used for optimistic concurrency, change detection, and the watch operation on a resource or set of resources. Clients must treat these values as opaque and passed unmodified back to the server. They may only be valid for a particular resource or set of resources.Populated by the system. Read-only. Value must be treated as opaque by clients and . More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "self_link": schema.StringAttribute{
- Description: "Deprecated: selfLink is a legacy read-only field that is no longer populated by the system.",
- MarkdownDescription: "Deprecated: selfLink is a legacy read-only field that is no longer populated by the system.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "uid": schema.StringAttribute{
- Description: "UID is the unique in time and space value for this object. It is typically generated by the server on successful creation of a resource and is not allowed to change on PUT operations.Populated by the system. Read-only. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#uids",
- MarkdownDescription: "UID is the unique in time and space value for this object. It is typically generated by the server on successful creation of a resource and is not allowed to change on PUT operations.Populated by the system. Read-only. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#uids",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
"spec": schema.SingleNestedAttribute{
Description: "PersistentVolumeClaimSpec describes the common attributes of storage devices and allows a Source for provider-specific attributes",
MarkdownDescription: "PersistentVolumeClaimSpec describes the common attributes of storage devices and allows a Source for provider-specific attributes",
@@ -11499,157 +11177,6 @@ func (r *AppsStatefulSetV1Manifest) Schema(_ context.Context, _ datasource.Schem
Optional: true,
Computed: false,
},
-
- "status": schema.SingleNestedAttribute{
- Description: "PersistentVolumeClaimStatus is the current status of a persistent volume claim.",
- MarkdownDescription: "PersistentVolumeClaimStatus is the current status of a persistent volume claim.",
- Attributes: map[string]schema.Attribute{
- "access_modes": schema.ListAttribute{
- Description: "accessModes contains the actual access modes the volume backing the PVC has. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#access-modes-1",
- MarkdownDescription: "accessModes contains the actual access modes the volume backing the PVC has. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#access-modes-1",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "allocated_resource_statuses": schema.MapAttribute{
- Description: "allocatedResourceStatuses stores status of resource being resized for the given PVC. Key names follow standard Kubernetes label syntax. Valid values are either: * Un-prefixed keys: - storage - the capacity of the volume. * Custom resources must use implementation-defined prefixed names such as 'example.com/my-custom-resource'Apart from above values - keys that are unprefixed or have kubernetes.io prefix are considered reserved and hence may not be used.ClaimResourceStatus can be in any of following states: - ControllerResizeInProgress: State set when resize controller starts resizing the volume in control-plane. - ControllerResizeFailed: State set when resize has failed in resize controller with a terminal error. - NodeResizePending: State set when resize controller has finished resizing the volume but further resizing of volume is needed on the node. - NodeResizeInProgress: State set when kubelet starts resizing the volume. - NodeResizeFailed: State set when resizing has failed in kubelet with a terminal error. Transient errors don't set NodeResizeFailed.For example: if expanding a PVC for more capacity - this field can be one of the following states: - pvc.status.allocatedResourceStatus['storage'] = 'ControllerResizeInProgress' - pvc.status.allocatedResourceStatus['storage'] = 'ControllerResizeFailed' - pvc.status.allocatedResourceStatus['storage'] = 'NodeResizePending' - pvc.status.allocatedResourceStatus['storage'] = 'NodeResizeInProgress' - pvc.status.allocatedResourceStatus['storage'] = 'NodeResizeFailed'When this field is not set, it means that no resize operation is in progress for the given PVC.A controller that receives PVC update with previously unknown resourceName or ClaimResourceStatus should ignore the update for the purpose it was designed. For example - a controller that only is responsible for resizing capacity of the volume, should ignore PVC updates that change other valid resources associated with PVC.This is an alpha field and requires enabling RecoverVolumeExpansionFailure feature.",
- MarkdownDescription: "allocatedResourceStatuses stores status of resource being resized for the given PVC. Key names follow standard Kubernetes label syntax. Valid values are either: * Un-prefixed keys: - storage - the capacity of the volume. * Custom resources must use implementation-defined prefixed names such as 'example.com/my-custom-resource'Apart from above values - keys that are unprefixed or have kubernetes.io prefix are considered reserved and hence may not be used.ClaimResourceStatus can be in any of following states: - ControllerResizeInProgress: State set when resize controller starts resizing the volume in control-plane. - ControllerResizeFailed: State set when resize has failed in resize controller with a terminal error. - NodeResizePending: State set when resize controller has finished resizing the volume but further resizing of volume is needed on the node. - NodeResizeInProgress: State set when kubelet starts resizing the volume. - NodeResizeFailed: State set when resizing has failed in kubelet with a terminal error. Transient errors don't set NodeResizeFailed.For example: if expanding a PVC for more capacity - this field can be one of the following states: - pvc.status.allocatedResourceStatus['storage'] = 'ControllerResizeInProgress' - pvc.status.allocatedResourceStatus['storage'] = 'ControllerResizeFailed' - pvc.status.allocatedResourceStatus['storage'] = 'NodeResizePending' - pvc.status.allocatedResourceStatus['storage'] = 'NodeResizeInProgress' - pvc.status.allocatedResourceStatus['storage'] = 'NodeResizeFailed'When this field is not set, it means that no resize operation is in progress for the given PVC.A controller that receives PVC update with previously unknown resourceName or ClaimResourceStatus should ignore the update for the purpose it was designed. For example - a controller that only is responsible for resizing capacity of the volume, should ignore PVC updates that change other valid resources associated with PVC.This is an alpha field and requires enabling RecoverVolumeExpansionFailure feature.",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "allocated_resources": schema.MapAttribute{
- Description: "allocatedResources tracks the resources allocated to a PVC including its capacity. Key names follow standard Kubernetes label syntax. Valid values are either: * Un-prefixed keys: - storage - the capacity of the volume. * Custom resources must use implementation-defined prefixed names such as 'example.com/my-custom-resource'Apart from above values - keys that are unprefixed or have kubernetes.io prefix are considered reserved and hence may not be used.Capacity reported here may be larger than the actual capacity when a volume expansion operation is requested. For storage quota, the larger value from allocatedResources and PVC.spec.resources is used. If allocatedResources is not set, PVC.spec.resources alone is used for quota calculation. If a volume expansion capacity request is lowered, allocatedResources is only lowered if there are no expansion operations in progress and if the actual volume capacity is equal or lower than the requested capacity.A controller that receives PVC update with previously unknown resourceName should ignore the update for the purpose it was designed. For example - a controller that only is responsible for resizing capacity of the volume, should ignore PVC updates that change other valid resources associated with PVC.This is an alpha field and requires enabling RecoverVolumeExpansionFailure feature.",
- MarkdownDescription: "allocatedResources tracks the resources allocated to a PVC including its capacity. Key names follow standard Kubernetes label syntax. Valid values are either: * Un-prefixed keys: - storage - the capacity of the volume. * Custom resources must use implementation-defined prefixed names such as 'example.com/my-custom-resource'Apart from above values - keys that are unprefixed or have kubernetes.io prefix are considered reserved and hence may not be used.Capacity reported here may be larger than the actual capacity when a volume expansion operation is requested. For storage quota, the larger value from allocatedResources and PVC.spec.resources is used. If allocatedResources is not set, PVC.spec.resources alone is used for quota calculation. If a volume expansion capacity request is lowered, allocatedResources is only lowered if there are no expansion operations in progress and if the actual volume capacity is equal or lower than the requested capacity.A controller that receives PVC update with previously unknown resourceName should ignore the update for the purpose it was designed. For example - a controller that only is responsible for resizing capacity of the volume, should ignore PVC updates that change other valid resources associated with PVC.This is an alpha field and requires enabling RecoverVolumeExpansionFailure feature.",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "capacity": schema.MapAttribute{
- Description: "capacity represents the actual resources of the underlying volume.",
- MarkdownDescription: "capacity represents the actual resources of the underlying volume.",
- ElementType: types.StringType,
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "conditions": schema.ListNestedAttribute{
- Description: "conditions is the current Condition of persistent volume claim. If underlying persistent volume is being resized then the Condition will be set to 'Resizing'.",
- MarkdownDescription: "conditions is the current Condition of persistent volume claim. If underlying persistent volume is being resized then the Condition will be set to 'Resizing'.",
- NestedObject: schema.NestedAttributeObject{
- Attributes: map[string]schema.Attribute{
- "last_probe_time": schema.StringAttribute{
- Description: "Time is a wrapper around time.Time which supports correct marshaling to YAML and JSON. Wrappers are provided for many of the factory methods that the time package offers.",
- MarkdownDescription: "Time is a wrapper around time.Time which supports correct marshaling to YAML and JSON. Wrappers are provided for many of the factory methods that the time package offers.",
- Required: false,
- Optional: true,
- Computed: false,
- Validators: []validator.String{
- validators.DateTime64Validator(),
- },
- },
-
- "last_transition_time": schema.StringAttribute{
- Description: "Time is a wrapper around time.Time which supports correct marshaling to YAML and JSON. Wrappers are provided for many of the factory methods that the time package offers.",
- MarkdownDescription: "Time is a wrapper around time.Time which supports correct marshaling to YAML and JSON. Wrappers are provided for many of the factory methods that the time package offers.",
- Required: false,
- Optional: true,
- Computed: false,
- Validators: []validator.String{
- validators.DateTime64Validator(),
- },
- },
-
- "message": schema.StringAttribute{
- Description: "message is the human-readable message indicating details about last transition.",
- MarkdownDescription: "message is the human-readable message indicating details about last transition.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "reason": schema.StringAttribute{
- Description: "reason is a unique, this should be a short, machine understandable string that gives the reason for condition's last transition. If it reports 'Resizing' that means the underlying persistent volume is being resized.",
- MarkdownDescription: "reason is a unique, this should be a short, machine understandable string that gives the reason for condition's last transition. If it reports 'Resizing' that means the underlying persistent volume is being resized.",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "status": schema.StringAttribute{
- Description: "",
- MarkdownDescription: "",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "type": schema.StringAttribute{
- Description: "",
- MarkdownDescription: "",
- Required: true,
- Optional: false,
- Computed: false,
- },
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "current_volume_attributes_class_name": schema.StringAttribute{
- Description: "currentVolumeAttributesClassName is the current name of the VolumeAttributesClass the PVC is using. When unset, there is no VolumeAttributeClass applied to this PersistentVolumeClaim This is a beta field and requires enabling VolumeAttributesClass feature (off by default).",
- MarkdownDescription: "currentVolumeAttributesClassName is the current name of the VolumeAttributesClass the PVC is using. When unset, there is no VolumeAttributeClass applied to this PersistentVolumeClaim This is a beta field and requires enabling VolumeAttributesClass feature (off by default).",
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "modify_volume_status": schema.SingleNestedAttribute{
- Description: "ModifyVolumeStatus represents the status object of ControllerModifyVolume operation",
- MarkdownDescription: "ModifyVolumeStatus represents the status object of ControllerModifyVolume operation",
- Attributes: map[string]schema.Attribute{
- "status": schema.StringAttribute{
- Description: "status is the status of the ControllerModifyVolume operation. It can be in any of following states: - Pending Pending indicates that the PersistentVolumeClaim cannot be modified due to unmet requirements, such as the specified VolumeAttributesClass not existing. - InProgress InProgress indicates that the volume is being modified. - Infeasible Infeasible indicates that the request has been rejected as invalid by the CSI driver. To resolve the error, a valid VolumeAttributesClass needs to be specified.Note: New statuses can be added in the future. Consumers should check for unknown statuses and fail appropriately.",
- MarkdownDescription: "status is the status of the ControllerModifyVolume operation. It can be in any of following states: - Pending Pending indicates that the PersistentVolumeClaim cannot be modified due to unmet requirements, such as the specified VolumeAttributesClass not existing. - InProgress InProgress indicates that the volume is being modified. - Infeasible Infeasible indicates that the request has been rejected as invalid by the CSI driver. To resolve the error, a valid VolumeAttributesClass needs to be specified.Note: New statuses can be added in the future. Consumers should check for unknown statuses and fail appropriately.",
- Required: true,
- Optional: false,
- Computed: false,
- },
-
- "target_volume_attributes_class_name": schema.StringAttribute{
- Description: "targetVolumeAttributesClassName is the name of the VolumeAttributesClass the PVC currently being reconciled",
- MarkdownDescription: "targetVolumeAttributesClassName is the name of the VolumeAttributesClass the PVC currently being reconciled",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
-
- "phase": schema.StringAttribute{
- Description: "phase represents the current phase of PersistentVolumeClaim.",
- MarkdownDescription: "phase represents the current phase of PersistentVolumeClaim.",
- Required: false,
- Optional: true,
- Computed: false,
- },
- },
- Required: false,
- Optional: true,
- Computed: false,
- },
},
},
Required: false,
diff --git a/internal/provider/camel_apache_org_v1/camel_apache_org_build_v1_manifest.go b/internal/provider/camel_apache_org_v1/camel_apache_org_build_v1_manifest.go
index 2115501e3..078a3c8f8 100644
--- a/internal/provider/camel_apache_org_v1/camel_apache_org_build_v1_manifest.go
+++ b/internal/provider/camel_apache_org_v1/camel_apache_org_build_v1_manifest.go
@@ -582,12 +582,12 @@ func (r *CamelApacheOrgBuildV1Manifest) Schema(_ context.Context, _ datasource.S
},
"spec": schema.SingleNestedAttribute{
- Description: "BuildSpec defines the list of tasks to be execute for a Build. From Camel K version 2, it would be more appropriate to think it as pipeline.",
- MarkdownDescription: "BuildSpec defines the list of tasks to be execute for a Build. From Camel K version 2, it would be more appropriate to think it as pipeline.",
+ Description: "BuildSpec defines the list of tasks to be execute for a Build. From Camel K version 2, it would be more appropriateto think it as pipeline.",
+ MarkdownDescription: "BuildSpec defines the list of tasks to be execute for a Build. From Camel K version 2, it would be more appropriateto think it as pipeline.",
Attributes: map[string]schema.Attribute{
"configuration": schema.SingleNestedAttribute{
- Description: "The configuration that should be used to perform the Build. Deprecated: no longer in use in Camel K 2 - maintained for backward compatibility",
- MarkdownDescription: "The configuration that should be used to perform the Build. Deprecated: no longer in use in Camel K 2 - maintained for backward compatibility",
+ Description: "The configuration that should be used to perform the Build.Deprecated: no longer in use in Camel K 2 - maintained for backward compatibility",
+ MarkdownDescription: "The configuration that should be used to perform the Build.Deprecated: no longer in use in Camel K 2 - maintained for backward compatibility",
Attributes: map[string]schema.Attribute{
"annotations": schema.MapAttribute{
Description: "Annotation to use for the builder pod. Only used for 'pod' strategy",
@@ -692,16 +692,16 @@ func (r *CamelApacheOrgBuildV1Manifest) Schema(_ context.Context, _ datasource.S
},
"max_running_builds": schema.Int64Attribute{
- Description: "the maximum amount of parallel running builds started by this operator instance Deprecated: no longer in use in Camel K 2 - maintained for backward compatibility",
- MarkdownDescription: "the maximum amount of parallel running builds started by this operator instance Deprecated: no longer in use in Camel K 2 - maintained for backward compatibility",
+ Description: "the maximum amount of parallel running builds started by this operator instanceDeprecated: no longer in use in Camel K 2 - maintained for backward compatibility",
+ MarkdownDescription: "the maximum amount of parallel running builds started by this operator instanceDeprecated: no longer in use in Camel K 2 - maintained for backward compatibility",
Required: false,
Optional: true,
Computed: false,
},
"operator_namespace": schema.StringAttribute{
- Description: "The namespace where to run the builder Pod (must be the same of the operator in charge of this Build reconciliation). Deprecated: no longer in use in Camel K 2 - maintained for backward compatibility",
- MarkdownDescription: "The namespace where to run the builder Pod (must be the same of the operator in charge of this Build reconciliation). Deprecated: no longer in use in Camel K 2 - maintained for backward compatibility",
+ Description: "The namespace where to run the builder Pod (must be the same of the operator in charge of this Build reconciliation).Deprecated: no longer in use in Camel K 2 - maintained for backward compatibility",
+ MarkdownDescription: "The namespace where to run the builder Pod (must be the same of the operator in charge of this Build reconciliation).Deprecated: no longer in use in Camel K 2 - maintained for backward compatibility",
Required: false,
Optional: true,
Computed: false,
@@ -713,8 +713,8 @@ func (r *CamelApacheOrgBuildV1Manifest) Schema(_ context.Context, _ datasource.S
NestedObject: schema.NestedAttributeObject{
Attributes: map[string]schema.Attribute{
"buildah": schema.SingleNestedAttribute{
- Description: "a BuildahTask, for Buildah strategy Deprecated: use jib, s2i or a custom publishing strategy instead",
- MarkdownDescription: "a BuildahTask, for Buildah strategy Deprecated: use jib, s2i or a custom publishing strategy instead",
+ Description: "a BuildahTask, for Buildah strategyDeprecated: use jib, s2i or a custom publishing strategy instead",
+ MarkdownDescription: "a BuildahTask, for Buildah strategyDeprecated: use jib, s2i or a custom publishing strategy instead",
Attributes: map[string]schema.Attribute{
"base_image": schema.StringAttribute{
Description: "base image layer",
@@ -1072,8 +1072,8 @@ func (r *CamelApacheOrgBuildV1Manifest) Schema(_ context.Context, _ datasource.S
MarkdownDescription: "the configuration required by Maven for the application build phase",
Attributes: map[string]schema.Attribute{
"ca_secrets": schema.ListNestedAttribute{
- Description: "The Secrets name and key, containing the CA certificate(s) used to connect to remote Maven repositories. It can contain X.509 certificates, and PKCS#7 formatted certificate chains. A JKS formatted keystore is automatically created to store the CA certificate(s), and configured to be used as a trusted certificate(s) by the Maven commands. Note that the root CA certificates are also imported into the created keystore.",
- MarkdownDescription: "The Secrets name and key, containing the CA certificate(s) used to connect to remote Maven repositories. It can contain X.509 certificates, and PKCS#7 formatted certificate chains. A JKS formatted keystore is automatically created to store the CA certificate(s), and configured to be used as a trusted certificate(s) by the Maven commands. Note that the root CA certificates are also imported into the created keystore.",
+ Description: "The Secrets name and key, containing the CA certificate(s) used to connectto remote Maven repositories.It can contain X.509 certificates, and PKCS#7 formatted certificate chains.A JKS formatted keystore is automatically created to store the CA certificate(s),and configured to be used as a trusted certificate(s) by the Maven commands.Note that the root CA certificates are also imported into the created keystore.",
+ MarkdownDescription: "The Secrets name and key, containing the CA certificate(s) used to connectto remote Maven repositories.It can contain X.509 certificates, and PKCS#7 formatted certificate chains.A JKS formatted keystore is automatically created to store the CA certificate(s),and configured to be used as a trusted certificate(s) by the Maven commands.Note that the root CA certificates are also imported into the created keystore.",
NestedObject: schema.NestedAttributeObject{
Attributes: map[string]schema.Attribute{
"key": schema.StringAttribute{
@@ -1085,8 +1085,8 @@ func (r *CamelApacheOrgBuildV1Manifest) Schema(_ context.Context, _ datasource.S
},
"name": schema.StringAttribute{
- Description: "Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?",
- MarkdownDescription: "Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?",
+ Description: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?",
+ MarkdownDescription: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?",
Required: false,
Optional: true,
Computed: false,
@@ -1107,8 +1107,8 @@ func (r *CamelApacheOrgBuildV1Manifest) Schema(_ context.Context, _ datasource.S
},
"cli_options": schema.ListAttribute{
- Description: "The CLI options that are appended to the list of arguments for Maven commands, e.g., '-V,--no-transfer-progress,-Dstyle.color=never'. See https://maven.apache.org/ref/3.8.4/maven-embedder/cli.html.",
- MarkdownDescription: "The CLI options that are appended to the list of arguments for Maven commands, e.g., '-V,--no-transfer-progress,-Dstyle.color=never'. See https://maven.apache.org/ref/3.8.4/maven-embedder/cli.html.",
+ Description: "The CLI options that are appended to the list of arguments for Maven commands,e.g., '-V,--no-transfer-progress,-Dstyle.color=never'.See https://maven.apache.org/ref/3.8.4/maven-embedder/cli.html.",
+ MarkdownDescription: "The CLI options that are appended to the list of arguments for Maven commands,e.g., '-V,--no-transfer-progress,-Dstyle.color=never'.See https://maven.apache.org/ref/3.8.4/maven-embedder/cli.html.",
ElementType: types.StringType,
Required: false,
Optional: true,
@@ -1116,8 +1116,8 @@ func (r *CamelApacheOrgBuildV1Manifest) Schema(_ context.Context, _ datasource.S
},
"extension": schema.ListNestedAttribute{
- Description: "The Maven build extensions. See https://maven.apache.org/guides/mini/guide-using-extensions.html.",
- MarkdownDescription: "The Maven build extensions. See https://maven.apache.org/guides/mini/guide-using-extensions.html.",
+ Description: "The Maven build extensions.See https://maven.apache.org/guides/mini/guide-using-extensions.html.",
+ MarkdownDescription: "The Maven build extensions.See https://maven.apache.org/guides/mini/guide-using-extensions.html.",
NestedObject: schema.NestedAttributeObject{
Attributes: map[string]schema.Attribute{
"artifact_id": schema.StringAttribute{
@@ -1175,8 +1175,8 @@ func (r *CamelApacheOrgBuildV1Manifest) Schema(_ context.Context, _ datasource.S
},
"profiles": schema.ListNestedAttribute{
- Description: "A reference to the ConfigMap or Secret key that contains the Maven profile.",
- MarkdownDescription: "A reference to the ConfigMap or Secret key that contains the Maven profile.",
+ Description: "A reference to the ConfigMap or Secret key that containsthe Maven profile.",
+ MarkdownDescription: "A reference to the ConfigMap or Secret key that containsthe Maven profile.",
NestedObject: schema.NestedAttributeObject{
Attributes: map[string]schema.Attribute{
"config_map_key_ref": schema.SingleNestedAttribute{
@@ -1192,8 +1192,8 @@ func (r *CamelApacheOrgBuildV1Manifest) Schema(_ context.Context, _ datasource.S
},
"name": schema.StringAttribute{
- Description: "Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?",
- MarkdownDescription: "Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?",
+ Description: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?",
+ MarkdownDescription: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?",
Required: false,
Optional: true,
Computed: false,
@@ -1225,8 +1225,8 @@ func (r *CamelApacheOrgBuildV1Manifest) Schema(_ context.Context, _ datasource.S
},
"name": schema.StringAttribute{
- Description: "Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?",
- MarkdownDescription: "Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?",
+ Description: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?",
+ MarkdownDescription: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?",
Required: false,
Optional: true,
Computed: false,
@@ -1286,8 +1286,8 @@ func (r *CamelApacheOrgBuildV1Manifest) Schema(_ context.Context, _ datasource.S
MarkdownDescription: "can use stable releases",
Attributes: map[string]schema.Attribute{
"checksum_policy": schema.StringAttribute{
- Description: "When Maven deploys files to the repository, it also deploys corresponding checksum files. Your options are to 'ignore', 'fail', or 'warn' on missing or incorrect checksums.",
- MarkdownDescription: "When Maven deploys files to the repository, it also deploys corresponding checksum files. Your options are to 'ignore', 'fail', or 'warn' on missing or incorrect checksums.",
+ Description: "When Maven deploys files to the repository, it also deploys corresponding checksum files.Your options are to 'ignore', 'fail', or 'warn' on missing or incorrect checksums.",
+ MarkdownDescription: "When Maven deploys files to the repository, it also deploys corresponding checksum files.Your options are to 'ignore', 'fail', or 'warn' on missing or incorrect checksums.",
Required: false,
Optional: true,
Computed: false,
@@ -1302,8 +1302,8 @@ func (r *CamelApacheOrgBuildV1Manifest) Schema(_ context.Context, _ datasource.S
},
"update_policy": schema.StringAttribute{
- Description: "This element specifies how often updates should attempt to occur. Maven will compare the local POM's timestamp (stored in a repository's maven-metadata file) to the remote. The choices are: 'always', 'daily' (default), 'interval:X' (where X is an integer in minutes) or 'never'",
- MarkdownDescription: "This element specifies how often updates should attempt to occur. Maven will compare the local POM's timestamp (stored in a repository's maven-metadata file) to the remote. The choices are: 'always', 'daily' (default), 'interval:X' (where X is an integer in minutes) or 'never'",
+ Description: "This element specifies how often updates should attempt to occur.Maven will compare the local POM's timestamp (stored in a repository's maven-metadata file) to the remote.The choices are: 'always', 'daily' (default), 'interval:X' (where X is an integer in minutes) or 'never'",
+ MarkdownDescription: "This element specifies how often updates should attempt to occur.Maven will compare the local POM's timestamp (stored in a repository's maven-metadata file) to the remote.The choices are: 'always', 'daily' (default), 'interval:X' (where X is an integer in minutes) or 'never'",
Required: false,
Optional: true,
Computed: false,
@@ -1319,8 +1319,8 @@ func (r *CamelApacheOrgBuildV1Manifest) Schema(_ context.Context, _ datasource.S
MarkdownDescription: "can use snapshot",
Attributes: map[string]schema.Attribute{
"checksum_policy": schema.StringAttribute{
- Description: "When Maven deploys files to the repository, it also deploys corresponding checksum files. Your options are to 'ignore', 'fail', or 'warn' on missing or incorrect checksums.",
- MarkdownDescription: "When Maven deploys files to the repository, it also deploys corresponding checksum files. Your options are to 'ignore', 'fail', or 'warn' on missing or incorrect checksums.",
+ Description: "When Maven deploys files to the repository, it also deploys corresponding checksum files.Your options are to 'ignore', 'fail', or 'warn' on missing or incorrect checksums.",
+ MarkdownDescription: "When Maven deploys files to the repository, it also deploys corresponding checksum files.Your options are to 'ignore', 'fail', or 'warn' on missing or incorrect checksums.",
Required: false,
Optional: true,
Computed: false,
@@ -1335,8 +1335,8 @@ func (r *CamelApacheOrgBuildV1Manifest) Schema(_ context.Context, _ datasource.S
},
"update_policy": schema.StringAttribute{
- Description: "This element specifies how often updates should attempt to occur. Maven will compare the local POM's timestamp (stored in a repository's maven-metadata file) to the remote. The choices are: 'always', 'daily' (default), 'interval:X' (where X is an integer in minutes) or 'never'",
- MarkdownDescription: "This element specifies how often updates should attempt to occur. Maven will compare the local POM's timestamp (stored in a repository's maven-metadata file) to the remote. The choices are: 'always', 'daily' (default), 'interval:X' (where X is an integer in minutes) or 'never'",
+ Description: "This element specifies how often updates should attempt to occur.Maven will compare the local POM's timestamp (stored in a repository's maven-metadata file) to the remote.The choices are: 'always', 'daily' (default), 'interval:X' (where X is an integer in minutes) or 'never'",
+ MarkdownDescription: "This element specifies how often updates should attempt to occur.Maven will compare the local POM's timestamp (stored in a repository's maven-metadata file) to the remote.The choices are: 'always', 'daily' (default), 'interval:X' (where X is an integer in minutes) or 'never'",
Required: false,
Optional: true,
Computed: false,
@@ -1406,8 +1406,8 @@ func (r *CamelApacheOrgBuildV1Manifest) Schema(_ context.Context, _ datasource.S
},
"settings": schema.SingleNestedAttribute{
- Description: "A reference to the ConfigMap or Secret key that contains the Maven settings.",
- MarkdownDescription: "A reference to the ConfigMap or Secret key that contains the Maven settings.",
+ Description: "A reference to the ConfigMap or Secret key that containsthe Maven settings.",
+ MarkdownDescription: "A reference to the ConfigMap or Secret key that containsthe Maven settings.",
Attributes: map[string]schema.Attribute{
"config_map_key_ref": schema.SingleNestedAttribute{
Description: "Selects a key of a ConfigMap.",
@@ -1422,8 +1422,8 @@ func (r *CamelApacheOrgBuildV1Manifest) Schema(_ context.Context, _ datasource.S
},
"name": schema.StringAttribute{
- Description: "Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?",
- MarkdownDescription: "Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?",
+ Description: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?",
+ MarkdownDescription: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?",
Required: false,
Optional: true,
Computed: false,
@@ -1455,8 +1455,8 @@ func (r *CamelApacheOrgBuildV1Manifest) Schema(_ context.Context, _ datasource.S
},
"name": schema.StringAttribute{
- Description: "Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?",
- MarkdownDescription: "Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?",
+ Description: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?",
+ MarkdownDescription: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?",
Required: false,
Optional: true,
Computed: false,
@@ -1481,8 +1481,8 @@ func (r *CamelApacheOrgBuildV1Manifest) Schema(_ context.Context, _ datasource.S
},
"settings_security": schema.SingleNestedAttribute{
- Description: "A reference to the ConfigMap or Secret key that contains the security of the Maven settings.",
- MarkdownDescription: "A reference to the ConfigMap or Secret key that contains the security of the Maven settings.",
+ Description: "A reference to the ConfigMap or Secret key that containsthe security of the Maven settings.",
+ MarkdownDescription: "A reference to the ConfigMap or Secret key that containsthe security of the Maven settings.",
Attributes: map[string]schema.Attribute{
"config_map_key_ref": schema.SingleNestedAttribute{
Description: "Selects a key of a ConfigMap.",
@@ -1497,8 +1497,8 @@ func (r *CamelApacheOrgBuildV1Manifest) Schema(_ context.Context, _ datasource.S
},
"name": schema.StringAttribute{
- Description: "Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?",
- MarkdownDescription: "Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?",
+ Description: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?",
+ MarkdownDescription: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?",
Required: false,
Optional: true,
Computed: false,
@@ -1530,8 +1530,8 @@ func (r *CamelApacheOrgBuildV1Manifest) Schema(_ context.Context, _ datasource.S
},
"name": schema.StringAttribute{
- Description: "Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?",
- MarkdownDescription: "Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?",
+ Description: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?",
+ MarkdownDescription: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?",
Required: false,
Optional: true,
Computed: false,
@@ -1838,8 +1838,8 @@ func (r *CamelApacheOrgBuildV1Manifest) Schema(_ context.Context, _ datasource.S
},
"interceptors": schema.ListAttribute{
- Description: "Interceptors are optional identifiers the org.apache.camel.k.RoutesLoader uses to pre/post process sources",
- MarkdownDescription: "Interceptors are optional identifiers the org.apache.camel.k.RoutesLoader uses to pre/post process sources",
+ Description: "Interceptors are optional identifiers the org.apache.camel.k.RoutesLoaderuses to pre/post process sources",
+ MarkdownDescription: "Interceptors are optional identifiers the org.apache.camel.k.RoutesLoaderuses to pre/post process sources",
ElementType: types.StringType,
Required: false,
Optional: true,
@@ -1855,8 +1855,8 @@ func (r *CamelApacheOrgBuildV1Manifest) Schema(_ context.Context, _ datasource.S
},
"loader": schema.StringAttribute{
- Description: "Loader is an optional id of the org.apache.camel.k.RoutesLoader that will interpret this source at runtime",
- MarkdownDescription: "Loader is an optional id of the org.apache.camel.k.RoutesLoader that will interpret this source at runtime",
+ Description: "Loader is an optional id of the org.apache.camel.k.RoutesLoader that willinterpret this source at runtime",
+ MarkdownDescription: "Loader is an optional id of the org.apache.camel.k.RoutesLoader that willinterpret this source at runtime",
Required: false,
Optional: true,
Computed: false,
@@ -1931,8 +1931,8 @@ func (r *CamelApacheOrgBuildV1Manifest) Schema(_ context.Context, _ datasource.S
MarkdownDescription: "User customizable task execution. These are executed after the build and before the package task.",
Attributes: map[string]schema.Attribute{
"command": schema.StringAttribute{
- Description: "the command to execute Deprecated: use ContainerCommands",
- MarkdownDescription: "the command to execute Deprecated: use ContainerCommands",
+ Description: "the command to executeDeprecated: use ContainerCommands",
+ MarkdownDescription: "the command to executeDeprecated: use ContainerCommands",
Required: false,
Optional: true,
Computed: false,
@@ -2287,8 +2287,8 @@ func (r *CamelApacheOrgBuildV1Manifest) Schema(_ context.Context, _ datasource.S
},
"kaniko": schema.SingleNestedAttribute{
- Description: "a KanikoTask, for Kaniko strategy Deprecated: use jib, s2i or a custom publishing strategy instead",
- MarkdownDescription: "a KanikoTask, for Kaniko strategy Deprecated: use jib, s2i or a custom publishing strategy instead",
+ Description: "a KanikoTask, for Kaniko strategyDeprecated: use jib, s2i or a custom publishing strategy instead",
+ MarkdownDescription: "a KanikoTask, for Kaniko strategyDeprecated: use jib, s2i or a custom publishing strategy instead",
Attributes: map[string]schema.Attribute{
"base_image": schema.StringAttribute{
Description: "base image layer",
@@ -2524,8 +2524,8 @@ func (r *CamelApacheOrgBuildV1Manifest) Schema(_ context.Context, _ datasource.S
},
"package": schema.SingleNestedAttribute{
- Description: "Application pre publishing a PackageTask, used to package the project",
- MarkdownDescription: "Application pre publishing a PackageTask, used to package the project",
+ Description: "Application pre publishinga PackageTask, used to package the project",
+ MarkdownDescription: "Application pre publishinga PackageTask, used to package the project",
Attributes: map[string]schema.Attribute{
"base_image": schema.StringAttribute{
Description: "the base image layer",
@@ -2663,8 +2663,8 @@ func (r *CamelApacheOrgBuildV1Manifest) Schema(_ context.Context, _ datasource.S
MarkdownDescription: "the configuration required by Maven for the application build phase",
Attributes: map[string]schema.Attribute{
"ca_secrets": schema.ListNestedAttribute{
- Description: "The Secrets name and key, containing the CA certificate(s) used to connect to remote Maven repositories. It can contain X.509 certificates, and PKCS#7 formatted certificate chains. A JKS formatted keystore is automatically created to store the CA certificate(s), and configured to be used as a trusted certificate(s) by the Maven commands. Note that the root CA certificates are also imported into the created keystore.",
- MarkdownDescription: "The Secrets name and key, containing the CA certificate(s) used to connect to remote Maven repositories. It can contain X.509 certificates, and PKCS#7 formatted certificate chains. A JKS formatted keystore is automatically created to store the CA certificate(s), and configured to be used as a trusted certificate(s) by the Maven commands. Note that the root CA certificates are also imported into the created keystore.",
+ Description: "The Secrets name and key, containing the CA certificate(s) used to connectto remote Maven repositories.It can contain X.509 certificates, and PKCS#7 formatted certificate chains.A JKS formatted keystore is automatically created to store the CA certificate(s),and configured to be used as a trusted certificate(s) by the Maven commands.Note that the root CA certificates are also imported into the created keystore.",
+ MarkdownDescription: "The Secrets name and key, containing the CA certificate(s) used to connectto remote Maven repositories.It can contain X.509 certificates, and PKCS#7 formatted certificate chains.A JKS formatted keystore is automatically created to store the CA certificate(s),and configured to be used as a trusted certificate(s) by the Maven commands.Note that the root CA certificates are also imported into the created keystore.",
NestedObject: schema.NestedAttributeObject{
Attributes: map[string]schema.Attribute{
"key": schema.StringAttribute{
@@ -2676,8 +2676,8 @@ func (r *CamelApacheOrgBuildV1Manifest) Schema(_ context.Context, _ datasource.S
},
"name": schema.StringAttribute{
- Description: "Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?",
- MarkdownDescription: "Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?",
+ Description: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?",
+ MarkdownDescription: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?",
Required: false,
Optional: true,
Computed: false,
@@ -2698,8 +2698,8 @@ func (r *CamelApacheOrgBuildV1Manifest) Schema(_ context.Context, _ datasource.S
},
"cli_options": schema.ListAttribute{
- Description: "The CLI options that are appended to the list of arguments for Maven commands, e.g., '-V,--no-transfer-progress,-Dstyle.color=never'. See https://maven.apache.org/ref/3.8.4/maven-embedder/cli.html.",
- MarkdownDescription: "The CLI options that are appended to the list of arguments for Maven commands, e.g., '-V,--no-transfer-progress,-Dstyle.color=never'. See https://maven.apache.org/ref/3.8.4/maven-embedder/cli.html.",
+ Description: "The CLI options that are appended to the list of arguments for Maven commands,e.g., '-V,--no-transfer-progress,-Dstyle.color=never'.See https://maven.apache.org/ref/3.8.4/maven-embedder/cli.html.",
+ MarkdownDescription: "The CLI options that are appended to the list of arguments for Maven commands,e.g., '-V,--no-transfer-progress,-Dstyle.color=never'.See https://maven.apache.org/ref/3.8.4/maven-embedder/cli.html.",
ElementType: types.StringType,
Required: false,
Optional: true,
@@ -2707,8 +2707,8 @@ func (r *CamelApacheOrgBuildV1Manifest) Schema(_ context.Context, _ datasource.S
},
"extension": schema.ListNestedAttribute{
- Description: "The Maven build extensions. See https://maven.apache.org/guides/mini/guide-using-extensions.html.",
- MarkdownDescription: "The Maven build extensions. See https://maven.apache.org/guides/mini/guide-using-extensions.html.",
+ Description: "The Maven build extensions.See https://maven.apache.org/guides/mini/guide-using-extensions.html.",
+ MarkdownDescription: "The Maven build extensions.See https://maven.apache.org/guides/mini/guide-using-extensions.html.",
NestedObject: schema.NestedAttributeObject{
Attributes: map[string]schema.Attribute{
"artifact_id": schema.StringAttribute{
@@ -2766,8 +2766,8 @@ func (r *CamelApacheOrgBuildV1Manifest) Schema(_ context.Context, _ datasource.S
},
"profiles": schema.ListNestedAttribute{
- Description: "A reference to the ConfigMap or Secret key that contains the Maven profile.",
- MarkdownDescription: "A reference to the ConfigMap or Secret key that contains the Maven profile.",
+ Description: "A reference to the ConfigMap or Secret key that containsthe Maven profile.",
+ MarkdownDescription: "A reference to the ConfigMap or Secret key that containsthe Maven profile.",
NestedObject: schema.NestedAttributeObject{
Attributes: map[string]schema.Attribute{
"config_map_key_ref": schema.SingleNestedAttribute{
@@ -2783,8 +2783,8 @@ func (r *CamelApacheOrgBuildV1Manifest) Schema(_ context.Context, _ datasource.S
},
"name": schema.StringAttribute{
- Description: "Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?",
- MarkdownDescription: "Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?",
+ Description: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?",
+ MarkdownDescription: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?",
Required: false,
Optional: true,
Computed: false,
@@ -2816,8 +2816,8 @@ func (r *CamelApacheOrgBuildV1Manifest) Schema(_ context.Context, _ datasource.S
},
"name": schema.StringAttribute{
- Description: "Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?",
- MarkdownDescription: "Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?",
+ Description: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?",
+ MarkdownDescription: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?",
Required: false,
Optional: true,
Computed: false,
@@ -2877,8 +2877,8 @@ func (r *CamelApacheOrgBuildV1Manifest) Schema(_ context.Context, _ datasource.S
MarkdownDescription: "can use stable releases",
Attributes: map[string]schema.Attribute{
"checksum_policy": schema.StringAttribute{
- Description: "When Maven deploys files to the repository, it also deploys corresponding checksum files. Your options are to 'ignore', 'fail', or 'warn' on missing or incorrect checksums.",
- MarkdownDescription: "When Maven deploys files to the repository, it also deploys corresponding checksum files. Your options are to 'ignore', 'fail', or 'warn' on missing or incorrect checksums.",
+ Description: "When Maven deploys files to the repository, it also deploys corresponding checksum files.Your options are to 'ignore', 'fail', or 'warn' on missing or incorrect checksums.",
+ MarkdownDescription: "When Maven deploys files to the repository, it also deploys corresponding checksum files.Your options are to 'ignore', 'fail', or 'warn' on missing or incorrect checksums.",
Required: false,
Optional: true,
Computed: false,
@@ -2893,8 +2893,8 @@ func (r *CamelApacheOrgBuildV1Manifest) Schema(_ context.Context, _ datasource.S
},
"update_policy": schema.StringAttribute{
- Description: "This element specifies how often updates should attempt to occur. Maven will compare the local POM's timestamp (stored in a repository's maven-metadata file) to the remote. The choices are: 'always', 'daily' (default), 'interval:X' (where X is an integer in minutes) or 'never'",
- MarkdownDescription: "This element specifies how often updates should attempt to occur. Maven will compare the local POM's timestamp (stored in a repository's maven-metadata file) to the remote. The choices are: 'always', 'daily' (default), 'interval:X' (where X is an integer in minutes) or 'never'",
+ Description: "This element specifies how often updates should attempt to occur.Maven will compare the local POM's timestamp (stored in a repository's maven-metadata file) to the remote.The choices are: 'always', 'daily' (default), 'interval:X' (where X is an integer in minutes) or 'never'",
+ MarkdownDescription: "This element specifies how often updates should attempt to occur.Maven will compare the local POM's timestamp (stored in a repository's maven-metadata file) to the remote.The choices are: 'always', 'daily' (default), 'interval:X' (where X is an integer in minutes) or 'never'",
Required: false,
Optional: true,
Computed: false,
@@ -2910,8 +2910,8 @@ func (r *CamelApacheOrgBuildV1Manifest) Schema(_ context.Context, _ datasource.S
MarkdownDescription: "can use snapshot",
Attributes: map[string]schema.Attribute{
"checksum_policy": schema.StringAttribute{
- Description: "When Maven deploys files to the repository, it also deploys corresponding checksum files. Your options are to 'ignore', 'fail', or 'warn' on missing or incorrect checksums.",
- MarkdownDescription: "When Maven deploys files to the repository, it also deploys corresponding checksum files. Your options are to 'ignore', 'fail', or 'warn' on missing or incorrect checksums.",
+ Description: "When Maven deploys files to the repository, it also deploys corresponding checksum files.Your options are to 'ignore', 'fail', or 'warn' on missing or incorrect checksums.",
+ MarkdownDescription: "When Maven deploys files to the repository, it also deploys corresponding checksum files.Your options are to 'ignore', 'fail', or 'warn' on missing or incorrect checksums.",
Required: false,
Optional: true,
Computed: false,
@@ -2926,8 +2926,8 @@ func (r *CamelApacheOrgBuildV1Manifest) Schema(_ context.Context, _ datasource.S
},
"update_policy": schema.StringAttribute{
- Description: "This element specifies how often updates should attempt to occur. Maven will compare the local POM's timestamp (stored in a repository's maven-metadata file) to the remote. The choices are: 'always', 'daily' (default), 'interval:X' (where X is an integer in minutes) or 'never'",
- MarkdownDescription: "This element specifies how often updates should attempt to occur. Maven will compare the local POM's timestamp (stored in a repository's maven-metadata file) to the remote. The choices are: 'always', 'daily' (default), 'interval:X' (where X is an integer in minutes) or 'never'",
+ Description: "This element specifies how often updates should attempt to occur.Maven will compare the local POM's timestamp (stored in a repository's maven-metadata file) to the remote.The choices are: 'always', 'daily' (default), 'interval:X' (where X is an integer in minutes) or 'never'",
+ MarkdownDescription: "This element specifies how often updates should attempt to occur.Maven will compare the local POM's timestamp (stored in a repository's maven-metadata file) to the remote.The choices are: 'always', 'daily' (default), 'interval:X' (where X is an integer in minutes) or 'never'",
Required: false,
Optional: true,
Computed: false,
@@ -2997,8 +2997,8 @@ func (r *CamelApacheOrgBuildV1Manifest) Schema(_ context.Context, _ datasource.S
},
"settings": schema.SingleNestedAttribute{
- Description: "A reference to the ConfigMap or Secret key that contains the Maven settings.",
- MarkdownDescription: "A reference to the ConfigMap or Secret key that contains the Maven settings.",
+ Description: "A reference to the ConfigMap or Secret key that containsthe Maven settings.",
+ MarkdownDescription: "A reference to the ConfigMap or Secret key that containsthe Maven settings.",
Attributes: map[string]schema.Attribute{
"config_map_key_ref": schema.SingleNestedAttribute{
Description: "Selects a key of a ConfigMap.",
@@ -3013,8 +3013,8 @@ func (r *CamelApacheOrgBuildV1Manifest) Schema(_ context.Context, _ datasource.S
},
"name": schema.StringAttribute{
- Description: "Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?",
- MarkdownDescription: "Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?",
+ Description: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?",
+ MarkdownDescription: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?",
Required: false,
Optional: true,
Computed: false,
@@ -3046,8 +3046,8 @@ func (r *CamelApacheOrgBuildV1Manifest) Schema(_ context.Context, _ datasource.S
},
"name": schema.StringAttribute{
- Description: "Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?",
- MarkdownDescription: "Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?",
+ Description: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?",
+ MarkdownDescription: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?",
Required: false,
Optional: true,
Computed: false,
@@ -3072,8 +3072,8 @@ func (r *CamelApacheOrgBuildV1Manifest) Schema(_ context.Context, _ datasource.S
},
"settings_security": schema.SingleNestedAttribute{
- Description: "A reference to the ConfigMap or Secret key that contains the security of the Maven settings.",
- MarkdownDescription: "A reference to the ConfigMap or Secret key that contains the security of the Maven settings.",
+ Description: "A reference to the ConfigMap or Secret key that containsthe security of the Maven settings.",
+ MarkdownDescription: "A reference to the ConfigMap or Secret key that containsthe security of the Maven settings.",
Attributes: map[string]schema.Attribute{
"config_map_key_ref": schema.SingleNestedAttribute{
Description: "Selects a key of a ConfigMap.",
@@ -3088,8 +3088,8 @@ func (r *CamelApacheOrgBuildV1Manifest) Schema(_ context.Context, _ datasource.S
},
"name": schema.StringAttribute{
- Description: "Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?",
- MarkdownDescription: "Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?",
+ Description: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?",
+ MarkdownDescription: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?",
Required: false,
Optional: true,
Computed: false,
@@ -3121,8 +3121,8 @@ func (r *CamelApacheOrgBuildV1Manifest) Schema(_ context.Context, _ datasource.S
},
"name": schema.StringAttribute{
- Description: "Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?",
- MarkdownDescription: "Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?",
+ Description: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?",
+ MarkdownDescription: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?",
Required: false,
Optional: true,
Computed: false,
@@ -3429,8 +3429,8 @@ func (r *CamelApacheOrgBuildV1Manifest) Schema(_ context.Context, _ datasource.S
},
"interceptors": schema.ListAttribute{
- Description: "Interceptors are optional identifiers the org.apache.camel.k.RoutesLoader uses to pre/post process sources",
- MarkdownDescription: "Interceptors are optional identifiers the org.apache.camel.k.RoutesLoader uses to pre/post process sources",
+ Description: "Interceptors are optional identifiers the org.apache.camel.k.RoutesLoaderuses to pre/post process sources",
+ MarkdownDescription: "Interceptors are optional identifiers the org.apache.camel.k.RoutesLoaderuses to pre/post process sources",
ElementType: types.StringType,
Required: false,
Optional: true,
@@ -3446,8 +3446,8 @@ func (r *CamelApacheOrgBuildV1Manifest) Schema(_ context.Context, _ datasource.S
},
"loader": schema.StringAttribute{
- Description: "Loader is an optional id of the org.apache.camel.k.RoutesLoader that will interpret this source at runtime",
- MarkdownDescription: "Loader is an optional id of the org.apache.camel.k.RoutesLoader that will interpret this source at runtime",
+ Description: "Loader is an optional id of the org.apache.camel.k.RoutesLoader that willinterpret this source at runtime",
+ MarkdownDescription: "Loader is an optional id of the org.apache.camel.k.RoutesLoader that willinterpret this source at runtime",
Required: false,
Optional: true,
Computed: false,
@@ -3722,8 +3722,8 @@ func (r *CamelApacheOrgBuildV1Manifest) Schema(_ context.Context, _ datasource.S
},
"spectrum": schema.SingleNestedAttribute{
- Description: "a SpectrumTask, for Spectrum strategy Deprecated: use jib, s2i or a custom publishing strategy instead",
- MarkdownDescription: "a SpectrumTask, for Spectrum strategy Deprecated: use jib, s2i or a custom publishing strategy instead",
+ Description: "a SpectrumTask, for Spectrum strategyDeprecated: use jib, s2i or a custom publishing strategy instead",
+ MarkdownDescription: "a SpectrumTask, for Spectrum strategyDeprecated: use jib, s2i or a custom publishing strategy instead",
Attributes: map[string]schema.Attribute{
"base_image": schema.StringAttribute{
Description: "base image layer",
@@ -3924,16 +3924,16 @@ func (r *CamelApacheOrgBuildV1Manifest) Schema(_ context.Context, _ datasource.S
},
"timeout": schema.StringAttribute{
- Description: "Timeout defines the Build maximum execution duration. The Build deadline is set to the Build start time plus the Timeout duration. If the Build deadline is exceeded, the Build context is canceled, and its phase set to BuildPhaseFailed.",
- MarkdownDescription: "Timeout defines the Build maximum execution duration. The Build deadline is set to the Build start time plus the Timeout duration. If the Build deadline is exceeded, the Build context is canceled, and its phase set to BuildPhaseFailed.",
+ Description: "Timeout defines the Build maximum execution duration.The Build deadline is set to the Build start time plus the Timeout duration.If the Build deadline is exceeded, the Build context is canceled,and its phase set to BuildPhaseFailed.",
+ MarkdownDescription: "Timeout defines the Build maximum execution duration.The Build deadline is set to the Build start time plus the Timeout duration.If the Build deadline is exceeded, the Build context is canceled,and its phase set to BuildPhaseFailed.",
Required: false,
Optional: true,
Computed: false,
},
"tool_image": schema.StringAttribute{
- Description: "The container image to be used to run the build. Deprecated: no longer in use in Camel K 2 - maintained for backward compatibility",
- MarkdownDescription: "The container image to be used to run the build. Deprecated: no longer in use in Camel K 2 - maintained for backward compatibility",
+ Description: "The container image to be used to run the build.Deprecated: no longer in use in Camel K 2 - maintained for backward compatibility",
+ MarkdownDescription: "The container image to be used to run the build.Deprecated: no longer in use in Camel K 2 - maintained for backward compatibility",
Required: false,
Optional: true,
Computed: false,
diff --git a/internal/provider/camel_apache_org_v1/camel_apache_org_integration_kit_v1_manifest.go b/internal/provider/camel_apache_org_v1/camel_apache_org_integration_kit_v1_manifest.go
index 2d82b54a5..da7ac635e 100644
--- a/internal/provider/camel_apache_org_v1/camel_apache_org_integration_kit_v1_manifest.go
+++ b/internal/provider/camel_apache_org_v1/camel_apache_org_integration_kit_v1_manifest.go
@@ -122,8 +122,8 @@ func (r *CamelApacheOrgIntegrationKitV1Manifest) Metadata(_ context.Context, req
func (r *CamelApacheOrgIntegrationKitV1Manifest) Schema(_ context.Context, _ datasource.SchemaRequest, response *datasource.SchemaResponse) {
response.Schema = schema.Schema{
- Description: "IntegrationKit defines a container image and additional configuration needed to run an 'Integration'. An 'IntegrationKit' is a generic image generally built from the requirements of an 'Integration', but agnostic to it, in order to be reused by any other 'Integration' which has the same required set of capabilities. An 'IntegrationKit' may be used for other kits as a base container layer, when the 'incremental' build option is enabled.",
- MarkdownDescription: "IntegrationKit defines a container image and additional configuration needed to run an 'Integration'. An 'IntegrationKit' is a generic image generally built from the requirements of an 'Integration', but agnostic to it, in order to be reused by any other 'Integration' which has the same required set of capabilities. An 'IntegrationKit' may be used for other kits as a base container layer, when the 'incremental' build option is enabled.",
+ Description: "IntegrationKit defines a container image and additional configuration needed to run an 'Integration'.An 'IntegrationKit' is a generic image generally built from the requirements of an 'Integration', but agnostic to it,in order to be reused by any other 'Integration' which has the same required set of capabilities. An 'IntegrationKit'may be used for other kits as a base container layer, when the 'incremental' build option is enabled.",
+ MarkdownDescription: "IntegrationKit defines a container image and additional configuration needed to run an 'Integration'.An 'IntegrationKit' is a generic image generally built from the requirements of an 'Integration', but agnostic to it,in order to be reused by any other 'Integration' which has the same required set of capabilities. An 'IntegrationKit'may be used for other kits as a base container layer, when the 'incremental' build option is enabled.",
Attributes: map[string]schema.Attribute{
"yaml": schema.StringAttribute{
Description: "The generated manifest in YAML format.",
@@ -203,8 +203,8 @@ func (r *CamelApacheOrgIntegrationKitV1Manifest) Schema(_ context.Context, _ dat
},
"configuration": schema.ListNestedAttribute{
- Description: "Deprecated: Use camel trait (camel.properties) to manage properties Use mount trait (mount.configs) to manage configs Use mount trait (mount.resources) to manage resources Use mount trait (mount.volumes) to manage volumes configuration used by the kit",
- MarkdownDescription: "Deprecated: Use camel trait (camel.properties) to manage properties Use mount trait (mount.configs) to manage configs Use mount trait (mount.resources) to manage resources Use mount trait (mount.volumes) to manage volumes configuration used by the kit",
+ Description: "Deprecated:Use camel trait (camel.properties) to manage propertiesUse mount trait (mount.configs) to manage configsUse mount trait (mount.resources) to manage resourcesUse mount trait (mount.volumes) to manage volumesconfiguration used by the kit",
+ MarkdownDescription: "Deprecated:Use camel trait (camel.properties) to manage propertiesUse mount trait (mount.configs) to manage configsUse mount trait (mount.resources) to manage resourcesUse mount trait (mount.volumes) to manage volumesconfiguration used by the kit",
NestedObject: schema.NestedAttributeObject{
Attributes: map[string]schema.Attribute{
"type": schema.StringAttribute{
@@ -317,8 +317,8 @@ func (r *CamelApacheOrgIntegrationKitV1Manifest) Schema(_ context.Context, _ dat
},
"interceptors": schema.ListAttribute{
- Description: "Interceptors are optional identifiers the org.apache.camel.k.RoutesLoader uses to pre/post process sources",
- MarkdownDescription: "Interceptors are optional identifiers the org.apache.camel.k.RoutesLoader uses to pre/post process sources",
+ Description: "Interceptors are optional identifiers the org.apache.camel.k.RoutesLoaderuses to pre/post process sources",
+ MarkdownDescription: "Interceptors are optional identifiers the org.apache.camel.k.RoutesLoaderuses to pre/post process sources",
ElementType: types.StringType,
Required: false,
Optional: true,
@@ -334,8 +334,8 @@ func (r *CamelApacheOrgIntegrationKitV1Manifest) Schema(_ context.Context, _ dat
},
"loader": schema.StringAttribute{
- Description: "Loader is an optional id of the org.apache.camel.k.RoutesLoader that will interpret this source at runtime",
- MarkdownDescription: "Loader is an optional id of the org.apache.camel.k.RoutesLoader that will interpret this source at runtime",
+ Description: "Loader is an optional id of the org.apache.camel.k.RoutesLoader that willinterpret this source at runtime",
+ MarkdownDescription: "Loader is an optional id of the org.apache.camel.k.RoutesLoader that willinterpret this source at runtime",
Required: false,
Optional: true,
Computed: false,
@@ -418,16 +418,16 @@ func (r *CamelApacheOrgIntegrationKitV1Manifest) Schema(_ context.Context, _ dat
},
"base_image": schema.StringAttribute{
- Description: "Specify a base image. In order to have the application working properly it must be a container image which has a Java JDK installed and ready to use on path (ie '/usr/bin/java').",
- MarkdownDescription: "Specify a base image. In order to have the application working properly it must be a container image which has a Java JDK installed and ready to use on path (ie '/usr/bin/java').",
+ Description: "Specify a base image. In order to have the application working properly it must be a container image which has a Java JDKinstalled and ready to use on path (ie '/usr/bin/java').",
+ MarkdownDescription: "Specify a base image. In order to have the application working properly it must be a container image which has a Java JDKinstalled and ready to use on path (ie '/usr/bin/java').",
Required: false,
Optional: true,
Computed: false,
},
"configuration": schema.MapAttribute{
- Description: "Legacy trait configuration parameters. Deprecated: for backward compatibility.",
- MarkdownDescription: "Legacy trait configuration parameters. Deprecated: for backward compatibility.",
+ Description: "Legacy trait configuration parameters.Deprecated: for backward compatibility.",
+ MarkdownDescription: "Legacy trait configuration parameters.Deprecated: for backward compatibility.",
ElementType: types.StringType,
Required: false,
Optional: true,
@@ -451,24 +451,24 @@ func (r *CamelApacheOrgIntegrationKitV1Manifest) Schema(_ context.Context, _ dat
},
"limit_cpu": schema.StringAttribute{
- Description: "When using 'pod' strategy, the maximum amount of CPU required by the pod builder. Deprecated: use TasksRequestCPU instead with task name 'builder'.",
- MarkdownDescription: "When using 'pod' strategy, the maximum amount of CPU required by the pod builder. Deprecated: use TasksRequestCPU instead with task name 'builder'.",
+ Description: "When using 'pod' strategy, the maximum amount of CPU required by the pod builder.Deprecated: use TasksRequestCPU instead with task name 'builder'.",
+ MarkdownDescription: "When using 'pod' strategy, the maximum amount of CPU required by the pod builder.Deprecated: use TasksRequestCPU instead with task name 'builder'.",
Required: false,
Optional: true,
Computed: false,
},
"limit_memory": schema.StringAttribute{
- Description: "When using 'pod' strategy, the maximum amount of memory required by the pod builder. Deprecated: use TasksRequestCPU instead with task name 'builder'.",
- MarkdownDescription: "When using 'pod' strategy, the maximum amount of memory required by the pod builder. Deprecated: use TasksRequestCPU instead with task name 'builder'.",
+ Description: "When using 'pod' strategy, the maximum amount of memory required by the pod builder.Deprecated: use TasksRequestCPU instead with task name 'builder'.",
+ MarkdownDescription: "When using 'pod' strategy, the maximum amount of memory required by the pod builder.Deprecated: use TasksRequestCPU instead with task name 'builder'.",
Required: false,
Optional: true,
Computed: false,
},
"maven_profiles": schema.ListAttribute{
- Description: "A list of references pointing to configmaps/secrets that contains a maven profile. This configmap/secret is a resource of the IntegrationKit created, therefore it needs to be present in the namespace where the operator is going to create the IntegrationKit. The content of the maven profile is expected to be a text containing a valid maven profile starting with '' and ending with '' that will be integrated as an inline profile in the POM. Syntax: [configmap|secret]:name[/key], where name represents the resource name, key optionally represents the resource key to be filtered (default key value = profile.xml).",
- MarkdownDescription: "A list of references pointing to configmaps/secrets that contains a maven profile. This configmap/secret is a resource of the IntegrationKit created, therefore it needs to be present in the namespace where the operator is going to create the IntegrationKit. The content of the maven profile is expected to be a text containing a valid maven profile starting with '' and ending with '' that will be integrated as an inline profile in the POM. Syntax: [configmap|secret]:name[/key], where name represents the resource name, key optionally represents the resource key to be filtered (default key value = profile.xml).",
+ Description: "A list of references pointing to configmaps/secrets that contains a maven profile.This configmap/secret is a resource of the IntegrationKit created, therefore it needs to be present in the namespace where the operator is going to create the IntegrationKit.The content of the maven profile is expected to be a text containing a valid maven profile starting with '' and ending with '' that will be integrated as an inline profile in the POM.Syntax: [configmap|secret]:name[/key], where name represents the resource name, key optionally represents the resource key to be filtered (default key value = profile.xml).",
+ MarkdownDescription: "A list of references pointing to configmaps/secrets that contains a maven profile.This configmap/secret is a resource of the IntegrationKit created, therefore it needs to be present in the namespace where the operator is going to create the IntegrationKit.The content of the maven profile is expected to be a text containing a valid maven profile starting with '' and ending with '' that will be integrated as an inline profile in the POM.Syntax: [configmap|secret]:name[/key], where name represents the resource name, key optionally represents the resource key to be filtered (default key value = profile.xml).",
ElementType: types.StringType,
Required: false,
Optional: true,
@@ -514,16 +514,16 @@ func (r *CamelApacheOrgIntegrationKitV1Manifest) Schema(_ context.Context, _ dat
},
"request_cpu": schema.StringAttribute{
- Description: "When using 'pod' strategy, the minimum amount of CPU required by the pod builder. Deprecated: use TasksRequestCPU instead with task name 'builder'.",
- MarkdownDescription: "When using 'pod' strategy, the minimum amount of CPU required by the pod builder. Deprecated: use TasksRequestCPU instead with task name 'builder'.",
+ Description: "When using 'pod' strategy, the minimum amount of CPU required by the pod builder.Deprecated: use TasksRequestCPU instead with task name 'builder'.",
+ MarkdownDescription: "When using 'pod' strategy, the minimum amount of CPU required by the pod builder.Deprecated: use TasksRequestCPU instead with task name 'builder'.",
Required: false,
Optional: true,
Computed: false,
},
"request_memory": schema.StringAttribute{
- Description: "When using 'pod' strategy, the minimum amount of memory required by the pod builder. Deprecated: use TasksRequestCPU instead with task name 'builder'.",
- MarkdownDescription: "When using 'pod' strategy, the minimum amount of memory required by the pod builder. Deprecated: use TasksRequestCPU instead with task name 'builder'.",
+ Description: "When using 'pod' strategy, the minimum amount of memory required by the pod builder.Deprecated: use TasksRequestCPU instead with task name 'builder'.",
+ MarkdownDescription: "When using 'pod' strategy, the minimum amount of memory required by the pod builder.Deprecated: use TasksRequestCPU instead with task name 'builder'.",
Required: false,
Optional: true,
Computed: false,
@@ -550,8 +550,8 @@ func (r *CamelApacheOrgIntegrationKitV1Manifest) Schema(_ context.Context, _ dat
},
"tasks_filter": schema.StringAttribute{
- Description: "A list of tasks sorted by the order of execution in a csv format, ie, ',,...'. Mind that you must include also the operator tasks ('builder', 'quarkus-native', 'package', 'jib', 's2i') if you need to execute them. Useful only with 'pod' strategy.",
- MarkdownDescription: "A list of tasks sorted by the order of execution in a csv format, ie, ',,...'. Mind that you must include also the operator tasks ('builder', 'quarkus-native', 'package', 'jib', 's2i') if you need to execute them. Useful only with 'pod' strategy.",
+ Description: "A list of tasks sorted by the order of execution in a csv format, ie, ',,...'.Mind that you must include also the operator tasks ('builder', 'quarkus-native', 'package', 'jib', 's2i')if you need to execute them. Useful only with 'pod' strategy.",
+ MarkdownDescription: "A list of tasks sorted by the order of execution in a csv format, ie, ',,...'.Mind that you must include also the operator tasks ('builder', 'quarkus-native', 'package', 'jib', 's2i')if you need to execute them. Useful only with 'pod' strategy.",
Required: false,
Optional: true,
Computed: false,
@@ -594,8 +594,8 @@ func (r *CamelApacheOrgIntegrationKitV1Manifest) Schema(_ context.Context, _ dat
},
"verbose": schema.BoolAttribute{
- Description: "Enable verbose logging on build components that support it (e.g. Kaniko build pod). Deprecated no longer in use",
- MarkdownDescription: "Enable verbose logging on build components that support it (e.g. Kaniko build pod). Deprecated no longer in use",
+ Description: "Enable verbose logging on build components that support it (e.g. Kaniko build pod).Deprecated no longer in use",
+ MarkdownDescription: "Enable verbose logging on build components that support it (e.g. Kaniko build pod).Deprecated no longer in use",
Required: false,
Optional: true,
Computed: false,
@@ -611,8 +611,8 @@ func (r *CamelApacheOrgIntegrationKitV1Manifest) Schema(_ context.Context, _ dat
MarkdownDescription: "The Camel trait sets up Camel configuration.",
Attributes: map[string]schema.Attribute{
"configuration": schema.MapAttribute{
- Description: "Legacy trait configuration parameters. Deprecated: for backward compatibility.",
- MarkdownDescription: "Legacy trait configuration parameters. Deprecated: for backward compatibility.",
+ Description: "Legacy trait configuration parameters.Deprecated: for backward compatibility.",
+ MarkdownDescription: "Legacy trait configuration parameters.Deprecated: for backward compatibility.",
ElementType: types.StringType,
Required: false,
Optional: true,
@@ -637,8 +637,8 @@ func (r *CamelApacheOrgIntegrationKitV1Manifest) Schema(_ context.Context, _ dat
},
"runtime_version": schema.StringAttribute{
- Description: "The camel-k-runtime version to use for the integration. It overrides the default version set in the Integration Platform. You can use a fixed version (for example '3.2.3') or a semantic version (for example '3.x') which will try to resolve to the best matching Catalog existing on the cluster.",
- MarkdownDescription: "The camel-k-runtime version to use for the integration. It overrides the default version set in the Integration Platform. You can use a fixed version (for example '3.2.3') or a semantic version (for example '3.x') which will try to resolve to the best matching Catalog existing on the cluster.",
+ Description: "The camel-k-runtime version to use for the integration. It overrides the default version set in the Integration Platform.You can use a fixed version (for example '3.2.3') or a semantic version (for example '3.x') which will try to resolveto the best matching Catalog existing on the cluster.",
+ MarkdownDescription: "The camel-k-runtime version to use for the integration. It overrides the default version set in the Integration Platform.You can use a fixed version (for example '3.2.3') or a semantic version (for example '3.x') which will try to resolveto the best matching Catalog existing on the cluster.",
Required: false,
Optional: true,
Computed: false,
@@ -650,12 +650,12 @@ func (r *CamelApacheOrgIntegrationKitV1Manifest) Schema(_ context.Context, _ dat
},
"quarkus": schema.SingleNestedAttribute{
- Description: "The Quarkus trait configures the Quarkus runtime. It's enabled by default. NOTE: Compiling to a native executable, requires at least 4GiB of memory, so the Pod running the native build must have enough memory available.",
- MarkdownDescription: "The Quarkus trait configures the Quarkus runtime. It's enabled by default. NOTE: Compiling to a native executable, requires at least 4GiB of memory, so the Pod running the native build must have enough memory available.",
+ Description: "The Quarkus trait configures the Quarkus runtime.It's enabled by default.NOTE: Compiling to a native executable, requires at least 4GiB of memory, so the Pod running the native build must have enough memory available.",
+ MarkdownDescription: "The Quarkus trait configures the Quarkus runtime.It's enabled by default.NOTE: Compiling to a native executable, requires at least 4GiB of memory, so the Pod running the native build must have enough memory available.",
Attributes: map[string]schema.Attribute{
"build_mode": schema.ListAttribute{
- Description: "The Quarkus mode to run: either 'jvm' or 'native' (default 'jvm'). In case both 'jvm' and 'native' are specified, two 'IntegrationKit' resources are created, with the 'native' kit having precedence over the 'jvm' one once ready.",
- MarkdownDescription: "The Quarkus mode to run: either 'jvm' or 'native' (default 'jvm'). In case both 'jvm' and 'native' are specified, two 'IntegrationKit' resources are created, with the 'native' kit having precedence over the 'jvm' one once ready.",
+ Description: "The Quarkus mode to run: either 'jvm' or 'native' (default 'jvm').In case both 'jvm' and 'native' are specified, two 'IntegrationKit' resources are created,with the 'native' kit having precedence over the 'jvm' one once ready.",
+ MarkdownDescription: "The Quarkus mode to run: either 'jvm' or 'native' (default 'jvm').In case both 'jvm' and 'native' are specified, two 'IntegrationKit' resources are created,with the 'native' kit having precedence over the 'jvm' one once ready.",
ElementType: types.StringType,
Required: false,
Optional: true,
@@ -663,8 +663,8 @@ func (r *CamelApacheOrgIntegrationKitV1Manifest) Schema(_ context.Context, _ dat
},
"configuration": schema.MapAttribute{
- Description: "Legacy trait configuration parameters. Deprecated: for backward compatibility.",
- MarkdownDescription: "Legacy trait configuration parameters. Deprecated: for backward compatibility.",
+ Description: "Legacy trait configuration parameters.Deprecated: for backward compatibility.",
+ MarkdownDescription: "Legacy trait configuration parameters.Deprecated: for backward compatibility.",
ElementType: types.StringType,
Required: false,
Optional: true,
@@ -696,8 +696,8 @@ func (r *CamelApacheOrgIntegrationKitV1Manifest) Schema(_ context.Context, _ dat
},
"package_types": schema.ListAttribute{
- Description: "The Quarkus package types, 'fast-jar' or 'native' (default 'fast-jar'). In case both 'fast-jar' and 'native' are specified, two 'IntegrationKit' resources are created, with the native kit having precedence over the 'fast-jar' one once ready. The order influences the resolution of the current kit for the integration. The kit corresponding to the first package type will be assigned to the integration in case no existing kit that matches the integration exists. Deprecated: use 'build-mode' instead.",
- MarkdownDescription: "The Quarkus package types, 'fast-jar' or 'native' (default 'fast-jar'). In case both 'fast-jar' and 'native' are specified, two 'IntegrationKit' resources are created, with the native kit having precedence over the 'fast-jar' one once ready. The order influences the resolution of the current kit for the integration. The kit corresponding to the first package type will be assigned to the integration in case no existing kit that matches the integration exists. Deprecated: use 'build-mode' instead.",
+ Description: "The Quarkus package types, 'fast-jar' or 'native' (default 'fast-jar').In case both 'fast-jar' and 'native' are specified, two 'IntegrationKit' resources are created,with the native kit having precedence over the 'fast-jar' one once ready.The order influences the resolution of the current kit for the integration.The kit corresponding to the first package type will be assigned to theintegration in case no existing kit that matches the integration exists.Deprecated: use 'build-mode' instead.",
+ MarkdownDescription: "The Quarkus package types, 'fast-jar' or 'native' (default 'fast-jar').In case both 'fast-jar' and 'native' are specified, two 'IntegrationKit' resources are created,with the native kit having precedence over the 'fast-jar' one once ready.The order influences the resolution of the current kit for the integration.The kit corresponding to the first package type will be assigned to theintegration in case no existing kit that matches the integration exists.Deprecated: use 'build-mode' instead.",
ElementType: types.StringType,
Required: false,
Optional: true,
@@ -710,12 +710,12 @@ func (r *CamelApacheOrgIntegrationKitV1Manifest) Schema(_ context.Context, _ dat
},
"registry": schema.SingleNestedAttribute{
- Description: "The Registry trait sets up Maven to use the Image registry as a Maven repository. Deprecated: use jvm trait or read documentation.",
- MarkdownDescription: "The Registry trait sets up Maven to use the Image registry as a Maven repository. Deprecated: use jvm trait or read documentation.",
+ Description: "The Registry trait sets up Maven to use the Image registry as a Maven repository (support removed since version 2.5.0).Deprecated: use jvm trait or read documentation.",
+ MarkdownDescription: "The Registry trait sets up Maven to use the Image registry as a Maven repository (support removed since version 2.5.0).Deprecated: use jvm trait or read documentation.",
Attributes: map[string]schema.Attribute{
"configuration": schema.MapAttribute{
- Description: "Legacy trait configuration parameters. Deprecated: for backward compatibility.",
- MarkdownDescription: "Legacy trait configuration parameters. Deprecated: for backward compatibility.",
+ Description: "Legacy trait configuration parameters.Deprecated: for backward compatibility.",
+ MarkdownDescription: "Legacy trait configuration parameters.Deprecated: for backward compatibility.",
ElementType: types.StringType,
Required: false,
Optional: true,
diff --git a/internal/provider/camel_apache_org_v1/camel_apache_org_integration_platform_v1_manifest.go b/internal/provider/camel_apache_org_v1/camel_apache_org_integration_platform_v1_manifest.go
index a586da81b..5c3bacb74 100644
--- a/internal/provider/camel_apache_org_v1/camel_apache_org_integration_platform_v1_manifest.go
+++ b/internal/provider/camel_apache_org_v1/camel_apache_org_integration_platform_v1_manifest.go
@@ -495,8 +495,8 @@ func (r *CamelApacheOrgIntegrationPlatformV1Manifest) Metadata(_ context.Context
func (r *CamelApacheOrgIntegrationPlatformV1Manifest) Schema(_ context.Context, _ datasource.SchemaRequest, response *datasource.SchemaResponse) {
response.Schema = schema.Schema{
- Description: "IntegrationPlatform is the resource used to drive the Camel K operator behavior. It defines the behavior of all Custom Resources ('IntegrationKit', 'Integration', 'Kamelet') in the given namespace. When the Camel K operator is installed in 'global' mode, you will need to specify an 'IntegrationPlatform' in each namespace where you want the Camel K operator to be executed.",
- MarkdownDescription: "IntegrationPlatform is the resource used to drive the Camel K operator behavior. It defines the behavior of all Custom Resources ('IntegrationKit', 'Integration', 'Kamelet') in the given namespace. When the Camel K operator is installed in 'global' mode, you will need to specify an 'IntegrationPlatform' in each namespace where you want the Camel K operator to be executed.",
+ Description: "IntegrationPlatform is the resource used to drive the Camel K operator behavior.It defines the behavior of all Custom Resources ('IntegrationKit', 'Integration', 'Kamelet') in the given namespace.When the Camel K operator is installed in 'global' mode,you will need to specify an 'IntegrationPlatform' in each namespace where you want the Camel K operator to be executed.",
+ MarkdownDescription: "IntegrationPlatform is the resource used to drive the Camel K operator behavior.It defines the behavior of all Custom Resources ('IntegrationKit', 'Integration', 'Kamelet') in the given namespace.When the Camel K operator is installed in 'global' mode,you will need to specify an 'IntegrationPlatform' in each namespace where you want the Camel K operator to be executed.",
Attributes: map[string]schema.Attribute{
"yaml": schema.StringAttribute{
Description: "The generated manifest in YAML format.",
@@ -580,16 +580,16 @@ func (r *CamelApacheOrgIntegrationPlatformV1Manifest) Schema(_ context.Context,
},
"base_image": schema.StringAttribute{
- Description: "a base image that can be used as base layer for all images. It can be useful if you want to provide some custom base image with further utility software",
- MarkdownDescription: "a base image that can be used as base layer for all images. It can be useful if you want to provide some custom base image with further utility software",
+ Description: "a base image that can be used as base layer for all images.It can be useful if you want to provide some custom base image with further utility software",
+ MarkdownDescription: "a base image that can be used as base layer for all images.It can be useful if you want to provide some custom base image with further utility software",
Required: false,
Optional: true,
Computed: false,
},
"build_catalog_tool_timeout": schema.StringAttribute{
- Description: "the timeout (in seconds) to use when creating the build tools container image Deprecated: no longer in use",
- MarkdownDescription: "the timeout (in seconds) to use when creating the build tools container image Deprecated: no longer in use",
+ Description: "the timeout (in seconds) to use when creating the build tools container imageDeprecated: no longer in use",
+ MarkdownDescription: "the timeout (in seconds) to use when creating the build tools container imageDeprecated: no longer in use",
Required: false,
Optional: true,
Computed: false,
@@ -706,8 +706,8 @@ func (r *CamelApacheOrgIntegrationPlatformV1Manifest) Schema(_ context.Context,
MarkdownDescription: "Maven configuration used to build the Camel/Camel-Quarkus applications",
Attributes: map[string]schema.Attribute{
"ca_secrets": schema.ListNestedAttribute{
- Description: "The Secrets name and key, containing the CA certificate(s) used to connect to remote Maven repositories. It can contain X.509 certificates, and PKCS#7 formatted certificate chains. A JKS formatted keystore is automatically created to store the CA certificate(s), and configured to be used as a trusted certificate(s) by the Maven commands. Note that the root CA certificates are also imported into the created keystore.",
- MarkdownDescription: "The Secrets name and key, containing the CA certificate(s) used to connect to remote Maven repositories. It can contain X.509 certificates, and PKCS#7 formatted certificate chains. A JKS formatted keystore is automatically created to store the CA certificate(s), and configured to be used as a trusted certificate(s) by the Maven commands. Note that the root CA certificates are also imported into the created keystore.",
+ Description: "The Secrets name and key, containing the CA certificate(s) used to connectto remote Maven repositories.It can contain X.509 certificates, and PKCS#7 formatted certificate chains.A JKS formatted keystore is automatically created to store the CA certificate(s),and configured to be used as a trusted certificate(s) by the Maven commands.Note that the root CA certificates are also imported into the created keystore.",
+ MarkdownDescription: "The Secrets name and key, containing the CA certificate(s) used to connectto remote Maven repositories.It can contain X.509 certificates, and PKCS#7 formatted certificate chains.A JKS formatted keystore is automatically created to store the CA certificate(s),and configured to be used as a trusted certificate(s) by the Maven commands.Note that the root CA certificates are also imported into the created keystore.",
NestedObject: schema.NestedAttributeObject{
Attributes: map[string]schema.Attribute{
"key": schema.StringAttribute{
@@ -719,8 +719,8 @@ func (r *CamelApacheOrgIntegrationPlatformV1Manifest) Schema(_ context.Context,
},
"name": schema.StringAttribute{
- Description: "Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?",
- MarkdownDescription: "Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?",
+ Description: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?",
+ MarkdownDescription: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?",
Required: false,
Optional: true,
Computed: false,
@@ -741,8 +741,8 @@ func (r *CamelApacheOrgIntegrationPlatformV1Manifest) Schema(_ context.Context,
},
"cli_options": schema.ListAttribute{
- Description: "The CLI options that are appended to the list of arguments for Maven commands, e.g., '-V,--no-transfer-progress,-Dstyle.color=never'. See https://maven.apache.org/ref/3.8.4/maven-embedder/cli.html.",
- MarkdownDescription: "The CLI options that are appended to the list of arguments for Maven commands, e.g., '-V,--no-transfer-progress,-Dstyle.color=never'. See https://maven.apache.org/ref/3.8.4/maven-embedder/cli.html.",
+ Description: "The CLI options that are appended to the list of arguments for Maven commands,e.g., '-V,--no-transfer-progress,-Dstyle.color=never'.See https://maven.apache.org/ref/3.8.4/maven-embedder/cli.html.",
+ MarkdownDescription: "The CLI options that are appended to the list of arguments for Maven commands,e.g., '-V,--no-transfer-progress,-Dstyle.color=never'.See https://maven.apache.org/ref/3.8.4/maven-embedder/cli.html.",
ElementType: types.StringType,
Required: false,
Optional: true,
@@ -750,8 +750,8 @@ func (r *CamelApacheOrgIntegrationPlatformV1Manifest) Schema(_ context.Context,
},
"extension": schema.ListNestedAttribute{
- Description: "The Maven build extensions. See https://maven.apache.org/guides/mini/guide-using-extensions.html.",
- MarkdownDescription: "The Maven build extensions. See https://maven.apache.org/guides/mini/guide-using-extensions.html.",
+ Description: "The Maven build extensions.See https://maven.apache.org/guides/mini/guide-using-extensions.html.",
+ MarkdownDescription: "The Maven build extensions.See https://maven.apache.org/guides/mini/guide-using-extensions.html.",
NestedObject: schema.NestedAttributeObject{
Attributes: map[string]schema.Attribute{
"artifact_id": schema.StringAttribute{
@@ -809,8 +809,8 @@ func (r *CamelApacheOrgIntegrationPlatformV1Manifest) Schema(_ context.Context,
},
"profiles": schema.ListNestedAttribute{
- Description: "A reference to the ConfigMap or Secret key that contains the Maven profile.",
- MarkdownDescription: "A reference to the ConfigMap or Secret key that contains the Maven profile.",
+ Description: "A reference to the ConfigMap or Secret key that containsthe Maven profile.",
+ MarkdownDescription: "A reference to the ConfigMap or Secret key that containsthe Maven profile.",
NestedObject: schema.NestedAttributeObject{
Attributes: map[string]schema.Attribute{
"config_map_key_ref": schema.SingleNestedAttribute{
@@ -826,8 +826,8 @@ func (r *CamelApacheOrgIntegrationPlatformV1Manifest) Schema(_ context.Context,
},
"name": schema.StringAttribute{
- Description: "Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?",
- MarkdownDescription: "Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?",
+ Description: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?",
+ MarkdownDescription: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?",
Required: false,
Optional: true,
Computed: false,
@@ -859,8 +859,8 @@ func (r *CamelApacheOrgIntegrationPlatformV1Manifest) Schema(_ context.Context,
},
"name": schema.StringAttribute{
- Description: "Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?",
- MarkdownDescription: "Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?",
+ Description: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?",
+ MarkdownDescription: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?",
Required: false,
Optional: true,
Computed: false,
@@ -895,8 +895,8 @@ func (r *CamelApacheOrgIntegrationPlatformV1Manifest) Schema(_ context.Context,
},
"settings": schema.SingleNestedAttribute{
- Description: "A reference to the ConfigMap or Secret key that contains the Maven settings.",
- MarkdownDescription: "A reference to the ConfigMap or Secret key that contains the Maven settings.",
+ Description: "A reference to the ConfigMap or Secret key that containsthe Maven settings.",
+ MarkdownDescription: "A reference to the ConfigMap or Secret key that containsthe Maven settings.",
Attributes: map[string]schema.Attribute{
"config_map_key_ref": schema.SingleNestedAttribute{
Description: "Selects a key of a ConfigMap.",
@@ -911,8 +911,8 @@ func (r *CamelApacheOrgIntegrationPlatformV1Manifest) Schema(_ context.Context,
},
"name": schema.StringAttribute{
- Description: "Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?",
- MarkdownDescription: "Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?",
+ Description: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?",
+ MarkdownDescription: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?",
Required: false,
Optional: true,
Computed: false,
@@ -944,8 +944,8 @@ func (r *CamelApacheOrgIntegrationPlatformV1Manifest) Schema(_ context.Context,
},
"name": schema.StringAttribute{
- Description: "Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?",
- MarkdownDescription: "Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?",
+ Description: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?",
+ MarkdownDescription: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?",
Required: false,
Optional: true,
Computed: false,
@@ -970,8 +970,8 @@ func (r *CamelApacheOrgIntegrationPlatformV1Manifest) Schema(_ context.Context,
},
"settings_security": schema.SingleNestedAttribute{
- Description: "A reference to the ConfigMap or Secret key that contains the security of the Maven settings.",
- MarkdownDescription: "A reference to the ConfigMap or Secret key that contains the security of the Maven settings.",
+ Description: "A reference to the ConfigMap or Secret key that containsthe security of the Maven settings.",
+ MarkdownDescription: "A reference to the ConfigMap or Secret key that containsthe security of the Maven settings.",
Attributes: map[string]schema.Attribute{
"config_map_key_ref": schema.SingleNestedAttribute{
Description: "Selects a key of a ConfigMap.",
@@ -986,8 +986,8 @@ func (r *CamelApacheOrgIntegrationPlatformV1Manifest) Schema(_ context.Context,
},
"name": schema.StringAttribute{
- Description: "Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?",
- MarkdownDescription: "Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?",
+ Description: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?",
+ MarkdownDescription: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?",
Required: false,
Optional: true,
Computed: false,
@@ -1019,8 +1019,8 @@ func (r *CamelApacheOrgIntegrationPlatformV1Manifest) Schema(_ context.Context,
},
"name": schema.StringAttribute{
- Description: "Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?",
- MarkdownDescription: "Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?",
+ Description: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?",
+ MarkdownDescription: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?",
Required: false,
Optional: true,
Computed: false,
@@ -1152,8 +1152,8 @@ func (r *CamelApacheOrgIntegrationPlatformV1Manifest) Schema(_ context.Context,
},
"configuration": schema.ListNestedAttribute{
- Description: "Deprecated: Use camel trait (camel.properties) to manage properties Use mount trait (mount.configs) to manage configs Use mount trait (mount.resources) to manage resources Use mount trait (mount.volumes) to manage volumes list of configuration properties to be attached to all the Integration/IntegrationKits built from this IntegrationPlatform",
- MarkdownDescription: "Deprecated: Use camel trait (camel.properties) to manage properties Use mount trait (mount.configs) to manage configs Use mount trait (mount.resources) to manage resources Use mount trait (mount.volumes) to manage volumes list of configuration properties to be attached to all the Integration/IntegrationKits built from this IntegrationPlatform",
+ Description: "Deprecated:Use camel trait (camel.properties) to manage propertiesUse mount trait (mount.configs) to manage configsUse mount trait (mount.resources) to manage resourcesUse mount trait (mount.volumes) to manage volumeslist of configuration properties to be attached to all the Integration/IntegrationKits built from this IntegrationPlatform",
+ MarkdownDescription: "Deprecated:Use camel trait (camel.properties) to manage propertiesUse mount trait (mount.configs) to manage configsUse mount trait (mount.resources) to manage resourcesUse mount trait (mount.volumes) to manage volumeslist of configuration properties to be attached to all the Integration/IntegrationKits built from this IntegrationPlatform",
NestedObject: schema.NestedAttributeObject{
Attributes: map[string]schema.Attribute{
"type": schema.StringAttribute{
@@ -1207,8 +1207,8 @@ func (r *CamelApacheOrgIntegrationPlatformV1Manifest) Schema(_ context.Context,
},
"profile": schema.StringAttribute{
- Description: "the profile you wish to use. It will apply certain traits which are required by the specific profile chosen. It usually relates the Cluster with the optional definition of special profiles (ie, Knative)",
- MarkdownDescription: "the profile you wish to use. It will apply certain traits which are required by the specific profile chosen. It usually relates the Cluster with the optional definition of special profiles (ie, Knative)",
+ Description: "the profile you wish to use. It will apply certain traits which are required by the specific profile chosen.It usually relates the Cluster with the optional definition of special profiles (ie, Knative)",
+ MarkdownDescription: "the profile you wish to use. It will apply certain traits which are required by the specific profile chosen.It usually relates the Cluster with the optional definition of special profiles (ie, Knative)",
Required: false,
Optional: true,
Computed: false,
@@ -1250,8 +1250,8 @@ func (r *CamelApacheOrgIntegrationPlatformV1Manifest) Schema(_ context.Context,
MarkdownDescription: "The configuration of Affinity trait",
Attributes: map[string]schema.Attribute{
"configuration": schema.MapAttribute{
- Description: "Legacy trait configuration parameters. Deprecated: for backward compatibility.",
- MarkdownDescription: "Legacy trait configuration parameters. Deprecated: for backward compatibility.",
+ Description: "Legacy trait configuration parameters.Deprecated: for backward compatibility.",
+ MarkdownDescription: "Legacy trait configuration parameters.Deprecated: for backward compatibility.",
ElementType: types.StringType,
Required: false,
Optional: true,
@@ -1284,8 +1284,8 @@ func (r *CamelApacheOrgIntegrationPlatformV1Manifest) Schema(_ context.Context,
},
"pod_affinity_labels": schema.ListAttribute{
- Description: "Defines a set of pods (namely those matching the label selector, relative to the given namespace) that the integration pod(s) should be co-located with.",
- MarkdownDescription: "Defines a set of pods (namely those matching the label selector, relative to the given namespace) that the integration pod(s) should be co-located with.",
+ Description: "Defines a set of pods (namely those matching the label selector, relative to the given namespace) that theintegration pod(s) should be co-located with.",
+ MarkdownDescription: "Defines a set of pods (namely those matching the label selector, relative to the given namespace) that theintegration pod(s) should be co-located with.",
ElementType: types.StringType,
Required: false,
Optional: true,
@@ -1301,8 +1301,8 @@ func (r *CamelApacheOrgIntegrationPlatformV1Manifest) Schema(_ context.Context,
},
"pod_anti_affinity_labels": schema.ListAttribute{
- Description: "Defines a set of pods (namely those matching the label selector, relative to the given namespace) that the integration pod(s) should not be co-located with.",
- MarkdownDescription: "Defines a set of pods (namely those matching the label selector, relative to the given namespace) that the integration pod(s) should not be co-located with.",
+ Description: "Defines a set of pods (namely those matching the label selector, relative to the given namespace) that theintegration pod(s) should not be co-located with.",
+ MarkdownDescription: "Defines a set of pods (namely those matching the label selector, relative to the given namespace) that theintegration pod(s) should not be co-located with.",
ElementType: types.StringType,
Required: false,
Optional: true,
@@ -1328,16 +1328,16 @@ func (r *CamelApacheOrgIntegrationPlatformV1Manifest) Schema(_ context.Context,
},
"base_image": schema.StringAttribute{
- Description: "Specify a base image. In order to have the application working properly it must be a container image which has a Java JDK installed and ready to use on path (ie '/usr/bin/java').",
- MarkdownDescription: "Specify a base image. In order to have the application working properly it must be a container image which has a Java JDK installed and ready to use on path (ie '/usr/bin/java').",
+ Description: "Specify a base image. In order to have the application working properly it must be a container image which has a Java JDKinstalled and ready to use on path (ie '/usr/bin/java').",
+ MarkdownDescription: "Specify a base image. In order to have the application working properly it must be a container image which has a Java JDKinstalled and ready to use on path (ie '/usr/bin/java').",
Required: false,
Optional: true,
Computed: false,
},
"configuration": schema.MapAttribute{
- Description: "Legacy trait configuration parameters. Deprecated: for backward compatibility.",
- MarkdownDescription: "Legacy trait configuration parameters. Deprecated: for backward compatibility.",
+ Description: "Legacy trait configuration parameters.Deprecated: for backward compatibility.",
+ MarkdownDescription: "Legacy trait configuration parameters.Deprecated: for backward compatibility.",
ElementType: types.StringType,
Required: false,
Optional: true,
@@ -1361,24 +1361,24 @@ func (r *CamelApacheOrgIntegrationPlatformV1Manifest) Schema(_ context.Context,
},
"limit_cpu": schema.StringAttribute{
- Description: "When using 'pod' strategy, the maximum amount of CPU required by the pod builder. Deprecated: use TasksRequestCPU instead with task name 'builder'.",
- MarkdownDescription: "When using 'pod' strategy, the maximum amount of CPU required by the pod builder. Deprecated: use TasksRequestCPU instead with task name 'builder'.",
+ Description: "When using 'pod' strategy, the maximum amount of CPU required by the pod builder.Deprecated: use TasksRequestCPU instead with task name 'builder'.",
+ MarkdownDescription: "When using 'pod' strategy, the maximum amount of CPU required by the pod builder.Deprecated: use TasksRequestCPU instead with task name 'builder'.",
Required: false,
Optional: true,
Computed: false,
},
"limit_memory": schema.StringAttribute{
- Description: "When using 'pod' strategy, the maximum amount of memory required by the pod builder. Deprecated: use TasksRequestCPU instead with task name 'builder'.",
- MarkdownDescription: "When using 'pod' strategy, the maximum amount of memory required by the pod builder. Deprecated: use TasksRequestCPU instead with task name 'builder'.",
+ Description: "When using 'pod' strategy, the maximum amount of memory required by the pod builder.Deprecated: use TasksRequestCPU instead with task name 'builder'.",
+ MarkdownDescription: "When using 'pod' strategy, the maximum amount of memory required by the pod builder.Deprecated: use TasksRequestCPU instead with task name 'builder'.",
Required: false,
Optional: true,
Computed: false,
},
"maven_profiles": schema.ListAttribute{
- Description: "A list of references pointing to configmaps/secrets that contains a maven profile. This configmap/secret is a resource of the IntegrationKit created, therefore it needs to be present in the namespace where the operator is going to create the IntegrationKit. The content of the maven profile is expected to be a text containing a valid maven profile starting with '' and ending with '' that will be integrated as an inline profile in the POM. Syntax: [configmap|secret]:name[/key], where name represents the resource name, key optionally represents the resource key to be filtered (default key value = profile.xml).",
- MarkdownDescription: "A list of references pointing to configmaps/secrets that contains a maven profile. This configmap/secret is a resource of the IntegrationKit created, therefore it needs to be present in the namespace where the operator is going to create the IntegrationKit. The content of the maven profile is expected to be a text containing a valid maven profile starting with '' and ending with '' that will be integrated as an inline profile in the POM. Syntax: [configmap|secret]:name[/key], where name represents the resource name, key optionally represents the resource key to be filtered (default key value = profile.xml).",
+ Description: "A list of references pointing to configmaps/secrets that contains a maven profile.This configmap/secret is a resource of the IntegrationKit created, therefore it needs to be present in the namespace where the operator is going to create the IntegrationKit.The content of the maven profile is expected to be a text containing a valid maven profile starting with '' and ending with '' that will be integrated as an inline profile in the POM.Syntax: [configmap|secret]:name[/key], where name represents the resource name, key optionally represents the resource key to be filtered (default key value = profile.xml).",
+ MarkdownDescription: "A list of references pointing to configmaps/secrets that contains a maven profile.This configmap/secret is a resource of the IntegrationKit created, therefore it needs to be present in the namespace where the operator is going to create the IntegrationKit.The content of the maven profile is expected to be a text containing a valid maven profile starting with '' and ending with '' that will be integrated as an inline profile in the POM.Syntax: [configmap|secret]:name[/key], where name represents the resource name, key optionally represents the resource key to be filtered (default key value = profile.xml).",
ElementType: types.StringType,
Required: false,
Optional: true,
@@ -1424,16 +1424,16 @@ func (r *CamelApacheOrgIntegrationPlatformV1Manifest) Schema(_ context.Context,
},
"request_cpu": schema.StringAttribute{
- Description: "When using 'pod' strategy, the minimum amount of CPU required by the pod builder. Deprecated: use TasksRequestCPU instead with task name 'builder'.",
- MarkdownDescription: "When using 'pod' strategy, the minimum amount of CPU required by the pod builder. Deprecated: use TasksRequestCPU instead with task name 'builder'.",
+ Description: "When using 'pod' strategy, the minimum amount of CPU required by the pod builder.Deprecated: use TasksRequestCPU instead with task name 'builder'.",
+ MarkdownDescription: "When using 'pod' strategy, the minimum amount of CPU required by the pod builder.Deprecated: use TasksRequestCPU instead with task name 'builder'.",
Required: false,
Optional: true,
Computed: false,
},
"request_memory": schema.StringAttribute{
- Description: "When using 'pod' strategy, the minimum amount of memory required by the pod builder. Deprecated: use TasksRequestCPU instead with task name 'builder'.",
- MarkdownDescription: "When using 'pod' strategy, the minimum amount of memory required by the pod builder. Deprecated: use TasksRequestCPU instead with task name 'builder'.",
+ Description: "When using 'pod' strategy, the minimum amount of memory required by the pod builder.Deprecated: use TasksRequestCPU instead with task name 'builder'.",
+ MarkdownDescription: "When using 'pod' strategy, the minimum amount of memory required by the pod builder.Deprecated: use TasksRequestCPU instead with task name 'builder'.",
Required: false,
Optional: true,
Computed: false,
@@ -1460,8 +1460,8 @@ func (r *CamelApacheOrgIntegrationPlatformV1Manifest) Schema(_ context.Context,
},
"tasks_filter": schema.StringAttribute{
- Description: "A list of tasks sorted by the order of execution in a csv format, ie, ',,...'. Mind that you must include also the operator tasks ('builder', 'quarkus-native', 'package', 'jib', 's2i') if you need to execute them. Useful only with 'pod' strategy.",
- MarkdownDescription: "A list of tasks sorted by the order of execution in a csv format, ie, ',,...'. Mind that you must include also the operator tasks ('builder', 'quarkus-native', 'package', 'jib', 's2i') if you need to execute them. Useful only with 'pod' strategy.",
+ Description: "A list of tasks sorted by the order of execution in a csv format, ie, ',