diff --git a/docs/data-sources/acmpca_services_k8s_aws_certificate_v1alpha1_manifest.md b/docs/data-sources/acmpca_services_k8s_aws_certificate_v1alpha1_manifest.md index fe1030961..8cb5a7e0b 100644 --- a/docs/data-sources/acmpca_services_k8s_aws_certificate_v1alpha1_manifest.md +++ b/docs/data-sources/acmpca_services_k8s_aws_certificate_v1alpha1_manifest.md @@ -63,6 +63,7 @@ Optional: - `api_passthrough` (Attributes) Specifies X.509 certificate information to be included in the issued certificate.An APIPassthrough or APICSRPassthrough template variant must be selected,or else this parameter is ignored. For more information about using thesetemplates, see Understanding Certificate Templates (https://docs.aws.amazon.com/privateca/latest/userguide/UsingTemplates.html).If conflicting or duplicate certificate information is supplied during certificateissuance, Amazon Web Services Private CA applies order of operation rules(https://docs.aws.amazon.com/privateca/latest/userguide/UsingTemplates.html#template-order-of-operations)to determine what information is used. (see [below for nested schema](#nestedatt--spec--api_passthrough)) - `certificate_authority_arn` (String) The Amazon Resource Name (ARN) that was returned when you called CreateCertificateAuthority(https://docs.aws.amazon.com/privateca/latest/APIReference/API_CreateCertificateAuthority.html).This must be of the form:arn:aws:acm-pca:region:account:certificate-authority/12345678-1234-1234-1234-123456789012 - `certificate_authority_ref` (Attributes) AWSResourceReferenceWrapper provides a wrapper around *AWSResourceReferencetype to provide more user friendly syntax for references using 'from' fieldEx:APIIDRef: from: name: my-api (see [below for nested schema](#nestedatt--spec--certificate_authority_ref)) +- `certificate_output` (Attributes) SecretKeyReference combines a k8s corev1.SecretReference with aspecific key within the referred-to Secret (see [below for nested schema](#nestedatt--spec--certificate_output)) - `certificate_signing_request` (String) - `certificate_signing_request_ref` (Attributes) AWSResourceReferenceWrapper provides a wrapper around *AWSResourceReferencetype to provide more user friendly syntax for references using 'from' fieldEx:APIIDRef: from: name: my-api (see [below for nested schema](#nestedatt--spec--certificate_signing_request_ref)) - `template_arn` (String) Specifies a custom configuration template to use when issuing a certificate.If this parameter is not provided, Amazon Web Services Private CA defaultsto the EndEntityCertificate/V1 template. For CA certificates, you shouldchoose the shortest path length that meets your needs. The path length isindicated by the PathLenN portion of the ARN, where N is the CA depth (https://docs.aws.amazon.com/privateca/latest/userguide/PcaTerms.html#terms-cadepth).Note: The CA depth configured on a subordinate CA certificate must not exceedthe limit set by its parents in the CA hierarchy.For a list of TemplateArn values supported by Amazon Web Services PrivateCA, see Understanding Certificate Templates (https://docs.aws.amazon.com/privateca/latest/userguide/UsingTemplates.html). @@ -271,6 +272,19 @@ Optional: + +### Nested Schema for `spec.certificate_output` + +Required: + +- `key` (String) Key is the key within the secret + +Optional: + +- `name` (String) name is unique within a namespace to reference a secret resource. +- `namespace` (String) namespace defines the space within which the secret name must be unique. + + ### Nested Schema for `spec.certificate_signing_request_ref` diff --git a/docs/data-sources/apps_emqx_io_emqx_broker_v1beta3_manifest.md b/docs/data-sources/apps_emqx_io_emqx_broker_v1beta3_manifest.md index 2e9fee998..4c3ecd55f 100644 --- a/docs/data-sources/apps_emqx_io_emqx_broker_v1beta3_manifest.md +++ b/docs/data-sources/apps_emqx_io_emqx_broker_v1beta3_manifest.md @@ -452,6 +452,10 @@ Optional: ### Nested Schema for `spec.emqx_template` +Required: + +- `image` (String) + Optional: - `acl` (List of String) @@ -459,7 +463,6 @@ Optional: - `config` (Map of String) - `extra_volume_mounts` (Attributes List) (see [below for nested schema](#nestedatt--spec--emqx_template--extra_volume_mounts)) - `extra_volumes` (Attributes List) (see [below for nested schema](#nestedatt--spec--emqx_template--extra_volumes)) -- `image` (String) - `image_pull_policy` (String) - `liveness_probe` (Attributes) (see [below for nested schema](#nestedatt--spec--emqx_template--liveness_probe)) - `modules` (Attributes List) (see [below for nested schema](#nestedatt--spec--emqx_template--modules)) diff --git a/docs/data-sources/apps_emqx_io_emqx_broker_v1beta4_manifest.md b/docs/data-sources/apps_emqx_io_emqx_broker_v1beta4_manifest.md index 3bbe7899e..f5d2e836f 100644 --- a/docs/data-sources/apps_emqx_io_emqx_broker_v1beta4_manifest.md +++ b/docs/data-sources/apps_emqx_io_emqx_broker_v1beta4_manifest.md @@ -803,6 +803,10 @@ Optional: ### Nested Schema for `spec.template.spec.emqx_container.image` +Required: + +- `version` (String) + Optional: - `prefix` (String) @@ -810,7 +814,6 @@ Optional: - `registry` (String) - `repository` (String) - `suffix` (String) -- `version` (String) diff --git a/docs/data-sources/apps_emqx_io_emqx_enterprise_v1beta3_manifest.md b/docs/data-sources/apps_emqx_io_emqx_enterprise_v1beta3_manifest.md index 7404a8082..bd945f05b 100644 --- a/docs/data-sources/apps_emqx_io_emqx_enterprise_v1beta3_manifest.md +++ b/docs/data-sources/apps_emqx_io_emqx_enterprise_v1beta3_manifest.md @@ -452,6 +452,10 @@ Optional: ### Nested Schema for `spec.emqx_template` +Required: + +- `image` (String) + Optional: - `acl` (List of String) @@ -459,7 +463,6 @@ Optional: - `config` (Map of String) - `extra_volume_mounts` (Attributes List) (see [below for nested schema](#nestedatt--spec--emqx_template--extra_volume_mounts)) - `extra_volumes` (Attributes List) (see [below for nested schema](#nestedatt--spec--emqx_template--extra_volumes)) -- `image` (String) - `image_pull_policy` (String) - `license` (Attributes) (see [below for nested schema](#nestedatt--spec--emqx_template--license)) - `liveness_probe` (Attributes) (see [below for nested schema](#nestedatt--spec--emqx_template--liveness_probe)) diff --git a/docs/data-sources/apps_emqx_io_emqx_enterprise_v1beta4_manifest.md b/docs/data-sources/apps_emqx_io_emqx_enterprise_v1beta4_manifest.md index b02f0fc58..975fb4b7d 100644 --- a/docs/data-sources/apps_emqx_io_emqx_enterprise_v1beta4_manifest.md +++ b/docs/data-sources/apps_emqx_io_emqx_enterprise_v1beta4_manifest.md @@ -834,6 +834,10 @@ Optional: ### Nested Schema for `spec.template.spec.emqx_container.image` +Required: + +- `version` (String) + Optional: - `prefix` (String) @@ -841,7 +845,6 @@ Optional: - `registry` (String) - `repository` (String) - `suffix` (String) -- `version` (String) diff --git a/docs/data-sources/apps_emqx_io_emqx_plugin_v1beta3_manifest.md b/docs/data-sources/apps_emqx_io_emqx_plugin_v1beta3_manifest.md index 6967ff7e8..c903e9d48 100644 --- a/docs/data-sources/apps_emqx_io_emqx_plugin_v1beta3_manifest.md +++ b/docs/data-sources/apps_emqx_io_emqx_plugin_v1beta3_manifest.md @@ -53,8 +53,11 @@ Optional: ### Nested Schema for `spec` -Optional: +Required: -- `config` (Map of String) - `plugin_name` (String) - `selector` (Map of String) + +Optional: + +- `config` (Map of String) diff --git a/docs/data-sources/apps_emqx_io_emqx_plugin_v1beta4_manifest.md b/docs/data-sources/apps_emqx_io_emqx_plugin_v1beta4_manifest.md index a9d759635..194c5c326 100644 --- a/docs/data-sources/apps_emqx_io_emqx_plugin_v1beta4_manifest.md +++ b/docs/data-sources/apps_emqx_io_emqx_plugin_v1beta4_manifest.md @@ -53,8 +53,11 @@ Optional: ### Nested Schema for `spec` -Optional: +Required: -- `config` (Map of String) - `plugin_name` (String) - `selector` (Map of String) + +Optional: + +- `config` (Map of String) diff --git a/docs/data-sources/apps_emqx_io_emqx_v2alpha1_manifest.md b/docs/data-sources/apps_emqx_io_emqx_v2alpha1_manifest.md index 123a7e1a3..e2c5f30d2 100644 --- a/docs/data-sources/apps_emqx_io_emqx_v2alpha1_manifest.md +++ b/docs/data-sources/apps_emqx_io_emqx_v2alpha1_manifest.md @@ -3390,13 +3390,10 @@ Optional: Required: +- `error` (String) - `port` (Number) - `protocol` (String) -Optional: - -- `error` (String) - @@ -3537,13 +3534,10 @@ Optional: Required: +- `error` (String) - `port` (Number) - `protocol` (String) -Optional: - -- `error` (String) - diff --git a/docs/data-sources/camel_apache_org_integration_platform_v1_manifest.md b/docs/data-sources/camel_apache_org_integration_platform_v1_manifest.md index 0d301fe5e..c755bdc55 100644 --- a/docs/data-sources/camel_apache_org_integration_platform_v1_manifest.md +++ b/docs/data-sources/camel_apache_org_integration_platform_v1_manifest.md @@ -75,6 +75,7 @@ Optional: - `publish_strategy` (String) the strategy to adopt for publishing an Integration container image - `publish_strategy_options` (Map of String) Deprecated: no longer in use - `registry` (Attributes) the image registry used to push/pull Integration images (see [below for nested schema](#nestedatt--spec--build--registry)) +- `runtime_core_version` (String) the Camel core version used by this IntegrationPlatform - `runtime_provider` (String) the runtime used. Likely Camel Quarkus (we used to have main runtime which has been discontinued since version 1.5) - `runtime_version` (String) the Camel K Runtime dependency version - `timeout` (String) how much time to wait before time out the pipeline process @@ -326,6 +327,7 @@ Optional: - `service` (Attributes) The configuration of Service trait (see [below for nested schema](#nestedatt--spec--traits--service)) - `service_binding` (Attributes) The configuration of Service Binding trait (see [below for nested schema](#nestedatt--spec--traits--service_binding)) - `strimzi` (Attributes) Deprecated: for backward compatibility. (see [below for nested schema](#nestedatt--spec--traits--strimzi)) +- `telemetry` (Attributes) The configuration of Telemetry trait (see [below for nested schema](#nestedatt--spec--traits--telemetry)) - `threescale` (Attributes) Deprecated: for backward compatibility. (see [below for nested schema](#nestedatt--spec--traits--threescale)) - `toleration` (Attributes) The configuration of Toleration trait (see [below for nested schema](#nestedatt--spec--traits--toleration)) - `tracing` (Attributes) Deprecated: for backward compatibility. (see [below for nested schema](#nestedatt--spec--traits--tracing)) @@ -851,6 +853,21 @@ Required: - `configuration` (Map of String) TraitConfiguration parameters configuration + +### Nested Schema for `spec.traits.telemetry` + +Optional: + +- `auto` (Boolean) Enables automatic configuration of the trait, including automatic discovery of the telemetry endpoint. +- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility. +- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property. +- `endpoint` (String) The target endpoint of the Telemetry service (automatically discovered by default) +- `sampler` (String) The sampler of the telemetry used for tracing (default 'on') +- `sampler_parent_based` (Boolean) The sampler of the telemetry used for tracing is parent based (default 'true') +- `sampler_ratio` (String) The sampler ratio of the telemetry used for tracing +- `service_name` (String) The name of the service that publishes telemetry data (defaults to the integration name) + + ### Nested Schema for `spec.traits.threescale` diff --git a/docs/data-sources/camel_apache_org_integration_profile_v1_manifest.md b/docs/data-sources/camel_apache_org_integration_profile_v1_manifest.md index b1843ce9f..57cfcf6d9 100644 --- a/docs/data-sources/camel_apache_org_integration_profile_v1_manifest.md +++ b/docs/data-sources/camel_apache_org_integration_profile_v1_manifest.md @@ -291,6 +291,7 @@ Optional: - `service` (Attributes) The configuration of Service trait (see [below for nested schema](#nestedatt--spec--traits--service)) - `service_binding` (Attributes) The configuration of Service Binding trait (see [below for nested schema](#nestedatt--spec--traits--service_binding)) - `strimzi` (Attributes) Deprecated: for backward compatibility. (see [below for nested schema](#nestedatt--spec--traits--strimzi)) +- `telemetry` (Attributes) The configuration of Telemetry trait (see [below for nested schema](#nestedatt--spec--traits--telemetry)) - `threescale` (Attributes) Deprecated: for backward compatibility. (see [below for nested schema](#nestedatt--spec--traits--threescale)) - `toleration` (Attributes) The configuration of Toleration trait (see [below for nested schema](#nestedatt--spec--traits--toleration)) - `tracing` (Attributes) Deprecated: for backward compatibility. (see [below for nested schema](#nestedatt--spec--traits--tracing)) @@ -816,6 +817,21 @@ Required: - `configuration` (Map of String) TraitConfiguration parameters configuration + +### Nested Schema for `spec.traits.telemetry` + +Optional: + +- `auto` (Boolean) Enables automatic configuration of the trait, including automatic discovery of the telemetry endpoint. +- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility. +- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property. +- `endpoint` (String) The target endpoint of the Telemetry service (automatically discovered by default) +- `sampler` (String) The sampler of the telemetry used for tracing (default 'on') +- `sampler_parent_based` (Boolean) The sampler of the telemetry used for tracing is parent based (default 'true') +- `sampler_ratio` (String) The sampler ratio of the telemetry used for tracing +- `service_name` (String) The name of the service that publishes telemetry data (defaults to the integration name) + + ### Nested Schema for `spec.traits.threescale` diff --git a/docs/data-sources/camel_apache_org_integration_v1_manifest.md b/docs/data-sources/camel_apache_org_integration_v1_manifest.md index 43f188429..d0e483130 100644 --- a/docs/data-sources/camel_apache_org_integration_v1_manifest.md +++ b/docs/data-sources/camel_apache_org_integration_v1_manifest.md @@ -2936,6 +2936,7 @@ Optional: - `service` (Attributes) The configuration of Service trait (see [below for nested schema](#nestedatt--spec--traits--service)) - `service_binding` (Attributes) The configuration of Service Binding trait (see [below for nested schema](#nestedatt--spec--traits--service_binding)) - `strimzi` (Attributes) Deprecated: for backward compatibility. (see [below for nested schema](#nestedatt--spec--traits--strimzi)) +- `telemetry` (Attributes) The configuration of Telemetry trait (see [below for nested schema](#nestedatt--spec--traits--telemetry)) - `threescale` (Attributes) Deprecated: for backward compatibility. (see [below for nested schema](#nestedatt--spec--traits--threescale)) - `toleration` (Attributes) The configuration of Toleration trait (see [below for nested schema](#nestedatt--spec--traits--toleration)) - `tracing` (Attributes) Deprecated: for backward compatibility. (see [below for nested schema](#nestedatt--spec--traits--tracing)) @@ -3461,6 +3462,21 @@ Required: - `configuration` (Map of String) TraitConfiguration parameters configuration + +### Nested Schema for `spec.traits.telemetry` + +Optional: + +- `auto` (Boolean) Enables automatic configuration of the trait, including automatic discovery of the telemetry endpoint. +- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility. +- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property. +- `endpoint` (String) The target endpoint of the Telemetry service (automatically discovered by default) +- `sampler` (String) The sampler of the telemetry used for tracing (default 'on') +- `sampler_parent_based` (Boolean) The sampler of the telemetry used for tracing is parent based (default 'true') +- `sampler_ratio` (String) The sampler ratio of the telemetry used for tracing +- `service_name` (String) The name of the service that publishes telemetry data (defaults to the integration name) + + ### Nested Schema for `spec.traits.threescale` diff --git a/docs/data-sources/camel_apache_org_kamelet_binding_v1alpha1_manifest.md b/docs/data-sources/camel_apache_org_kamelet_binding_v1alpha1_manifest.md index 04d88726f..860ac0b94 100644 --- a/docs/data-sources/camel_apache_org_kamelet_binding_v1alpha1_manifest.md +++ b/docs/data-sources/camel_apache_org_kamelet_binding_v1alpha1_manifest.md @@ -2949,6 +2949,7 @@ Optional: - `service` (Attributes) The configuration of Service trait (see [below for nested schema](#nestedatt--spec--integration--traits--service)) - `service_binding` (Attributes) The configuration of Service Binding trait (see [below for nested schema](#nestedatt--spec--integration--traits--service_binding)) - `strimzi` (Attributes) Deprecated: for backward compatibility. (see [below for nested schema](#nestedatt--spec--integration--traits--strimzi)) +- `telemetry` (Attributes) The configuration of Telemetry trait (see [below for nested schema](#nestedatt--spec--integration--traits--telemetry)) - `threescale` (Attributes) Deprecated: for backward compatibility. (see [below for nested schema](#nestedatt--spec--integration--traits--threescale)) - `toleration` (Attributes) The configuration of Toleration trait (see [below for nested schema](#nestedatt--spec--integration--traits--toleration)) - `tracing` (Attributes) Deprecated: for backward compatibility. (see [below for nested schema](#nestedatt--spec--integration--traits--tracing)) @@ -3474,6 +3475,21 @@ Required: - `configuration` (Map of String) TraitConfiguration parameters configuration + +### Nested Schema for `spec.integration.traits.telemetry` + +Optional: + +- `auto` (Boolean) Enables automatic configuration of the trait, including automatic discovery of the telemetry endpoint. +- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility. +- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property. +- `endpoint` (String) The target endpoint of the Telemetry service (automatically discovered by default) +- `sampler` (String) The sampler of the telemetry used for tracing (default 'on') +- `sampler_parent_based` (Boolean) The sampler of the telemetry used for tracing is parent based (default 'true') +- `sampler_ratio` (String) The sampler ratio of the telemetry used for tracing +- `service_name` (String) The name of the service that publishes telemetry data (defaults to the integration name) + + ### Nested Schema for `spec.integration.traits.threescale` diff --git a/docs/data-sources/camel_apache_org_kamelet_v1_manifest.md b/docs/data-sources/camel_apache_org_kamelet_v1_manifest.md index 4e36e6205..322787849 100644 --- a/docs/data-sources/camel_apache_org_kamelet_v1_manifest.md +++ b/docs/data-sources/camel_apache_org_kamelet_v1_manifest.md @@ -61,6 +61,7 @@ Optional: - `sources` (Attributes List) sources in any Camel DSL supported (see [below for nested schema](#nestedatt--spec--sources)) - `template` (Map of String) the main source in YAML DSL - `types` (Attributes) data specification types for the events consumed/produced by the KameletDeprecated: In favor of using DataTypes (see [below for nested schema](#nestedatt--spec--types)) +- `versions` (Attributes) the optional versions available for this Kamelet. This field may not be taken in account by Camel core and is meant to supportany user defined versioning model on cluster only. If the user wants to use any given version, she must materialize a file with the given version specas the 'main' Kamelet spec on the runtime. (see [below for nested schema](#nestedatt--spec--versions)) ### Nested Schema for `spec.data_types` @@ -304,3 +305,261 @@ Optional: - `type` (String) - `unique_items` (Boolean) - `x_descriptors` (List of String) XDescriptors is a list of extended properties that trigger a custom behavior in external systems + + + + + +### Nested Schema for `spec.versions` + +Optional: + +- `data_types` (Attributes) data specification types for the events consumed/produced by the Kamelet (see [below for nested schema](#nestedatt--spec--versions--data_types)) +- `definition` (Attributes) defines the formal configuration of the Kamelet (see [below for nested schema](#nestedatt--spec--versions--definition)) +- `dependencies` (List of String) Camel dependencies needed by the Kamelet +- `sources` (Attributes List) sources in any Camel DSL supported (see [below for nested schema](#nestedatt--spec--versions--sources)) +- `template` (Map of String) the main source in YAML DSL +- `types` (Attributes) data specification types for the events consumed/produced by the KameletDeprecated: In favor of using DataTypes (see [below for nested schema](#nestedatt--spec--versions--types)) + + +### Nested Schema for `spec.versions.data_types` + +Optional: + +- `default` (String) the default data type for this Kamelet +- `headers` (Attributes) one to many header specifications (see [below for nested schema](#nestedatt--spec--versions--data_types--headers)) +- `types` (Attributes) one to many data type specifications (see [below for nested schema](#nestedatt--spec--versions--data_types--types)) + + +### Nested Schema for `spec.versions.data_types.headers` + +Optional: + +- `default` (String) +- `description` (String) +- `required` (Boolean) +- `title` (String) +- `type` (String) + + + +### Nested Schema for `spec.versions.data_types.types` + +Optional: + +- `dependencies` (List of String) the list of Camel or Maven dependencies required by the data type +- `description` (String) optional description +- `format` (String) the data type format name +- `headers` (Attributes) one to many header specifications (see [below for nested schema](#nestedatt--spec--versions--data_types--types--headers)) +- `media_type` (String) media type as expected for HTTP media types (ie, application/json) +- `schema` (Attributes) the expected schema for the data type (see [below for nested schema](#nestedatt--spec--versions--data_types--types--schema)) +- `scheme` (String) the data type component scheme + + +### Nested Schema for `spec.versions.data_types.types.headers` + +Optional: + +- `default` (String) +- `description` (String) +- `required` (Boolean) +- `title` (String) +- `type` (String) + + + +### Nested Schema for `spec.versions.data_types.types.schema` + +Optional: + +- `description` (String) +- `dollarschema` (String) JSONSchemaURL represents a schema url. +- `example` (Map of String) JSON represents any valid JSON value.These types are supported: bool, int64, float64, string, []interface{}, map[string]interface{} and nil. +- `external_docs` (Attributes) ExternalDocumentation allows referencing an external resource for extended documentation. (see [below for nested schema](#nestedatt--spec--versions--data_types--types--schema--external_docs)) +- `id` (String) +- `properties` (Attributes) (see [below for nested schema](#nestedatt--spec--versions--data_types--types--schema--properties)) +- `required` (List of String) +- `title` (String) +- `type` (String) + + +### Nested Schema for `spec.versions.data_types.types.schema.external_docs` + +Optional: + +- `description` (String) +- `url` (String) + + + +### Nested Schema for `spec.versions.data_types.types.schema.properties` + +Optional: + +- `default` (Map of String) default is a default value for undefined object fields. +- `deprecated` (Boolean) +- `description` (String) +- `enum` (List of String) +- `example` (Map of String) JSON represents any valid JSON value.These types are supported: bool, int64, float64, string, []interface{}, map[string]interface{} and nil. +- `exclusive_maximum` (Boolean) +- `exclusive_minimum` (Boolean) +- `format` (String) format is an OpenAPI v3 format string. Unknown formats are ignored. The following formats are validated:- bsonobjectid: a bson object ID, i.e. a 24 characters hex string- uri: an URI as parsed by Golang net/url.ParseRequestURI- email: an email address as parsed by Golang net/mail.ParseAddress- hostname: a valid representation for an Internet host name, as defined by RFC 1034, section 3.1 [RFC1034].- ipv4: an IPv4 IP as parsed by Golang net.ParseIP- ipv6: an IPv6 IP as parsed by Golang net.ParseIP- cidr: a CIDR as parsed by Golang net.ParseCIDR- mac: a MAC address as parsed by Golang net.ParseMAC- uuid: an UUID that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?[0-9a-f]{4}-?[0-9a-f]{4}-?[0-9a-f]{12}$- uuid3: an UUID3 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?3[0-9a-f]{3}-?[0-9a-f]{4}-?[0-9a-f]{12}$- uuid4: an UUID4 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?4[0-9a-f]{3}-?[89ab][0-9a-f]{3}-?[0-9a-f]{12}$- uuid5: an UUID5 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?5[0-9a-f]{3}-?[89ab][0-9a-f]{3}-?[0-9a-f]{12}$- isbn: an ISBN10 or ISBN13 number string like '0321751043' or '978-0321751041'- isbn10: an ISBN10 number string like '0321751043'- isbn13: an ISBN13 number string like '978-0321751041'- creditcard: a credit card number defined by the regex ^(?:4[0-9]{12}(?:[0-9]{3})?|5[1-5][0-9]{14}|6(?:011|5[0-9][0-9])[0-9]{12}|3[47][0-9]{13}|3(?:0[0-5]|[68][0-9])[0-9]{11}|(?:2131|1800|35d{3})d{11})$ with any non digit characters mixed in- ssn: a U.S. social security number following the regex ^d{3}[- ]?d{2}[- ]?d{4}$- hexcolor: an hexadecimal color code like '#FFFFFF' following the regex ^#?([0-9a-fA-F]{3}|[0-9a-fA-F]{6})$- rgbcolor: an RGB color code like rgb like 'rgb(255,255,255)'- byte: base64 encoded binary data- password: any kind of string- date: a date string like '2006-01-02' as defined by full-date in RFC3339- duration: a duration string like '22 ns' as parsed by Golang time.ParseDuration or compatible with Scala duration format- datetime: a date time string like '2014-12-15T19:30:20.000Z' as defined by date-time in RFC3339. +- `id` (String) +- `max_items` (Number) +- `max_length` (Number) +- `max_properties` (Number) +- `maximum` (String) A Number represents a JSON number literal. +- `min_items` (Number) +- `min_length` (Number) +- `min_properties` (Number) +- `minimum` (String) A Number represents a JSON number literal. +- `multiple_of` (String) A Number represents a JSON number literal. +- `nullable` (Boolean) +- `pattern` (String) +- `title` (String) +- `type` (String) +- `unique_items` (Boolean) +- `x_descriptors` (List of String) XDescriptors is a list of extended properties that trigger a custom behavior in external systems + + + + + + +### Nested Schema for `spec.versions.definition` + +Optional: + +- `description` (String) +- `dollarschema` (String) JSONSchemaURL represents a schema url. +- `example` (Map of String) JSON represents any valid JSON value.These types are supported: bool, int64, float64, string, []interface{}, map[string]interface{} and nil. +- `external_docs` (Attributes) ExternalDocumentation allows referencing an external resource for extended documentation. (see [below for nested schema](#nestedatt--spec--versions--definition--external_docs)) +- `id` (String) +- `properties` (Attributes) (see [below for nested schema](#nestedatt--spec--versions--definition--properties)) +- `required` (List of String) +- `title` (String) +- `type` (String) + + +### Nested Schema for `spec.versions.definition.external_docs` + +Optional: + +- `description` (String) +- `url` (String) + + + +### Nested Schema for `spec.versions.definition.properties` + +Optional: + +- `default` (Map of String) default is a default value for undefined object fields. +- `deprecated` (Boolean) +- `description` (String) +- `enum` (List of String) +- `example` (Map of String) JSON represents any valid JSON value.These types are supported: bool, int64, float64, string, []interface{}, map[string]interface{} and nil. +- `exclusive_maximum` (Boolean) +- `exclusive_minimum` (Boolean) +- `format` (String) format is an OpenAPI v3 format string. Unknown formats are ignored. The following formats are validated:- bsonobjectid: a bson object ID, i.e. a 24 characters hex string- uri: an URI as parsed by Golang net/url.ParseRequestURI- email: an email address as parsed by Golang net/mail.ParseAddress- hostname: a valid representation for an Internet host name, as defined by RFC 1034, section 3.1 [RFC1034].- ipv4: an IPv4 IP as parsed by Golang net.ParseIP- ipv6: an IPv6 IP as parsed by Golang net.ParseIP- cidr: a CIDR as parsed by Golang net.ParseCIDR- mac: a MAC address as parsed by Golang net.ParseMAC- uuid: an UUID that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?[0-9a-f]{4}-?[0-9a-f]{4}-?[0-9a-f]{12}$- uuid3: an UUID3 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?3[0-9a-f]{3}-?[0-9a-f]{4}-?[0-9a-f]{12}$- uuid4: an UUID4 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?4[0-9a-f]{3}-?[89ab][0-9a-f]{3}-?[0-9a-f]{12}$- uuid5: an UUID5 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?5[0-9a-f]{3}-?[89ab][0-9a-f]{3}-?[0-9a-f]{12}$- isbn: an ISBN10 or ISBN13 number string like '0321751043' or '978-0321751041'- isbn10: an ISBN10 number string like '0321751043'- isbn13: an ISBN13 number string like '978-0321751041'- creditcard: a credit card number defined by the regex ^(?:4[0-9]{12}(?:[0-9]{3})?|5[1-5][0-9]{14}|6(?:011|5[0-9][0-9])[0-9]{12}|3[47][0-9]{13}|3(?:0[0-5]|[68][0-9])[0-9]{11}|(?:2131|1800|35d{3})d{11})$ with any non digit characters mixed in- ssn: a U.S. social security number following the regex ^d{3}[- ]?d{2}[- ]?d{4}$- hexcolor: an hexadecimal color code like '#FFFFFF' following the regex ^#?([0-9a-fA-F]{3}|[0-9a-fA-F]{6})$- rgbcolor: an RGB color code like rgb like 'rgb(255,255,255)'- byte: base64 encoded binary data- password: any kind of string- date: a date string like '2006-01-02' as defined by full-date in RFC3339- duration: a duration string like '22 ns' as parsed by Golang time.ParseDuration or compatible with Scala duration format- datetime: a date time string like '2014-12-15T19:30:20.000Z' as defined by date-time in RFC3339. +- `id` (String) +- `max_items` (Number) +- `max_length` (Number) +- `max_properties` (Number) +- `maximum` (String) A Number represents a JSON number literal. +- `min_items` (Number) +- `min_length` (Number) +- `min_properties` (Number) +- `minimum` (String) A Number represents a JSON number literal. +- `multiple_of` (String) A Number represents a JSON number literal. +- `nullable` (Boolean) +- `pattern` (String) +- `title` (String) +- `type` (String) +- `unique_items` (Boolean) +- `x_descriptors` (List of String) XDescriptors is a list of extended properties that trigger a custom behavior in external systems + + + + +### Nested Schema for `spec.versions.sources` + +Optional: + +- `compression` (Boolean) if the content is compressed (base64 encrypted) +- `content` (String) the source code (plain text) +- `content_key` (String) the confimap key holding the source content +- `content_ref` (String) the confimap reference holding the source content +- `content_type` (String) the content type (tipically text or binary) +- `from_kamelet` (Boolean) True if the spec is generated from a Kamelet +- `interceptors` (List of String) Interceptors are optional identifiers the org.apache.camel.k.RoutesLoaderuses to pre/post process sources +- `language` (String) specify which is the language (Camel DSL) used to interpret this source code +- `loader` (String) Loader is an optional id of the org.apache.camel.k.RoutesLoader that willinterpret this source at runtime +- `name` (String) the name of the specification +- `path` (String) the path where the file is stored +- `property_names` (List of String) List of property names defined in the source (e.g. if type is 'template') +- `raw_content` (String) the source code (binary) +- `type` (String) Type defines the kind of source described by this object + + + +### Nested Schema for `spec.versions.types` + +Optional: + +- `media_type` (String) media type as expected for HTTP media types (ie, application/json) +- `schema` (Attributes) the expected schema for the event (see [below for nested schema](#nestedatt--spec--versions--types--schema)) + + +### Nested Schema for `spec.versions.types.schema` + +Optional: + +- `description` (String) +- `dollarschema` (String) JSONSchemaURL represents a schema url. +- `example` (Map of String) JSON represents any valid JSON value.These types are supported: bool, int64, float64, string, []interface{}, map[string]interface{} and nil. +- `external_docs` (Attributes) ExternalDocumentation allows referencing an external resource for extended documentation. (see [below for nested schema](#nestedatt--spec--versions--types--schema--external_docs)) +- `id` (String) +- `properties` (Attributes) (see [below for nested schema](#nestedatt--spec--versions--types--schema--properties)) +- `required` (List of String) +- `title` (String) +- `type` (String) + + +### Nested Schema for `spec.versions.types.schema.external_docs` + +Optional: + +- `description` (String) +- `url` (String) + + + +### Nested Schema for `spec.versions.types.schema.properties` + +Optional: + +- `default` (Map of String) default is a default value for undefined object fields. +- `deprecated` (Boolean) +- `description` (String) +- `enum` (List of String) +- `example` (Map of String) JSON represents any valid JSON value.These types are supported: bool, int64, float64, string, []interface{}, map[string]interface{} and nil. +- `exclusive_maximum` (Boolean) +- `exclusive_minimum` (Boolean) +- `format` (String) format is an OpenAPI v3 format string. Unknown formats are ignored. The following formats are validated:- bsonobjectid: a bson object ID, i.e. a 24 characters hex string- uri: an URI as parsed by Golang net/url.ParseRequestURI- email: an email address as parsed by Golang net/mail.ParseAddress- hostname: a valid representation for an Internet host name, as defined by RFC 1034, section 3.1 [RFC1034].- ipv4: an IPv4 IP as parsed by Golang net.ParseIP- ipv6: an IPv6 IP as parsed by Golang net.ParseIP- cidr: a CIDR as parsed by Golang net.ParseCIDR- mac: a MAC address as parsed by Golang net.ParseMAC- uuid: an UUID that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?[0-9a-f]{4}-?[0-9a-f]{4}-?[0-9a-f]{12}$- uuid3: an UUID3 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?3[0-9a-f]{3}-?[0-9a-f]{4}-?[0-9a-f]{12}$- uuid4: an UUID4 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?4[0-9a-f]{3}-?[89ab][0-9a-f]{3}-?[0-9a-f]{12}$- uuid5: an UUID5 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?5[0-9a-f]{3}-?[89ab][0-9a-f]{3}-?[0-9a-f]{12}$- isbn: an ISBN10 or ISBN13 number string like '0321751043' or '978-0321751041'- isbn10: an ISBN10 number string like '0321751043'- isbn13: an ISBN13 number string like '978-0321751041'- creditcard: a credit card number defined by the regex ^(?:4[0-9]{12}(?:[0-9]{3})?|5[1-5][0-9]{14}|6(?:011|5[0-9][0-9])[0-9]{12}|3[47][0-9]{13}|3(?:0[0-5]|[68][0-9])[0-9]{11}|(?:2131|1800|35d{3})d{11})$ with any non digit characters mixed in- ssn: a U.S. social security number following the regex ^d{3}[- ]?d{2}[- ]?d{4}$- hexcolor: an hexadecimal color code like '#FFFFFF' following the regex ^#?([0-9a-fA-F]{3}|[0-9a-fA-F]{6})$- rgbcolor: an RGB color code like rgb like 'rgb(255,255,255)'- byte: base64 encoded binary data- password: any kind of string- date: a date string like '2006-01-02' as defined by full-date in RFC3339- duration: a duration string like '22 ns' as parsed by Golang time.ParseDuration or compatible with Scala duration format- datetime: a date time string like '2014-12-15T19:30:20.000Z' as defined by date-time in RFC3339. +- `id` (String) +- `max_items` (Number) +- `max_length` (Number) +- `max_properties` (Number) +- `maximum` (String) A Number represents a JSON number literal. +- `min_items` (Number) +- `min_length` (Number) +- `min_properties` (Number) +- `minimum` (String) A Number represents a JSON number literal. +- `multiple_of` (String) A Number represents a JSON number literal. +- `nullable` (Boolean) +- `pattern` (String) +- `title` (String) +- `type` (String) +- `unique_items` (Boolean) +- `x_descriptors` (List of String) XDescriptors is a list of extended properties that trigger a custom behavior in external systems diff --git a/docs/data-sources/camel_apache_org_pipe_v1_manifest.md b/docs/data-sources/camel_apache_org_pipe_v1_manifest.md index ad7aa1d49..cc011e5a1 100644 --- a/docs/data-sources/camel_apache_org_pipe_v1_manifest.md +++ b/docs/data-sources/camel_apache_org_pipe_v1_manifest.md @@ -2949,6 +2949,7 @@ Optional: - `service` (Attributes) The configuration of Service trait (see [below for nested schema](#nestedatt--spec--integration--traits--service)) - `service_binding` (Attributes) The configuration of Service Binding trait (see [below for nested schema](#nestedatt--spec--integration--traits--service_binding)) - `strimzi` (Attributes) Deprecated: for backward compatibility. (see [below for nested schema](#nestedatt--spec--integration--traits--strimzi)) +- `telemetry` (Attributes) The configuration of Telemetry trait (see [below for nested schema](#nestedatt--spec--integration--traits--telemetry)) - `threescale` (Attributes) Deprecated: for backward compatibility. (see [below for nested schema](#nestedatt--spec--integration--traits--threescale)) - `toleration` (Attributes) The configuration of Toleration trait (see [below for nested schema](#nestedatt--spec--integration--traits--toleration)) - `tracing` (Attributes) Deprecated: for backward compatibility. (see [below for nested schema](#nestedatt--spec--integration--traits--tracing)) @@ -3474,6 +3475,21 @@ Required: - `configuration` (Map of String) TraitConfiguration parameters configuration + +### Nested Schema for `spec.integration.traits.telemetry` + +Optional: + +- `auto` (Boolean) Enables automatic configuration of the trait, including automatic discovery of the telemetry endpoint. +- `configuration` (Map of String) Legacy trait configuration parameters.Deprecated: for backward compatibility. +- `enabled` (Boolean) Can be used to enable or disable a trait. All traits share this common property. +- `endpoint` (String) The target endpoint of the Telemetry service (automatically discovered by default) +- `sampler` (String) The sampler of the telemetry used for tracing (default 'on') +- `sampler_parent_based` (Boolean) The sampler of the telemetry used for tracing is parent based (default 'true') +- `sampler_ratio` (String) The sampler ratio of the telemetry used for tracing +- `service_name` (String) The name of the service that publishes telemetry data (defaults to the integration name) + + ### Nested Schema for `spec.integration.traits.threescale` diff --git a/docs/data-sources/canaries_flanksource_com_component_v1_manifest.md b/docs/data-sources/canaries_flanksource_com_component_v1_manifest.md index a0c33fb7c..256c43b88 100644 --- a/docs/data-sources/canaries_flanksource_com_component_v1_manifest.md +++ b/docs/data-sources/canaries_flanksource_com_component_v1_manifest.md @@ -61,6 +61,7 @@ Optional: - `external_id` (String) - `for_each` (Map of String) Only applies when using lookup, when specified the components and propertiesspecified under ForEach will be templated using the components returned by the lookup${.properties} can be used to reference the properties of the component${.component} can be used to reference the component itself - `health` (String) +- `health_expr` (String) healthExpr allows defining a cel expression to evaluate the health of a componentbased on the summary. - `hidden` (Boolean) If set to true, do not display in UI - `icon` (String) - `id` (Attributes) (see [below for nested schema](#nestedatt--spec--id)) @@ -76,7 +77,7 @@ Optional: - `properties` (Map of String) - `relationships` (Attributes List) (see [below for nested schema](#nestedatt--spec--relationships)) - `selectors` (Attributes List) Lookup and associcate other components with this component (see [below for nested schema](#nestedatt--spec--selectors)) -- `status_expr` (String) statusExpr allows defining a cel expression to evaluate the status of a componentbased on the summary and the related config +- `status_expr` (String) statusExpr allows defining a cel expression to evaluate the status of a componentbased on the summary. - `summary` (Attributes) Summary is the health, incidents, insights & check summary (see [below for nested schema](#nestedatt--spec--summary)) - `tooltip` (String) - `type` (String) The type of component, e.g. service, API, website, library, database, etc. diff --git a/docs/data-sources/canaries_flanksource_com_topology_v1_manifest.md b/docs/data-sources/canaries_flanksource_com_topology_v1_manifest.md index bcc8e7c31..8b8b7d8bb 100644 --- a/docs/data-sources/canaries_flanksource_com_topology_v1_manifest.md +++ b/docs/data-sources/canaries_flanksource_com_topology_v1_manifest.md @@ -58,6 +58,7 @@ Optional: - `components` (Attributes List) (see [below for nested schema](#nestedatt--spec--components)) - `configs` (Attributes List) Lookup and associate config items with this component (see [below for nested schema](#nestedatt--spec--configs)) - `group_by` (Attributes) Specify the catalog tag (& optionally the tag selector) to groupthe topology. (see [below for nested schema](#nestedatt--spec--group_by)) +- `health_expr` (String) statusExpr allows defining a cel expression to evaluate the status of a componentbased on the summary. - `icon` (String) - `id` (Attributes) (see [below for nested schema](#nestedatt--spec--id)) - `label` (String) @@ -65,7 +66,7 @@ Optional: - `properties` (Attributes List) Properties are created once the full component tree is created, property lookup functionscan return a map of coomponent name => properties to allow for bulk property lookupsbeing applied to multiple components in the tree (see [below for nested schema](#nestedatt--spec--properties)) - `push` (Attributes) Agent will push topology to specified path (see [below for nested schema](#nestedatt--spec--push)) - `schedule` (String) -- `status_expr` (String) statusExpr allows defining a cel expression to evaluate the status of a componentbased on the summary and the related config +- `status_expr` (String) statusExpr allows defining a cel expression to evaluate the status of a componentbased on the summary. - `text` (String) - `tooltip` (String) - `type` (String) @@ -81,6 +82,7 @@ Optional: - `external_id` (String) - `for_each` (Map of String) Only applies when using lookup, when specified the components and propertiesspecified under ForEach will be templated using the components returned by the lookup${.properties} can be used to reference the properties of the component${.component} can be used to reference the component itself - `health` (String) +- `health_expr` (String) healthExpr allows defining a cel expression to evaluate the health of a componentbased on the summary. - `hidden` (Boolean) If set to true, do not display in UI - `icon` (String) - `id` (Attributes) (see [below for nested schema](#nestedatt--spec--components--id)) @@ -96,7 +98,7 @@ Optional: - `properties` (Map of String) - `relationships` (Attributes List) (see [below for nested schema](#nestedatt--spec--components--relationships)) - `selectors` (Attributes List) Lookup and associcate other components with this component (see [below for nested schema](#nestedatt--spec--components--selectors)) -- `status_expr` (String) statusExpr allows defining a cel expression to evaluate the status of a componentbased on the summary and the related config +- `status_expr` (String) statusExpr allows defining a cel expression to evaluate the status of a componentbased on the summary. - `summary` (Attributes) Summary is the health, incidents, insights & check summary (see [below for nested schema](#nestedatt--spec--components--summary)) - `tooltip` (String) - `type` (String) The type of component, e.g. service, API, website, library, database, etc. diff --git a/docs/data-sources/chainsaw_kyverno_io_configuration_v1alpha1_manifest.md b/docs/data-sources/chainsaw_kyverno_io_configuration_v1alpha1_manifest.md index ac9b25baf..cf13bbdf7 100644 --- a/docs/data-sources/chainsaw_kyverno_io_configuration_v1alpha1_manifest.md +++ b/docs/data-sources/chainsaw_kyverno_io_configuration_v1alpha1_manifest.md @@ -106,6 +106,7 @@ Optional: - `outputs` (Attributes List) Outputs defines output bindings. (see [below for nested schema](#nestedatt--spec--catch--command--outputs)) - `skip_log_output` (Boolean) SkipLogOutput removes the output from the command. Useful for sensitive logs or to reduce noise. - `timeout` (String) Timeout for the operation. Overrides the global timeout set in the Configuration. +- `work_dir` (String) WorkDir is the working directory for command. ### Nested Schema for `spec.catch.command.bindings` @@ -344,6 +345,7 @@ Optional: - `outputs` (Attributes List) Outputs defines output bindings. (see [below for nested schema](#nestedatt--spec--catch--script--outputs)) - `skip_log_output` (Boolean) SkipLogOutput removes the output from the command. Useful for sensitive logs or to reduce noise. - `timeout` (String) Timeout for the operation. Overrides the global timeout set in the Configuration. +- `work_dir` (String) WorkDir is the working directory for script. ### Nested Schema for `spec.catch.script.bindings` diff --git a/docs/data-sources/chainsaw_kyverno_io_configuration_v1alpha2_manifest.md b/docs/data-sources/chainsaw_kyverno_io_configuration_v1alpha2_manifest.md index 559638c83..3727499df 100644 --- a/docs/data-sources/chainsaw_kyverno_io_configuration_v1alpha2_manifest.md +++ b/docs/data-sources/chainsaw_kyverno_io_configuration_v1alpha2_manifest.md @@ -143,6 +143,7 @@ Optional: - `outputs` (Attributes List) Outputs defines output bindings. (see [below for nested schema](#nestedatt--spec--error--catch--command--outputs)) - `skip_log_output` (Boolean) SkipLogOutput removes the output from the command. Useful for sensitive logs or to reduce noise. - `timeout` (String) Timeout for the operation. Overrides the global timeout set in the Configuration. +- `work_dir` (String) WorkDir is the working directory for command. ### Nested Schema for `spec.error.catch.command.bindings` @@ -381,6 +382,7 @@ Optional: - `outputs` (Attributes List) Outputs defines output bindings. (see [below for nested schema](#nestedatt--spec--error--catch--script--outputs)) - `skip_log_output` (Boolean) SkipLogOutput removes the output from the command. Useful for sensitive logs or to reduce noise. - `timeout` (String) Timeout for the operation. Overrides the global timeout set in the Configuration. +- `work_dir` (String) WorkDir is the working directory for script. ### Nested Schema for `spec.error.catch.script.bindings` diff --git a/docs/data-sources/chainsaw_kyverno_io_test_v1alpha1_manifest.md b/docs/data-sources/chainsaw_kyverno_io_test_v1alpha1_manifest.md index e53899aad..f00ec2edb 100644 --- a/docs/data-sources/chainsaw_kyverno_io_test_v1alpha1_manifest.md +++ b/docs/data-sources/chainsaw_kyverno_io_test_v1alpha1_manifest.md @@ -138,6 +138,7 @@ Optional: - `outputs` (Attributes List) Outputs defines output bindings. (see [below for nested schema](#nestedatt--spec--steps--catch--command--outputs)) - `skip_log_output` (Boolean) SkipLogOutput removes the output from the command. Useful for sensitive logs or to reduce noise. - `timeout` (String) Timeout for the operation. Overrides the global timeout set in the Configuration. +- `work_dir` (String) WorkDir is the working directory for command. ### Nested Schema for `spec.steps.catch.command.bindings` @@ -376,6 +377,7 @@ Optional: - `outputs` (Attributes List) Outputs defines output bindings. (see [below for nested schema](#nestedatt--spec--steps--catch--script--outputs)) - `skip_log_output` (Boolean) SkipLogOutput removes the output from the command. Useful for sensitive logs or to reduce noise. - `timeout` (String) Timeout for the operation. Overrides the global timeout set in the Configuration. +- `work_dir` (String) WorkDir is the working directory for script. ### Nested Schema for `spec.steps.catch.script.bindings` @@ -530,6 +532,7 @@ Optional: - `outputs` (Attributes List) Outputs defines output bindings. (see [below for nested schema](#nestedatt--spec--steps--cleanup--command--outputs)) - `skip_log_output` (Boolean) SkipLogOutput removes the output from the command. Useful for sensitive logs or to reduce noise. - `timeout` (String) Timeout for the operation. Overrides the global timeout set in the Configuration. +- `work_dir` (String) WorkDir is the working directory for command. ### Nested Schema for `spec.steps.cleanup.command.bindings` @@ -768,6 +771,7 @@ Optional: - `outputs` (Attributes List) Outputs defines output bindings. (see [below for nested schema](#nestedatt--spec--steps--cleanup--script--outputs)) - `skip_log_output` (Boolean) SkipLogOutput removes the output from the command. Useful for sensitive logs or to reduce noise. - `timeout` (String) Timeout for the operation. Overrides the global timeout set in the Configuration. +- `work_dir` (String) WorkDir is the working directory for script. ### Nested Schema for `spec.steps.cleanup.script.bindings` @@ -934,6 +938,7 @@ Optional: - `outputs` (Attributes List) Outputs defines output bindings. (see [below for nested schema](#nestedatt--spec--steps--finally--command--outputs)) - `skip_log_output` (Boolean) SkipLogOutput removes the output from the command. Useful for sensitive logs or to reduce noise. - `timeout` (String) Timeout for the operation. Overrides the global timeout set in the Configuration. +- `work_dir` (String) WorkDir is the working directory for command. ### Nested Schema for `spec.steps.finally.command.bindings` @@ -1172,6 +1177,7 @@ Optional: - `outputs` (Attributes List) Outputs defines output bindings. (see [below for nested schema](#nestedatt--spec--steps--finally--script--outputs)) - `skip_log_output` (Boolean) SkipLogOutput removes the output from the command. Useful for sensitive logs or to reduce noise. - `timeout` (String) Timeout for the operation. Overrides the global timeout set in the Configuration. +- `work_dir` (String) WorkDir is the working directory for script. ### Nested Schema for `spec.steps.finally.script.bindings` @@ -1445,6 +1451,7 @@ Optional: - `outputs` (Attributes List) Outputs defines output bindings. (see [below for nested schema](#nestedatt--spec--steps--try--command--outputs)) - `skip_log_output` (Boolean) SkipLogOutput removes the output from the command. Useful for sensitive logs or to reduce noise. - `timeout` (String) Timeout for the operation. Overrides the global timeout set in the Configuration. +- `work_dir` (String) WorkDir is the working directory for command. ### Nested Schema for `spec.steps.try.command.bindings` @@ -1889,6 +1896,7 @@ Optional: - `outputs` (Attributes List) Outputs defines output bindings. (see [below for nested schema](#nestedatt--spec--steps--try--script--outputs)) - `skip_log_output` (Boolean) SkipLogOutput removes the output from the command. Useful for sensitive logs or to reduce noise. - `timeout` (String) Timeout for the operation. Overrides the global timeout set in the Configuration. +- `work_dir` (String) WorkDir is the working directory for script. ### Nested Schema for `spec.steps.try.script.bindings` @@ -2124,6 +2132,7 @@ Optional: - `outputs` (Attributes List) Outputs defines output bindings. (see [below for nested schema](#nestedatt--spec--catch--command--outputs)) - `skip_log_output` (Boolean) SkipLogOutput removes the output from the command. Useful for sensitive logs or to reduce noise. - `timeout` (String) Timeout for the operation. Overrides the global timeout set in the Configuration. +- `work_dir` (String) WorkDir is the working directory for command. ### Nested Schema for `spec.catch.command.bindings` @@ -2362,6 +2371,7 @@ Optional: - `outputs` (Attributes List) Outputs defines output bindings. (see [below for nested schema](#nestedatt--spec--catch--script--outputs)) - `skip_log_output` (Boolean) SkipLogOutput removes the output from the command. Useful for sensitive logs or to reduce noise. - `timeout` (String) Timeout for the operation. Overrides the global timeout set in the Configuration. +- `work_dir` (String) WorkDir is the working directory for script. ### Nested Schema for `spec.catch.script.bindings` diff --git a/docs/data-sources/chainsaw_kyverno_io_test_v1alpha2_manifest.md b/docs/data-sources/chainsaw_kyverno_io_test_v1alpha2_manifest.md index 83f1d487a..732f331af 100644 --- a/docs/data-sources/chainsaw_kyverno_io_test_v1alpha2_manifest.md +++ b/docs/data-sources/chainsaw_kyverno_io_test_v1alpha2_manifest.md @@ -1834,6 +1834,7 @@ Optional: - `outputs` (Attributes List) Outputs defines output bindings. (see [below for nested schema](#nestedatt--spec--error--catch--command--outputs)) - `skip_log_output` (Boolean) SkipLogOutput removes the output from the command. Useful for sensitive logs or to reduce noise. - `timeout` (String) Timeout for the operation. Overrides the global timeout set in the Configuration. +- `work_dir` (String) WorkDir is the working directory for command. ### Nested Schema for `spec.error.catch.command.bindings` @@ -2072,6 +2073,7 @@ Optional: - `outputs` (Attributes List) Outputs defines output bindings. (see [below for nested schema](#nestedatt--spec--error--catch--script--outputs)) - `skip_log_output` (Boolean) SkipLogOutput removes the output from the command. Useful for sensitive logs or to reduce noise. - `timeout` (String) Timeout for the operation. Overrides the global timeout set in the Configuration. +- `work_dir` (String) WorkDir is the working directory for script. ### Nested Schema for `spec.error.catch.script.bindings` diff --git a/docs/data-sources/cloudfront_services_k8s_aws_response_headers_policy_v1alpha1_manifest.md b/docs/data-sources/cloudfront_services_k8s_aws_response_headers_policy_v1alpha1_manifest.md index 0b809101f..f7e41227e 100644 --- a/docs/data-sources/cloudfront_services_k8s_aws_response_headers_policy_v1alpha1_manifest.md +++ b/docs/data-sources/cloudfront_services_k8s_aws_response_headers_policy_v1alpha1_manifest.md @@ -160,7 +160,7 @@ Optional: - `frame_options` (Attributes) Determines whether CloudFront includes the X-Frame-Options HTTP responseheader and the header's value.For more information about the X-Frame-Options HTTP response header, seeX-Frame-Options (https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Frame-Options)in the MDN Web Docs. (see [below for nested schema](#nestedatt--spec--response_headers_policy_config--security_headers_config--frame_options)) - `referrer_policy` (Attributes) Determines whether CloudFront includes the Referrer-Policy HTTP responseheader and the header's value.For more information about the Referrer-Policy HTTP response header, seeReferrer-Policy (https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referrer-Policy)in the MDN Web Docs. (see [below for nested schema](#nestedatt--spec--response_headers_policy_config--security_headers_config--referrer_policy)) - `strict_transport_security` (Attributes) Determines whether CloudFront includes the Strict-Transport-Security HTTPresponse header and the header's value.For more information about the Strict-Transport-Security HTTP response header,see Strict-Transport-Security (https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Strict-Transport-Security)in the MDN Web Docs. (see [below for nested schema](#nestedatt--spec--response_headers_policy_config--security_headers_config--strict_transport_security)) -- `x_ss_protection` (Attributes) Determines whether CloudFront includes the X-XSS-Protection HTTP responseheader and the header's value.For more information about the X-XSS-Protection HTTP response header, seeX-XSS-Protection (https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-XSS-Protection)in the MDN Web Docs. (see [below for nested schema](#nestedatt--spec--response_headers_policy_config--security_headers_config--x_ss_protection)) +- `xss_protection` (Attributes) Determines whether CloudFront includes the X-XSS-Protection HTTP responseheader and the header's value.For more information about the X-XSS-Protection HTTP response header, seeX-XSS-Protection (https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-XSS-Protection)in the MDN Web Docs. (see [below for nested schema](#nestedatt--spec--response_headers_policy_config--security_headers_config--xss_protection)) ### Nested Schema for `spec.response_headers_policy_config.security_headers_config.content_security_policy` @@ -208,8 +208,8 @@ Optional: - `preload` (Boolean) - -### Nested Schema for `spec.response_headers_policy_config.security_headers_config.x_ss_protection` + +### Nested Schema for `spec.response_headers_policy_config.security_headers_config.xss_protection` Optional: diff --git a/docs/data-sources/dataprotection_kubeblocks_io_action_set_v1alpha1_manifest.md b/docs/data-sources/dataprotection_kubeblocks_io_action_set_v1alpha1_manifest.md index 4eb1e8ca8..5f258788e 100644 --- a/docs/data-sources/dataprotection_kubeblocks_io_action_set_v1alpha1_manifest.md +++ b/docs/data-sources/dataprotection_kubeblocks_io_action_set_v1alpha1_manifest.md @@ -186,6 +186,7 @@ Required: Optional: +- `base_backup_required` (Boolean) Determines if a base backup is required during restoration. - `post_ready` (Attributes List) Specifies the actions that should be executed after the data has been prepared and is ready for restoration. (see [below for nested schema](#nestedatt--spec--restore--post_ready)) - `prepare_data` (Attributes) Specifies the action required to prepare data for restoration. (see [below for nested schema](#nestedatt--spec--restore--prepare_data)) diff --git a/docs/data-sources/enterprise_gloo_solo_io_auth_config_v1_manifest.md b/docs/data-sources/enterprise_gloo_solo_io_auth_config_v1_manifest.md index 6bf51e42e..0c7d81699 100644 --- a/docs/data-sources/enterprise_gloo_solo_io_auth_config_v1_manifest.md +++ b/docs/data-sources/enterprise_gloo_solo_io_auth_config_v1_manifest.md @@ -570,6 +570,7 @@ Optional: - `discovery_poll_interval` (String) - `dynamic_metadata_from_claims` (Map of String) - `end_session_properties` (Attributes) (see [below for nested schema](#nestedatt--spec--configs--oauth2--oidc_authorization_code--end_session_properties)) +- `front_channel_logout` (Attributes) (see [below for nested schema](#nestedatt--spec--configs--oauth2--oidc_authorization_code--front_channel_logout)) - `headers` (Attributes) (see [below for nested schema](#nestedatt--spec--configs--oauth2--oidc_authorization_code--headers)) - `identity_token` (Attributes) (see [below for nested schema](#nestedatt--spec--configs--oauth2--oidc_authorization_code--identity_token)) - `jwks_cache_refresh_policy` (Attributes) (see [below for nested schema](#nestedatt--spec--configs--oauth2--oidc_authorization_code--jwks_cache_refresh_policy)) @@ -721,6 +722,14 @@ Optional: - `method_type` (String) + +### Nested Schema for `spec.configs.oauth2.oidc_authorization_code.front_channel_logout` + +Optional: + +- `path` (String) + + ### Nested Schema for `spec.configs.oauth2.oidc_authorization_code.headers` diff --git a/docs/data-sources/flink_apache_org_flink_deployment_v1beta1_manifest.md b/docs/data-sources/flink_apache_org_flink_deployment_v1beta1_manifest.md index feeb793a7..6e4206179 100644 --- a/docs/data-sources/flink_apache_org_flink_deployment_v1beta1_manifest.md +++ b/docs/data-sources/flink_apache_org_flink_deployment_v1beta1_manifest.md @@ -99,7 +99,6 @@ Optional: - `args` (List of String) - `checkpoint_trigger_nonce` (Number) - `entry_class` (String) -- `flink_state_snapshot_reference` (Attributes) (see [below for nested schema](#nestedatt--spec--job--flink_state_snapshot_reference)) - `initial_savepoint_path` (String) - `jar_uri` (String) - `parallelism` (Number) @@ -108,16 +107,6 @@ Optional: - `state` (String) - `upgrade_mode` (String) - -### Nested Schema for `spec.job.flink_state_snapshot_reference` - -Optional: - -- `name` (String) -- `namespace` (String) -- `path` (String) - - ### Nested Schema for `spec.job_manager` diff --git a/docs/data-sources/flink_apache_org_flink_session_job_v1beta1_manifest.md b/docs/data-sources/flink_apache_org_flink_session_job_v1beta1_manifest.md index 9c23216fc..3e47c811a 100644 --- a/docs/data-sources/flink_apache_org_flink_session_job_v1beta1_manifest.md +++ b/docs/data-sources/flink_apache_org_flink_session_job_v1beta1_manifest.md @@ -69,7 +69,6 @@ Optional: - `args` (List of String) - `checkpoint_trigger_nonce` (Number) - `entry_class` (String) -- `flink_state_snapshot_reference` (Attributes) (see [below for nested schema](#nestedatt--spec--job--flink_state_snapshot_reference)) - `initial_savepoint_path` (String) - `jar_uri` (String) - `parallelism` (Number) @@ -77,12 +76,3 @@ Optional: - `savepoint_trigger_nonce` (Number) - `state` (String) - `upgrade_mode` (String) - - -### Nested Schema for `spec.job.flink_state_snapshot_reference` - -Optional: - -- `name` (String) -- `namespace` (String) -- `path` (String) diff --git a/docs/data-sources/flows_netobserv_io_flow_collector_v1beta1_manifest.md b/docs/data-sources/flows_netobserv_io_flow_collector_v1beta1_manifest.md index a4e3cb629..6d0877950 100644 --- a/docs/data-sources/flows_netobserv_io_flow_collector_v1beta1_manifest.md +++ b/docs/data-sources/flows_netobserv_io_flow_collector_v1beta1_manifest.md @@ -82,7 +82,7 @@ Optional: - `cache_max_flows` (Number) 'cacheMaxFlows' is the max number of flows in an aggregate; when reached, the reporter sends the flows.Increasing 'cacheMaxFlows' and 'cacheActiveTimeout' can decrease the network traffic overhead and the CPU load,however you can expect higher memory consumption and an increased latency in the flow collection. - `debug` (Attributes) 'debug' allows setting some aspects of the internal configuration of the eBPF agent.This section is aimed exclusively for debugging and fine-grained performance optimizations,such as 'GOGC' and 'GOMAXPROCS' env vars. Set these values at your own risk. (see [below for nested schema](#nestedatt--spec--agent--ebpf--debug)) - `exclude_interfaces` (List of String) 'excludeInterfaces' contains the interface names that are excluded from flow tracing.An entry enclosed by slashes, such as '/br-/', is matched as a regular expression.Otherwise it is matched as a case-sensitive string. -- `features` (List of String) List of additional features to enable. They are all disabled by default. Enabling additional features might have performance impacts. Possible values are:
- 'PacketDrop': enable the packets drop flows logging feature. This feature requires mountingthe kernel debug filesystem, so the eBPF pod has to run as privileged.If the 'spec.agent.ebpf.privileged' parameter is not set, an error is reported.
- 'DNSTracking': enable the DNS tracking feature.
- 'FlowRTT': enable flow latency (sRTT) extraction in the eBPF agent from TCP traffic.
+- `features` (List of String) List of additional features to enable. They are all disabled by default. Enabling additional features might have performance impacts. Possible values are:
- 'PacketDrop': enable the packets drop flows logging feature. This feature requires mountingthe kernel debug filesystem, so the eBPF pod has to run as privileged.If the 'spec.agent.ebpf.privileged' parameter is not set, an error is reported.
- 'DNSTracking': enable the DNS tracking feature.
- 'FlowRTT': enable flow latency (sRTT) extraction in the eBPF agent from TCP traffic.
- 'NetworkEvents': enable the Network events monitoring feature. This feature requires mountingthe kernel debug filesystem, so the eBPF pod has to run as privileged. - `flow_filter` (Attributes) 'flowFilter' defines the eBPF agent configuration regarding flow filtering (see [below for nested schema](#nestedatt--spec--agent--ebpf--flow_filter)) - `image_pull_policy` (String) 'imagePullPolicy' is the Kubernetes pull policy for the image defined above - `interfaces` (List of String) 'interfaces' contains the interface names from where flows are collected. If empty, the agentfetches all the interfaces in the system, excepting the ones listed in ExcludeInterfaces.An entry enclosed by slashes, such as '/br-/', is matched as a regular expression.Otherwise it is matched as a case-sensitive string. diff --git a/docs/data-sources/flows_netobserv_io_flow_collector_v1beta2_manifest.md b/docs/data-sources/flows_netobserv_io_flow_collector_v1beta2_manifest.md index 784e78946..cddeb6a0b 100644 --- a/docs/data-sources/flows_netobserv_io_flow_collector_v1beta2_manifest.md +++ b/docs/data-sources/flows_netobserv_io_flow_collector_v1beta2_manifest.md @@ -83,7 +83,7 @@ Optional: - `cache_active_timeout` (String) 'cacheActiveTimeout' is the max period during which the reporter aggregates flows before sending.Increasing 'cacheMaxFlows' and 'cacheActiveTimeout' can decrease the network traffic overhead and the CPU load,however you can expect higher memory consumption and an increased latency in the flow collection. - `cache_max_flows` (Number) 'cacheMaxFlows' is the max number of flows in an aggregate; when reached, the reporter sends the flows.Increasing 'cacheMaxFlows' and 'cacheActiveTimeout' can decrease the network traffic overhead and the CPU load,however you can expect higher memory consumption and an increased latency in the flow collection. - `exclude_interfaces` (List of String) 'excludeInterfaces' contains the interface names that are excluded from flow tracing.An entry enclosed by slashes, such as '/br-/', is matched as a regular expression.Otherwise it is matched as a case-sensitive string. -- `features` (List of String) List of additional features to enable. They are all disabled by default. Enabling additional features might have performance impacts. Possible values are:
- 'PacketDrop': enable the packets drop flows logging feature. This feature requires mountingthe kernel debug filesystem, so the eBPF pod has to run as privileged.If the 'spec.agent.ebpf.privileged' parameter is not set, an error is reported.
- 'DNSTracking': enable the DNS tracking feature.
- 'FlowRTT': enable flow latency (sRTT) extraction in the eBPF agent from TCP traffic.
+- `features` (List of String) List of additional features to enable. They are all disabled by default. Enabling additional features might have performance impacts. Possible values are:
- 'PacketDrop': enable the packets drop flows logging feature. This feature requires mountingthe kernel debug filesystem, so the eBPF pod has to run as privileged.If the 'spec.agent.ebpf.privileged' parameter is not set, an error is reported.
- 'DNSTracking': enable the DNS tracking feature.
- 'FlowRTT': enable flow latency (sRTT) extraction in the eBPF agent from TCP traffic.
- 'NetworkEvents': enable the Network events monitoring feature. This feature requires mountingthe kernel debug filesystem, so the eBPF pod has to run as privileged. - `flow_filter` (Attributes) 'flowFilter' defines the eBPF agent configuration regarding flow filtering. (see [below for nested schema](#nestedatt--spec--agent--ebpf--flow_filter)) - `image_pull_policy` (String) 'imagePullPolicy' is the Kubernetes pull policy for the image defined above - `interfaces` (List of String) 'interfaces' contains the interface names from where flows are collected. If empty, the agentfetches all the interfaces in the system, excepting the ones listed in 'excludeInterfaces'.An entry enclosed by slashes, such as '/br-/', is matched as a regular expression.Otherwise it is matched as a case-sensitive string. diff --git a/docs/data-sources/fluentbit_fluent_io_cluster_input_v1alpha2_manifest.md b/docs/data-sources/fluentbit_fluent_io_cluster_input_v1alpha2_manifest.md index 2b6b153a1..4ea76ec8d 100644 --- a/docs/data-sources/fluentbit_fluent_io_cluster_input_v1alpha2_manifest.md +++ b/docs/data-sources/fluentbit_fluent_io_cluster_input_v1alpha2_manifest.md @@ -58,6 +58,7 @@ Optional: - `collectd` (Attributes) Collectd defines the Collectd input plugin configuration (see [below for nested schema](#nestedatt--spec--collectd)) - `custom_plugin` (Attributes) CustomPlugin defines Custom Input configuration. (see [below for nested schema](#nestedatt--spec--custom_plugin)) - `dummy` (Attributes) Dummy defines Dummy Input configuration. (see [below for nested schema](#nestedatt--spec--dummy)) +- `exec_wasi` (Attributes) ExecWasi defines the exec wasi input plugin configuration (see [below for nested schema](#nestedatt--spec--exec_wasi)) - `fluent_bit_metrics` (Attributes) FluentBitMetrics defines Fluent Bit Metrics Input configuration. (see [below for nested schema](#nestedatt--spec--fluent_bit_metrics)) - `forward` (Attributes) Forward defines forward input plugin configuration (see [below for nested schema](#nestedatt--spec--forward)) - `http` (Attributes) HTTP defines the HTTP input plugin configuration (see [below for nested schema](#nestedatt--spec--http)) @@ -106,6 +107,22 @@ Optional: - `tag` (String) Tag name associated to all records comming from this plugin. + +### Nested Schema for `spec.exec_wasi` + +Optional: + +- `accessible_paths` (List of String) Specify the whitelist of paths to be able to access paths from WASM programs. +- `buf_size` (String) Size of the buffer (check unit sizes for allowed values) +- `interval_n_sec` (Number) Polling interval (nanoseconds). +- `interval_sec` (Number) Polling interval (seconds). +- `parser` (String) Specify the name of a parser to interpret the entry as a structured message. +- `threaded` (Boolean) Indicates whether to run this input in its own thread. Default: false. +- `wasi_path` (String) The place of a WASM program file. +- `wasm_heap_size` (String) +- `wasm_stack_size` (String) Size of the stack size of Wasm execution. Review unit sizes for allowed values. + + ### Nested Schema for `spec.fluent_bit_metrics` diff --git a/docs/data-sources/gateway_networking_k8s_io_gateway_v1_manifest.md b/docs/data-sources/gateway_networking_k8s_io_gateway_v1_manifest.md index d2558e450..2101eef86 100644 --- a/docs/data-sources/gateway_networking_k8s_io_gateway_v1_manifest.md +++ b/docs/data-sources/gateway_networking_k8s_io_gateway_v1_manifest.md @@ -62,7 +62,8 @@ Required: Optional: - `addresses` (Attributes List) Addresses requested for this Gateway. This is optional and behavior candepend on the implementation. If a value is set in the spec and therequested address is invalid or unavailable, the implementation MUSTindicate this in the associated entry in GatewayStatus.Addresses.The Addresses field represents a request for the address(es) on the'outside of the Gateway', that traffic bound for this Gateway will use.This could be the IP address or hostname of an external load balancer orother networking infrastructure, or some other address that traffic willbe sent to.If no Addresses are specified, the implementation MAY schedule theGateway in an implementation-specific manner, assigning an appropriateset of Addresses.The implementation MUST bind all Listeners to every GatewayAddress thatit assigns to the Gateway and add a corresponding entry inGatewayStatus.Addresses.Support: Extended (see [below for nested schema](#nestedatt--spec--addresses)) -- `infrastructure` (Attributes) Infrastructure defines infrastructure level attributes about this Gateway instance.Support: Core (see [below for nested schema](#nestedatt--spec--infrastructure)) +- `backend_tls` (Attributes) BackendTLS configures TLS settings for when this Gateway is connecting tobackends with TLS.Support: Core (see [below for nested schema](#nestedatt--spec--backend_tls)) +- `infrastructure` (Attributes) Infrastructure defines infrastructure level attributes about this Gateway instance.Support: Extended (see [below for nested schema](#nestedatt--spec--infrastructure)) ### Nested Schema for `spec.listeners` @@ -191,13 +192,35 @@ Optional: - `type` (String) Type of the address. + +### Nested Schema for `spec.backend_tls` + +Optional: + +- `client_certificate_ref` (Attributes) ClientCertificateRef is a reference to an object that contains a ClientCertificate and the associated private key.References to a resource in different namespace are invalid UNLESS thereis a ReferenceGrant in the target namespace that allows the certificateto be attached. If a ReferenceGrant does not allow this reference, the'ResolvedRefs' condition MUST be set to False for this listener with the'RefNotPermitted' reason.ClientCertificateRef can reference to standard Kubernetes resources, i.e.Secret, or implementation-specific custom resources.This setting can be overridden on the service level by use of BackendTLSPolicy.Support: Core (see [below for nested schema](#nestedatt--spec--backend_tls--client_certificate_ref)) + + +### Nested Schema for `spec.backend_tls.client_certificate_ref` + +Required: + +- `name` (String) Name is the name of the referent. + +Optional: + +- `group` (String) Group is the group of the referent. For example, 'gateway.networking.k8s.io'.When unspecified or empty string, core API group is inferred. +- `kind` (String) Kind is kind of the referent. For example 'Secret'. +- `namespace` (String) Namespace is the namespace of the referenced object. When unspecified, the localnamespace is inferred.Note that when a namespace different than the local namespace is specified,a ReferenceGrant object is required in the referent namespace to allow thatnamespace's owner to accept the reference. See the ReferenceGrantdocumentation for details.Support: Core + + + ### Nested Schema for `spec.infrastructure` Optional: - `annotations` (Map of String) Annotations that SHOULD be applied to any resources created in response to this Gateway.For implementations creating other Kubernetes objects, this should be the 'metadata.annotations' field on resources.For other implementations, this refers to any relevant (implementation specific) 'annotations' concepts.An implementation may chose to add additional implementation-specific annotations as they see fit.Support: Extended -- `labels` (Map of String) Labels that SHOULD be applied to any resources created in response to this Gateway.For implementations creating other Kubernetes objects, this should be the 'metadata.labels' field on resources.For other implementations, this refers to any relevant (implementation specific) 'labels' concepts.An implementation may chose to add additional implementation-specific labels as they see fit.Support: Extended +- `labels` (Map of String) Labels that SHOULD be applied to any resources created in response to this Gateway.For implementations creating other Kubernetes objects, this should be the 'metadata.labels' field on resources.For other implementations, this refers to any relevant (implementation specific) 'labels' concepts.An implementation may chose to add additional implementation-specific labels as they see fit.If an implementation maps these labels to Pods, or any other resource that would need to be recreated when labelschange, it SHOULD clearly warn about this behavior in documentation.Support: Extended - `parameters_ref` (Attributes) ParametersRef is a reference to a resource that contains the configurationparameters corresponding to the Gateway. This is optional if thecontroller does not require any additional configuration.This follows the same semantics as GatewayClass's 'parametersRef', but on a per-Gateway basisThe Gateway's GatewayClass may provide its own 'parametersRef'. When both are specified,the merging behavior is implementation specific.It is generally recommended that GatewayClass provides defaults that can be overridden by a Gateway.Support: Implementation-specific (see [below for nested schema](#nestedatt--spec--infrastructure--parameters_ref)) diff --git a/docs/data-sources/gateway_networking_k8s_io_gateway_v1beta1_manifest.md b/docs/data-sources/gateway_networking_k8s_io_gateway_v1beta1_manifest.md index 60c4ecc8c..9ae0f8ff4 100644 --- a/docs/data-sources/gateway_networking_k8s_io_gateway_v1beta1_manifest.md +++ b/docs/data-sources/gateway_networking_k8s_io_gateway_v1beta1_manifest.md @@ -62,7 +62,8 @@ Required: Optional: - `addresses` (Attributes List) Addresses requested for this Gateway. This is optional and behavior candepend on the implementation. If a value is set in the spec and therequested address is invalid or unavailable, the implementation MUSTindicate this in the associated entry in GatewayStatus.Addresses.The Addresses field represents a request for the address(es) on the'outside of the Gateway', that traffic bound for this Gateway will use.This could be the IP address or hostname of an external load balancer orother networking infrastructure, or some other address that traffic willbe sent to.If no Addresses are specified, the implementation MAY schedule theGateway in an implementation-specific manner, assigning an appropriateset of Addresses.The implementation MUST bind all Listeners to every GatewayAddress thatit assigns to the Gateway and add a corresponding entry inGatewayStatus.Addresses.Support: Extended (see [below for nested schema](#nestedatt--spec--addresses)) -- `infrastructure` (Attributes) Infrastructure defines infrastructure level attributes about this Gateway instance.Support: Core (see [below for nested schema](#nestedatt--spec--infrastructure)) +- `backend_tls` (Attributes) BackendTLS configures TLS settings for when this Gateway is connecting tobackends with TLS.Support: Core (see [below for nested schema](#nestedatt--spec--backend_tls)) +- `infrastructure` (Attributes) Infrastructure defines infrastructure level attributes about this Gateway instance.Support: Extended (see [below for nested schema](#nestedatt--spec--infrastructure)) ### Nested Schema for `spec.listeners` @@ -191,13 +192,35 @@ Optional: - `type` (String) Type of the address. + +### Nested Schema for `spec.backend_tls` + +Optional: + +- `client_certificate_ref` (Attributes) ClientCertificateRef is a reference to an object that contains a ClientCertificate and the associated private key.References to a resource in different namespace are invalid UNLESS thereis a ReferenceGrant in the target namespace that allows the certificateto be attached. If a ReferenceGrant does not allow this reference, the'ResolvedRefs' condition MUST be set to False for this listener with the'RefNotPermitted' reason.ClientCertificateRef can reference to standard Kubernetes resources, i.e.Secret, or implementation-specific custom resources.This setting can be overridden on the service level by use of BackendTLSPolicy.Support: Core (see [below for nested schema](#nestedatt--spec--backend_tls--client_certificate_ref)) + + +### Nested Schema for `spec.backend_tls.client_certificate_ref` + +Required: + +- `name` (String) Name is the name of the referent. + +Optional: + +- `group` (String) Group is the group of the referent. For example, 'gateway.networking.k8s.io'.When unspecified or empty string, core API group is inferred. +- `kind` (String) Kind is kind of the referent. For example 'Secret'. +- `namespace` (String) Namespace is the namespace of the referenced object. When unspecified, the localnamespace is inferred.Note that when a namespace different than the local namespace is specified,a ReferenceGrant object is required in the referent namespace to allow thatnamespace's owner to accept the reference. See the ReferenceGrantdocumentation for details.Support: Core + + + ### Nested Schema for `spec.infrastructure` Optional: - `annotations` (Map of String) Annotations that SHOULD be applied to any resources created in response to this Gateway.For implementations creating other Kubernetes objects, this should be the 'metadata.annotations' field on resources.For other implementations, this refers to any relevant (implementation specific) 'annotations' concepts.An implementation may chose to add additional implementation-specific annotations as they see fit.Support: Extended -- `labels` (Map of String) Labels that SHOULD be applied to any resources created in response to this Gateway.For implementations creating other Kubernetes objects, this should be the 'metadata.labels' field on resources.For other implementations, this refers to any relevant (implementation specific) 'labels' concepts.An implementation may chose to add additional implementation-specific labels as they see fit.Support: Extended +- `labels` (Map of String) Labels that SHOULD be applied to any resources created in response to this Gateway.For implementations creating other Kubernetes objects, this should be the 'metadata.labels' field on resources.For other implementations, this refers to any relevant (implementation specific) 'labels' concepts.An implementation may chose to add additional implementation-specific labels as they see fit.If an implementation maps these labels to Pods, or any other resource that would need to be recreated when labelschange, it SHOULD clearly warn about this behavior in documentation.Support: Extended - `parameters_ref` (Attributes) ParametersRef is a reference to a resource that contains the configurationparameters corresponding to the Gateway. This is optional if thecontroller does not require any additional configuration.This follows the same semantics as GatewayClass's 'parametersRef', but on a per-Gateway basisThe Gateway's GatewayClass may provide its own 'parametersRef'. When both are specified,the merging behavior is implementation specific.It is generally recommended that GatewayClass provides defaults that can be overridden by a Gateway.Support: Implementation-specific (see [below for nested schema](#nestedatt--spec--infrastructure--parameters_ref)) diff --git a/docs/data-sources/gateway_networking_k8s_io_http_route_v1_manifest.md b/docs/data-sources/gateway_networking_k8s_io_http_route_v1_manifest.md index c233ce14e..f4005a5d2 100644 --- a/docs/data-sources/gateway_networking_k8s_io_http_route_v1_manifest.md +++ b/docs/data-sources/gateway_networking_k8s_io_http_route_v1_manifest.md @@ -84,6 +84,7 @@ Optional: - `filters` (Attributes List) Filters define the filters that are applied to requests that matchthis rule.Wherever possible, implementations SHOULD implement filters in the orderthey are specified.Implementations MAY choose to implement this ordering strictly, rejectingany combination or order of filters that can not be supported. If implementationschoose a strict interpretation of filter ordering, they MUST clearly documentthat behavior.To reject an invalid combination or order of filters, implementations SHOULDconsider the Route Rules with this configuration invalid. If all Route Rulesin a Route are invalid, the entire Route would be considered invalid. If onlya portion of Route Rules are invalid, implementations MUST set the'PartiallyInvalid' condition for the Route.Conformance-levels at this level are defined based on the type of filter:- ALL core filters MUST be supported by all implementations.- Implementers are encouraged to support extended filters.- Implementation-specific custom filters have no API guarantees across implementations.Specifying the same filter multiple times is not supported unless explicitlyindicated in the filter.All filters are expected to be compatible with each other except for theURLRewrite and RequestRedirect filters, which may not be combined. If animplementation can not support other combinations of filters, they must clearlydocument that limitation. In cases where incompatible or unsupportedfilters are specified and cause the 'Accepted' condition to be set to status'False', implementations may use the 'IncompatibleFilters' reason to specifythis configuration error.Support: Core (see [below for nested schema](#nestedatt--spec--rules--filters)) - `matches` (Attributes List) Matches define conditions used for matching the rule against incomingHTTP requests. Each match is independent, i.e. this rule will be matchedif **any** one of the matches is satisfied.For example, take the following matches configuration:'''matches:- path: value: '/foo' headers: - name: 'version' value: 'v2'- path: value: '/v2/foo''''For a request to match against this rule, a request must satisfyEITHER of the two conditions:- path prefixed with '/foo' AND contains the header 'version: v2'- path prefix of '/v2/foo'See the documentation for HTTPRouteMatch on how to specify multiplematch conditions that should be ANDed together.If no matches are specified, the default is a prefixpath match on '/', which has the effect of matching everyHTTP request.Proxy or Load Balancer routing configuration generated from HTTPRoutesMUST prioritize matches based on the following criteria, continuing onties. Across all rules specified on applicable Routes, precedence must begiven to the match having:* 'Exact' path match.* 'Prefix' path match with largest number of characters.* Method match.* Largest number of header matches.* Largest number of query param matches.Note: The precedence of RegularExpression path matches are implementation-specific.If ties still exist across multiple Routes, matching precedence MUST bedetermined in order of the following criteria, continuing on ties:* The oldest Route based on creation timestamp.* The Route appearing first in alphabetical order by '{namespace}/{name}'.If ties still exist within an HTTPRoute, matching precedence MUST be grantedto the FIRST matching rule (in list order) with a match meeting the abovecriteria.When no rules matching a request have been successfully attached to theparent a request is coming from, a HTTP 404 status code MUST be returned. (see [below for nested schema](#nestedatt--spec--rules--matches)) - `name` (String) Name is the name of the route rule. This name MUST be unique within a Route if it is set.Support: Extended +- `retry` (Attributes) Retry defines the configuration for when to retry an HTTP request.Support: Extended (see [below for nested schema](#nestedatt--spec--rules--retry)) - `session_persistence` (Attributes) SessionPersistence defines and configures session persistencefor the route rule.Support: Extended (see [below for nested schema](#nestedatt--spec--rules--session_persistence)) - `timeouts` (Attributes) Timeouts defines the timeouts that can be configured for an HTTP request.Support: Extended (see [below for nested schema](#nestedatt--spec--rules--timeouts)) @@ -490,6 +491,16 @@ Optional: + +### Nested Schema for `spec.rules.retry` + +Optional: + +- `attempts` (Number) Attempts specifies the maxmimum number of times an individual requestfrom the gateway to a backend should be retried.If the maximum number of retries has been attempted without a successfulresponse from the backend, the Gateway MUST return an error.When this field is unspecified, the number of times to attempt to retrya backend request is implementation-specific.Support: Extended +- `backoff` (String) Backoff specifies the minimum duration a Gateway should wait betweenretry attempts and is represented in Gateway API Duration formatting.For example, setting the 'rules[].retry.backoff' field to the value'100ms' will cause a backend request to first be retried approximately100 milliseconds after timing out or receiving a response code configuredto be retryable.An implementation MAY use an exponential or alternative backoff strategyfor subsequent retry attempts, MAY cap the maximum backoff duration tosome amount greater than the specified minimum, and MAY add arbitraryjitter to stagger requests, as long as unsuccessful backend requests arenot retried before the configured minimum duration.If a Request timeout ('rules[].timeouts.request') is configured on theroute, the entire duration of the initial request and any retry attemptsMUST not exceed the Request timeout duration. If any retry attempts arestill in progress when the Request timeout duration has been reached,these SHOULD be canceled if possible and the Gateway MUST immediatelyreturn a timeout error.If a BackendRequest timeout ('rules[].timeouts.backendRequest') isconfigured on the route, any retry attempts which reach the configuredBackendRequest timeout duration without a response SHOULD be canceled ifpossible and the Gateway should wait for at least the specified backoffduration before attempting to retry the backend request again.If a BackendRequest timeout is _not_ configured on the route, retryattempts MAY time out after an implementation default duration, or MAYremain pending until a configured Request timeout or implementationdefault duration for total request time is reached.When this field is unspecified, the time to wait between retry attemptsis implementation-specific.Support: Extended +- `codes` (List of String) Codes defines the HTTP response status codes for which a backend requestshould be retried.Support: Extended + + ### Nested Schema for `spec.rules.session_persistence` diff --git a/docs/data-sources/gateway_networking_k8s_io_http_route_v1beta1_manifest.md b/docs/data-sources/gateway_networking_k8s_io_http_route_v1beta1_manifest.md index 72e57f22a..4e4882b25 100644 --- a/docs/data-sources/gateway_networking_k8s_io_http_route_v1beta1_manifest.md +++ b/docs/data-sources/gateway_networking_k8s_io_http_route_v1beta1_manifest.md @@ -84,6 +84,7 @@ Optional: - `filters` (Attributes List) Filters define the filters that are applied to requests that matchthis rule.Wherever possible, implementations SHOULD implement filters in the orderthey are specified.Implementations MAY choose to implement this ordering strictly, rejectingany combination or order of filters that can not be supported. If implementationschoose a strict interpretation of filter ordering, they MUST clearly documentthat behavior.To reject an invalid combination or order of filters, implementations SHOULDconsider the Route Rules with this configuration invalid. If all Route Rulesin a Route are invalid, the entire Route would be considered invalid. If onlya portion of Route Rules are invalid, implementations MUST set the'PartiallyInvalid' condition for the Route.Conformance-levels at this level are defined based on the type of filter:- ALL core filters MUST be supported by all implementations.- Implementers are encouraged to support extended filters.- Implementation-specific custom filters have no API guarantees across implementations.Specifying the same filter multiple times is not supported unless explicitlyindicated in the filter.All filters are expected to be compatible with each other except for theURLRewrite and RequestRedirect filters, which may not be combined. If animplementation can not support other combinations of filters, they must clearlydocument that limitation. In cases where incompatible or unsupportedfilters are specified and cause the 'Accepted' condition to be set to status'False', implementations may use the 'IncompatibleFilters' reason to specifythis configuration error.Support: Core (see [below for nested schema](#nestedatt--spec--rules--filters)) - `matches` (Attributes List) Matches define conditions used for matching the rule against incomingHTTP requests. Each match is independent, i.e. this rule will be matchedif **any** one of the matches is satisfied.For example, take the following matches configuration:'''matches:- path: value: '/foo' headers: - name: 'version' value: 'v2'- path: value: '/v2/foo''''For a request to match against this rule, a request must satisfyEITHER of the two conditions:- path prefixed with '/foo' AND contains the header 'version: v2'- path prefix of '/v2/foo'See the documentation for HTTPRouteMatch on how to specify multiplematch conditions that should be ANDed together.If no matches are specified, the default is a prefixpath match on '/', which has the effect of matching everyHTTP request.Proxy or Load Balancer routing configuration generated from HTTPRoutesMUST prioritize matches based on the following criteria, continuing onties. Across all rules specified on applicable Routes, precedence must begiven to the match having:* 'Exact' path match.* 'Prefix' path match with largest number of characters.* Method match.* Largest number of header matches.* Largest number of query param matches.Note: The precedence of RegularExpression path matches are implementation-specific.If ties still exist across multiple Routes, matching precedence MUST bedetermined in order of the following criteria, continuing on ties:* The oldest Route based on creation timestamp.* The Route appearing first in alphabetical order by '{namespace}/{name}'.If ties still exist within an HTTPRoute, matching precedence MUST be grantedto the FIRST matching rule (in list order) with a match meeting the abovecriteria.When no rules matching a request have been successfully attached to theparent a request is coming from, a HTTP 404 status code MUST be returned. (see [below for nested schema](#nestedatt--spec--rules--matches)) - `name` (String) Name is the name of the route rule. This name MUST be unique within a Route if it is set.Support: Extended +- `retry` (Attributes) Retry defines the configuration for when to retry an HTTP request.Support: Extended (see [below for nested schema](#nestedatt--spec--rules--retry)) - `session_persistence` (Attributes) SessionPersistence defines and configures session persistencefor the route rule.Support: Extended (see [below for nested schema](#nestedatt--spec--rules--session_persistence)) - `timeouts` (Attributes) Timeouts defines the timeouts that can be configured for an HTTP request.Support: Extended (see [below for nested schema](#nestedatt--spec--rules--timeouts)) @@ -490,6 +491,16 @@ Optional: + +### Nested Schema for `spec.rules.retry` + +Optional: + +- `attempts` (Number) Attempts specifies the maxmimum number of times an individual requestfrom the gateway to a backend should be retried.If the maximum number of retries has been attempted without a successfulresponse from the backend, the Gateway MUST return an error.When this field is unspecified, the number of times to attempt to retrya backend request is implementation-specific.Support: Extended +- `backoff` (String) Backoff specifies the minimum duration a Gateway should wait betweenretry attempts and is represented in Gateway API Duration formatting.For example, setting the 'rules[].retry.backoff' field to the value'100ms' will cause a backend request to first be retried approximately100 milliseconds after timing out or receiving a response code configuredto be retryable.An implementation MAY use an exponential or alternative backoff strategyfor subsequent retry attempts, MAY cap the maximum backoff duration tosome amount greater than the specified minimum, and MAY add arbitraryjitter to stagger requests, as long as unsuccessful backend requests arenot retried before the configured minimum duration.If a Request timeout ('rules[].timeouts.request') is configured on theroute, the entire duration of the initial request and any retry attemptsMUST not exceed the Request timeout duration. If any retry attempts arestill in progress when the Request timeout duration has been reached,these SHOULD be canceled if possible and the Gateway MUST immediatelyreturn a timeout error.If a BackendRequest timeout ('rules[].timeouts.backendRequest') isconfigured on the route, any retry attempts which reach the configuredBackendRequest timeout duration without a response SHOULD be canceled ifpossible and the Gateway should wait for at least the specified backoffduration before attempting to retry the backend request again.If a BackendRequest timeout is _not_ configured on the route, retryattempts MAY time out after an implementation default duration, or MAYremain pending until a configured Request timeout or implementationdefault duration for total request time is reached.When this field is unspecified, the time to wait between retry attemptsis implementation-specific.Support: Extended +- `codes` (List of String) Codes defines the HTTP response status codes for which a backend requestshould be retried.Support: Extended + + ### Nested Schema for `spec.rules.session_persistence` diff --git a/docs/data-sources/gateway_solo_io_route_option_v1_manifest.md b/docs/data-sources/gateway_solo_io_route_option_v1_manifest.md index 6b40e78b7..b9a080a7e 100644 --- a/docs/data-sources/gateway_solo_io_route_option_v1_manifest.md +++ b/docs/data-sources/gateway_solo_io_route_option_v1_manifest.md @@ -90,6 +90,7 @@ Optional: - `host_rewrite_path_regex` (Attributes) (see [below for nested schema](#nestedatt--spec--options--host_rewrite_path_regex)) - `idle_timeout` (String) - `jwt` (Attributes) (see [below for nested schema](#nestedatt--spec--options--jwt)) +- `jwt_providers_staged` (Attributes) (see [below for nested schema](#nestedatt--spec--options--jwt_providers_staged)) - `jwt_staged` (Attributes) (see [below for nested schema](#nestedatt--spec--options--jwt_staged)) - `lb_hash` (Attributes) (see [below for nested schema](#nestedatt--spec--options--lb_hash)) - `max_stream_duration` (Attributes) (see [below for nested schema](#nestedatt--spec--options--max_stream_duration)) @@ -725,6 +726,207 @@ Optional: - `disable` (Boolean) + +### Nested Schema for `spec.options.jwt_providers_staged` + +Optional: + +- `after_ext_auth` (Attributes) (see [below for nested schema](#nestedatt--spec--options--jwt_providers_staged--after_ext_auth)) +- `before_ext_auth` (Attributes) (see [below for nested schema](#nestedatt--spec--options--jwt_providers_staged--before_ext_auth)) + + +### Nested Schema for `spec.options.jwt_providers_staged.after_ext_auth` + +Optional: + +- `allow_missing_or_failed_jwt` (Boolean) +- `providers` (Attributes) (see [below for nested schema](#nestedatt--spec--options--jwt_providers_staged--after_ext_auth--providers)) + + +### Nested Schema for `spec.options.jwt_providers_staged.after_ext_auth.providers` + +Optional: + +- `audiences` (List of String) +- `claims_to_headers` (Attributes List) (see [below for nested schema](#nestedatt--spec--options--jwt_providers_staged--after_ext_auth--providers--claims_to_headers)) +- `clock_skew_seconds` (Number) +- `issuer` (String) +- `jwks` (Attributes) (see [below for nested schema](#nestedatt--spec--options--jwt_providers_staged--after_ext_auth--providers--jwks)) +- `keep_token` (Boolean) +- `token_source` (Attributes) (see [below for nested schema](#nestedatt--spec--options--jwt_providers_staged--after_ext_auth--providers--token_source)) + + +### Nested Schema for `spec.options.jwt_providers_staged.after_ext_auth.providers.claims_to_headers` + +Optional: + +- `append` (Boolean) +- `claim` (String) +- `header` (String) + + + +### Nested Schema for `spec.options.jwt_providers_staged.after_ext_auth.providers.jwks` + +Optional: + +- `local` (Attributes) (see [below for nested schema](#nestedatt--spec--options--jwt_providers_staged--after_ext_auth--providers--jwks--local)) +- `remote` (Attributes) (see [below for nested schema](#nestedatt--spec--options--jwt_providers_staged--after_ext_auth--providers--jwks--remote)) + + +### Nested Schema for `spec.options.jwt_providers_staged.after_ext_auth.providers.jwks.local` + +Optional: + +- `key` (String) + + + +### Nested Schema for `spec.options.jwt_providers_staged.after_ext_auth.providers.jwks.remote` + +Optional: + +- `async_fetch` (Attributes) (see [below for nested schema](#nestedatt--spec--options--jwt_providers_staged--after_ext_auth--providers--jwks--remote--async_fetch)) +- `cache_duration` (String) +- `upstream_ref` (Attributes) (see [below for nested schema](#nestedatt--spec--options--jwt_providers_staged--after_ext_auth--providers--jwks--remote--upstream_ref)) +- `url` (String) + + +### Nested Schema for `spec.options.jwt_providers_staged.after_ext_auth.providers.jwks.remote.async_fetch` + +Optional: + +- `fast_listener` (Boolean) + + + +### Nested Schema for `spec.options.jwt_providers_staged.after_ext_auth.providers.jwks.remote.upstream_ref` + +Optional: + +- `name` (String) +- `namespace` (String) + + + + + +### Nested Schema for `spec.options.jwt_providers_staged.after_ext_auth.providers.token_source` + +Optional: + +- `headers` (Attributes List) (see [below for nested schema](#nestedatt--spec--options--jwt_providers_staged--after_ext_auth--providers--token_source--headers)) +- `query_params` (List of String) + + +### Nested Schema for `spec.options.jwt_providers_staged.after_ext_auth.providers.token_source.headers` + +Optional: + +- `header` (String) +- `prefix` (String) + + + + + + +### Nested Schema for `spec.options.jwt_providers_staged.before_ext_auth` + +Optional: + +- `allow_missing_or_failed_jwt` (Boolean) +- `providers` (Attributes) (see [below for nested schema](#nestedatt--spec--options--jwt_providers_staged--before_ext_auth--providers)) + + +### Nested Schema for `spec.options.jwt_providers_staged.before_ext_auth.providers` + +Optional: + +- `audiences` (List of String) +- `claims_to_headers` (Attributes List) (see [below for nested schema](#nestedatt--spec--options--jwt_providers_staged--before_ext_auth--providers--claims_to_headers)) +- `clock_skew_seconds` (Number) +- `issuer` (String) +- `jwks` (Attributes) (see [below for nested schema](#nestedatt--spec--options--jwt_providers_staged--before_ext_auth--providers--jwks)) +- `keep_token` (Boolean) +- `token_source` (Attributes) (see [below for nested schema](#nestedatt--spec--options--jwt_providers_staged--before_ext_auth--providers--token_source)) + + +### Nested Schema for `spec.options.jwt_providers_staged.before_ext_auth.providers.claims_to_headers` + +Optional: + +- `append` (Boolean) +- `claim` (String) +- `header` (String) + + + +### Nested Schema for `spec.options.jwt_providers_staged.before_ext_auth.providers.jwks` + +Optional: + +- `local` (Attributes) (see [below for nested schema](#nestedatt--spec--options--jwt_providers_staged--before_ext_auth--providers--jwks--local)) +- `remote` (Attributes) (see [below for nested schema](#nestedatt--spec--options--jwt_providers_staged--before_ext_auth--providers--jwks--remote)) + + +### Nested Schema for `spec.options.jwt_providers_staged.before_ext_auth.providers.jwks.local` + +Optional: + +- `key` (String) + + + +### Nested Schema for `spec.options.jwt_providers_staged.before_ext_auth.providers.jwks.remote` + +Optional: + +- `async_fetch` (Attributes) (see [below for nested schema](#nestedatt--spec--options--jwt_providers_staged--before_ext_auth--providers--jwks--remote--async_fetch)) +- `cache_duration` (String) +- `upstream_ref` (Attributes) (see [below for nested schema](#nestedatt--spec--options--jwt_providers_staged--before_ext_auth--providers--jwks--remote--upstream_ref)) +- `url` (String) + + +### Nested Schema for `spec.options.jwt_providers_staged.before_ext_auth.providers.jwks.remote.async_fetch` + +Optional: + +- `fast_listener` (Boolean) + + + +### Nested Schema for `spec.options.jwt_providers_staged.before_ext_auth.providers.jwks.remote.upstream_ref` + +Optional: + +- `name` (String) +- `namespace` (String) + + + + + +### Nested Schema for `spec.options.jwt_providers_staged.before_ext_auth.providers.token_source` + +Optional: + +- `headers` (Attributes List) (see [below for nested schema](#nestedatt--spec--options--jwt_providers_staged--before_ext_auth--providers--token_source--headers)) +- `query_params` (List of String) + + +### Nested Schema for `spec.options.jwt_providers_staged.before_ext_auth.providers.token_source.headers` + +Optional: + +- `header` (String) +- `prefix` (String) + + + + + + ### Nested Schema for `spec.options.jwt_staged` diff --git a/docs/data-sources/gateway_solo_io_route_table_v1_manifest.md b/docs/data-sources/gateway_solo_io_route_table_v1_manifest.md index 2ed164019..efb18fa48 100644 --- a/docs/data-sources/gateway_solo_io_route_table_v1_manifest.md +++ b/docs/data-sources/gateway_solo_io_route_table_v1_manifest.md @@ -201,6 +201,7 @@ Optional: - `host_rewrite_path_regex` (Attributes) (see [below for nested schema](#nestedatt--spec--routes--options--host_rewrite_path_regex)) - `idle_timeout` (String) - `jwt` (Attributes) (see [below for nested schema](#nestedatt--spec--routes--options--jwt)) +- `jwt_providers_staged` (Attributes) (see [below for nested schema](#nestedatt--spec--routes--options--jwt_providers_staged)) - `jwt_staged` (Attributes) (see [below for nested schema](#nestedatt--spec--routes--options--jwt_staged)) - `lb_hash` (Attributes) (see [below for nested schema](#nestedatt--spec--routes--options--lb_hash)) - `max_stream_duration` (Attributes) (see [below for nested schema](#nestedatt--spec--routes--options--max_stream_duration)) @@ -836,6 +837,207 @@ Optional: - `disable` (Boolean) + +### Nested Schema for `spec.routes.options.jwt_providers_staged` + +Optional: + +- `after_ext_auth` (Attributes) (see [below for nested schema](#nestedatt--spec--routes--options--jwt_providers_staged--after_ext_auth)) +- `before_ext_auth` (Attributes) (see [below for nested schema](#nestedatt--spec--routes--options--jwt_providers_staged--before_ext_auth)) + + +### Nested Schema for `spec.routes.options.jwt_providers_staged.after_ext_auth` + +Optional: + +- `allow_missing_or_failed_jwt` (Boolean) +- `providers` (Attributes) (see [below for nested schema](#nestedatt--spec--routes--options--jwt_providers_staged--after_ext_auth--providers)) + + +### Nested Schema for `spec.routes.options.jwt_providers_staged.after_ext_auth.providers` + +Optional: + +- `audiences` (List of String) +- `claims_to_headers` (Attributes List) (see [below for nested schema](#nestedatt--spec--routes--options--jwt_providers_staged--after_ext_auth--providers--claims_to_headers)) +- `clock_skew_seconds` (Number) +- `issuer` (String) +- `jwks` (Attributes) (see [below for nested schema](#nestedatt--spec--routes--options--jwt_providers_staged--after_ext_auth--providers--jwks)) +- `keep_token` (Boolean) +- `token_source` (Attributes) (see [below for nested schema](#nestedatt--spec--routes--options--jwt_providers_staged--after_ext_auth--providers--token_source)) + + +### Nested Schema for `spec.routes.options.jwt_providers_staged.after_ext_auth.providers.claims_to_headers` + +Optional: + +- `append` (Boolean) +- `claim` (String) +- `header` (String) + + + +### Nested Schema for `spec.routes.options.jwt_providers_staged.after_ext_auth.providers.jwks` + +Optional: + +- `local` (Attributes) (see [below for nested schema](#nestedatt--spec--routes--options--jwt_providers_staged--after_ext_auth--providers--jwks--local)) +- `remote` (Attributes) (see [below for nested schema](#nestedatt--spec--routes--options--jwt_providers_staged--after_ext_auth--providers--jwks--remote)) + + +### Nested Schema for `spec.routes.options.jwt_providers_staged.after_ext_auth.providers.jwks.local` + +Optional: + +- `key` (String) + + + +### Nested Schema for `spec.routes.options.jwt_providers_staged.after_ext_auth.providers.jwks.remote` + +Optional: + +- `async_fetch` (Attributes) (see [below for nested schema](#nestedatt--spec--routes--options--jwt_providers_staged--after_ext_auth--providers--jwks--remote--async_fetch)) +- `cache_duration` (String) +- `upstream_ref` (Attributes) (see [below for nested schema](#nestedatt--spec--routes--options--jwt_providers_staged--after_ext_auth--providers--jwks--remote--upstream_ref)) +- `url` (String) + + +### Nested Schema for `spec.routes.options.jwt_providers_staged.after_ext_auth.providers.jwks.remote.async_fetch` + +Optional: + +- `fast_listener` (Boolean) + + + +### Nested Schema for `spec.routes.options.jwt_providers_staged.after_ext_auth.providers.jwks.remote.upstream_ref` + +Optional: + +- `name` (String) +- `namespace` (String) + + + + + +### Nested Schema for `spec.routes.options.jwt_providers_staged.after_ext_auth.providers.token_source` + +Optional: + +- `headers` (Attributes List) (see [below for nested schema](#nestedatt--spec--routes--options--jwt_providers_staged--after_ext_auth--providers--token_source--headers)) +- `query_params` (List of String) + + +### Nested Schema for `spec.routes.options.jwt_providers_staged.after_ext_auth.providers.token_source.headers` + +Optional: + +- `header` (String) +- `prefix` (String) + + + + + + +### Nested Schema for `spec.routes.options.jwt_providers_staged.before_ext_auth` + +Optional: + +- `allow_missing_or_failed_jwt` (Boolean) +- `providers` (Attributes) (see [below for nested schema](#nestedatt--spec--routes--options--jwt_providers_staged--before_ext_auth--providers)) + + +### Nested Schema for `spec.routes.options.jwt_providers_staged.before_ext_auth.providers` + +Optional: + +- `audiences` (List of String) +- `claims_to_headers` (Attributes List) (see [below for nested schema](#nestedatt--spec--routes--options--jwt_providers_staged--before_ext_auth--providers--claims_to_headers)) +- `clock_skew_seconds` (Number) +- `issuer` (String) +- `jwks` (Attributes) (see [below for nested schema](#nestedatt--spec--routes--options--jwt_providers_staged--before_ext_auth--providers--jwks)) +- `keep_token` (Boolean) +- `token_source` (Attributes) (see [below for nested schema](#nestedatt--spec--routes--options--jwt_providers_staged--before_ext_auth--providers--token_source)) + + +### Nested Schema for `spec.routes.options.jwt_providers_staged.before_ext_auth.providers.claims_to_headers` + +Optional: + +- `append` (Boolean) +- `claim` (String) +- `header` (String) + + + +### Nested Schema for `spec.routes.options.jwt_providers_staged.before_ext_auth.providers.jwks` + +Optional: + +- `local` (Attributes) (see [below for nested schema](#nestedatt--spec--routes--options--jwt_providers_staged--before_ext_auth--providers--jwks--local)) +- `remote` (Attributes) (see [below for nested schema](#nestedatt--spec--routes--options--jwt_providers_staged--before_ext_auth--providers--jwks--remote)) + + +### Nested Schema for `spec.routes.options.jwt_providers_staged.before_ext_auth.providers.jwks.local` + +Optional: + +- `key` (String) + + + +### Nested Schema for `spec.routes.options.jwt_providers_staged.before_ext_auth.providers.jwks.remote` + +Optional: + +- `async_fetch` (Attributes) (see [below for nested schema](#nestedatt--spec--routes--options--jwt_providers_staged--before_ext_auth--providers--jwks--remote--async_fetch)) +- `cache_duration` (String) +- `upstream_ref` (Attributes) (see [below for nested schema](#nestedatt--spec--routes--options--jwt_providers_staged--before_ext_auth--providers--jwks--remote--upstream_ref)) +- `url` (String) + + +### Nested Schema for `spec.routes.options.jwt_providers_staged.before_ext_auth.providers.jwks.remote.async_fetch` + +Optional: + +- `fast_listener` (Boolean) + + + +### Nested Schema for `spec.routes.options.jwt_providers_staged.before_ext_auth.providers.jwks.remote.upstream_ref` + +Optional: + +- `name` (String) +- `namespace` (String) + + + + + +### Nested Schema for `spec.routes.options.jwt_providers_staged.before_ext_auth.providers.token_source` + +Optional: + +- `headers` (Attributes List) (see [below for nested schema](#nestedatt--spec--routes--options--jwt_providers_staged--before_ext_auth--providers--token_source--headers)) +- `query_params` (List of String) + + +### Nested Schema for `spec.routes.options.jwt_providers_staged.before_ext_auth.providers.token_source.headers` + +Optional: + +- `header` (String) +- `prefix` (String) + + + + + + ### Nested Schema for `spec.routes.options.jwt_staged` diff --git a/docs/data-sources/gateway_solo_io_virtual_service_v1_manifest.md b/docs/data-sources/gateway_solo_io_virtual_service_v1_manifest.md index 8ca30bb9f..f4408bb11 100644 --- a/docs/data-sources/gateway_solo_io_virtual_service_v1_manifest.md +++ b/docs/data-sources/gateway_solo_io_virtual_service_v1_manifest.md @@ -3756,6 +3756,7 @@ Optional: - `host_rewrite_path_regex` (Attributes) (see [below for nested schema](#nestedatt--spec--virtual_host--routes--options--host_rewrite_path_regex)) - `idle_timeout` (String) - `jwt` (Attributes) (see [below for nested schema](#nestedatt--spec--virtual_host--routes--options--jwt)) +- `jwt_providers_staged` (Attributes) (see [below for nested schema](#nestedatt--spec--virtual_host--routes--options--jwt_providers_staged)) - `jwt_staged` (Attributes) (see [below for nested schema](#nestedatt--spec--virtual_host--routes--options--jwt_staged)) - `lb_hash` (Attributes) (see [below for nested schema](#nestedatt--spec--virtual_host--routes--options--lb_hash)) - `max_stream_duration` (Attributes) (see [below for nested schema](#nestedatt--spec--virtual_host--routes--options--max_stream_duration)) @@ -4391,6 +4392,207 @@ Optional: - `disable` (Boolean) + +### Nested Schema for `spec.virtual_host.routes.options.jwt_providers_staged` + +Optional: + +- `after_ext_auth` (Attributes) (see [below for nested schema](#nestedatt--spec--virtual_host--routes--options--jwt_providers_staged--after_ext_auth)) +- `before_ext_auth` (Attributes) (see [below for nested schema](#nestedatt--spec--virtual_host--routes--options--jwt_providers_staged--before_ext_auth)) + + +### Nested Schema for `spec.virtual_host.routes.options.jwt_providers_staged.after_ext_auth` + +Optional: + +- `allow_missing_or_failed_jwt` (Boolean) +- `providers` (Attributes) (see [below for nested schema](#nestedatt--spec--virtual_host--routes--options--jwt_providers_staged--after_ext_auth--providers)) + + +### Nested Schema for `spec.virtual_host.routes.options.jwt_providers_staged.after_ext_auth.providers` + +Optional: + +- `audiences` (List of String) +- `claims_to_headers` (Attributes List) (see [below for nested schema](#nestedatt--spec--virtual_host--routes--options--jwt_providers_staged--after_ext_auth--providers--claims_to_headers)) +- `clock_skew_seconds` (Number) +- `issuer` (String) +- `jwks` (Attributes) (see [below for nested schema](#nestedatt--spec--virtual_host--routes--options--jwt_providers_staged--after_ext_auth--providers--jwks)) +- `keep_token` (Boolean) +- `token_source` (Attributes) (see [below for nested schema](#nestedatt--spec--virtual_host--routes--options--jwt_providers_staged--after_ext_auth--providers--token_source)) + + +### Nested Schema for `spec.virtual_host.routes.options.jwt_providers_staged.after_ext_auth.providers.claims_to_headers` + +Optional: + +- `append` (Boolean) +- `claim` (String) +- `header` (String) + + + +### Nested Schema for `spec.virtual_host.routes.options.jwt_providers_staged.after_ext_auth.providers.jwks` + +Optional: + +- `local` (Attributes) (see [below for nested schema](#nestedatt--spec--virtual_host--routes--options--jwt_providers_staged--after_ext_auth--providers--jwks--local)) +- `remote` (Attributes) (see [below for nested schema](#nestedatt--spec--virtual_host--routes--options--jwt_providers_staged--after_ext_auth--providers--jwks--remote)) + + +### Nested Schema for `spec.virtual_host.routes.options.jwt_providers_staged.after_ext_auth.providers.jwks.local` + +Optional: + +- `key` (String) + + + +### Nested Schema for `spec.virtual_host.routes.options.jwt_providers_staged.after_ext_auth.providers.jwks.remote` + +Optional: + +- `async_fetch` (Attributes) (see [below for nested schema](#nestedatt--spec--virtual_host--routes--options--jwt_providers_staged--after_ext_auth--providers--jwks--remote--async_fetch)) +- `cache_duration` (String) +- `upstream_ref` (Attributes) (see [below for nested schema](#nestedatt--spec--virtual_host--routes--options--jwt_providers_staged--after_ext_auth--providers--jwks--remote--upstream_ref)) +- `url` (String) + + +### Nested Schema for `spec.virtual_host.routes.options.jwt_providers_staged.after_ext_auth.providers.jwks.remote.async_fetch` + +Optional: + +- `fast_listener` (Boolean) + + + +### Nested Schema for `spec.virtual_host.routes.options.jwt_providers_staged.after_ext_auth.providers.jwks.remote.upstream_ref` + +Optional: + +- `name` (String) +- `namespace` (String) + + + + + +### Nested Schema for `spec.virtual_host.routes.options.jwt_providers_staged.after_ext_auth.providers.token_source` + +Optional: + +- `headers` (Attributes List) (see [below for nested schema](#nestedatt--spec--virtual_host--routes--options--jwt_providers_staged--after_ext_auth--providers--token_source--headers)) +- `query_params` (List of String) + + +### Nested Schema for `spec.virtual_host.routes.options.jwt_providers_staged.after_ext_auth.providers.token_source.headers` + +Optional: + +- `header` (String) +- `prefix` (String) + + + + + + +### Nested Schema for `spec.virtual_host.routes.options.jwt_providers_staged.before_ext_auth` + +Optional: + +- `allow_missing_or_failed_jwt` (Boolean) +- `providers` (Attributes) (see [below for nested schema](#nestedatt--spec--virtual_host--routes--options--jwt_providers_staged--before_ext_auth--providers)) + + +### Nested Schema for `spec.virtual_host.routes.options.jwt_providers_staged.before_ext_auth.providers` + +Optional: + +- `audiences` (List of String) +- `claims_to_headers` (Attributes List) (see [below for nested schema](#nestedatt--spec--virtual_host--routes--options--jwt_providers_staged--before_ext_auth--providers--claims_to_headers)) +- `clock_skew_seconds` (Number) +- `issuer` (String) +- `jwks` (Attributes) (see [below for nested schema](#nestedatt--spec--virtual_host--routes--options--jwt_providers_staged--before_ext_auth--providers--jwks)) +- `keep_token` (Boolean) +- `token_source` (Attributes) (see [below for nested schema](#nestedatt--spec--virtual_host--routes--options--jwt_providers_staged--before_ext_auth--providers--token_source)) + + +### Nested Schema for `spec.virtual_host.routes.options.jwt_providers_staged.before_ext_auth.providers.claims_to_headers` + +Optional: + +- `append` (Boolean) +- `claim` (String) +- `header` (String) + + + +### Nested Schema for `spec.virtual_host.routes.options.jwt_providers_staged.before_ext_auth.providers.jwks` + +Optional: + +- `local` (Attributes) (see [below for nested schema](#nestedatt--spec--virtual_host--routes--options--jwt_providers_staged--before_ext_auth--providers--jwks--local)) +- `remote` (Attributes) (see [below for nested schema](#nestedatt--spec--virtual_host--routes--options--jwt_providers_staged--before_ext_auth--providers--jwks--remote)) + + +### Nested Schema for `spec.virtual_host.routes.options.jwt_providers_staged.before_ext_auth.providers.jwks.local` + +Optional: + +- `key` (String) + + + +### Nested Schema for `spec.virtual_host.routes.options.jwt_providers_staged.before_ext_auth.providers.jwks.remote` + +Optional: + +- `async_fetch` (Attributes) (see [below for nested schema](#nestedatt--spec--virtual_host--routes--options--jwt_providers_staged--before_ext_auth--providers--jwks--remote--async_fetch)) +- `cache_duration` (String) +- `upstream_ref` (Attributes) (see [below for nested schema](#nestedatt--spec--virtual_host--routes--options--jwt_providers_staged--before_ext_auth--providers--jwks--remote--upstream_ref)) +- `url` (String) + + +### Nested Schema for `spec.virtual_host.routes.options.jwt_providers_staged.before_ext_auth.providers.jwks.remote.async_fetch` + +Optional: + +- `fast_listener` (Boolean) + + + +### Nested Schema for `spec.virtual_host.routes.options.jwt_providers_staged.before_ext_auth.providers.jwks.remote.upstream_ref` + +Optional: + +- `name` (String) +- `namespace` (String) + + + + + +### Nested Schema for `spec.virtual_host.routes.options.jwt_providers_staged.before_ext_auth.providers.token_source` + +Optional: + +- `headers` (Attributes List) (see [below for nested schema](#nestedatt--spec--virtual_host--routes--options--jwt_providers_staged--before_ext_auth--providers--token_source--headers)) +- `query_params` (List of String) + + +### Nested Schema for `spec.virtual_host.routes.options.jwt_providers_staged.before_ext_auth.providers.token_source.headers` + +Optional: + +- `header` (String) +- `prefix` (String) + + + + + + ### Nested Schema for `spec.virtual_host.routes.options.jwt_staged` diff --git a/docs/data-sources/grafana_integreatly_org_grafana_dashboard_v1beta1_manifest.md b/docs/data-sources/grafana_integreatly_org_grafana_dashboard_v1beta1_manifest.md index a47d8e2c8..d793c66f7 100644 --- a/docs/data-sources/grafana_integreatly_org_grafana_dashboard_v1beta1_manifest.md +++ b/docs/data-sources/grafana_integreatly_org_grafana_dashboard_v1beta1_manifest.md @@ -76,6 +76,7 @@ Optional: - `plugins` (Attributes List) plugins (see [below for nested schema](#nestedatt--spec--plugins)) - `resync_period` (String) how often the dashboard is refreshed, defaults to 5m if not set - `url` (String) dashboard url +- `url_authorization` (Attributes) authorization options for dashboard from url (see [below for nested schema](#nestedatt--spec--url_authorization)) ### Nested Schema for `spec.instance_selector` @@ -236,3 +237,44 @@ Required: - `name` (String) - `version` (String) + + + +### Nested Schema for `spec.url_authorization` + +Optional: + +- `basic_auth` (Attributes) (see [below for nested schema](#nestedatt--spec--url_authorization--basic_auth)) + + +### Nested Schema for `spec.url_authorization.basic_auth` + +Optional: + +- `password` (Attributes) SecretKeySelector selects a key of a Secret. (see [below for nested schema](#nestedatt--spec--url_authorization--basic_auth--password)) +- `username` (Attributes) SecretKeySelector selects a key of a Secret. (see [below for nested schema](#nestedatt--spec--url_authorization--basic_auth--username)) + + +### Nested Schema for `spec.url_authorization.basic_auth.password` + +Required: + +- `key` (String) The key of the secret to select from. Must be a valid secret key. + +Optional: + +- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896. +- `optional` (Boolean) Specify whether the Secret or its key must be defined + + + +### Nested Schema for `spec.url_authorization.basic_auth.username` + +Required: + +- `key` (String) The key of the secret to select from. Must be a valid secret key. + +Optional: + +- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896. +- `optional` (Boolean) Specify whether the Secret or its key must be defined diff --git a/docs/data-sources/infinispan_org_cache_v2alpha1_manifest.md b/docs/data-sources/infinispan_org_cache_v2alpha1_manifest.md index 80ed4a5bf..71f754d35 100644 --- a/docs/data-sources/infinispan_org_cache_v2alpha1_manifest.md +++ b/docs/data-sources/infinispan_org_cache_v2alpha1_manifest.md @@ -83,7 +83,7 @@ Required: Optional: -- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid? +- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid? - `optional` (Boolean) Specify whether the Secret or its key must be defined @@ -96,7 +96,7 @@ Required: Optional: -- `name` (String) Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid? +- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid? - `optional` (Boolean) Specify whether the Secret or its key must be defined diff --git a/docs/data-sources/infinispan_org_infinispan_v1_manifest.md b/docs/data-sources/infinispan_org_infinispan_v1_manifest.md index f0ed643b3..1a8733455 100644 --- a/docs/data-sources/infinispan_org_infinispan_v1_manifest.md +++ b/docs/data-sources/infinispan_org_infinispan_v1_manifest.md @@ -90,8 +90,8 @@ Optional: Optional: -- `preferred_during_scheduling_ignored_during_execution` (Attributes List) The scheduler will prefer to schedule pods to nodes that satisfy the affinity expressions specified by this field, but it may choose a node that violates one or more of the expressions. The node that is most preferred is the one with the greatest sum of weights, i.e. for each node that meets all of the scheduling requirements (resource request, requiredDuringScheduling affinity expressions, etc.), compute a sum by iterating through the elements of this field and adding 'weight' to the sum if the node matches the corresponding matchExpressions; the node(s) with the highest sum are the most preferred. (see [below for nested schema](#nestedatt--spec--affinity--node_affinity--preferred_during_scheduling_ignored_during_execution)) -- `required_during_scheduling_ignored_during_execution` (Attributes) If the affinity requirements specified by this field are not met at scheduling time, the pod will not be scheduled onto the node. If the affinity requirements specified by this field cease to be met at some point during pod execution (e.g. due to an update), the system may or may not try to eventually evict the pod from its node. (see [below for nested schema](#nestedatt--spec--affinity--node_affinity--required_during_scheduling_ignored_during_execution)) +- `preferred_during_scheduling_ignored_during_execution` (Attributes List) The scheduler will prefer to schedule pods to nodes that satisfythe affinity expressions specified by this field, but it may choosea node that violates one or more of the expressions. The node that ismost preferred is the one with the greatest sum of weights, i.e.for each node that meets all of the scheduling requirements (resourcerequest, requiredDuringScheduling affinity expressions, etc.),compute a sum by iterating through the elements of this field and adding'weight' to the sum if the node matches the corresponding matchExpressions; thenode(s) with the highest sum are the most preferred. (see [below for nested schema](#nestedatt--spec--affinity--node_affinity--preferred_during_scheduling_ignored_during_execution)) +- `required_during_scheduling_ignored_during_execution` (Attributes) If the affinity requirements specified by this field are not met atscheduling time, the pod will not be scheduled onto the node.If the affinity requirements specified by this field cease to be metat some point during pod execution (e.g. due to an update), the systemmay or may not try to eventually evict the pod from its node. (see [below for nested schema](#nestedatt--spec--affinity--node_affinity--required_during_scheduling_ignored_during_execution)) ### Nested Schema for `spec.affinity.node_affinity.preferred_during_scheduling_ignored_during_execution` @@ -115,11 +115,11 @@ Optional: Required: - `key` (String) The label key that the selector applies to. -- `operator` (String) Represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt. +- `operator` (String) Represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt. Optional: -- `values` (List of String) An array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. If the operator is Gt or Lt, the values array must have a single element, which will be interpreted as an integer. This array is replaced during a strategic merge patch. +- `values` (List of String) An array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. If the operator is Gt or Lt, the valuesarray must have a single element, which will be interpreted as an integer.This array is replaced during a strategic merge patch. @@ -128,11 +128,11 @@ Optional: Required: - `key` (String) The label key that the selector applies to. -- `operator` (String) Represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt. +- `operator` (String) Represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt. Optional: -- `values` (List of String) An array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. If the operator is Gt or Lt, the values array must have a single element, which will be interpreted as an integer. This array is replaced during a strategic merge patch. +- `values` (List of String) An array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. If the operator is Gt or Lt, the valuesarray must have a single element, which will be interpreted as an integer.This array is replaced during a strategic merge patch. @@ -158,11 +158,11 @@ Optional: Required: - `key` (String) The label key that the selector applies to. -- `operator` (String) Represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt. +- `operator` (String) Represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt. Optional: -- `values` (List of String) An array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. If the operator is Gt or Lt, the values array must have a single element, which will be interpreted as an integer. This array is replaced during a strategic merge patch. +- `values` (List of String) An array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. If the operator is Gt or Lt, the valuesarray must have a single element, which will be interpreted as an integer.This array is replaced during a strategic merge patch. @@ -171,11 +171,11 @@ Optional: Required: - `key` (String) The label key that the selector applies to. -- `operator` (String) Represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt. +- `operator` (String) Represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt. Optional: -- `values` (List of String) An array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. If the operator is Gt or Lt, the values array must have a single element, which will be interpreted as an integer. This array is replaced during a strategic merge patch. +- `values` (List of String) An array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. If the operator is Gt or Lt, the valuesarray must have a single element, which will be interpreted as an integer.This array is replaced during a strategic merge patch. @@ -186,8 +186,8 @@ Optional: Optional: -- `preferred_during_scheduling_ignored_during_execution` (Attributes List) The scheduler will prefer to schedule pods to nodes that satisfy the affinity expressions specified by this field, but it may choose a node that violates one or more of the expressions. The node that is most preferred is the one with the greatest sum of weights, i.e. for each node that meets all of the scheduling requirements (resource request, requiredDuringScheduling affinity expressions, etc.), compute a sum by iterating through the elements of this field and adding 'weight' to the sum if the node has pods which matches the corresponding podAffinityTerm; the node(s) with the highest sum are the most preferred. (see [below for nested schema](#nestedatt--spec--affinity--pod_affinity--preferred_during_scheduling_ignored_during_execution)) -- `required_during_scheduling_ignored_during_execution` (Attributes List) If the affinity requirements specified by this field are not met at scheduling time, the pod will not be scheduled onto the node. If the affinity requirements specified by this field cease to be met at some point during pod execution (e.g. due to a pod label update), the system may or may not try to eventually evict the pod from its node. When there are multiple elements, the lists of nodes corresponding to each podAffinityTerm are intersected, i.e. all terms must be satisfied. (see [below for nested schema](#nestedatt--spec--affinity--pod_affinity--required_during_scheduling_ignored_during_execution)) +- `preferred_during_scheduling_ignored_during_execution` (Attributes List) The scheduler will prefer to schedule pods to nodes that satisfythe affinity expressions specified by this field, but it may choosea node that violates one or more of the expressions. The node that ismost preferred is the one with the greatest sum of weights, i.e.for each node that meets all of the scheduling requirements (resourcerequest, requiredDuringScheduling affinity expressions, etc.),compute a sum by iterating through the elements of this field and adding'weight' to the sum if the node has pods which matches the corresponding podAffinityTerm; thenode(s) with the highest sum are the most preferred. (see [below for nested schema](#nestedatt--spec--affinity--pod_affinity--preferred_during_scheduling_ignored_during_execution)) +- `required_during_scheduling_ignored_during_execution` (Attributes List) If the affinity requirements specified by this field are not met atscheduling time, the pod will not be scheduled onto the node.If the affinity requirements specified by this field cease to be metat some point during pod execution (e.g. due to a pod label update), thesystem may or may not try to eventually evict the pod from its node.When there are multiple elements, the lists of nodes corresponding to eachpodAffinityTerm are intersected, i.e. all terms must be satisfied. (see [below for nested schema](#nestedatt--spec--affinity--pod_affinity--required_during_scheduling_ignored_during_execution)) ### Nested Schema for `spec.affinity.pod_affinity.preferred_during_scheduling_ignored_during_execution` @@ -195,20 +195,20 @@ Optional: Required: - `pod_affinity_term` (Attributes) Required. A pod affinity term, associated with the corresponding weight. (see [below for nested schema](#nestedatt--spec--affinity--pod_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term)) -- `weight` (Number) weight associated with matching the corresponding podAffinityTerm, in the range 1-100. +- `weight` (Number) weight associated with matching the corresponding podAffinityTerm,in the range 1-100. ### Nested Schema for `spec.affinity.pod_affinity.preferred_during_scheduling_ignored_during_execution.pod_affinity_term` Required: -- `topology_key` (String) This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matching the labelSelector in the specified namespaces, where co-located is defined as running on a node whose value of the label with key topologyKey matches that of any node on which any of the selected pods is running. Empty topologyKey is not allowed. +- `topology_key` (String) This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matchingthe labelSelector in the specified namespaces, where co-located is defined as running on a nodewhose value of the label with key topologyKey matches that of any node on which any of theselected pods is running.Empty topologyKey is not allowed. Optional: - `label_selector` (Attributes) A label query over a set of resources, in this case pods. (see [below for nested schema](#nestedatt--spec--affinity--pod_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--label_selector)) -- `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means 'this pod's namespace'. An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--affinity--pod_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--namespace_selector)) -- `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to. The term is applied to the union of the namespaces listed in this field and the ones selected by namespaceSelector. null or empty namespaces list and null namespaceSelector means 'this pod's namespace'. +- `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--affinity--pod_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--namespace_selector)) +- `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'. ### Nested Schema for `spec.affinity.pod_affinity.preferred_during_scheduling_ignored_during_execution.pod_affinity_term.label_selector` @@ -216,7 +216,7 @@ Optional: Optional: - `match_expressions` (Attributes List) matchExpressions is a list of label selector requirements. The requirements are ANDed. (see [below for nested schema](#nestedatt--spec--affinity--pod_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--label_selector--match_expressions)) -- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is 'key', the operator is 'In', and the values array contains only 'value'. The requirements are ANDed. +- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed. ### Nested Schema for `spec.affinity.pod_affinity.preferred_during_scheduling_ignored_during_execution.pod_affinity_term.label_selector.match_expressions` @@ -224,11 +224,11 @@ Optional: Required: - `key` (String) key is the label key that the selector applies to. -- `operator` (String) operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist. +- `operator` (String) operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist. Optional: -- `values` (List of String) values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch. +- `values` (List of String) values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch. @@ -238,7 +238,7 @@ Optional: Optional: - `match_expressions` (Attributes List) matchExpressions is a list of label selector requirements. The requirements are ANDed. (see [below for nested schema](#nestedatt--spec--affinity--pod_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--namespace_selector--match_expressions)) -- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is 'key', the operator is 'In', and the values array contains only 'value'. The requirements are ANDed. +- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed. ### Nested Schema for `spec.affinity.pod_affinity.preferred_during_scheduling_ignored_during_execution.pod_affinity_term.namespace_selector.match_expressions` @@ -246,11 +246,11 @@ Optional: Required: - `key` (String) key is the label key that the selector applies to. -- `operator` (String) operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist. +- `operator` (String) operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist. Optional: -- `values` (List of String) values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch. +- `values` (List of String) values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch. @@ -261,13 +261,13 @@ Optional: Required: -- `topology_key` (String) This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matching the labelSelector in the specified namespaces, where co-located is defined as running on a node whose value of the label with key topologyKey matches that of any node on which any of the selected pods is running. Empty topologyKey is not allowed. +- `topology_key` (String) This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matchingthe labelSelector in the specified namespaces, where co-located is defined as running on a nodewhose value of the label with key topologyKey matches that of any node on which any of theselected pods is running.Empty topologyKey is not allowed. Optional: - `label_selector` (Attributes) A label query over a set of resources, in this case pods. (see [below for nested schema](#nestedatt--spec--affinity--pod_affinity--required_during_scheduling_ignored_during_execution--label_selector)) -- `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means 'this pod's namespace'. An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--affinity--pod_affinity--required_during_scheduling_ignored_during_execution--namespace_selector)) -- `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to. The term is applied to the union of the namespaces listed in this field and the ones selected by namespaceSelector. null or empty namespaces list and null namespaceSelector means 'this pod's namespace'. +- `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--affinity--pod_affinity--required_during_scheduling_ignored_during_execution--namespace_selector)) +- `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'. ### Nested Schema for `spec.affinity.pod_affinity.required_during_scheduling_ignored_during_execution.label_selector` @@ -275,7 +275,7 @@ Optional: Optional: - `match_expressions` (Attributes List) matchExpressions is a list of label selector requirements. The requirements are ANDed. (see [below for nested schema](#nestedatt--spec--affinity--pod_affinity--required_during_scheduling_ignored_during_execution--label_selector--match_expressions)) -- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is 'key', the operator is 'In', and the values array contains only 'value'. The requirements are ANDed. +- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed. ### Nested Schema for `spec.affinity.pod_affinity.required_during_scheduling_ignored_during_execution.label_selector.match_expressions` @@ -283,11 +283,11 @@ Optional: Required: - `key` (String) key is the label key that the selector applies to. -- `operator` (String) operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist. +- `operator` (String) operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist. Optional: -- `values` (List of String) values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch. +- `values` (List of String) values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch. @@ -297,7 +297,7 @@ Optional: Optional: - `match_expressions` (Attributes List) matchExpressions is a list of label selector requirements. The requirements are ANDed. (see [below for nested schema](#nestedatt--spec--affinity--pod_affinity--required_during_scheduling_ignored_during_execution--namespace_selector--match_expressions)) -- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is 'key', the operator is 'In', and the values array contains only 'value'. The requirements are ANDed. +- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed. ### Nested Schema for `spec.affinity.pod_affinity.required_during_scheduling_ignored_during_execution.namespace_selector.match_expressions` @@ -305,11 +305,11 @@ Optional: Required: - `key` (String) key is the label key that the selector applies to. -- `operator` (String) operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist. +- `operator` (String) operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist. Optional: -- `values` (List of String) values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch. +- `values` (List of String) values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch. @@ -320,8 +320,8 @@ Optional: Optional: -- `preferred_during_scheduling_ignored_during_execution` (Attributes List) The scheduler will prefer to schedule pods to nodes that satisfy the anti-affinity expressions specified by this field, but it may choose a node that violates one or more of the expressions. The node that is most preferred is the one with the greatest sum of weights, i.e. for each node that meets all of the scheduling requirements (resource request, requiredDuringScheduling anti-affinity expressions, etc.), compute a sum by iterating through the elements of this field and adding 'weight' to the sum if the node has pods which matches the corresponding podAffinityTerm; the node(s) with the highest sum are the most preferred. (see [below for nested schema](#nestedatt--spec--affinity--pod_anti_affinity--preferred_during_scheduling_ignored_during_execution)) -- `required_during_scheduling_ignored_during_execution` (Attributes List) If the anti-affinity requirements specified by this field are not met at scheduling time, the pod will not be scheduled onto the node. If the anti-affinity requirements specified by this field cease to be met at some point during pod execution (e.g. due to a pod label update), the system may or may not try to eventually evict the pod from its node. When there are multiple elements, the lists of nodes corresponding to each podAffinityTerm are intersected, i.e. all terms must be satisfied. (see [below for nested schema](#nestedatt--spec--affinity--pod_anti_affinity--required_during_scheduling_ignored_during_execution)) +- `preferred_during_scheduling_ignored_during_execution` (Attributes List) The scheduler will prefer to schedule pods to nodes that satisfythe anti-affinity expressions specified by this field, but it may choosea node that violates one or more of the expressions. The node that ismost preferred is the one with the greatest sum of weights, i.e.for each node that meets all of the scheduling requirements (resourcerequest, requiredDuringScheduling anti-affinity expressions, etc.),compute a sum by iterating through the elements of this field and adding'weight' to the sum if the node has pods which matches the corresponding podAffinityTerm; thenode(s) with the highest sum are the most preferred. (see [below for nested schema](#nestedatt--spec--affinity--pod_anti_affinity--preferred_during_scheduling_ignored_during_execution)) +- `required_during_scheduling_ignored_during_execution` (Attributes List) If the anti-affinity requirements specified by this field are not met atscheduling time, the pod will not be scheduled onto the node.If the anti-affinity requirements specified by this field cease to be metat some point during pod execution (e.g. due to a pod label update), thesystem may or may not try to eventually evict the pod from its node.When there are multiple elements, the lists of nodes corresponding to eachpodAffinityTerm are intersected, i.e. all terms must be satisfied. (see [below for nested schema](#nestedatt--spec--affinity--pod_anti_affinity--required_during_scheduling_ignored_during_execution)) ### Nested Schema for `spec.affinity.pod_anti_affinity.preferred_during_scheduling_ignored_during_execution` @@ -329,20 +329,20 @@ Optional: Required: - `pod_affinity_term` (Attributes) Required. A pod affinity term, associated with the corresponding weight. (see [below for nested schema](#nestedatt--spec--affinity--pod_anti_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term)) -- `weight` (Number) weight associated with matching the corresponding podAffinityTerm, in the range 1-100. +- `weight` (Number) weight associated with matching the corresponding podAffinityTerm,in the range 1-100. ### Nested Schema for `spec.affinity.pod_anti_affinity.preferred_during_scheduling_ignored_during_execution.pod_affinity_term` Required: -- `topology_key` (String) This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matching the labelSelector in the specified namespaces, where co-located is defined as running on a node whose value of the label with key topologyKey matches that of any node on which any of the selected pods is running. Empty topologyKey is not allowed. +- `topology_key` (String) This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matchingthe labelSelector in the specified namespaces, where co-located is defined as running on a nodewhose value of the label with key topologyKey matches that of any node on which any of theselected pods is running.Empty topologyKey is not allowed. Optional: - `label_selector` (Attributes) A label query over a set of resources, in this case pods. (see [below for nested schema](#nestedatt--spec--affinity--pod_anti_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--label_selector)) -- `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means 'this pod's namespace'. An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--affinity--pod_anti_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--namespace_selector)) -- `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to. The term is applied to the union of the namespaces listed in this field and the ones selected by namespaceSelector. null or empty namespaces list and null namespaceSelector means 'this pod's namespace'. +- `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--affinity--pod_anti_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--namespace_selector)) +- `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'. ### Nested Schema for `spec.affinity.pod_anti_affinity.preferred_during_scheduling_ignored_during_execution.pod_affinity_term.label_selector` @@ -350,7 +350,7 @@ Optional: Optional: - `match_expressions` (Attributes List) matchExpressions is a list of label selector requirements. The requirements are ANDed. (see [below for nested schema](#nestedatt--spec--affinity--pod_anti_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--label_selector--match_expressions)) -- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is 'key', the operator is 'In', and the values array contains only 'value'. The requirements are ANDed. +- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed. ### Nested Schema for `spec.affinity.pod_anti_affinity.preferred_during_scheduling_ignored_during_execution.pod_affinity_term.label_selector.match_expressions` @@ -358,11 +358,11 @@ Optional: Required: - `key` (String) key is the label key that the selector applies to. -- `operator` (String) operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist. +- `operator` (String) operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist. Optional: -- `values` (List of String) values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch. +- `values` (List of String) values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch. @@ -372,7 +372,7 @@ Optional: Optional: - `match_expressions` (Attributes List) matchExpressions is a list of label selector requirements. The requirements are ANDed. (see [below for nested schema](#nestedatt--spec--affinity--pod_anti_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--namespace_selector--match_expressions)) -- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is 'key', the operator is 'In', and the values array contains only 'value'. The requirements are ANDed. +- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed. ### Nested Schema for `spec.affinity.pod_anti_affinity.preferred_during_scheduling_ignored_during_execution.pod_affinity_term.namespace_selector.match_expressions` @@ -380,11 +380,11 @@ Optional: Required: - `key` (String) key is the label key that the selector applies to. -- `operator` (String) operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist. +- `operator` (String) operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist. Optional: -- `values` (List of String) values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch. +- `values` (List of String) values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch. @@ -395,13 +395,13 @@ Optional: Required: -- `topology_key` (String) This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matching the labelSelector in the specified namespaces, where co-located is defined as running on a node whose value of the label with key topologyKey matches that of any node on which any of the selected pods is running. Empty topologyKey is not allowed. +- `topology_key` (String) This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matchingthe labelSelector in the specified namespaces, where co-located is defined as running on a nodewhose value of the label with key topologyKey matches that of any node on which any of theselected pods is running.Empty topologyKey is not allowed. Optional: - `label_selector` (Attributes) A label query over a set of resources, in this case pods. (see [below for nested schema](#nestedatt--spec--affinity--pod_anti_affinity--required_during_scheduling_ignored_during_execution--label_selector)) -- `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means 'this pod's namespace'. An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--affinity--pod_anti_affinity--required_during_scheduling_ignored_during_execution--namespace_selector)) -- `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to. The term is applied to the union of the namespaces listed in this field and the ones selected by namespaceSelector. null or empty namespaces list and null namespaceSelector means 'this pod's namespace'. +- `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--affinity--pod_anti_affinity--required_during_scheduling_ignored_during_execution--namespace_selector)) +- `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'. ### Nested Schema for `spec.affinity.pod_anti_affinity.required_during_scheduling_ignored_during_execution.label_selector` @@ -409,7 +409,7 @@ Optional: Optional: - `match_expressions` (Attributes List) matchExpressions is a list of label selector requirements. The requirements are ANDed. (see [below for nested schema](#nestedatt--spec--affinity--pod_anti_affinity--required_during_scheduling_ignored_during_execution--label_selector--match_expressions)) -- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is 'key', the operator is 'In', and the values array contains only 'value'. The requirements are ANDed. +- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed. ### Nested Schema for `spec.affinity.pod_anti_affinity.required_during_scheduling_ignored_during_execution.label_selector.match_expressions` @@ -417,11 +417,11 @@ Optional: Required: - `key` (String) key is the label key that the selector applies to. -- `operator` (String) operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist. +- `operator` (String) operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist. Optional: -- `values` (List of String) values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch. +- `values` (List of String) values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch. @@ -431,7 +431,7 @@ Optional: Optional: - `match_expressions` (Attributes List) matchExpressions is a list of label selector requirements. The requirements are ANDed. (see [below for nested schema](#nestedatt--spec--affinity--pod_anti_affinity--required_during_scheduling_ignored_during_execution--namespace_selector--match_expressions)) -- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is 'key', the operator is 'In', and the values array contains only 'value'. The requirements are ANDed. +- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed. ### Nested Schema for `spec.affinity.pod_anti_affinity.required_during_scheduling_ignored_during_execution.namespace_selector.match_expressions` @@ -439,11 +439,11 @@ Optional: Required: - `key` (String) key is the label key that the selector applies to. -- `operator` (String) operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist. +- `operator` (String) operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist. Optional: -- `values` (List of String) values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch. +- `values` (List of String) values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch. @@ -594,8 +594,8 @@ Optional: Optional: -- `preferred_during_scheduling_ignored_during_execution` (Attributes List) The scheduler will prefer to schedule pods to nodes that satisfy the affinity expressions specified by this field, but it may choose a node that violates one or more of the expressions. The node that is most preferred is the one with the greatest sum of weights, i.e. for each node that meets all of the scheduling requirements (resource request, requiredDuringScheduling affinity expressions, etc.), compute a sum by iterating through the elements of this field and adding 'weight' to the sum if the node matches the corresponding matchExpressions; the node(s) with the highest sum are the most preferred. (see [below for nested schema](#nestedatt--spec--scheduling--affinity--node_affinity--preferred_during_scheduling_ignored_during_execution)) -- `required_during_scheduling_ignored_during_execution` (Attributes) If the affinity requirements specified by this field are not met at scheduling time, the pod will not be scheduled onto the node. If the affinity requirements specified by this field cease to be met at some point during pod execution (e.g. due to an update), the system may or may not try to eventually evict the pod from its node. (see [below for nested schema](#nestedatt--spec--scheduling--affinity--node_affinity--required_during_scheduling_ignored_during_execution)) +- `preferred_during_scheduling_ignored_during_execution` (Attributes List) The scheduler will prefer to schedule pods to nodes that satisfythe affinity expressions specified by this field, but it may choosea node that violates one or more of the expressions. The node that ismost preferred is the one with the greatest sum of weights, i.e.for each node that meets all of the scheduling requirements (resourcerequest, requiredDuringScheduling affinity expressions, etc.),compute a sum by iterating through the elements of this field and adding'weight' to the sum if the node matches the corresponding matchExpressions; thenode(s) with the highest sum are the most preferred. (see [below for nested schema](#nestedatt--spec--scheduling--affinity--node_affinity--preferred_during_scheduling_ignored_during_execution)) +- `required_during_scheduling_ignored_during_execution` (Attributes) If the affinity requirements specified by this field are not met atscheduling time, the pod will not be scheduled onto the node.If the affinity requirements specified by this field cease to be metat some point during pod execution (e.g. due to an update), the systemmay or may not try to eventually evict the pod from its node. (see [below for nested schema](#nestedatt--spec--scheduling--affinity--node_affinity--required_during_scheduling_ignored_during_execution)) ### Nested Schema for `spec.scheduling.affinity.node_affinity.preferred_during_scheduling_ignored_during_execution` @@ -619,11 +619,11 @@ Optional: Required: - `key` (String) The label key that the selector applies to. -- `operator` (String) Represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt. +- `operator` (String) Represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt. Optional: -- `values` (List of String) An array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. If the operator is Gt or Lt, the values array must have a single element, which will be interpreted as an integer. This array is replaced during a strategic merge patch. +- `values` (List of String) An array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. If the operator is Gt or Lt, the valuesarray must have a single element, which will be interpreted as an integer.This array is replaced during a strategic merge patch. @@ -632,11 +632,11 @@ Optional: Required: - `key` (String) The label key that the selector applies to. -- `operator` (String) Represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt. +- `operator` (String) Represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt. Optional: -- `values` (List of String) An array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. If the operator is Gt or Lt, the values array must have a single element, which will be interpreted as an integer. This array is replaced during a strategic merge patch. +- `values` (List of String) An array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. If the operator is Gt or Lt, the valuesarray must have a single element, which will be interpreted as an integer.This array is replaced during a strategic merge patch. @@ -662,11 +662,11 @@ Optional: Required: - `key` (String) The label key that the selector applies to. -- `operator` (String) Represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt. +- `operator` (String) Represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt. Optional: -- `values` (List of String) An array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. If the operator is Gt or Lt, the values array must have a single element, which will be interpreted as an integer. This array is replaced during a strategic merge patch. +- `values` (List of String) An array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. If the operator is Gt or Lt, the valuesarray must have a single element, which will be interpreted as an integer.This array is replaced during a strategic merge patch. @@ -675,11 +675,11 @@ Optional: Required: - `key` (String) The label key that the selector applies to. -- `operator` (String) Represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt. +- `operator` (String) Represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt. Optional: -- `values` (List of String) An array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. If the operator is Gt or Lt, the values array must have a single element, which will be interpreted as an integer. This array is replaced during a strategic merge patch. +- `values` (List of String) An array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. If the operator is Gt or Lt, the valuesarray must have a single element, which will be interpreted as an integer.This array is replaced during a strategic merge patch. @@ -690,8 +690,8 @@ Optional: Optional: -- `preferred_during_scheduling_ignored_during_execution` (Attributes List) The scheduler will prefer to schedule pods to nodes that satisfy the affinity expressions specified by this field, but it may choose a node that violates one or more of the expressions. The node that is most preferred is the one with the greatest sum of weights, i.e. for each node that meets all of the scheduling requirements (resource request, requiredDuringScheduling affinity expressions, etc.), compute a sum by iterating through the elements of this field and adding 'weight' to the sum if the node has pods which matches the corresponding podAffinityTerm; the node(s) with the highest sum are the most preferred. (see [below for nested schema](#nestedatt--spec--scheduling--affinity--pod_affinity--preferred_during_scheduling_ignored_during_execution)) -- `required_during_scheduling_ignored_during_execution` (Attributes List) If the affinity requirements specified by this field are not met at scheduling time, the pod will not be scheduled onto the node. If the affinity requirements specified by this field cease to be met at some point during pod execution (e.g. due to a pod label update), the system may or may not try to eventually evict the pod from its node. When there are multiple elements, the lists of nodes corresponding to each podAffinityTerm are intersected, i.e. all terms must be satisfied. (see [below for nested schema](#nestedatt--spec--scheduling--affinity--pod_affinity--required_during_scheduling_ignored_during_execution)) +- `preferred_during_scheduling_ignored_during_execution` (Attributes List) The scheduler will prefer to schedule pods to nodes that satisfythe affinity expressions specified by this field, but it may choosea node that violates one or more of the expressions. The node that ismost preferred is the one with the greatest sum of weights, i.e.for each node that meets all of the scheduling requirements (resourcerequest, requiredDuringScheduling affinity expressions, etc.),compute a sum by iterating through the elements of this field and adding'weight' to the sum if the node has pods which matches the corresponding podAffinityTerm; thenode(s) with the highest sum are the most preferred. (see [below for nested schema](#nestedatt--spec--scheduling--affinity--pod_affinity--preferred_during_scheduling_ignored_during_execution)) +- `required_during_scheduling_ignored_during_execution` (Attributes List) If the affinity requirements specified by this field are not met atscheduling time, the pod will not be scheduled onto the node.If the affinity requirements specified by this field cease to be metat some point during pod execution (e.g. due to a pod label update), thesystem may or may not try to eventually evict the pod from its node.When there are multiple elements, the lists of nodes corresponding to eachpodAffinityTerm are intersected, i.e. all terms must be satisfied. (see [below for nested schema](#nestedatt--spec--scheduling--affinity--pod_affinity--required_during_scheduling_ignored_during_execution)) ### Nested Schema for `spec.scheduling.affinity.pod_affinity.preferred_during_scheduling_ignored_during_execution` @@ -699,20 +699,20 @@ Optional: Required: - `pod_affinity_term` (Attributes) Required. A pod affinity term, associated with the corresponding weight. (see [below for nested schema](#nestedatt--spec--scheduling--affinity--pod_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term)) -- `weight` (Number) weight associated with matching the corresponding podAffinityTerm, in the range 1-100. +- `weight` (Number) weight associated with matching the corresponding podAffinityTerm,in the range 1-100. ### Nested Schema for `spec.scheduling.affinity.pod_affinity.preferred_during_scheduling_ignored_during_execution.pod_affinity_term` Required: -- `topology_key` (String) This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matching the labelSelector in the specified namespaces, where co-located is defined as running on a node whose value of the label with key topologyKey matches that of any node on which any of the selected pods is running. Empty topologyKey is not allowed. +- `topology_key` (String) This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matchingthe labelSelector in the specified namespaces, where co-located is defined as running on a nodewhose value of the label with key topologyKey matches that of any node on which any of theselected pods is running.Empty topologyKey is not allowed. Optional: - `label_selector` (Attributes) A label query over a set of resources, in this case pods. (see [below for nested schema](#nestedatt--spec--scheduling--affinity--pod_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--label_selector)) -- `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means 'this pod's namespace'. An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--scheduling--affinity--pod_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--namespace_selector)) -- `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to. The term is applied to the union of the namespaces listed in this field and the ones selected by namespaceSelector. null or empty namespaces list and null namespaceSelector means 'this pod's namespace'. +- `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--scheduling--affinity--pod_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--namespace_selector)) +- `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'. ### Nested Schema for `spec.scheduling.affinity.pod_affinity.preferred_during_scheduling_ignored_during_execution.pod_affinity_term.label_selector` @@ -720,7 +720,7 @@ Optional: Optional: - `match_expressions` (Attributes List) matchExpressions is a list of label selector requirements. The requirements are ANDed. (see [below for nested schema](#nestedatt--spec--scheduling--affinity--pod_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--label_selector--match_expressions)) -- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is 'key', the operator is 'In', and the values array contains only 'value'. The requirements are ANDed. +- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed. ### Nested Schema for `spec.scheduling.affinity.pod_affinity.preferred_during_scheduling_ignored_during_execution.pod_affinity_term.label_selector.match_expressions` @@ -728,11 +728,11 @@ Optional: Required: - `key` (String) key is the label key that the selector applies to. -- `operator` (String) operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist. +- `operator` (String) operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist. Optional: -- `values` (List of String) values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch. +- `values` (List of String) values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch. @@ -742,7 +742,7 @@ Optional: Optional: - `match_expressions` (Attributes List) matchExpressions is a list of label selector requirements. The requirements are ANDed. (see [below for nested schema](#nestedatt--spec--scheduling--affinity--pod_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--namespace_selector--match_expressions)) -- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is 'key', the operator is 'In', and the values array contains only 'value'. The requirements are ANDed. +- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed. ### Nested Schema for `spec.scheduling.affinity.pod_affinity.preferred_during_scheduling_ignored_during_execution.pod_affinity_term.namespace_selector.match_expressions` @@ -750,11 +750,11 @@ Optional: Required: - `key` (String) key is the label key that the selector applies to. -- `operator` (String) operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist. +- `operator` (String) operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist. Optional: -- `values` (List of String) values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch. +- `values` (List of String) values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch. @@ -765,13 +765,13 @@ Optional: Required: -- `topology_key` (String) This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matching the labelSelector in the specified namespaces, where co-located is defined as running on a node whose value of the label with key topologyKey matches that of any node on which any of the selected pods is running. Empty topologyKey is not allowed. +- `topology_key` (String) This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matchingthe labelSelector in the specified namespaces, where co-located is defined as running on a nodewhose value of the label with key topologyKey matches that of any node on which any of theselected pods is running.Empty topologyKey is not allowed. Optional: - `label_selector` (Attributes) A label query over a set of resources, in this case pods. (see [below for nested schema](#nestedatt--spec--scheduling--affinity--pod_affinity--required_during_scheduling_ignored_during_execution--label_selector)) -- `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means 'this pod's namespace'. An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--scheduling--affinity--pod_affinity--required_during_scheduling_ignored_during_execution--namespace_selector)) -- `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to. The term is applied to the union of the namespaces listed in this field and the ones selected by namespaceSelector. null or empty namespaces list and null namespaceSelector means 'this pod's namespace'. +- `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--scheduling--affinity--pod_affinity--required_during_scheduling_ignored_during_execution--namespace_selector)) +- `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'. ### Nested Schema for `spec.scheduling.affinity.pod_affinity.required_during_scheduling_ignored_during_execution.label_selector` @@ -779,7 +779,7 @@ Optional: Optional: - `match_expressions` (Attributes List) matchExpressions is a list of label selector requirements. The requirements are ANDed. (see [below for nested schema](#nestedatt--spec--scheduling--affinity--pod_affinity--required_during_scheduling_ignored_during_execution--label_selector--match_expressions)) -- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is 'key', the operator is 'In', and the values array contains only 'value'. The requirements are ANDed. +- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed. ### Nested Schema for `spec.scheduling.affinity.pod_affinity.required_during_scheduling_ignored_during_execution.label_selector.match_expressions` @@ -787,11 +787,11 @@ Optional: Required: - `key` (String) key is the label key that the selector applies to. -- `operator` (String) operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist. +- `operator` (String) operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist. Optional: -- `values` (List of String) values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch. +- `values` (List of String) values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch. @@ -801,7 +801,7 @@ Optional: Optional: - `match_expressions` (Attributes List) matchExpressions is a list of label selector requirements. The requirements are ANDed. (see [below for nested schema](#nestedatt--spec--scheduling--affinity--pod_affinity--required_during_scheduling_ignored_during_execution--namespace_selector--match_expressions)) -- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is 'key', the operator is 'In', and the values array contains only 'value'. The requirements are ANDed. +- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed. ### Nested Schema for `spec.scheduling.affinity.pod_affinity.required_during_scheduling_ignored_during_execution.namespace_selector.match_expressions` @@ -809,11 +809,11 @@ Optional: Required: - `key` (String) key is the label key that the selector applies to. -- `operator` (String) operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist. +- `operator` (String) operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist. Optional: -- `values` (List of String) values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch. +- `values` (List of String) values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch. @@ -824,8 +824,8 @@ Optional: Optional: -- `preferred_during_scheduling_ignored_during_execution` (Attributes List) The scheduler will prefer to schedule pods to nodes that satisfy the anti-affinity expressions specified by this field, but it may choose a node that violates one or more of the expressions. The node that is most preferred is the one with the greatest sum of weights, i.e. for each node that meets all of the scheduling requirements (resource request, requiredDuringScheduling anti-affinity expressions, etc.), compute a sum by iterating through the elements of this field and adding 'weight' to the sum if the node has pods which matches the corresponding podAffinityTerm; the node(s) with the highest sum are the most preferred. (see [below for nested schema](#nestedatt--spec--scheduling--affinity--pod_anti_affinity--preferred_during_scheduling_ignored_during_execution)) -- `required_during_scheduling_ignored_during_execution` (Attributes List) If the anti-affinity requirements specified by this field are not met at scheduling time, the pod will not be scheduled onto the node. If the anti-affinity requirements specified by this field cease to be met at some point during pod execution (e.g. due to a pod label update), the system may or may not try to eventually evict the pod from its node. When there are multiple elements, the lists of nodes corresponding to each podAffinityTerm are intersected, i.e. all terms must be satisfied. (see [below for nested schema](#nestedatt--spec--scheduling--affinity--pod_anti_affinity--required_during_scheduling_ignored_during_execution)) +- `preferred_during_scheduling_ignored_during_execution` (Attributes List) The scheduler will prefer to schedule pods to nodes that satisfythe anti-affinity expressions specified by this field, but it may choosea node that violates one or more of the expressions. The node that ismost preferred is the one with the greatest sum of weights, i.e.for each node that meets all of the scheduling requirements (resourcerequest, requiredDuringScheduling anti-affinity expressions, etc.),compute a sum by iterating through the elements of this field and adding'weight' to the sum if the node has pods which matches the corresponding podAffinityTerm; thenode(s) with the highest sum are the most preferred. (see [below for nested schema](#nestedatt--spec--scheduling--affinity--pod_anti_affinity--preferred_during_scheduling_ignored_during_execution)) +- `required_during_scheduling_ignored_during_execution` (Attributes List) If the anti-affinity requirements specified by this field are not met atscheduling time, the pod will not be scheduled onto the node.If the anti-affinity requirements specified by this field cease to be metat some point during pod execution (e.g. due to a pod label update), thesystem may or may not try to eventually evict the pod from its node.When there are multiple elements, the lists of nodes corresponding to eachpodAffinityTerm are intersected, i.e. all terms must be satisfied. (see [below for nested schema](#nestedatt--spec--scheduling--affinity--pod_anti_affinity--required_during_scheduling_ignored_during_execution)) ### Nested Schema for `spec.scheduling.affinity.pod_anti_affinity.preferred_during_scheduling_ignored_during_execution` @@ -833,20 +833,20 @@ Optional: Required: - `pod_affinity_term` (Attributes) Required. A pod affinity term, associated with the corresponding weight. (see [below for nested schema](#nestedatt--spec--scheduling--affinity--pod_anti_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term)) -- `weight` (Number) weight associated with matching the corresponding podAffinityTerm, in the range 1-100. +- `weight` (Number) weight associated with matching the corresponding podAffinityTerm,in the range 1-100. ### Nested Schema for `spec.scheduling.affinity.pod_anti_affinity.preferred_during_scheduling_ignored_during_execution.pod_affinity_term` Required: -- `topology_key` (String) This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matching the labelSelector in the specified namespaces, where co-located is defined as running on a node whose value of the label with key topologyKey matches that of any node on which any of the selected pods is running. Empty topologyKey is not allowed. +- `topology_key` (String) This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matchingthe labelSelector in the specified namespaces, where co-located is defined as running on a nodewhose value of the label with key topologyKey matches that of any node on which any of theselected pods is running.Empty topologyKey is not allowed. Optional: - `label_selector` (Attributes) A label query over a set of resources, in this case pods. (see [below for nested schema](#nestedatt--spec--scheduling--affinity--pod_anti_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--label_selector)) -- `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means 'this pod's namespace'. An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--scheduling--affinity--pod_anti_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--namespace_selector)) -- `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to. The term is applied to the union of the namespaces listed in this field and the ones selected by namespaceSelector. null or empty namespaces list and null namespaceSelector means 'this pod's namespace'. +- `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--scheduling--affinity--pod_anti_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--namespace_selector)) +- `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'. ### Nested Schema for `spec.scheduling.affinity.pod_anti_affinity.preferred_during_scheduling_ignored_during_execution.pod_affinity_term.label_selector` @@ -854,7 +854,7 @@ Optional: Optional: - `match_expressions` (Attributes List) matchExpressions is a list of label selector requirements. The requirements are ANDed. (see [below for nested schema](#nestedatt--spec--scheduling--affinity--pod_anti_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--label_selector--match_expressions)) -- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is 'key', the operator is 'In', and the values array contains only 'value'. The requirements are ANDed. +- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed. ### Nested Schema for `spec.scheduling.affinity.pod_anti_affinity.preferred_during_scheduling_ignored_during_execution.pod_affinity_term.label_selector.match_expressions` @@ -862,11 +862,11 @@ Optional: Required: - `key` (String) key is the label key that the selector applies to. -- `operator` (String) operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist. +- `operator` (String) operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist. Optional: -- `values` (List of String) values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch. +- `values` (List of String) values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch. @@ -876,7 +876,7 @@ Optional: Optional: - `match_expressions` (Attributes List) matchExpressions is a list of label selector requirements. The requirements are ANDed. (see [below for nested schema](#nestedatt--spec--scheduling--affinity--pod_anti_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--namespace_selector--match_expressions)) -- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is 'key', the operator is 'In', and the values array contains only 'value'. The requirements are ANDed. +- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed. ### Nested Schema for `spec.scheduling.affinity.pod_anti_affinity.preferred_during_scheduling_ignored_during_execution.pod_affinity_term.namespace_selector.match_expressions` @@ -884,11 +884,11 @@ Optional: Required: - `key` (String) key is the label key that the selector applies to. -- `operator` (String) operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist. +- `operator` (String) operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist. Optional: -- `values` (List of String) values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch. +- `values` (List of String) values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch. @@ -899,13 +899,13 @@ Optional: Required: -- `topology_key` (String) This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matching the labelSelector in the specified namespaces, where co-located is defined as running on a node whose value of the label with key topologyKey matches that of any node on which any of the selected pods is running. Empty topologyKey is not allowed. +- `topology_key` (String) This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matchingthe labelSelector in the specified namespaces, where co-located is defined as running on a nodewhose value of the label with key topologyKey matches that of any node on which any of theselected pods is running.Empty topologyKey is not allowed. Optional: - `label_selector` (Attributes) A label query over a set of resources, in this case pods. (see [below for nested schema](#nestedatt--spec--scheduling--affinity--pod_anti_affinity--required_during_scheduling_ignored_during_execution--label_selector)) -- `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means 'this pod's namespace'. An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--scheduling--affinity--pod_anti_affinity--required_during_scheduling_ignored_during_execution--namespace_selector)) -- `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to. The term is applied to the union of the namespaces listed in this field and the ones selected by namespaceSelector. null or empty namespaces list and null namespaceSelector means 'this pod's namespace'. +- `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--scheduling--affinity--pod_anti_affinity--required_during_scheduling_ignored_during_execution--namespace_selector)) +- `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'. ### Nested Schema for `spec.scheduling.affinity.pod_anti_affinity.required_during_scheduling_ignored_during_execution.label_selector` @@ -913,7 +913,7 @@ Optional: Optional: - `match_expressions` (Attributes List) matchExpressions is a list of label selector requirements. The requirements are ANDed. (see [below for nested schema](#nestedatt--spec--scheduling--affinity--pod_anti_affinity--required_during_scheduling_ignored_during_execution--label_selector--match_expressions)) -- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is 'key', the operator is 'In', and the values array contains only 'value'. The requirements are ANDed. +- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed. ### Nested Schema for `spec.scheduling.affinity.pod_anti_affinity.required_during_scheduling_ignored_during_execution.label_selector.match_expressions` @@ -921,11 +921,11 @@ Optional: Required: - `key` (String) key is the label key that the selector applies to. -- `operator` (String) operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist. +- `operator` (String) operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist. Optional: -- `values` (List of String) values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch. +- `values` (List of String) values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch. @@ -935,7 +935,7 @@ Optional: Optional: - `match_expressions` (Attributes List) matchExpressions is a list of label selector requirements. The requirements are ANDed. (see [below for nested schema](#nestedatt--spec--scheduling--affinity--pod_anti_affinity--required_during_scheduling_ignored_during_execution--namespace_selector--match_expressions)) -- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is 'key', the operator is 'In', and the values array contains only 'value'. The requirements are ANDed. +- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed. ### Nested Schema for `spec.scheduling.affinity.pod_anti_affinity.required_during_scheduling_ignored_during_execution.namespace_selector.match_expressions` @@ -943,11 +943,11 @@ Optional: Required: - `key` (String) key is the label key that the selector applies to. -- `operator` (String) operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist. +- `operator` (String) operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist. Optional: -- `values` (List of String) values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch. +- `values` (List of String) values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch. @@ -959,11 +959,11 @@ Optional: Optional: -- `effect` (String) Effect indicates the taint effect to match. Empty means match all taint effects. When specified, allowed values are NoSchedule, PreferNoSchedule and NoExecute. -- `key` (String) Key is the taint key that the toleration applies to. Empty means match all taint keys. If the key is empty, operator must be Exists; this combination means to match all values and all keys. -- `operator` (String) Operator represents a key's relationship to the value. Valid operators are Exists and Equal. Defaults to Equal. Exists is equivalent to wildcard for value, so that a pod can tolerate all taints of a particular category. -- `toleration_seconds` (Number) TolerationSeconds represents the period of time the toleration (which must be of effect NoExecute, otherwise this field is ignored) tolerates the taint. By default, it is not set, which means tolerate the taint forever (do not evict). Zero and negative values will be treated as 0 (evict immediately) by the system. -- `value` (String) Value is the taint value the toleration matches to. If the operator is Exists, the value should be empty, otherwise just a regular string. +- `effect` (String) Effect indicates the taint effect to match. Empty means match all taint effects.When specified, allowed values are NoSchedule, PreferNoSchedule and NoExecute. +- `key` (String) Key is the taint key that the toleration applies to. Empty means match all taint keys.If the key is empty, operator must be Exists; this combination means to match all values and all keys. +- `operator` (String) Operator represents a key's relationship to the value.Valid operators are Exists and Equal. Defaults to Equal.Exists is equivalent to wildcard for value, so that a pod cantolerate all taints of a particular category. +- `toleration_seconds` (Number) TolerationSeconds represents the period of time the toleration (which must beof effect NoExecute, otherwise this field is ignored) tolerates the taint. By default,it is not set, which means tolerate the taint forever (do not evict). Zero andnegative values will be treated as 0 (evict immediately) by the system. +- `value` (String) Value is the taint value the toleration matches to.If the operator is Exists, the value should be empty, otherwise just a regular string. @@ -971,14 +971,14 @@ Optional: Required: -- `max_skew` (Number) MaxSkew describes the degree to which pods may be unevenly distributed. When 'whenUnsatisfiable=DoNotSchedule', it is the maximum permitted difference between the number of matching pods in the target topology and the global minimum. The global minimum is the minimum number of matching pods in an eligible domain or zero if the number of eligible domains is less than MinDomains. For example, in a 3-zone cluster, MaxSkew is set to 1, and pods with the same labelSelector spread as 2/2/1: In this case, the global minimum is 1. | zone1 | zone2 | zone3 | | P P | P P | P | - if MaxSkew is 1, incoming pod can only be scheduled to zone3 to become 2/2/2; scheduling it onto zone1(zone2) would make the ActualSkew(3-1) on zone1(zone2) violate MaxSkew(1). - if MaxSkew is 2, incoming pod can be scheduled onto any zone. When 'whenUnsatisfiable=ScheduleAnyway', it is used to give higher precedence to topologies that satisfy it. It's a required field. Default value is 1 and 0 is not allowed. -- `topology_key` (String) TopologyKey is the key of node labels. Nodes that have a label with this key and identical values are considered to be in the same topology. We consider each as a 'bucket', and try to put balanced number of pods into each bucket. We define a domain as a particular instance of a topology. Also, we define an eligible domain as a domain whose nodes match the node selector. e.g. If TopologyKey is 'kubernetes.io/hostname', each Node is a domain of that topology. And, if TopologyKey is 'topology.kubernetes.io/zone', each zone is a domain of that topology. It's a required field. -- `when_unsatisfiable` (String) WhenUnsatisfiable indicates how to deal with a pod if it doesn't satisfy the spread constraint. - DoNotSchedule (default) tells the scheduler not to schedule it. - ScheduleAnyway tells the scheduler to schedule the pod in any location, but giving higher precedence to topologies that would help reduce the skew. A constraint is considered 'Unsatisfiable' for an incoming pod if and only if every possible node assignment for that pod would violate 'MaxSkew' on some topology. For example, in a 3-zone cluster, MaxSkew is set to 1, and pods with the same labelSelector spread as 3/1/1: | zone1 | zone2 | zone3 | | P P P | P | P | If WhenUnsatisfiable is set to DoNotSchedule, incoming pod can only be scheduled to zone2(zone3) to become 3/2/1(3/1/2) as ActualSkew(2-1) on zone2(zone3) satisfies MaxSkew(1). In other words, the cluster can still be imbalanced, but scheduler won't make it *more* imbalanced. It's a required field. +- `max_skew` (Number) MaxSkew describes the degree to which pods may be unevenly distributed.When 'whenUnsatisfiable=DoNotSchedule', it is the maximum permitted differencebetween the number of matching pods in the target topology and the global minimum.The global minimum is the minimum number of matching pods in an eligible domainor zero if the number of eligible domains is less than MinDomains.For example, in a 3-zone cluster, MaxSkew is set to 1, and pods with the samelabelSelector spread as 2/2/1:In this case, the global minimum is 1.| zone1 | zone2 | zone3 || P P | P P | P |- if MaxSkew is 1, incoming pod can only be scheduled to zone3 to become 2/2/2;scheduling it onto zone1(zone2) would make the ActualSkew(3-1) on zone1(zone2)violate MaxSkew(1).- if MaxSkew is 2, incoming pod can be scheduled onto any zone.When 'whenUnsatisfiable=ScheduleAnyway', it is used to give higher precedenceto topologies that satisfy it.It's a required field. Default value is 1 and 0 is not allowed. +- `topology_key` (String) TopologyKey is the key of node labels. Nodes that have a label with this keyand identical values are considered to be in the same topology.We consider each as a 'bucket', and try to put balanced numberof pods into each bucket.We define a domain as a particular instance of a topology.Also, we define an eligible domain as a domain whose nodes match the node selector.e.g. If TopologyKey is 'kubernetes.io/hostname', each Node is a domain of that topology.And, if TopologyKey is 'topology.kubernetes.io/zone', each zone is a domain of that topology.It's a required field. +- `when_unsatisfiable` (String) WhenUnsatisfiable indicates how to deal with a pod if it doesn't satisfythe spread constraint.- DoNotSchedule (default) tells the scheduler not to schedule it.- ScheduleAnyway tells the scheduler to schedule the pod in any location, but giving higher precedence to topologies that would help reduce the skew.A constraint is considered 'Unsatisfiable' for an incoming podif and only if every possible node assignment for that pod would violate'MaxSkew' on some topology.For example, in a 3-zone cluster, MaxSkew is set to 1, and pods with the samelabelSelector spread as 3/1/1:| zone1 | zone2 | zone3 || P P P | P | P |If WhenUnsatisfiable is set to DoNotSchedule, incoming pod can only be scheduledto zone2(zone3) to become 3/2/1(3/1/2) as ActualSkew(2-1) on zone2(zone3) satisfiesMaxSkew(1). In other words, the cluster can still be imbalanced, but schedulerwon't make it *more* imbalanced.It's a required field. Optional: -- `label_selector` (Attributes) LabelSelector is used to find matching pods. Pods that match this label selector are counted to determine the number of pods in their corresponding topology domain. (see [below for nested schema](#nestedatt--spec--scheduling--topology_spread_constraints--label_selector)) -- `min_domains` (Number) MinDomains indicates a minimum number of eligible domains. When the number of eligible domains with matching topology keys is less than minDomains, Pod Topology Spread treats 'global minimum' as 0, and then the calculation of Skew is performed. And when the number of eligible domains with matching topology keys equals or greater than minDomains, this value has no effect on scheduling. As a result, when the number of eligible domains is less than minDomains, scheduler won't schedule more than maxSkew Pods to those domains. If value is nil, the constraint behaves as if MinDomains is equal to 1. Valid values are integers greater than 0. When value is not nil, WhenUnsatisfiable must be DoNotSchedule. For example, in a 3-zone cluster, MaxSkew is set to 2, MinDomains is set to 5 and pods with the same labelSelector spread as 2/2/2: | zone1 | zone2 | zone3 | | P P | P P | P P | The number of domains is less than 5(MinDomains), so 'global minimum' is treated as 0. In this situation, new pod with the same labelSelector cannot be scheduled, because computed skew will be 3(3 - 0) if new Pod is scheduled to any of the three zones, it will violate MaxSkew. This is an alpha field and requires enabling MinDomainsInPodTopologySpread feature gate. +- `label_selector` (Attributes) LabelSelector is used to find matching pods.Pods that match this label selector are counted to determine the number of podsin their corresponding topology domain. (see [below for nested schema](#nestedatt--spec--scheduling--topology_spread_constraints--label_selector)) +- `min_domains` (Number) MinDomains indicates a minimum number of eligible domains.When the number of eligible domains with matching topology keys is less than minDomains,Pod Topology Spread treats 'global minimum' as 0, and then the calculation of Skew is performed.And when the number of eligible domains with matching topology keys equals or greater than minDomains,this value has no effect on scheduling.As a result, when the number of eligible domains is less than minDomains,scheduler won't schedule more than maxSkew Pods to those domains.If value is nil, the constraint behaves as if MinDomains is equal to 1.Valid values are integers greater than 0.When value is not nil, WhenUnsatisfiable must be DoNotSchedule.For example, in a 3-zone cluster, MaxSkew is set to 2, MinDomains is set to 5 and pods with the samelabelSelector spread as 2/2/2:| zone1 | zone2 | zone3 || P P | P P | P P |The number of domains is less than 5(MinDomains), so 'global minimum' is treated as 0.In this situation, new pod with the same labelSelector cannot be scheduled,because computed skew will be 3(3 - 0) if new Pod is scheduled to any of the three zones,it will violate MaxSkew.This is an alpha field and requires enabling MinDomainsInPodTopologySpread feature gate. ### Nested Schema for `spec.scheduling.topology_spread_constraints.label_selector` @@ -986,7 +986,7 @@ Optional: Optional: - `match_expressions` (Attributes List) matchExpressions is a list of label selector requirements. The requirements are ANDed. (see [below for nested schema](#nestedatt--spec--scheduling--topology_spread_constraints--label_selector--match_expressions)) -- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is 'key', the operator is 'In', and the values array contains only 'value'. The requirements are ANDed. +- `match_labels` (Map of String) matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed. ### Nested Schema for `spec.scheduling.topology_spread_constraints.label_selector.match_expressions` @@ -994,11 +994,11 @@ Optional: Required: - `key` (String) key is the label key that the selector applies to. -- `operator` (String) operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist. +- `operator` (String) operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist. Optional: -- `values` (List of String) values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch. +- `values` (List of String) values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch. @@ -1062,9 +1062,9 @@ Optional: Optional: - `ephemeral_storage` (Boolean) Enable/disable container ephemeral storage -- `liveness_probe` (Attributes) Periodic probe of container liveness. Container will be restarted if the probe fails. (see [below for nested schema](#nestedatt--spec--service--container--liveness_probe)) -- `readiness_probe` (Attributes) Periodic probe of container service readiness. Container will be removed from service endpoints if the probe fails. (see [below for nested schema](#nestedatt--spec--service--container--readiness_probe)) -- `startup_probe` (Attributes) StartupProbe indicates that the Pod has successfully initialized. If specified, no other probes are executed until this completes successfully. If this probe fails, the Pod will be restarted, just as if the livenessProbe failed. This can be used to provide different probe parameters at the beginning of a Pod's lifecycle, when it might take a long time to load data or warm a cache, than during steady-state operation. (see [below for nested schema](#nestedatt--spec--service--container--startup_probe)) +- `liveness_probe` (Attributes) Periodic probe of container liveness.Container will be restarted if the probe fails. (see [below for nested schema](#nestedatt--spec--service--container--liveness_probe)) +- `readiness_probe` (Attributes) Periodic probe of container service readiness.Container will be removed from service endpoints if the probe fails. (see [below for nested schema](#nestedatt--spec--service--container--readiness_probe)) +- `startup_probe` (Attributes) StartupProbe indicates that the Pod has successfully initialized.If specified, no other probes are executed until this completes successfully.If this probe fails, the Pod will be restarted, just as if the livenessProbe failed.This can be used to provide different probe parameters at the beginning of a Pod's lifecycle,when it might take a long time to load data or warm a cache, than during steady-state operation. (see [below for nested schema](#nestedatt--spec--service--container--startup_probe)) - `storage` (String) The amount of storage for the persistent volume claim. - `storage_class_name` (String) The storage class object for persistent volume claims diff --git a/docs/data-sources/jobset_x_k8s_io_job_set_v1alpha2_manifest.md b/docs/data-sources/jobset_x_k8s_io_job_set_v1alpha2_manifest.md index 4a9c715ea..e889eaa4f 100644 --- a/docs/data-sources/jobset_x_k8s_io_job_set_v1alpha2_manifest.md +++ b/docs/data-sources/jobset_x_k8s_io_job_set_v1alpha2_manifest.md @@ -157,14 +157,14 @@ Optional: - `backoff_limit_per_index` (Number) Specifies the limit for the number of retries within anindex before marking this index as failed. When enabled the number offailures per index is kept in the pod'sbatch.kubernetes.io/job-index-failure-count annotation. It can onlybe set when Job's completionMode=Indexed, and the Pod's restartpolicy is Never. The field is immutable.This field is beta-level. It can be used when the 'JobBackoffLimitPerIndex'feature gate is enabled (enabled by default). - `completion_mode` (String) completionMode specifies how Pod completions are tracked. It can be'NonIndexed' (default) or 'Indexed'.'NonIndexed' means that the Job is considered complete when there havebeen .spec.completions successfully completed Pods. Each Pod completion ishomologous to each other.'Indexed' means that the Pods of aJob get an associated completion index from 0 to (.spec.completions - 1),available in the annotation batch.kubernetes.io/job-completion-index.The Job is considered complete when there is one successfully completed Podfor each index.When value is 'Indexed', .spec.completions must be specified and'.spec.parallelism' must be less than or equal to 10^5.In addition, The Pod name takes the form'$(job-name)-$(index)-$(random-string)',the Pod hostname takes the form '$(job-name)-$(index)'.More completion modes can be added in the future.If the Job controller observes a mode that it doesn't recognize, whichis possible during upgrades due to version skew, the controllerskips updates for the Job. - `completions` (Number) Specifies the desired number of successfully finished pods thejob should be run with. Setting to null means that the success of anypod signals the success of all pods, and allows parallelism to have any positivevalue. Setting to 1 means that parallelism is limited to 1 and the success of thatpod signals the success of the job.More info: https://kubernetes.io/docs/concepts/workloads/controllers/jobs-run-to-completion/ -- `managed_by` (String) ManagedBy field indicates the controller that manages a Job. The k8s Jobcontroller reconciles jobs which don't have this field at all or the fieldvalue is the reserved string 'kubernetes.io/job-controller', but skipsreconciling Jobs with a custom value for this field.The value must be a valid domain-prefixed path (e.g. acme.io/foo) -all characters before the first '/' must be a valid subdomain as definedby RFC 1123. All characters trailing the first '/' must be valid HTTP Pathcharacters as defined by RFC 3986. The value cannot exceed 64 characters.This field is alpha-level. The job controller accepts setting the fieldwhen the feature gate JobManagedBy is enabled (disabled by default). +- `managed_by` (String) ManagedBy field indicates the controller that manages a Job. The k8s Jobcontroller reconciles jobs which don't have this field at all or the fieldvalue is the reserved string 'kubernetes.io/job-controller', but skipsreconciling Jobs with a custom value for this field.The value must be a valid domain-prefixed path (e.g. acme.io/foo) -all characters before the first '/' must be a valid subdomain as definedby RFC 1123. All characters trailing the first '/' must be valid HTTP Pathcharacters as defined by RFC 3986. The value cannot exceed 63 characters.This field is immutable.This field is alpha-level. The job controller accepts setting the fieldwhen the feature gate JobManagedBy is enabled (disabled by default). - `manual_selector` (Boolean) manualSelector controls generation of pod labels and pod selectors.Leave 'manualSelector' unset unless you are certain what you are doing.When false or unset, the system pick labels unique to this joband appends those labels to the pod template. When true,the user is responsible for picking unique labels and specifyingthe selector. Failure to pick a unique label may cause thisand other jobs to not function correctly. However, You may see'manualSelector=true' in jobs that were created with the old 'extensions/v1beta1'API.More info: https://kubernetes.io/docs/concepts/workloads/controllers/jobs-run-to-completion/#specifying-your-own-pod-selector - `max_failed_indexes` (Number) Specifies the maximal number of failed indexes before marking the Job asfailed, when backoffLimitPerIndex is set. Once the number of failedindexes exceeds this number the entire Job is marked as Failed and itsexecution is terminated. When left as null the job continues execution ofall of its indexes and is marked with the 'Complete' Job condition.It can only be specified when backoffLimitPerIndex is set.It can be null or up to completions. It is required and must beless than or equal to 10^4 when is completions greater than 10^5.This field is beta-level. It can be used when the 'JobBackoffLimitPerIndex'feature gate is enabled (enabled by default). - `parallelism` (Number) Specifies the maximum desired number of pods the job shouldrun at any given time. The actual number of pods running in steady state willbe less than this number when ((.spec.completions - .status.successful) < .spec.parallelism),i.e. when the work left to do is less than max parallelism.More info: https://kubernetes.io/docs/concepts/workloads/controllers/jobs-run-to-completion/ -- `pod_failure_policy` (Attributes) Specifies the policy of handling failed pods. In particular, it allows tospecify the set of actions and conditions which need to besatisfied to take the associated action.If empty, the default behaviour applies - the counter of failed pods,represented by the jobs's .status.failed field, is incremented and it ischecked against the backoffLimit. This field cannot be used in combinationwith restartPolicy=OnFailure.This field is beta-level. It can be used when the 'JobPodFailurePolicy'feature gate is enabled (enabled by default). (see [below for nested schema](#nestedatt--spec--replicated_jobs--template--spec--pod_failure_policy)) +- `pod_failure_policy` (Attributes) Specifies the policy of handling failed pods. In particular, it allows tospecify the set of actions and conditions which need to besatisfied to take the associated action.If empty, the default behaviour applies - the counter of failed pods,represented by the jobs's .status.failed field, is incremented and it ischecked against the backoffLimit. This field cannot be used in combinationwith restartPolicy=OnFailure. (see [below for nested schema](#nestedatt--spec--replicated_jobs--template--spec--pod_failure_policy)) - `pod_replacement_policy` (String) podReplacementPolicy specifies when to create replacement Pods.Possible values are:- TerminatingOrFailed means that we recreate pods when they are terminating (has a metadata.deletionTimestamp) or failed.- Failed means to wait until a previously created Pod is fully terminated (has phase Failed or Succeeded) before creating a replacement Pod.When using podFailurePolicy, Failed is the the only allowed value.TerminatingOrFailed and Failed are allowed values when podFailurePolicy is not in use.This is an beta field. To use this, enable the JobPodReplacementPolicy feature toggle.This is on by default. - `selector` (Attributes) A label query over pods that should match the pod count.Normally, the system sets this field for you.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#label-selectors (see [below for nested schema](#nestedatt--spec--replicated_jobs--template--spec--selector)) -- `success_policy` (Attributes) successPolicy specifies the policy when the Job can be declared as succeeded.If empty, the default behavior applies - the Job is declared as succeededonly when the number of succeeded pods equals to the completions.When the field is specified, it must be immutable and works only for the Indexed Jobs.Once the Job meets the SuccessPolicy, the lingering pods are terminated.This field is alpha-level. To use this field, you must enable the'JobSuccessPolicy' feature gate (disabled by default). (see [below for nested schema](#nestedatt--spec--replicated_jobs--template--spec--success_policy)) +- `success_policy` (Attributes) successPolicy specifies the policy when the Job can be declared as succeeded.If empty, the default behavior applies - the Job is declared as succeededonly when the number of succeeded pods equals to the completions.When the field is specified, it must be immutable and works only for the Indexed Jobs.Once the Job meets the SuccessPolicy, the lingering pods are terminated.This field is beta-level. To use this field, you must enable the'JobSuccessPolicy' feature gate (enabled by default). (see [below for nested schema](#nestedatt--spec--replicated_jobs--template--spec--success_policy)) - `suspend` (Boolean) suspend specifies whether the Job controller should create Pods or not. Ifa Job is created with suspend set to true, no Pods are created by the Jobcontroller. If a Job is suspended after creation (i.e. the flag goes fromfalse to true), the Job controller will delete all active Pods associatedwith this Job. Users must design their workload to gracefully handle this.Suspending a Job will reset the StartTime field of the Job, effectivelyresetting the ActiveDeadlineSeconds timer too. Defaults to false. - `ttl_seconds_after_finished` (Number) ttlSecondsAfterFinished limits the lifetime of a Job that has finishedexecution (either Complete or Failed). If this field is set,ttlSecondsAfterFinished after the Job finishes, it is eligible to beautomatically deleted. When the Job is being deleted, its lifecycleguarantees (e.g. finalizers) will be honored. If this field is unset,the Job won't be automatically deleted. If this field is set to zero,the Job becomes eligible to be deleted immediately after it finishes. @@ -212,9 +212,9 @@ Optional: - `hostname` (String) Specifies the hostname of the PodIf not specified, the pod's hostname will be set to a system-defined value. - `image_pull_secrets` (Attributes List) ImagePullSecrets is an optional list of references to secrets in the same namespace to use for pulling any of the images used by this PodSpec.If specified, these secrets will be passed to individual puller implementations for them to use.More info: https://kubernetes.io/docs/concepts/containers/images#specifying-imagepullsecrets-on-a-pod (see [below for nested schema](#nestedatt--spec--replicated_jobs--template--spec--template--spec--image_pull_secrets)) - `init_containers` (Attributes List) List of initialization containers belonging to the pod.Init containers are executed in order prior to containers being started. If anyinit container fails, the pod is considered to have failed and is handled accordingto its restartPolicy. The name for an init container or normal container must beunique among all containers.Init containers may not have Lifecycle actions, Readiness probes, Liveness probes, or Startup probes.The resourceRequirements of an init container are taken into account during schedulingby finding the highest request/limit for each resource type, and then using the max ofof that value or the sum of the normal containers. Limits are applied to init containersin a similar fashion.Init containers cannot currently be added or removed.Cannot be updated.More info: https://kubernetes.io/docs/concepts/workloads/pods/init-containers/ (see [below for nested schema](#nestedatt--spec--replicated_jobs--template--spec--template--spec--init_containers)) -- `node_name` (String) NodeName is a request to schedule this pod onto a specific node. If it is non-empty,the scheduler simply schedules this pod onto that node, assuming that it fits resourcerequirements. +- `node_name` (String) NodeName indicates in which node this pod is scheduled.If empty, this pod is a candidate for scheduling by the scheduler defined in schedulerName.Once this field is set, the kubelet for this node becomes responsible for the lifecycle of this pod.This field should not be used to express a desire for the pod to be scheduled on a specific node.https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#nodename - `node_selector` (Map of String) NodeSelector is a selector which must be true for the pod to fit on a node.Selector which must match a node's labels for the pod to be scheduled on that node.More info: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/ -- `os` (Attributes) Specifies the OS of the containers in the pod.Some pod and container fields are restricted if this is set.If the OS field is set to linux, the following fields must be unset:-securityContext.windowsOptionsIf the OS field is set to windows, following fields must be unset:- spec.hostPID- spec.hostIPC- spec.hostUsers- spec.securityContext.appArmorProfile- spec.securityContext.seLinuxOptions- spec.securityContext.seccompProfile- spec.securityContext.fsGroup- spec.securityContext.fsGroupChangePolicy- spec.securityContext.sysctls- spec.shareProcessNamespace- spec.securityContext.runAsUser- spec.securityContext.runAsGroup- spec.securityContext.supplementalGroups- spec.containers[*].securityContext.appArmorProfile- spec.containers[*].securityContext.seLinuxOptions- spec.containers[*].securityContext.seccompProfile- spec.containers[*].securityContext.capabilities- spec.containers[*].securityContext.readOnlyRootFilesystem- spec.containers[*].securityContext.privileged- spec.containers[*].securityContext.allowPrivilegeEscalation- spec.containers[*].securityContext.procMount- spec.containers[*].securityContext.runAsUser- spec.containers[*].securityContext.runAsGroup (see [below for nested schema](#nestedatt--spec--replicated_jobs--template--spec--template--spec--os)) +- `os` (Attributes) Specifies the OS of the containers in the pod.Some pod and container fields are restricted if this is set.If the OS field is set to linux, the following fields must be unset:-securityContext.windowsOptionsIf the OS field is set to windows, following fields must be unset:- spec.hostPID- spec.hostIPC- spec.hostUsers- spec.securityContext.appArmorProfile- spec.securityContext.seLinuxOptions- spec.securityContext.seccompProfile- spec.securityContext.fsGroup- spec.securityContext.fsGroupChangePolicy- spec.securityContext.sysctls- spec.shareProcessNamespace- spec.securityContext.runAsUser- spec.securityContext.runAsGroup- spec.securityContext.supplementalGroups- spec.securityContext.supplementalGroupsPolicy- spec.containers[*].securityContext.appArmorProfile- spec.containers[*].securityContext.seLinuxOptions- spec.containers[*].securityContext.seccompProfile- spec.containers[*].securityContext.capabilities- spec.containers[*].securityContext.readOnlyRootFilesystem- spec.containers[*].securityContext.privileged- spec.containers[*].securityContext.allowPrivilegeEscalation- spec.containers[*].securityContext.procMount- spec.containers[*].securityContext.runAsUser- spec.containers[*].securityContext.runAsGroup (see [below for nested schema](#nestedatt--spec--replicated_jobs--template--spec--template--spec--os)) - `overhead` (Map of String) Overhead represents the resource overhead associated with running a pod for a given RuntimeClass.This field will be autopopulated at admission time by the RuntimeClass admission controller. Ifthe RuntimeClass admission controller is enabled, overhead must not be set in Pod create requests.The RuntimeClass admission controller will reject Pod create requests which have the overhead alreadyset. If RuntimeClass is configured and selected in the PodSpec, Overhead will be set to the valuedefined in the corresponding RuntimeClass, otherwise it will remain unset and treated as zero.More info: https://git.k8s.io/enhancements/keps/sig-node/688-pod-overhead/README.md - `preemption_policy` (String) PreemptionPolicy is the Policy for preempting pods with lower priority.One of Never, PreemptLowerPriority.Defaults to PreemptLowerPriority if unset. - `priority` (Number) The priority value. Various system components use this field to find thepriority of the pod. When Priority Admission Controller is enabled, itprevents users from setting this field. The admission controller populatesthis field from PriorityClassName.The higher the value, the higher the priority. @@ -300,7 +300,7 @@ Required: Optional: -- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896. +- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names - `optional` (Boolean) Specify whether the ConfigMap or its key must be defined @@ -338,7 +338,7 @@ Required: Optional: -- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896. +- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names - `optional` (Boolean) Specify whether the Secret or its key must be defined @@ -358,7 +358,7 @@ Optional: Optional: -- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896. +- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names - `optional` (Boolean) Specify whether the ConfigMap must be defined @@ -367,7 +367,7 @@ Optional: Optional: -- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896. +- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names - `optional` (Boolean) Specify whether the Secret must be defined @@ -693,6 +693,10 @@ Required: - `name` (String) Name must match the name of one entry in pod.spec.resourceClaims ofthe Pod where this field is used. It makes that resource availableinside a container. +Optional: + +- `request` (String) Request is the name chosen for a request in the referenced claim.If empty, everything from the claim is made available, otherwiseonly the result of this request. + @@ -704,7 +708,7 @@ Optional: - `app_armor_profile` (Attributes) appArmorProfile is the AppArmor options to use by this container. If set, this profileoverrides the pod's appArmorProfile.Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--replicated_jobs--template--spec--template--spec--containers--security_context--app_armor_profile)) - `capabilities` (Attributes) The capabilities to add/drop when running containers.Defaults to the default set of capabilities granted by the container runtime.Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--replicated_jobs--template--spec--template--spec--containers--security_context--capabilities)) - `privileged` (Boolean) Run container in privileged mode.Processes in privileged containers are essentially equivalent to root on the host.Defaults to false.Note that this field cannot be set when spec.os.name is windows. -- `proc_mount` (String) procMount denotes the type of proc mount to use for the containers.The default is DefaultProcMount which uses the container runtime defaults forreadonly paths and masked paths.This requires the ProcMountType feature flag to be enabled.Note that this field cannot be set when spec.os.name is windows. +- `proc_mount` (String) procMount denotes the type of proc mount to use for the containers.The default value is Default which uses the container runtime defaults forreadonly paths and masked paths.This requires the ProcMountType feature flag to be enabled.Note that this field cannot be set when spec.os.name is windows. - `read_only_root_filesystem` (Boolean) Whether this container has a read-only root filesystem.Default is false.Note that this field cannot be set when spec.os.name is windows. - `run_as_group` (Number) The GID to run the entrypoint of the container process.Uses runtime default if unset.May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.Note that this field cannot be set when spec.os.name is windows. - `run_as_non_root` (Boolean) Indicates that the container must run as a non-root user.If true, the Kubelet will validate the image at runtime to ensure that itdoes not run as UID 0 (root) and fail to start the container if it does.If unset or false, no such validation will be performed.May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence. @@ -1000,8 +1004,8 @@ Required: Optional: - `label_selector` (Attributes) A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods. (see [below for nested schema](#nestedatt--spec--replicated_jobs--template--spec--template--spec--affinity--pod_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--label_selector)) -- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate. -- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate. +- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). +- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). - `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--replicated_jobs--template--spec--template--spec--affinity--pod_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--namespace_selector)) - `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'. @@ -1061,8 +1065,8 @@ Required: Optional: - `label_selector` (Attributes) A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods. (see [below for nested schema](#nestedatt--spec--replicated_jobs--template--spec--template--spec--affinity--pod_affinity--required_during_scheduling_ignored_during_execution--label_selector)) -- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate. -- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate. +- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). +- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). - `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--replicated_jobs--template--spec--template--spec--affinity--pod_affinity--required_during_scheduling_ignored_during_execution--namespace_selector)) - `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'. @@ -1138,8 +1142,8 @@ Required: Optional: - `label_selector` (Attributes) A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods. (see [below for nested schema](#nestedatt--spec--replicated_jobs--template--spec--template--spec--affinity--pod_anti_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--label_selector)) -- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate. -- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate. +- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). +- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). - `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--replicated_jobs--template--spec--template--spec--affinity--pod_anti_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--namespace_selector)) - `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'. @@ -1199,8 +1203,8 @@ Required: Optional: - `label_selector` (Attributes) A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods. (see [below for nested schema](#nestedatt--spec--replicated_jobs--template--spec--template--spec--affinity--pod_anti_affinity--required_during_scheduling_ignored_during_execution--label_selector)) -- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate. -- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate. +- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). +- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). - `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--replicated_jobs--template--spec--template--spec--affinity--pod_anti_affinity--required_during_scheduling_ignored_during_execution--namespace_selector)) - `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'. @@ -1335,7 +1339,7 @@ Required: Optional: -- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896. +- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names - `optional` (Boolean) Specify whether the ConfigMap or its key must be defined @@ -1373,7 +1377,7 @@ Required: Optional: -- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896. +- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names - `optional` (Boolean) Specify whether the Secret or its key must be defined @@ -1393,7 +1397,7 @@ Optional: Optional: -- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896. +- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names - `optional` (Boolean) Specify whether the ConfigMap must be defined @@ -1402,7 +1406,7 @@ Optional: Optional: -- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896. +- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names - `optional` (Boolean) Specify whether the Secret must be defined @@ -1728,6 +1732,10 @@ Required: - `name` (String) Name must match the name of one entry in pod.spec.resourceClaims ofthe Pod where this field is used. It makes that resource availableinside a container. +Optional: + +- `request` (String) Request is the name chosen for a request in the referenced claim.If empty, everything from the claim is made available, otherwiseonly the result of this request. + @@ -1739,7 +1747,7 @@ Optional: - `app_armor_profile` (Attributes) appArmorProfile is the AppArmor options to use by this container. If set, this profileoverrides the pod's appArmorProfile.Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--replicated_jobs--template--spec--template--spec--ephemeral_containers--security_context--app_armor_profile)) - `capabilities` (Attributes) The capabilities to add/drop when running containers.Defaults to the default set of capabilities granted by the container runtime.Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--replicated_jobs--template--spec--template--spec--ephemeral_containers--security_context--capabilities)) - `privileged` (Boolean) Run container in privileged mode.Processes in privileged containers are essentially equivalent to root on the host.Defaults to false.Note that this field cannot be set when spec.os.name is windows. -- `proc_mount` (String) procMount denotes the type of proc mount to use for the containers.The default is DefaultProcMount which uses the container runtime defaults forreadonly paths and masked paths.This requires the ProcMountType feature flag to be enabled.Note that this field cannot be set when spec.os.name is windows. +- `proc_mount` (String) procMount denotes the type of proc mount to use for the containers.The default value is Default which uses the container runtime defaults forreadonly paths and masked paths.This requires the ProcMountType feature flag to be enabled.Note that this field cannot be set when spec.os.name is windows. - `read_only_root_filesystem` (Boolean) Whether this container has a read-only root filesystem.Default is false.Note that this field cannot be set when spec.os.name is windows. - `run_as_group` (Number) The GID to run the entrypoint of the container process.Uses runtime default if unset.May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.Note that this field cannot be set when spec.os.name is windows. - `run_as_non_root` (Boolean) Indicates that the container must run as a non-root user.If true, the Kubelet will validate the image at runtime to ensure that itdoes not run as UID 0 (root) and fail to start the container if it does.If unset or false, no such validation will be performed.May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence. @@ -1921,7 +1929,7 @@ Optional: Optional: -- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896. +- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names @@ -1988,7 +1996,7 @@ Required: Optional: -- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896. +- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names - `optional` (Boolean) Specify whether the ConfigMap or its key must be defined @@ -2026,7 +2034,7 @@ Required: Optional: -- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896. +- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names - `optional` (Boolean) Specify whether the Secret or its key must be defined @@ -2046,7 +2054,7 @@ Optional: Optional: -- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896. +- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names - `optional` (Boolean) Specify whether the ConfigMap must be defined @@ -2055,7 +2063,7 @@ Optional: Optional: -- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896. +- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names - `optional` (Boolean) Specify whether the Secret must be defined @@ -2381,6 +2389,10 @@ Required: - `name` (String) Name must match the name of one entry in pod.spec.resourceClaims ofthe Pod where this field is used. It makes that resource availableinside a container. +Optional: + +- `request` (String) Request is the name chosen for a request in the referenced claim.If empty, everything from the claim is made available, otherwiseonly the result of this request. + @@ -2392,7 +2404,7 @@ Optional: - `app_armor_profile` (Attributes) appArmorProfile is the AppArmor options to use by this container. If set, this profileoverrides the pod's appArmorProfile.Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--replicated_jobs--template--spec--template--spec--init_containers--security_context--app_armor_profile)) - `capabilities` (Attributes) The capabilities to add/drop when running containers.Defaults to the default set of capabilities granted by the container runtime.Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--replicated_jobs--template--spec--template--spec--init_containers--security_context--capabilities)) - `privileged` (Boolean) Run container in privileged mode.Processes in privileged containers are essentially equivalent to root on the host.Defaults to false.Note that this field cannot be set when spec.os.name is windows. -- `proc_mount` (String) procMount denotes the type of proc mount to use for the containers.The default is DefaultProcMount which uses the container runtime defaults forreadonly paths and masked paths.This requires the ProcMountType feature flag to be enabled.Note that this field cannot be set when spec.os.name is windows. +- `proc_mount` (String) procMount denotes the type of proc mount to use for the containers.The default value is Default which uses the container runtime defaults forreadonly paths and masked paths.This requires the ProcMountType feature flag to be enabled.Note that this field cannot be set when spec.os.name is windows. - `read_only_root_filesystem` (Boolean) Whether this container has a read-only root filesystem.Default is false.Note that this field cannot be set when spec.os.name is windows. - `run_as_group` (Number) The GID to run the entrypoint of the container process.Uses runtime default if unset.May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.Note that this field cannot be set when spec.os.name is windows. - `run_as_non_root` (Boolean) Indicates that the container must run as a non-root user.If true, the Kubelet will validate the image at runtime to ensure that itdoes not run as UID 0 (root) and fail to start the container if it does.If unset or false, no such validation will be performed.May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence. @@ -2582,16 +2594,8 @@ Required: Optional: -- `source` (Attributes) Source describes where to find the ResourceClaim. (see [below for nested schema](#nestedatt--spec--replicated_jobs--template--spec--template--spec--resource_claims--source)) - - -### Nested Schema for `spec.replicated_jobs.template.spec.template.spec.resource_claims.source` - -Optional: - -- `resource_claim_name` (String) ResourceClaimName is the name of a ResourceClaim object in the samenamespace as this pod. -- `resource_claim_template_name` (String) ResourceClaimTemplateName is the name of a ResourceClaimTemplateobject in the same namespace as this pod.The template will be used to create a new ResourceClaim, which willbe bound to this pod. When this pod is deleted, the ResourceClaimwill also be deleted. The pod name and resource name, along with agenerated component, will be used to form a unique name for theResourceClaim, which will be recorded in pod.status.resourceClaimStatuses.This field is immutable and no changes will be made to thecorresponding ResourceClaim by the control plane after creating theResourceClaim. - +- `resource_claim_name` (String) ResourceClaimName is the name of a ResourceClaim object in the samenamespace as this pod.Exactly one of ResourceClaimName and ResourceClaimTemplateName mustbe set. +- `resource_claim_template_name` (String) ResourceClaimTemplateName is the name of a ResourceClaimTemplateobject in the same namespace as this pod.The template will be used to create a new ResourceClaim, which willbe bound to this pod. When this pod is deleted, the ResourceClaimwill also be deleted. The pod name and resource name, along with agenerated component, will be used to form a unique name for theResourceClaim, which will be recorded in pod.status.resourceClaimStatuses.This field is immutable and no changes will be made to thecorresponding ResourceClaim by the control plane after creating theResourceClaim.Exactly one of ResourceClaimName and ResourceClaimTemplateName mustbe set. @@ -2615,7 +2619,8 @@ Optional: - `run_as_user` (Number) The UID to run the entrypoint of the container process.Defaults to user specified in image metadata if unspecified.May also be set in SecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedencefor that container.Note that this field cannot be set when spec.os.name is windows. - `se_linux_options` (Attributes) The SELinux context to be applied to all containers.If unspecified, the container runtime will allocate a random SELinux context for eachcontainer. May also be set in SecurityContext. If set inboth SecurityContext and PodSecurityContext, the value specified in SecurityContexttakes precedence for that container.Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--replicated_jobs--template--spec--template--spec--security_context--se_linux_options)) - `seccomp_profile` (Attributes) The seccomp options to use by the containers in this pod.Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--replicated_jobs--template--spec--template--spec--security_context--seccomp_profile)) -- `supplemental_groups` (List of String) A list of groups applied to the first process run in each container, in additionto the container's primary GID, the fsGroup (if specified), and group membershipsdefined in the container image for the uid of the container process. If unspecified,no additional groups are added to any container. Note that group membershipsdefined in the container image for the uid of the container process are still effective,even if they are not included in this list.Note that this field cannot be set when spec.os.name is windows. +- `supplemental_groups` (List of String) A list of groups applied to the first process run in each container, inaddition to the container's primary GID and fsGroup (if specified). Ifthe SupplementalGroupsPolicy feature is enabled, thesupplementalGroupsPolicy field determines whether these are in additionto or instead of any group memberships defined in the container image.If unspecified, no additional groups are added, though group membershipsdefined in the container image may still be used, depending on thesupplementalGroupsPolicy field.Note that this field cannot be set when spec.os.name is windows. +- `supplemental_groups_policy` (String) Defines how supplemental groups of the first container processes are calculated.Valid values are 'Merge' and 'Strict'. If not specified, 'Merge' is used.(Alpha) Using the field requires the SupplementalGroupsPolicy feature gate to be enabledand the container runtime must implement support for this feature.Note that this field cannot be set when spec.os.name is windows. - `sysctls` (Attributes List) Sysctls hold a list of namespaced sysctls used for the pod. Pods with unsupportedsysctls (by the container runtime) might fail to launch.Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--replicated_jobs--template--spec--template--spec--security_context--sysctls)) - `windows_options` (Attributes) The Windows specific settings applied to all containers.If unspecified, the options within a container's SecurityContext will be used.If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.Note that this field cannot be set when spec.os.name is linux. (see [below for nested schema](#nestedatt--spec--replicated_jobs--template--spec--template--spec--security_context--windows_options)) @@ -2752,7 +2757,8 @@ Optional: - `gce_persistent_disk` (Attributes) gcePersistentDisk represents a GCE Disk resource that is attached to akubelet's host machine and then exposed to the pod.More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk (see [below for nested schema](#nestedatt--spec--replicated_jobs--template--spec--template--spec--volumes--gce_persistent_disk)) - `git_repo` (Attributes) gitRepo represents a git repository at a particular revision.DEPRECATED: GitRepo is deprecated. To provision a container with a git repo, mount anEmptyDir into an InitContainer that clones the repo using git, then mount the EmptyDirinto the Pod's container. (see [below for nested schema](#nestedatt--spec--replicated_jobs--template--spec--template--spec--volumes--git_repo)) - `glusterfs` (Attributes) glusterfs represents a Glusterfs mount on the host that shares a pod's lifetime.More info: https://examples.k8s.io/volumes/glusterfs/README.md (see [below for nested schema](#nestedatt--spec--replicated_jobs--template--spec--template--spec--volumes--glusterfs)) -- `host_path` (Attributes) hostPath represents a pre-existing file or directory on the hostmachine that is directly exposed to the container. This is generallyused for system agents or other privileged things that are allowedto see the host machine. Most containers will NOT need this.More info: https://kubernetes.io/docs/concepts/storage/volumes#hostpath---TODO(jonesdl) We need to restrict who can use host directory mounts and who can/can notmount host directories as read/write. (see [below for nested schema](#nestedatt--spec--replicated_jobs--template--spec--template--spec--volumes--host_path)) +- `host_path` (Attributes) hostPath represents a pre-existing file or directory on the hostmachine that is directly exposed to the container. This is generallyused for system agents or other privileged things that are allowedto see the host machine. Most containers will NOT need this.More info: https://kubernetes.io/docs/concepts/storage/volumes#hostpath (see [below for nested schema](#nestedatt--spec--replicated_jobs--template--spec--template--spec--volumes--host_path)) +- `image` (Attributes) image represents an OCI object (a container image or artifact) pulled and mounted on the kubelet's host machine.The volume is resolved at pod startup depending on which PullPolicy value is provided:- Always: the kubelet always attempts to pull the reference. Container creation will fail If the pull fails.- Never: the kubelet never pulls the reference and only uses a local image or artifact. Container creation will fail if the reference isn't present.- IfNotPresent: the kubelet pulls if the reference isn't already present on disk. Container creation will fail if the reference isn't present and the pull fails.The volume gets re-resolved if the pod gets deleted and recreated, which means that new remote content will become available on pod recreation.A failure to resolve or pull the image during pod startup will block containers from starting and may add significant latency. Failures will be retried using normal volume backoff and will be reported on the pod reason and message.The types of objects that may be mounted by this volume are defined by the container runtime implementation on a host machine and at minimum must include all valid types supported by the container image field.The OCI object gets mounted in a single directory (spec.containers[*].volumeMounts.mountPath) by merging the manifest layers in the same way as for container images.The volume will be mounted read-only (ro) and non-executable files (noexec).Sub path mounts for containers are not supported (spec.containers[*].volumeMounts.subpath).The field spec.securityContext.fsGroupChangePolicy has no effect on this volume type. (see [below for nested schema](#nestedatt--spec--replicated_jobs--template--spec--template--spec--volumes--image)) - `iscsi` (Attributes) iscsi represents an ISCSI Disk resource that is attached to akubelet's host machine and then exposed to the pod.More info: https://examples.k8s.io/volumes/iscsi/README.md (see [below for nested schema](#nestedatt--spec--replicated_jobs--template--spec--template--spec--volumes--iscsi)) - `nfs` (Attributes) nfs represents an NFS mount on the host that shares a pod's lifetimeMore info: https://kubernetes.io/docs/concepts/storage/volumes#nfs (see [below for nested schema](#nestedatt--spec--replicated_jobs--template--spec--template--spec--volumes--nfs)) - `persistent_volume_claim` (Attributes) persistentVolumeClaimVolumeSource represents a reference to aPersistentVolumeClaim in the same namespace.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims (see [below for nested schema](#nestedatt--spec--replicated_jobs--template--spec--template--spec--volumes--persistent_volume_claim)) @@ -2775,7 +2781,7 @@ Required: Optional: -- `fs_type` (String) fsType is the filesystem type of the volume that you want to mount.Tip: Ensure that the filesystem type is supported by the host operating system.Examples: 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified.More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstoreTODO: how do we prevent errors in the filesystem from compromising the machine +- `fs_type` (String) fsType is the filesystem type of the volume that you want to mount.Tip: Ensure that the filesystem type is supported by the host operating system.Examples: 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified.More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore - `partition` (Number) partition is the partition in the volume that you want to mount.If omitted, the default is to mount by volume name.Examples: For volume /dev/sda1, you specify the partition as '1'.Similarly, the volume partition for /dev/sda is '0' (or you can leave the property empty). - `read_only` (Boolean) readOnly value true will force the readOnly setting in VolumeMounts.More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore @@ -2829,7 +2835,7 @@ Optional: Optional: -- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896. +- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names @@ -2851,7 +2857,7 @@ Optional: Optional: -- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896. +- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names @@ -2862,7 +2868,7 @@ Optional: - `default_mode` (Number) defaultMode is optional: mode bits used to set permissions on created files by default.Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511.YAML accepts both octal and decimal values, JSON requires decimal values for mode bits.Defaults to 0644.Directories within the path are not affected by this setting.This might be in conflict with other options that affect the filemode, like fsGroup, and the result can be other mode bits set. - `items` (Attributes List) items if unspecified, each key-value pair in the Data field of the referencedConfigMap will be projected into the volume as a file whose name is thekey and content is the value. If specified, the listed keys will beprojected into the specified paths, and unlisted keys will not bepresent. If a key is specified which is not present in the ConfigMap,the volume setup will error unless it is marked optional. Paths must berelative and may not contain the '..' path or start with '..'. (see [below for nested schema](#nestedatt--spec--replicated_jobs--template--spec--template--spec--volumes--config_map--items)) -- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896. +- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names - `optional` (Boolean) optional specify whether the ConfigMap or its keys must be defined @@ -2898,7 +2904,7 @@ Optional: Optional: -- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896. +- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names @@ -2988,7 +2994,7 @@ Optional: - `resources` (Attributes) resources represents the minimum resources the volume should have.If RecoverVolumeExpansionFailure feature is enabled users are allowed to specify resource requirementsthat are lower than previous value but must still be higher than capacity recorded in thestatus field of the claim.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources (see [below for nested schema](#nestedatt--spec--replicated_jobs--template--spec--template--spec--volumes--ephemeral--volume_claim_template--spec--resources)) - `selector` (Attributes) selector is a label query over volumes to consider for binding. (see [below for nested schema](#nestedatt--spec--replicated_jobs--template--spec--template--spec--volumes--ephemeral--volume_claim_template--spec--selector)) - `storage_class_name` (String) storageClassName is the name of the StorageClass required by the claim.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#class-1 -- `volume_attributes_class_name` (String) volumeAttributesClassName may be used to set the VolumeAttributesClass used by this claim.If specified, the CSI driver will create or update the volume with the attributes definedin the corresponding VolumeAttributesClass. This has a different purpose than storageClassName,it can be changed after the claim is created. An empty string value means that no VolumeAttributesClasswill be applied to the claim but it's not allowed to reset this field to empty string once it is set.If unspecified and the PersistentVolumeClaim is unbound, the default VolumeAttributesClasswill be set by the persistentvolume controller if it exists.If the resource referred to by volumeAttributesClass does not exist, this PersistentVolumeClaim will beset to a Pending state, as reflected by the modifyVolumeStatus field, until such as a resourceexists.More info: https://kubernetes.io/docs/concepts/storage/volume-attributes-classes/(Alpha) Using this field requires the VolumeAttributesClass feature gate to be enabled. +- `volume_attributes_class_name` (String) volumeAttributesClassName may be used to set the VolumeAttributesClass used by this claim.If specified, the CSI driver will create or update the volume with the attributes definedin the corresponding VolumeAttributesClass. This has a different purpose than storageClassName,it can be changed after the claim is created. An empty string value means that no VolumeAttributesClasswill be applied to the claim but it's not allowed to reset this field to empty string once it is set.If unspecified and the PersistentVolumeClaim is unbound, the default VolumeAttributesClasswill be set by the persistentvolume controller if it exists.If the resource referred to by volumeAttributesClass does not exist, this PersistentVolumeClaim will beset to a Pending state, as reflected by the modifyVolumeStatus field, until such as a resourceexists.More info: https://kubernetes.io/docs/concepts/storage/volume-attributes-classes/(Beta) Using this field requires the VolumeAttributesClass feature gate to be enabled (off by default). - `volume_mode` (String) volumeMode defines what type of volume is required by the claim.Value of Filesystem is implied when not included in claim spec. - `volume_name` (String) volumeName is the binding reference to the PersistentVolume backing this claim. @@ -3070,7 +3076,7 @@ Optional: Optional: -- `fs_type` (String) fsType is the filesystem type to mount.Must be a filesystem type supported by the host operating system.Ex. 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified.TODO: how do we prevent errors in the filesystem from compromising the machine +- `fs_type` (String) fsType is the filesystem type to mount.Must be a filesystem type supported by the host operating system.Ex. 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified. - `lun` (Number) lun is Optional: FC target lun number - `read_only` (Boolean) readOnly is Optional: Defaults to false (read/write). ReadOnly here will forcethe ReadOnly setting in VolumeMounts. - `target_ww_ns` (List of String) targetWWNs is Optional: FC target worldwide names (WWNs) @@ -3096,7 +3102,7 @@ Optional: Optional: -- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896. +- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names @@ -3118,7 +3124,7 @@ Required: Optional: -- `fs_type` (String) fsType is filesystem type of the volume that you want to mount.Tip: Ensure that the filesystem type is supported by the host operating system.Examples: 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified.More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdiskTODO: how do we prevent errors in the filesystem from compromising the machine +- `fs_type` (String) fsType is filesystem type of the volume that you want to mount.Tip: Ensure that the filesystem type is supported by the host operating system.Examples: 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified.More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk - `partition` (Number) partition is the partition in the volume that you want to mount.If omitted, the default is to mount by volume name.Examples: For volume /dev/sda1, you specify the partition as '1'.Similarly, the volume partition for /dev/sda is '0' (or you can leave the property empty).More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk - `read_only` (Boolean) readOnly here will force the ReadOnly setting in VolumeMounts.Defaults to false.More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk @@ -3161,6 +3167,15 @@ Optional: - `type` (String) type for HostPath VolumeDefaults to ''More info: https://kubernetes.io/docs/concepts/storage/volumes#hostpath + +### Nested Schema for `spec.replicated_jobs.template.spec.template.spec.volumes.image` + +Optional: + +- `pull_policy` (String) Policy for pulling OCI objects. Possible values are:Always: the kubelet always attempts to pull the reference. Container creation will fail If the pull fails.Never: the kubelet never pulls the reference and only uses a local image or artifact. Container creation will fail if the reference isn't present.IfNotPresent: the kubelet pulls if the reference isn't already present on disk. Container creation will fail if the reference isn't present and the pull fails.Defaults to Always if :latest tag is specified, or IfNotPresent otherwise. +- `reference` (String) Required: Image or artifact reference to be used.Behaves in the same way as pod.spec.containers[*].image.Pull secrets will be assembled in the same way as for the container image by looking up node credentials, SA image pull secrets, and pod spec image pull secrets.More info: https://kubernetes.io/docs/concepts/containers/imagesThis field is optional to allow higher level config management to default or overridecontainer images in workload controllers like Deployments and StatefulSets. + + ### Nested Schema for `spec.replicated_jobs.template.spec.template.spec.volumes.iscsi` @@ -3174,7 +3189,7 @@ Optional: - `chap_auth_discovery` (Boolean) chapAuthDiscovery defines whether support iSCSI Discovery CHAP authentication - `chap_auth_session` (Boolean) chapAuthSession defines whether support iSCSI Session CHAP authentication -- `fs_type` (String) fsType is the filesystem type of the volume that you want to mount.Tip: Ensure that the filesystem type is supported by the host operating system.Examples: 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified.More info: https://kubernetes.io/docs/concepts/storage/volumes#iscsiTODO: how do we prevent errors in the filesystem from compromising the machine +- `fs_type` (String) fsType is the filesystem type of the volume that you want to mount.Tip: Ensure that the filesystem type is supported by the host operating system.Examples: 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified.More info: https://kubernetes.io/docs/concepts/storage/volumes#iscsi - `initiator_name` (String) initiatorName is the custom iSCSI Initiator Name.If initiatorName is specified with iscsiInterface simultaneously, new iSCSI interface: will be created for the connection. - `iscsi_interface` (String) iscsiInterface is the interface Name that uses an iSCSI transport.Defaults to 'default' (tcp). - `portals` (List of String) portals is the iSCSI Target Portal List. The portal is either an IP or ip_addr:port if the portis other than default (typically TCP ports 860 and 3260). @@ -3186,7 +3201,7 @@ Optional: Optional: -- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896. +- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names @@ -3246,7 +3261,7 @@ Optional: Optional: - `default_mode` (Number) defaultMode are the mode bits used to set permissions on created files by default.Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511.YAML accepts both octal and decimal values, JSON requires decimal values for mode bits.Directories within the path are not affected by this setting.This might be in conflict with other options that affect the filemode, like fsGroup, and the result can be other mode bits set. -- `sources` (Attributes List) sources is the list of volume projections (see [below for nested schema](#nestedatt--spec--replicated_jobs--template--spec--template--spec--volumes--projected--sources)) +- `sources` (Attributes List) sources is the list of volume projections. Each entry in this listhandles one source. (see [below for nested schema](#nestedatt--spec--replicated_jobs--template--spec--template--spec--volumes--projected--sources)) ### Nested Schema for `spec.replicated_jobs.template.spec.template.spec.volumes.projected.sources` @@ -3302,7 +3317,7 @@ Optional: Optional: - `items` (Attributes List) items if unspecified, each key-value pair in the Data field of the referencedConfigMap will be projected into the volume as a file whose name is thekey and content is the value. If specified, the listed keys will beprojected into the specified paths, and unlisted keys will not bepresent. If a key is specified which is not present in the ConfigMap,the volume setup will error unless it is marked optional. Paths must berelative and may not contain the '..' path or start with '..'. (see [below for nested schema](#nestedatt--spec--replicated_jobs--template--spec--template--spec--volumes--projected--sources--config_map--items)) -- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896. +- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names - `optional` (Boolean) optional specify whether the ConfigMap or its keys must be defined @@ -3372,7 +3387,7 @@ Optional: Optional: - `items` (Attributes List) items if unspecified, each key-value pair in the Data field of the referencedSecret will be projected into the volume as a file whose name is thekey and content is the value. If specified, the listed keys will beprojected into the specified paths, and unlisted keys will not bepresent. If a key is specified which is not present in the Secret,the volume setup will error unless it is marked optional. Paths must berelative and may not contain the '..' path or start with '..'. (see [below for nested schema](#nestedatt--spec--replicated_jobs--template--spec--template--spec--volumes--projected--sources--secret--items)) -- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896. +- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names - `optional` (Boolean) optional field specify whether the Secret or its key must be defined @@ -3430,7 +3445,7 @@ Required: Optional: -- `fs_type` (String) fsType is the filesystem type of the volume that you want to mount.Tip: Ensure that the filesystem type is supported by the host operating system.Examples: 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified.More info: https://kubernetes.io/docs/concepts/storage/volumes#rbdTODO: how do we prevent errors in the filesystem from compromising the machine +- `fs_type` (String) fsType is the filesystem type of the volume that you want to mount.Tip: Ensure that the filesystem type is supported by the host operating system.Examples: 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified.More info: https://kubernetes.io/docs/concepts/storage/volumes#rbd - `keyring` (String) keyring is the path to key ring for RBDUser.Default is /etc/ceph/keyring.More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it - `pool` (String) pool is the rados pool name.Default is rbd.More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it - `read_only` (Boolean) readOnly here will force the ReadOnly setting in VolumeMounts.Defaults to false.More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it @@ -3442,7 +3457,7 @@ Optional: Optional: -- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896. +- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names @@ -3470,7 +3485,7 @@ Optional: Optional: -- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896. +- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names @@ -3514,7 +3529,7 @@ Optional: Optional: -- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896. +- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names diff --git a/docs/data-sources/k8s_nginx_org_global_configuration_v1_manifest.md b/docs/data-sources/k8s_nginx_org_global_configuration_v1_manifest.md index 67ba2a552..56d78ed28 100644 --- a/docs/data-sources/k8s_nginx_org_global_configuration_v1_manifest.md +++ b/docs/data-sources/k8s_nginx_org_global_configuration_v1_manifest.md @@ -62,6 +62,8 @@ Optional: Optional: +- `ipv4` (String) +- `ipv6` (String) - `name` (String) - `port` (Number) - `protocol` (String) diff --git a/docs/data-sources/kiali_io_kiali_v1alpha1_manifest.md b/docs/data-sources/kiali_io_kiali_v1alpha1_manifest.md index 66b9e39cf..6b1378222 100644 --- a/docs/data-sources/kiali_io_kiali_v1alpha1_manifest.md +++ b/docs/data-sources/kiali_io_kiali_v1alpha1_manifest.md @@ -56,7 +56,6 @@ Optional: Optional: - `additional_display_details` (Attributes List) A list of additional details that Kiali will look for in annotations. When found on any workload or service, Kiali will display the additional details in the respective workload or service details page. This is typically used to inject some CI metadata or documentation links into Kiali views. For example, by default, Kiali will recognize these annotations on a service or workload (e.g. a Deployment, StatefulSet, etc.):'''annotations: kiali.io/api-spec: http://list/to/my/api/doc kiali.io/api-type: rest'''Note that if you change this setting for your own custom annotations, keep in mind that it would override the current default. So you would have to add the default setting as shown in the example CR if you want to preserve the default links. (see [below for nested schema](#nestedatt--spec--additional_display_details)) -- `api` (Attributes) (see [below for nested schema](#nestedatt--spec--api)) - `auth` (Attributes) (see [below for nested schema](#nestedatt--spec--auth)) - `clustering` (Attributes) Multi-cluster related features. (see [below for nested schema](#nestedatt--spec--clustering)) - `custom_dashboards` (List of Map of String) A list of user-defined custom monitoring dashboards that you can use to generate metrics chartsfor your applications. The server has some built-in dashboards; if you define a custom dashboard herewith the same name as a built-in dashboard, your custom dashboard takes precedence and will overwritethe built-in dashboard. You can disable one or more of the built-in dashboards by simply defining anempty dashboard.An example of an additional user-defined dashboard,'''- name: myapp title: My App Metrics items: - chart: name: 'Thread Count' spans: 4 metricName: 'thread-count' dataType: 'raw''''An example of disabling a built-in dashboard (in this case, disabling the Envoy dashboard),'''- name: envoy'''To learn more about custom monitoring dashboards, see the documentation at https://kiali.io/docs/configuration/custom-dashboard/ @@ -86,25 +85,6 @@ Optional: - `icon_annotation` (String) The name of the annotation whose value is used to determine what icon to display. The annotation name itself can be anything, but note that the value of that annotation must be one of: 'rest', 'grpc', and 'graphql' - any other value is ignored. - -### Nested Schema for `spec.api` - -Optional: - -- `namespaces` (Attributes) Settings that control what namespaces are returned by Kiali. (see [below for nested schema](#nestedatt--spec--api--namespaces)) - - -### Nested Schema for `spec.api.namespaces` - -Optional: - -- `exclude` (List of String) A list of namespaces to be excluded from the list of namespaces provided by the Kiali API and Kiali UI. Regex is supported. This does not affect explicit namespace access. -- `include` (List of String) A list of namespaces to be included in the list of namespaces provided by the Kiali API and Kiali UI (if those namespaces exist). Regex is supported. An undefined or empty list is ignored. This does not affect explicit namespace access. -- `label_selector_exclude` (String) A Kubernetes label selector (e.g. 'myLabel=myValue') which is used for filtering out namespaceswhen fetching the list of available namespaces. This does not affect explicit namespace access. -- `label_selector_include` (String) A Kubernetes label selector (e.g. 'myLabel=myValue') which is used when fetching the list ofavailable namespaces. This does not affect explicit namespace access.If 'deployment.accessible_namespaces' does not have the special value of ''**''then the Kiali operator will add a new label to all accessible namespaces - that newlabel will be this 'label_selector_include' (this label is added regardless if the namespace matches the label_selector_exclude also).Note that if you do not set this 'label_selector_include' setting but 'deployment.accessible_namespaces'does not have the special 'all namespaces' entry of ''**'' then this 'label_selector_include' will be setto a default value of 'kiali.io/[.]member-of='where '[.]' is the instance name assigned to the Kiali installationif it is not the default 'kiali' (otherwise, this is omitted) and ''is the namespace where Kiali is to be installed. - - - ### Nested Schema for `spec.auth` @@ -190,12 +170,12 @@ Optional: Optional: -- `accessible_namespaces` (List of String) When 'cluster_wide_access=false' this must be set to the list of namespaces to which Kiali is to be given permissions. You can provide names using regex expressions matched against all namespaces the operator can see. If left unset it is required that 'cluster_wide_access' be 'true', and Kiali will have permissions to all namespaces. The list of namespaces that a user can access is a subset of these namespaces, given that user's RBAC settings. - `additional_service_yaml` (Map of String) Additional custom yaml to add to the service definition. This is used mainly to customize the service type. For example, if the 'deployment.service_type' is set to 'LoadBalancer' and you want to set the loadBalancerIP, you can do so here with: 'additional_service_yaml: { 'loadBalancerIP': '78.11.24.19' }'. Another example would be if the 'deployment.service_type' is set to 'ExternalName' you will need to configure the name via: 'additional_service_yaml: { 'externalName': 'my.kiali.example.com' }'. A final example would be if external IPs need to be set: 'additional_service_yaml: { 'externalIPs': ['80.11.12.10'] }' - `affinity` (Attributes) Affinity definitions that are to be used to define the nodes where the Kiali pod should be constrained. See the Kubernetes documentation on Assigning Pods to Nodes for the proper syntax for these three different affinity types. (see [below for nested schema](#nestedatt--spec--deployment--affinity)) -- `cluster_wide_access` (Boolean) Determines if the Kiali server will be granted cluster-wide permissions to see all namespaces. When true, this provides more efficient caching within the Kiali server. It must be 'true' if 'deployment.accessible_namespaces' is left unset. To limit the namespaces for which Kiali has permissions, set to 'false' and list the desired namespaces in 'deployment.accessible_namespaces'. When not set, this value will default to 'false' if 'deployment.accessible_namespaces' is set to a list of namespaces; otherwise this will be 'true'. +- `cluster_wide_access` (Boolean) Determines if the Kiali server will be granted cluster-wide permissions to see all namespaces. When true, this provides more efficient caching within the Kiali server. It must be 'true' if 'deployment.discovery_selectors.default' is left unset. To limit the namespaces for which Kiali has permissions, set to 'false' and define the desired selectors in 'deployment.discovery_selectors.default'. When not set, this value will default to 'true'. - `configmap_annotations` (Map of String) Custom annotations to be created on the Kiali ConfigMap. - `custom_secrets` (Attributes List) Defines additional secrets that are to be mounted in the Kiali pod.These are useful to contain certs that are used by Kiali to securely connect to third party systems(for example, see 'external_services.tracing.auth.ca_file').These secrets must be created by an external mechanism. Kiali will not generate these secrets; itis assumed these secrets are externally managed. You can define 0, 1, or more secrets.An example configuration is,'''custom_secrets:- name: mysecret mount: /mysecret-path- name: my-other-secret mount: /my-other-secret-location optional: true''' (see [below for nested schema](#nestedatt--spec--deployment--custom_secrets)) +- `discovery_selectors` (Attributes) Discovery selectors used to determine which namespaces are accessible to Kiali and which namespaces are visible to Kiali users.You can define discovery selectors to match namespaces on the local cluster as well as remote clusters.The list of namespaces that a user can access is a subset of these namespaces, given that user's RBAC permissions.These selectors will have similar semantics as defined by Istio ( https://istio.io/latest/docs/reference/config/istio.mesh.v1alpha1/#MeshConfig )and the syntax of the equality-based and set-based label selectors are documented by Kubernetes here( https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#resources-that-support-set-based-requirements ) (see [below for nested schema](#nestedatt--spec--deployment--discovery_selectors)) - `dns` (Attributes) The Kiali server pod's DNS configuration. Kubernetes supports different DNS policies and configurations.For further details, consult the Kubernetes documentation - https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/ (see [below for nested schema](#nestedatt--spec--deployment--dns)) - `host_aliases` (Attributes List) This is content for the Kubernetes 'hostAliases' setting for the Kiali server.This allows you to modify the Kiali server pod '/etc/hosts' file.A typical way to configure this setting is,'''host_aliases:- ip: 192.168.1.100 hostnames: - 'foo.local' - 'bar.local''''For details on the content of this setting, see https://kubernetes.io/docs/tasks/network/customize-hosts-file-for-pods/#adding-additional-entries-with-hostaliases (see [below for nested schema](#nestedatt--spec--deployment--host_aliases)) - `hpa` (Attributes) Determines what (if any) HorizontalPodAutoscaler should be created to autoscale the Kiali pod.A typical way to configure HPA for Kiali is,'''hpa: api_version: 'autoscaling/v2' spec: maxReplicas: 2 minReplicas: 1 metrics: - type: Resource resource: name: cpu target: type: Utilization averageUtilization: 50''' (see [below for nested schema](#nestedatt--spec--deployment--hpa)) @@ -246,6 +226,37 @@ Optional: - `optional` (Boolean) Indicates if the secret may or may not exist at the time the Kiali pod starts. This will default to 'false' if not specified. This is ignored if 'csi' is specified - CSI secrets must exist when specified. + +### Nested Schema for `spec.deployment.discovery_selectors` + +Optional: + +- `default` (Attributes List) These are label selectors for the Kiali local cluster and for all remote clusters that do not have overrides.Namespaces that match these selectors are visible to Kiali users.When 'cluster_wide_access=false' these 'default' selectors are used to restrict which namespaces Kiali will have access to.If there are no default discovery selectors, then 'cluster_wide_access' should be 'true' in which case Kiali will havepermissions to access all namespaces. (see [below for nested schema](#nestedatt--spec--deployment--discovery_selectors--default)) +- `overrides` (Map of String) If a remote cluster has different namespaces than the local cluster, these overrides provide a way for you to match those remote namespaces. Kiali will make these remote namespaces visible to users. The name of the overrides section is the name of the remote cluster. Note that the 'default' selectors are ignored when matching namespaces on a remote cluster if that remote cluster has overrides defined. + + +### Nested Schema for `spec.deployment.discovery_selectors.default` + +Optional: + +- `match_expressions` (Attributes List) (see [below for nested schema](#nestedatt--spec--deployment--discovery_selectors--default--match_expressions)) +- `match_labels` (Map of String) + + +### Nested Schema for `spec.deployment.discovery_selectors.default.match_expressions` + +Required: + +- `key` (String) +- `operator` (String) + +Optional: + +- `values` (List of String) + + + + ### Nested Schema for `spec.deployment.dns` diff --git a/docs/data-sources/kmm_sigs_x_k8s_io_node_modules_config_v1beta1_manifest.md b/docs/data-sources/kmm_sigs_x_k8s_io_node_modules_config_v1beta1_manifest.md index 81cdb5cc2..09691e116 100644 --- a/docs/data-sources/kmm_sigs_x_k8s_io_node_modules_config_v1beta1_manifest.md +++ b/docs/data-sources/kmm_sigs_x_k8s_io_node_modules_config_v1beta1_manifest.md @@ -76,6 +76,7 @@ Optional: Required: - `container_image` (String) +- `image_pull_policy` (String) PullPolicy describes a policy for if/when to pull a container image - `insecure_pull` (Boolean) When InsecurePull is true, the container image can be pulled without TLS. - `kernel_version` (String) - `modprobe` (Attributes) (see [below for nested schema](#nestedatt--spec--modules--config--modprobe)) diff --git a/docs/data-sources/kuma_io_mesh_access_log_v1alpha1_manifest.md b/docs/data-sources/kuma_io_mesh_access_log_v1alpha1_manifest.md index ad995b0b7..ef2f3a0b1 100644 --- a/docs/data-sources/kuma_io_mesh_access_log_v1alpha1_manifest.md +++ b/docs/data-sources/kuma_io_mesh_access_log_v1alpha1_manifest.md @@ -53,30 +53,12 @@ Optional: ### Nested Schema for `spec` -Required: - -- `target_ref` (Attributes) TargetRef is a reference to the resource the policy takes an effect on.The resource could be either a real store object or virtual resourcedefined in-place. (see [below for nested schema](#nestedatt--spec--target_ref)) - Optional: - `from` (Attributes List) From list makes a match between clients and corresponding configurations (see [below for nested schema](#nestedatt--spec--from)) +- `target_ref` (Attributes) TargetRef is a reference to the resource the policy takes an effect on.The resource could be either a real store object or virtual resourcedefined in-place. (see [below for nested schema](#nestedatt--spec--target_ref)) - `to` (Attributes List) To list makes a match between the consumed services and corresponding configurations (see [below for nested schema](#nestedatt--spec--to)) - -### Nested Schema for `spec.target_ref` - -Optional: - -- `kind` (String) Kind of the referenced resource -- `labels` (Map of String) Labels are used to select group of MeshServices that match labels. Either Labels orName and Namespace can be used. -- `mesh` (String) Mesh is reserved for future use to identify cross mesh resources. -- `name` (String) Name of the referenced resource. Can only be used with kinds: 'MeshService','MeshServiceSubset' and 'MeshGatewayRoute' -- `namespace` (String) Namespace specifies the namespace of target resource. If empty only resources in policy namespacewill be targeted. -- `proxy_types` (List of String) ProxyTypes specifies the data plane types that are subject to the policy. When not specified,all data plane types are targeted by the policy. -- `section_name` (String) SectionName is used to target specific section of resource.For example, you can target port from MeshService.ports[] by its name. Only traffic to this port will be affected. -- `tags` (Map of String) Tags used to select a subset of proxies by tags. Can only be used with kinds'MeshSubset' and 'MeshServiceSubset' - - ### Nested Schema for `spec.from` @@ -218,6 +200,21 @@ Optional: + +### Nested Schema for `spec.target_ref` + +Optional: + +- `kind` (String) Kind of the referenced resource +- `labels` (Map of String) Labels are used to select group of MeshServices that match labels. Either Labels orName and Namespace can be used. +- `mesh` (String) Mesh is reserved for future use to identify cross mesh resources. +- `name` (String) Name of the referenced resource. Can only be used with kinds: 'MeshService','MeshServiceSubset' and 'MeshGatewayRoute' +- `namespace` (String) Namespace specifies the namespace of target resource. If empty only resources in policy namespacewill be targeted. +- `proxy_types` (List of String) ProxyTypes specifies the data plane types that are subject to the policy. When not specified,all data plane types are targeted by the policy. +- `section_name` (String) SectionName is used to target specific section of resource.For example, you can target port from MeshService.ports[] by its name. Only traffic to this port will be affected. +- `tags` (Map of String) Tags used to select a subset of proxies by tags. Can only be used with kinds'MeshSubset' and 'MeshServiceSubset' + + ### Nested Schema for `spec.to` diff --git a/docs/data-sources/kuma_io_mesh_circuit_breaker_v1alpha1_manifest.md b/docs/data-sources/kuma_io_mesh_circuit_breaker_v1alpha1_manifest.md index c091eaeb8..71497d372 100644 --- a/docs/data-sources/kuma_io_mesh_circuit_breaker_v1alpha1_manifest.md +++ b/docs/data-sources/kuma_io_mesh_circuit_breaker_v1alpha1_manifest.md @@ -53,30 +53,12 @@ Optional: ### Nested Schema for `spec` -Required: - -- `target_ref` (Attributes) TargetRef is a reference to the resource the policy takes an effect on.The resource could be either a real store object or virtual resourcedefined in place. (see [below for nested schema](#nestedatt--spec--target_ref)) - Optional: - `from` (Attributes List) From list makes a match between clients and corresponding configurations (see [below for nested schema](#nestedatt--spec--from)) +- `target_ref` (Attributes) TargetRef is a reference to the resource the policy takes an effect on.The resource could be either a real store object or virtual resourcedefined in place. (see [below for nested schema](#nestedatt--spec--target_ref)) - `to` (Attributes List) To list makes a match between the consumed services and correspondingconfigurations (see [below for nested schema](#nestedatt--spec--to)) - -### Nested Schema for `spec.target_ref` - -Optional: - -- `kind` (String) Kind of the referenced resource -- `labels` (Map of String) Labels are used to select group of MeshServices that match labels. Either Labels orName and Namespace can be used. -- `mesh` (String) Mesh is reserved for future use to identify cross mesh resources. -- `name` (String) Name of the referenced resource. Can only be used with kinds: 'MeshService','MeshServiceSubset' and 'MeshGatewayRoute' -- `namespace` (String) Namespace specifies the namespace of target resource. If empty only resources in policy namespacewill be targeted. -- `proxy_types` (List of String) ProxyTypes specifies the data plane types that are subject to the policy. When not specified,all data plane types are targeted by the policy. -- `section_name` (String) SectionName is used to target specific section of resource.For example, you can target port from MeshService.ports[] by its name. Only traffic to this port will be affected. -- `tags` (Map of String) Tags used to select a subset of proxies by tags. Can only be used with kinds'MeshSubset' and 'MeshServiceSubset' - - ### Nested Schema for `spec.from` @@ -194,6 +176,21 @@ Optional: + +### Nested Schema for `spec.target_ref` + +Optional: + +- `kind` (String) Kind of the referenced resource +- `labels` (Map of String) Labels are used to select group of MeshServices that match labels. Either Labels orName and Namespace can be used. +- `mesh` (String) Mesh is reserved for future use to identify cross mesh resources. +- `name` (String) Name of the referenced resource. Can only be used with kinds: 'MeshService','MeshServiceSubset' and 'MeshGatewayRoute' +- `namespace` (String) Namespace specifies the namespace of target resource. If empty only resources in policy namespacewill be targeted. +- `proxy_types` (List of String) ProxyTypes specifies the data plane types that are subject to the policy. When not specified,all data plane types are targeted by the policy. +- `section_name` (String) SectionName is used to target specific section of resource.For example, you can target port from MeshService.ports[] by its name. Only traffic to this port will be affected. +- `tags` (Map of String) Tags used to select a subset of proxies by tags. Can only be used with kinds'MeshSubset' and 'MeshServiceSubset' + + ### Nested Schema for `spec.to` diff --git a/docs/data-sources/kuma_io_mesh_fault_injection_v1alpha1_manifest.md b/docs/data-sources/kuma_io_mesh_fault_injection_v1alpha1_manifest.md index 8de182808..60b6c0132 100644 --- a/docs/data-sources/kuma_io_mesh_fault_injection_v1alpha1_manifest.md +++ b/docs/data-sources/kuma_io_mesh_fault_injection_v1alpha1_manifest.md @@ -53,30 +53,12 @@ Optional: ### Nested Schema for `spec` -Required: - -- `target_ref` (Attributes) TargetRef is a reference to the resource the policy takes an effect on.The resource could be either a real store object or virtual resourcedefined inplace. (see [below for nested schema](#nestedatt--spec--target_ref)) - Optional: - `from` (Attributes List) From list makes a match between clients and corresponding configurations (see [below for nested schema](#nestedatt--spec--from)) +- `target_ref` (Attributes) TargetRef is a reference to the resource the policy takes an effect on.The resource could be either a real store object or virtual resourcedefined inplace. (see [below for nested schema](#nestedatt--spec--target_ref)) - `to` (Attributes List) To list makes a match between clients and corresponding configurations (see [below for nested schema](#nestedatt--spec--to)) - -### Nested Schema for `spec.target_ref` - -Optional: - -- `kind` (String) Kind of the referenced resource -- `labels` (Map of String) Labels are used to select group of MeshServices that match labels. Either Labels orName and Namespace can be used. -- `mesh` (String) Mesh is reserved for future use to identify cross mesh resources. -- `name` (String) Name of the referenced resource. Can only be used with kinds: 'MeshService','MeshServiceSubset' and 'MeshGatewayRoute' -- `namespace` (String) Namespace specifies the namespace of target resource. If empty only resources in policy namespacewill be targeted. -- `proxy_types` (List of String) ProxyTypes specifies the data plane types that are subject to the policy. When not specified,all data plane types are targeted by the policy. -- `section_name` (String) SectionName is used to target specific section of resource.For example, you can target port from MeshService.ports[] by its name. Only traffic to this port will be affected. -- `tags` (Map of String) Tags used to select a subset of proxies by tags. Can only be used with kinds'MeshSubset' and 'MeshServiceSubset' - - ### Nested Schema for `spec.from` @@ -149,6 +131,21 @@ Required: + +### Nested Schema for `spec.target_ref` + +Optional: + +- `kind` (String) Kind of the referenced resource +- `labels` (Map of String) Labels are used to select group of MeshServices that match labels. Either Labels orName and Namespace can be used. +- `mesh` (String) Mesh is reserved for future use to identify cross mesh resources. +- `name` (String) Name of the referenced resource. Can only be used with kinds: 'MeshService','MeshServiceSubset' and 'MeshGatewayRoute' +- `namespace` (String) Namespace specifies the namespace of target resource. If empty only resources in policy namespacewill be targeted. +- `proxy_types` (List of String) ProxyTypes specifies the data plane types that are subject to the policy. When not specified,all data plane types are targeted by the policy. +- `section_name` (String) SectionName is used to target specific section of resource.For example, you can target port from MeshService.ports[] by its name. Only traffic to this port will be affected. +- `tags` (Map of String) Tags used to select a subset of proxies by tags. Can only be used with kinds'MeshSubset' and 'MeshServiceSubset' + + ### Nested Schema for `spec.to` diff --git a/docs/data-sources/kuma_io_mesh_health_check_v1alpha1_manifest.md b/docs/data-sources/kuma_io_mesh_health_check_v1alpha1_manifest.md index e0def861d..dbdb44a88 100644 --- a/docs/data-sources/kuma_io_mesh_health_check_v1alpha1_manifest.md +++ b/docs/data-sources/kuma_io_mesh_health_check_v1alpha1_manifest.md @@ -53,12 +53,9 @@ Optional: ### Nested Schema for `spec` -Required: - -- `target_ref` (Attributes) TargetRef is a reference to the resource the policy takes an effect on.The resource could be either a real store object or virtual resourcedefined inplace. (see [below for nested schema](#nestedatt--spec--target_ref)) - Optional: +- `target_ref` (Attributes) TargetRef is a reference to the resource the policy takes an effect on.The resource could be either a real store object or virtual resourcedefined inplace. (see [below for nested schema](#nestedatt--spec--target_ref)) - `to` (Attributes List) To list makes a match between the consumed services and corresponding configurations (see [below for nested schema](#nestedatt--spec--to)) diff --git a/docs/data-sources/kuma_io_mesh_load_balancing_strategy_v1alpha1_manifest.md b/docs/data-sources/kuma_io_mesh_load_balancing_strategy_v1alpha1_manifest.md index d632f2773..612e297a1 100644 --- a/docs/data-sources/kuma_io_mesh_load_balancing_strategy_v1alpha1_manifest.md +++ b/docs/data-sources/kuma_io_mesh_load_balancing_strategy_v1alpha1_manifest.md @@ -53,12 +53,9 @@ Optional: ### Nested Schema for `spec` -Required: - -- `target_ref` (Attributes) TargetRef is a reference to the resource the policy takes an effect on.The resource could be either a real store object or virtual resourcedefined inplace. (see [below for nested schema](#nestedatt--spec--target_ref)) - Optional: +- `target_ref` (Attributes) TargetRef is a reference to the resource the policy takes an effect on.The resource could be either a real store object or virtual resourcedefined inplace. (see [below for nested schema](#nestedatt--spec--target_ref)) - `to` (Attributes List) To list makes a match between the consumed services and corresponding configurations (see [below for nested schema](#nestedatt--spec--to)) diff --git a/docs/data-sources/kuma_io_mesh_proxy_patch_v1alpha1_manifest.md b/docs/data-sources/kuma_io_mesh_proxy_patch_v1alpha1_manifest.md index de86cc58e..809fff286 100644 --- a/docs/data-sources/kuma_io_mesh_proxy_patch_v1alpha1_manifest.md +++ b/docs/data-sources/kuma_io_mesh_proxy_patch_v1alpha1_manifest.md @@ -56,6 +56,9 @@ Optional: Required: - `default` (Attributes) Default is a configuration specific to the group of destinationsreferenced in 'targetRef'. (see [below for nested schema](#nestedatt--spec--default)) + +Optional: + - `target_ref` (Attributes) TargetRef is a reference to the resource the policy takes an effect on.The resource could be either a real store object or virtual resourcedefined inplace. (see [below for nested schema](#nestedatt--spec--target_ref)) diff --git a/docs/data-sources/kuma_io_mesh_rate_limit_v1alpha1_manifest.md b/docs/data-sources/kuma_io_mesh_rate_limit_v1alpha1_manifest.md index dfd0a5238..e48ef2a5e 100644 --- a/docs/data-sources/kuma_io_mesh_rate_limit_v1alpha1_manifest.md +++ b/docs/data-sources/kuma_io_mesh_rate_limit_v1alpha1_manifest.md @@ -53,30 +53,12 @@ Optional: ### Nested Schema for `spec` -Required: - -- `target_ref` (Attributes) TargetRef is a reference to the resource the policy takes an effect on.The resource could be either a real store object or virtual resourcedefined inplace. (see [below for nested schema](#nestedatt--spec--target_ref)) - Optional: - `from` (Attributes List) From list makes a match between clients and corresponding configurations (see [below for nested schema](#nestedatt--spec--from)) +- `target_ref` (Attributes) TargetRef is a reference to the resource the policy takes an effect on.The resource could be either a real store object or virtual resourcedefined inplace. (see [below for nested schema](#nestedatt--spec--target_ref)) - `to` (Attributes List) To list makes a match between clients and corresponding configurations (see [below for nested schema](#nestedatt--spec--to)) - -### Nested Schema for `spec.target_ref` - -Optional: - -- `kind` (String) Kind of the referenced resource -- `labels` (Map of String) Labels are used to select group of MeshServices that match labels. Either Labels orName and Namespace can be used. -- `mesh` (String) Mesh is reserved for future use to identify cross mesh resources. -- `name` (String) Name of the referenced resource. Can only be used with kinds: 'MeshService','MeshServiceSubset' and 'MeshGatewayRoute' -- `namespace` (String) Namespace specifies the namespace of target resource. If empty only resources in policy namespacewill be targeted. -- `proxy_types` (List of String) ProxyTypes specifies the data plane types that are subject to the policy. When not specified,all data plane types are targeted by the policy. -- `section_name` (String) SectionName is used to target specific section of resource.For example, you can target port from MeshService.ports[] by its name. Only traffic to this port will be affected. -- `tags` (Map of String) Tags used to select a subset of proxies by tags. Can only be used with kinds'MeshSubset' and 'MeshServiceSubset' - - ### Nested Schema for `spec.from` @@ -194,6 +176,21 @@ Required: + +### Nested Schema for `spec.target_ref` + +Optional: + +- `kind` (String) Kind of the referenced resource +- `labels` (Map of String) Labels are used to select group of MeshServices that match labels. Either Labels orName and Namespace can be used. +- `mesh` (String) Mesh is reserved for future use to identify cross mesh resources. +- `name` (String) Name of the referenced resource. Can only be used with kinds: 'MeshService','MeshServiceSubset' and 'MeshGatewayRoute' +- `namespace` (String) Namespace specifies the namespace of target resource. If empty only resources in policy namespacewill be targeted. +- `proxy_types` (List of String) ProxyTypes specifies the data plane types that are subject to the policy. When not specified,all data plane types are targeted by the policy. +- `section_name` (String) SectionName is used to target specific section of resource.For example, you can target port from MeshService.ports[] by its name. Only traffic to this port will be affected. +- `tags` (Map of String) Tags used to select a subset of proxies by tags. Can only be used with kinds'MeshSubset' and 'MeshServiceSubset' + + ### Nested Schema for `spec.to` diff --git a/docs/data-sources/kuma_io_mesh_retry_v1alpha1_manifest.md b/docs/data-sources/kuma_io_mesh_retry_v1alpha1_manifest.md index c336d43cc..263c312c4 100644 --- a/docs/data-sources/kuma_io_mesh_retry_v1alpha1_manifest.md +++ b/docs/data-sources/kuma_io_mesh_retry_v1alpha1_manifest.md @@ -53,12 +53,9 @@ Optional: ### Nested Schema for `spec` -Required: - -- `target_ref` (Attributes) TargetRef is a reference to the resource the policy takes an effect on.The resource could be either a real store object or virtual resourcedefined inplace. (see [below for nested schema](#nestedatt--spec--target_ref)) - Optional: +- `target_ref` (Attributes) TargetRef is a reference to the resource the policy takes an effect on.The resource could be either a real store object or virtual resourcedefined inplace. (see [below for nested schema](#nestedatt--spec--target_ref)) - `to` (Attributes List) To list makes a match between the consumed services and corresponding configurations (see [below for nested schema](#nestedatt--spec--to)) diff --git a/docs/data-sources/kuma_io_mesh_tcp_route_v1alpha1_manifest.md b/docs/data-sources/kuma_io_mesh_tcp_route_v1alpha1_manifest.md index 04338c09b..d7c4a89c2 100644 --- a/docs/data-sources/kuma_io_mesh_tcp_route_v1alpha1_manifest.md +++ b/docs/data-sources/kuma_io_mesh_tcp_route_v1alpha1_manifest.md @@ -53,12 +53,9 @@ Optional: ### Nested Schema for `spec` -Required: - -- `target_ref` (Attributes) TargetRef is a reference to the resource the policy takes an effect on.The resource could be either a real store object or virtual resourcedefined in-place. (see [below for nested schema](#nestedatt--spec--target_ref)) - Optional: +- `target_ref` (Attributes) TargetRef is a reference to the resource the policy takes an effect on.The resource could be either a real store object or virtual resourcedefined in-place. (see [below for nested schema](#nestedatt--spec--target_ref)) - `to` (Attributes List) To list makes a match between the consumed services and correspondingconfigurations (see [below for nested schema](#nestedatt--spec--to)) diff --git a/docs/data-sources/kuma_io_mesh_timeout_v1alpha1_manifest.md b/docs/data-sources/kuma_io_mesh_timeout_v1alpha1_manifest.md index 0655faae2..517be8052 100644 --- a/docs/data-sources/kuma_io_mesh_timeout_v1alpha1_manifest.md +++ b/docs/data-sources/kuma_io_mesh_timeout_v1alpha1_manifest.md @@ -53,30 +53,12 @@ Optional: ### Nested Schema for `spec` -Required: - -- `target_ref` (Attributes) TargetRef is a reference to the resource the policy takes an effect on.The resource could be either a real store object or virtual resourcedefined inplace. (see [below for nested schema](#nestedatt--spec--target_ref)) - Optional: - `from` (Attributes List) From list makes a match between clients and corresponding configurations (see [below for nested schema](#nestedatt--spec--from)) +- `target_ref` (Attributes) TargetRef is a reference to the resource the policy takes an effect on.The resource could be either a real store object or virtual resourcedefined inplace. (see [below for nested schema](#nestedatt--spec--target_ref)) - `to` (Attributes List) To list makes a match between the consumed services and corresponding configurations (see [below for nested schema](#nestedatt--spec--to)) - -### Nested Schema for `spec.target_ref` - -Optional: - -- `kind` (String) Kind of the referenced resource -- `labels` (Map of String) Labels are used to select group of MeshServices that match labels. Either Labels orName and Namespace can be used. -- `mesh` (String) Mesh is reserved for future use to identify cross mesh resources. -- `name` (String) Name of the referenced resource. Can only be used with kinds: 'MeshService','MeshServiceSubset' and 'MeshGatewayRoute' -- `namespace` (String) Namespace specifies the namespace of target resource. If empty only resources in policy namespacewill be targeted. -- `proxy_types` (List of String) ProxyTypes specifies the data plane types that are subject to the policy. When not specified,all data plane types are targeted by the policy. -- `section_name` (String) SectionName is used to target specific section of resource.For example, you can target port from MeshService.ports[] by its name. Only traffic to this port will be affected. -- `tags` (Map of String) Tags used to select a subset of proxies by tags. Can only be used with kinds'MeshSubset' and 'MeshServiceSubset' - - ### Nested Schema for `spec.from` @@ -126,6 +108,21 @@ Optional: + +### Nested Schema for `spec.target_ref` + +Optional: + +- `kind` (String) Kind of the referenced resource +- `labels` (Map of String) Labels are used to select group of MeshServices that match labels. Either Labels orName and Namespace can be used. +- `mesh` (String) Mesh is reserved for future use to identify cross mesh resources. +- `name` (String) Name of the referenced resource. Can only be used with kinds: 'MeshService','MeshServiceSubset' and 'MeshGatewayRoute' +- `namespace` (String) Namespace specifies the namespace of target resource. If empty only resources in policy namespacewill be targeted. +- `proxy_types` (List of String) ProxyTypes specifies the data plane types that are subject to the policy. When not specified,all data plane types are targeted by the policy. +- `section_name` (String) SectionName is used to target specific section of resource.For example, you can target port from MeshService.ports[] by its name. Only traffic to this port will be affected. +- `tags` (Map of String) Tags used to select a subset of proxies by tags. Can only be used with kinds'MeshSubset' and 'MeshServiceSubset' + + ### Nested Schema for `spec.to` diff --git a/docs/data-sources/kuma_io_mesh_trace_v1alpha1_manifest.md b/docs/data-sources/kuma_io_mesh_trace_v1alpha1_manifest.md index de63dc916..ed483229a 100644 --- a/docs/data-sources/kuma_io_mesh_trace_v1alpha1_manifest.md +++ b/docs/data-sources/kuma_io_mesh_trace_v1alpha1_manifest.md @@ -53,28 +53,10 @@ Optional: ### Nested Schema for `spec` -Required: - -- `target_ref` (Attributes) TargetRef is a reference to the resource the policy takes an effect on.The resource could be either a real store object or virtual resourcedefined inplace. (see [below for nested schema](#nestedatt--spec--target_ref)) - Optional: - `default` (Attributes) MeshTrace configuration. (see [below for nested schema](#nestedatt--spec--default)) - - -### Nested Schema for `spec.target_ref` - -Optional: - -- `kind` (String) Kind of the referenced resource -- `labels` (Map of String) Labels are used to select group of MeshServices that match labels. Either Labels orName and Namespace can be used. -- `mesh` (String) Mesh is reserved for future use to identify cross mesh resources. -- `name` (String) Name of the referenced resource. Can only be used with kinds: 'MeshService','MeshServiceSubset' and 'MeshGatewayRoute' -- `namespace` (String) Namespace specifies the namespace of target resource. If empty only resources in policy namespacewill be targeted. -- `proxy_types` (List of String) ProxyTypes specifies the data plane types that are subject to the policy. When not specified,all data plane types are targeted by the policy. -- `section_name` (String) SectionName is used to target specific section of resource.For example, you can target port from MeshService.ports[] by its name. Only traffic to this port will be affected. -- `tags` (Map of String) Tags used to select a subset of proxies by tags. Can only be used with kinds'MeshSubset' and 'MeshServiceSubset' - +- `target_ref` (Attributes) TargetRef is a reference to the resource the policy takes an effect on.The resource could be either a real store object or virtual resourcedefined inplace. (see [below for nested schema](#nestedatt--spec--target_ref)) ### Nested Schema for `spec.default` @@ -165,3 +147,20 @@ Required: Optional: - `default` (String) Default value to use if header is missing.If the default is missing and there is no value the tag will not beincluded. + + + + + +### Nested Schema for `spec.target_ref` + +Optional: + +- `kind` (String) Kind of the referenced resource +- `labels` (Map of String) Labels are used to select group of MeshServices that match labels. Either Labels orName and Namespace can be used. +- `mesh` (String) Mesh is reserved for future use to identify cross mesh resources. +- `name` (String) Name of the referenced resource. Can only be used with kinds: 'MeshService','MeshServiceSubset' and 'MeshGatewayRoute' +- `namespace` (String) Namespace specifies the namespace of target resource. If empty only resources in policy namespacewill be targeted. +- `proxy_types` (List of String) ProxyTypes specifies the data plane types that are subject to the policy. When not specified,all data plane types are targeted by the policy. +- `section_name` (String) SectionName is used to target specific section of resource.For example, you can target port from MeshService.ports[] by its name. Only traffic to this port will be affected. +- `tags` (Map of String) Tags used to select a subset of proxies by tags. Can only be used with kinds'MeshSubset' and 'MeshServiceSubset' diff --git a/docs/data-sources/kuma_io_mesh_traffic_permission_v1alpha1_manifest.md b/docs/data-sources/kuma_io_mesh_traffic_permission_v1alpha1_manifest.md index fdf29a3eb..932e96ec3 100644 --- a/docs/data-sources/kuma_io_mesh_traffic_permission_v1alpha1_manifest.md +++ b/docs/data-sources/kuma_io_mesh_traffic_permission_v1alpha1_manifest.md @@ -53,28 +53,10 @@ Optional: ### Nested Schema for `spec` -Required: - -- `target_ref` (Attributes) TargetRef is a reference to the resource the policy takes an effect on.The resource could be either a real store object or virtual resourcedefined inplace. (see [below for nested schema](#nestedatt--spec--target_ref)) - Optional: - `from` (Attributes List) From list makes a match between clients and corresponding configurations (see [below for nested schema](#nestedatt--spec--from)) - - -### Nested Schema for `spec.target_ref` - -Optional: - -- `kind` (String) Kind of the referenced resource -- `labels` (Map of String) Labels are used to select group of MeshServices that match labels. Either Labels orName and Namespace can be used. -- `mesh` (String) Mesh is reserved for future use to identify cross mesh resources. -- `name` (String) Name of the referenced resource. Can only be used with kinds: 'MeshService','MeshServiceSubset' and 'MeshGatewayRoute' -- `namespace` (String) Namespace specifies the namespace of target resource. If empty only resources in policy namespacewill be targeted. -- `proxy_types` (List of String) ProxyTypes specifies the data plane types that are subject to the policy. When not specified,all data plane types are targeted by the policy. -- `section_name` (String) SectionName is used to target specific section of resource.For example, you can target port from MeshService.ports[] by its name. Only traffic to this port will be affected. -- `tags` (Map of String) Tags used to select a subset of proxies by tags. Can only be used with kinds'MeshSubset' and 'MeshServiceSubset' - +- `target_ref` (Attributes) TargetRef is a reference to the resource the policy takes an effect on.The resource could be either a real store object or virtual resourcedefined inplace. (see [below for nested schema](#nestedatt--spec--target_ref)) ### Nested Schema for `spec.from` @@ -108,3 +90,19 @@ Optional: Optional: - `action` (String) Action defines a behavior for the specified group of clients: + + + + +### Nested Schema for `spec.target_ref` + +Optional: + +- `kind` (String) Kind of the referenced resource +- `labels` (Map of String) Labels are used to select group of MeshServices that match labels. Either Labels orName and Namespace can be used. +- `mesh` (String) Mesh is reserved for future use to identify cross mesh resources. +- `name` (String) Name of the referenced resource. Can only be used with kinds: 'MeshService','MeshServiceSubset' and 'MeshGatewayRoute' +- `namespace` (String) Namespace specifies the namespace of target resource. If empty only resources in policy namespacewill be targeted. +- `proxy_types` (List of String) ProxyTypes specifies the data plane types that are subject to the policy. When not specified,all data plane types are targeted by the policy. +- `section_name` (String) SectionName is used to target specific section of resource.For example, you can target port from MeshService.ports[] by its name. Only traffic to this port will be affected. +- `tags` (Map of String) Tags used to select a subset of proxies by tags. Can only be used with kinds'MeshSubset' and 'MeshServiceSubset' diff --git a/docs/data-sources/kyverno_io_cleanup_policy_v2_manifest.md b/docs/data-sources/kyverno_io_cleanup_policy_v2_manifest.md index 10e42aeae..63324ffa2 100644 --- a/docs/data-sources/kyverno_io_cleanup_policy_v2_manifest.md +++ b/docs/data-sources/kyverno_io_cleanup_policy_v2_manifest.md @@ -95,13 +95,16 @@ Optional: ### Nested Schema for `spec.context` +Required: + +- `name` (String) Name is the variable name. + Optional: - `api_call` (Attributes) APICall is an HTTP request to the Kubernetes API server, or other JSON web service.The data returned is stored in the context with the name for the context entry. (see [below for nested schema](#nestedatt--spec--context--api_call)) - `config_map` (Attributes) ConfigMap is the ConfigMap reference. (see [below for nested schema](#nestedatt--spec--context--config_map)) - `global_reference` (Attributes) GlobalContextEntryReference is a reference to a cached global context entry. (see [below for nested schema](#nestedatt--spec--context--global_reference)) - `image_registry` (Attributes) ImageRegistry defines requests to an OCI/Docker V2 registry to fetch imagedetails. (see [below for nested schema](#nestedatt--spec--context--image_registry)) -- `name` (String) Name is the variable name. - `variable` (Attributes) Variable defines an arbitrary JMESPath context variable that can be defined inline. (see [below for nested schema](#nestedatt--spec--context--variable)) @@ -110,6 +113,7 @@ Optional: Optional: - `data` (Attributes List) The data object specifies the POST data sent to the server.Only applicable when the method field is set to POST. (see [below for nested schema](#nestedatt--spec--context--api_call--data)) +- `default` (Map of String) Default is an optional arbitrary JSON object that the context may take if the apiCallreturns error - `jmes_path` (String) JMESPath is an optional JSON Match Expression that can be used totransform the JSON response returned from the server. For examplea JMESPath of 'items | length(@)' applied to the API server responsefor the URLPath '/apis/apps/v1/deployments' will return the total countof deployments across all namespaces. - `method` (String) Method is the HTTP request type (GET or POST). Defaults to GET. - `service` (Attributes) Service is an API call to a JSON web service.This is used for non-Kubernetes API server calls.It's mutually exclusive with the URLPath field. (see [below for nested schema](#nestedatt--spec--context--api_call--service)) diff --git a/docs/data-sources/kyverno_io_cleanup_policy_v2beta1_manifest.md b/docs/data-sources/kyverno_io_cleanup_policy_v2beta1_manifest.md index 8eb20137e..4fd108045 100644 --- a/docs/data-sources/kyverno_io_cleanup_policy_v2beta1_manifest.md +++ b/docs/data-sources/kyverno_io_cleanup_policy_v2beta1_manifest.md @@ -95,13 +95,16 @@ Optional: ### Nested Schema for `spec.context` +Required: + +- `name` (String) Name is the variable name. + Optional: - `api_call` (Attributes) APICall is an HTTP request to the Kubernetes API server, or other JSON web service.The data returned is stored in the context with the name for the context entry. (see [below for nested schema](#nestedatt--spec--context--api_call)) - `config_map` (Attributes) ConfigMap is the ConfigMap reference. (see [below for nested schema](#nestedatt--spec--context--config_map)) - `global_reference` (Attributes) GlobalContextEntryReference is a reference to a cached global context entry. (see [below for nested schema](#nestedatt--spec--context--global_reference)) - `image_registry` (Attributes) ImageRegistry defines requests to an OCI/Docker V2 registry to fetch imagedetails. (see [below for nested schema](#nestedatt--spec--context--image_registry)) -- `name` (String) Name is the variable name. - `variable` (Attributes) Variable defines an arbitrary JMESPath context variable that can be defined inline. (see [below for nested schema](#nestedatt--spec--context--variable)) @@ -110,6 +113,7 @@ Optional: Optional: - `data` (Attributes List) The data object specifies the POST data sent to the server.Only applicable when the method field is set to POST. (see [below for nested schema](#nestedatt--spec--context--api_call--data)) +- `default` (Map of String) Default is an optional arbitrary JSON object that the context may take if the apiCallreturns error - `jmes_path` (String) JMESPath is an optional JSON Match Expression that can be used totransform the JSON response returned from the server. For examplea JMESPath of 'items | length(@)' applied to the API server responsefor the URLPath '/apis/apps/v1/deployments' will return the total countof deployments across all namespaces. - `method` (String) Method is the HTTP request type (GET or POST). Defaults to GET. - `service` (Attributes) Service is an API call to a JSON web service.This is used for non-Kubernetes API server calls.It's mutually exclusive with the URLPath field. (see [below for nested schema](#nestedatt--spec--context--api_call--service)) diff --git a/docs/data-sources/kyverno_io_cluster_cleanup_policy_v2_manifest.md b/docs/data-sources/kyverno_io_cluster_cleanup_policy_v2_manifest.md index f410d4454..59a0f7a06 100644 --- a/docs/data-sources/kyverno_io_cluster_cleanup_policy_v2_manifest.md +++ b/docs/data-sources/kyverno_io_cluster_cleanup_policy_v2_manifest.md @@ -94,13 +94,16 @@ Optional: ### Nested Schema for `spec.context` +Required: + +- `name` (String) Name is the variable name. + Optional: - `api_call` (Attributes) APICall is an HTTP request to the Kubernetes API server, or other JSON web service.The data returned is stored in the context with the name for the context entry. (see [below for nested schema](#nestedatt--spec--context--api_call)) - `config_map` (Attributes) ConfigMap is the ConfigMap reference. (see [below for nested schema](#nestedatt--spec--context--config_map)) - `global_reference` (Attributes) GlobalContextEntryReference is a reference to a cached global context entry. (see [below for nested schema](#nestedatt--spec--context--global_reference)) - `image_registry` (Attributes) ImageRegistry defines requests to an OCI/Docker V2 registry to fetch imagedetails. (see [below for nested schema](#nestedatt--spec--context--image_registry)) -- `name` (String) Name is the variable name. - `variable` (Attributes) Variable defines an arbitrary JMESPath context variable that can be defined inline. (see [below for nested schema](#nestedatt--spec--context--variable)) @@ -109,6 +112,7 @@ Optional: Optional: - `data` (Attributes List) The data object specifies the POST data sent to the server.Only applicable when the method field is set to POST. (see [below for nested schema](#nestedatt--spec--context--api_call--data)) +- `default` (Map of String) Default is an optional arbitrary JSON object that the context may take if the apiCallreturns error - `jmes_path` (String) JMESPath is an optional JSON Match Expression that can be used totransform the JSON response returned from the server. For examplea JMESPath of 'items | length(@)' applied to the API server responsefor the URLPath '/apis/apps/v1/deployments' will return the total countof deployments across all namespaces. - `method` (String) Method is the HTTP request type (GET or POST). Defaults to GET. - `service` (Attributes) Service is an API call to a JSON web service.This is used for non-Kubernetes API server calls.It's mutually exclusive with the URLPath field. (see [below for nested schema](#nestedatt--spec--context--api_call--service)) diff --git a/docs/data-sources/kyverno_io_cluster_cleanup_policy_v2beta1_manifest.md b/docs/data-sources/kyverno_io_cluster_cleanup_policy_v2beta1_manifest.md index f0b23a7bc..77c93b726 100644 --- a/docs/data-sources/kyverno_io_cluster_cleanup_policy_v2beta1_manifest.md +++ b/docs/data-sources/kyverno_io_cluster_cleanup_policy_v2beta1_manifest.md @@ -94,13 +94,16 @@ Optional: ### Nested Schema for `spec.context` +Required: + +- `name` (String) Name is the variable name. + Optional: - `api_call` (Attributes) APICall is an HTTP request to the Kubernetes API server, or other JSON web service.The data returned is stored in the context with the name for the context entry. (see [below for nested schema](#nestedatt--spec--context--api_call)) - `config_map` (Attributes) ConfigMap is the ConfigMap reference. (see [below for nested schema](#nestedatt--spec--context--config_map)) - `global_reference` (Attributes) GlobalContextEntryReference is a reference to a cached global context entry. (see [below for nested schema](#nestedatt--spec--context--global_reference)) - `image_registry` (Attributes) ImageRegistry defines requests to an OCI/Docker V2 registry to fetch imagedetails. (see [below for nested schema](#nestedatt--spec--context--image_registry)) -- `name` (String) Name is the variable name. - `variable` (Attributes) Variable defines an arbitrary JMESPath context variable that can be defined inline. (see [below for nested schema](#nestedatt--spec--context--variable)) @@ -109,6 +112,7 @@ Optional: Optional: - `data` (Attributes List) The data object specifies the POST data sent to the server.Only applicable when the method field is set to POST. (see [below for nested schema](#nestedatt--spec--context--api_call--data)) +- `default` (Map of String) Default is an optional arbitrary JSON object that the context may take if the apiCallreturns error - `jmes_path` (String) JMESPath is an optional JSON Match Expression that can be used totransform the JSON response returned from the server. For examplea JMESPath of 'items | length(@)' applied to the API server responsefor the URLPath '/apis/apps/v1/deployments' will return the total countof deployments across all namespaces. - `method` (String) Method is the HTTP request type (GET or POST). Defaults to GET. - `service` (Attributes) Service is an API call to a JSON web service.This is used for non-Kubernetes API server calls.It's mutually exclusive with the URLPath field. (see [below for nested schema](#nestedatt--spec--context--api_call--service)) diff --git a/docs/data-sources/kyverno_io_cluster_policy_v1_manifest.md b/docs/data-sources/kyverno_io_cluster_policy_v1_manifest.md index 8ae27ac44..a5dec9d5e 100644 --- a/docs/data-sources/kyverno_io_cluster_policy_v1_manifest.md +++ b/docs/data-sources/kyverno_io_cluster_policy_v1_manifest.md @@ -54,6 +54,7 @@ Optional: - `admission` (Boolean) Admission controls if rules are applied during admission.Optional. Default value is 'true'. - `apply_rules` (String) ApplyRules controls how rules in a policy are applied. Rule are processed inthe order of declaration. When set to 'One' processing stops after a rule hasbeen applied i.e. the rule matches and results in a pass, fail, or error. Whenset to 'All' all rules in the policy are processed. The default is 'All'. - `background` (Boolean) Background controls if rules are applied to existing resources during a background scan.Optional. Default value is 'true'. The value must be set to 'false' if the policy ruleuses variables that are only available in the admission review request (e.g. user name). +- `emit_warning` (Boolean) EmitWarning enables API response warnings for mutate policy rules or validate policy rules with validationFailureAction set to Audit.Enabling this option will extend admission request processing times. The default value is 'false'. - `failure_policy` (String) Deprecated, use failurePolicy under the webhookConfiguration instead. - `generate_existing` (Boolean) Deprecated, use generateExisting under the generate rule instead - `generate_existing_on_policy_update` (Boolean) Deprecated, use generateExisting instead @@ -83,6 +84,7 @@ Optional: - `match` (Attributes) MatchResources defines when this policy rule should be applied. The matchcriteria can include resource information (e.g. kind, name, namespace, labels)and admission review request information like the user name or role.At least one kind is required. (see [below for nested schema](#nestedatt--spec--rules--match)) - `mutate` (Attributes) Mutation is used to modify matching resources. (see [below for nested schema](#nestedatt--spec--rules--mutate)) - `preconditions` (Map of String) Preconditions are used to determine if a policy rule should be applied by evaluating aset of conditions. The declaration can contain nested 'any' or 'all' statements. A direct listof conditions (without 'any' or 'all' statements is supported for backwards compatibility butwill be deprecated in the next major release.See: https://kyverno.io/docs/writing-policies/preconditions/ +- `report_properties` (Map of String) ReportProperties are the additional properties from the rule that will be added to the policy report result - `skip_background_requests` (Boolean) SkipBackgroundRequests bypasses admission requests that are sent by the background controller.The default value is set to 'true', it must be set to 'false' to applygenerate and mutateExisting rules to those requests. - `validate` (Attributes) Validation is used to validate matching resources. (see [below for nested schema](#nestedatt--spec--rules--validate)) - `verify_images` (Attributes List) VerifyImages is used to verify image signatures and mutate them to add a digest (see [below for nested schema](#nestedatt--spec--rules--verify_images)) @@ -99,13 +101,16 @@ Required: ### Nested Schema for `spec.rules.context` +Required: + +- `name` (String) Name is the variable name. + Optional: - `api_call` (Attributes) APICall is an HTTP request to the Kubernetes API server, or other JSON web service.The data returned is stored in the context with the name for the context entry. (see [below for nested schema](#nestedatt--spec--rules--context--api_call)) - `config_map` (Attributes) ConfigMap is the ConfigMap reference. (see [below for nested schema](#nestedatt--spec--rules--context--config_map)) - `global_reference` (Attributes) GlobalContextEntryReference is a reference to a cached global context entry. (see [below for nested schema](#nestedatt--spec--rules--context--global_reference)) - `image_registry` (Attributes) ImageRegistry defines requests to an OCI/Docker V2 registry to fetch imagedetails. (see [below for nested schema](#nestedatt--spec--rules--context--image_registry)) -- `name` (String) Name is the variable name. - `variable` (Attributes) Variable defines an arbitrary JMESPath context variable that can be defined inline. (see [below for nested schema](#nestedatt--spec--rules--context--variable)) @@ -114,6 +119,7 @@ Optional: Optional: - `data` (Attributes List) The data object specifies the POST data sent to the server.Only applicable when the method field is set to POST. (see [below for nested schema](#nestedatt--spec--rules--context--api_call--data)) +- `default` (Map of String) Default is an optional arbitrary JSON object that the context may take if the apiCallreturns error - `jmes_path` (String) JMESPath is an optional JSON Match Expression that can be used totransform the JSON response returned from the server. For examplea JMESPath of 'items | length(@)' applied to the API server responsefor the URLPath '/apis/apps/v1/deployments' will return the total countof deployments across all namespaces. - `method` (String) Method is the HTTP request type (GET or POST). Defaults to GET. - `service` (Attributes) Service is an API call to a JSON web service.This is used for non-Kubernetes API server calls.It's mutually exclusive with the URLPath field. (see [below for nested schema](#nestedatt--spec--rules--context--api_call--service)) @@ -573,13 +579,16 @@ Optional: ### Nested Schema for `spec.rules.generate.foreach.context` +Required: + +- `name` (String) Name is the variable name. + Optional: - `api_call` (Attributes) APICall is an HTTP request to the Kubernetes API server, or other JSON web service.The data returned is stored in the context with the name for the context entry. (see [below for nested schema](#nestedatt--spec--rules--generate--foreach--context--api_call)) - `config_map` (Attributes) ConfigMap is the ConfigMap reference. (see [below for nested schema](#nestedatt--spec--rules--generate--foreach--context--config_map)) - `global_reference` (Attributes) GlobalContextEntryReference is a reference to a cached global context entry. (see [below for nested schema](#nestedatt--spec--rules--generate--foreach--context--global_reference)) - `image_registry` (Attributes) ImageRegistry defines requests to an OCI/Docker V2 registry to fetch imagedetails. (see [below for nested schema](#nestedatt--spec--rules--generate--foreach--context--image_registry)) -- `name` (String) Name is the variable name. - `variable` (Attributes) Variable defines an arbitrary JMESPath context variable that can be defined inline. (see [below for nested schema](#nestedatt--spec--rules--generate--foreach--context--variable)) @@ -588,6 +597,7 @@ Optional: Optional: - `data` (Attributes List) The data object specifies the POST data sent to the server.Only applicable when the method field is set to POST. (see [below for nested schema](#nestedatt--spec--rules--generate--foreach--context--api_call--data)) +- `default` (Map of String) Default is an optional arbitrary JSON object that the context may take if the apiCallreturns error - `jmes_path` (String) JMESPath is an optional JSON Match Expression that can be used totransform the JSON response returned from the server. For examplea JMESPath of 'items | length(@)' applied to the API server responsefor the URLPath '/apis/apps/v1/deployments' will return the total countof deployments across all namespaces. - `method` (String) Method is the HTTP request type (GET or POST). Defaults to GET. - `service` (Attributes) Service is an API call to a JSON web service.This is used for non-Kubernetes API server calls.It's mutually exclusive with the URLPath field. (see [below for nested schema](#nestedatt--spec--rules--generate--foreach--context--api_call--service)) @@ -987,13 +997,16 @@ Optional: ### Nested Schema for `spec.rules.mutate.foreach.context` +Required: + +- `name` (String) Name is the variable name. + Optional: - `api_call` (Attributes) APICall is an HTTP request to the Kubernetes API server, or other JSON web service.The data returned is stored in the context with the name for the context entry. (see [below for nested schema](#nestedatt--spec--rules--mutate--foreach--context--api_call)) - `config_map` (Attributes) ConfigMap is the ConfigMap reference. (see [below for nested schema](#nestedatt--spec--rules--mutate--foreach--context--config_map)) - `global_reference` (Attributes) GlobalContextEntryReference is a reference to a cached global context entry. (see [below for nested schema](#nestedatt--spec--rules--mutate--foreach--context--global_reference)) - `image_registry` (Attributes) ImageRegistry defines requests to an OCI/Docker V2 registry to fetch imagedetails. (see [below for nested schema](#nestedatt--spec--rules--mutate--foreach--context--image_registry)) -- `name` (String) Name is the variable name. - `variable` (Attributes) Variable defines an arbitrary JMESPath context variable that can be defined inline. (see [below for nested schema](#nestedatt--spec--rules--mutate--foreach--context--variable)) @@ -1002,6 +1015,7 @@ Optional: Optional: - `data` (Attributes List) The data object specifies the POST data sent to the server.Only applicable when the method field is set to POST. (see [below for nested schema](#nestedatt--spec--rules--mutate--foreach--context--api_call--data)) +- `default` (Map of String) Default is an optional arbitrary JSON object that the context may take if the apiCallreturns error - `jmes_path` (String) JMESPath is an optional JSON Match Expression that can be used totransform the JSON response returned from the server. For examplea JMESPath of 'items | length(@)' applied to the API server responsefor the URLPath '/apis/apps/v1/deployments' will return the total countof deployments across all namespaces. - `method` (String) Method is the HTTP request type (GET or POST). Defaults to GET. - `service` (Attributes) Service is an API call to a JSON web service.This is used for non-Kubernetes API server calls.It's mutually exclusive with the URLPath field. (see [below for nested schema](#nestedatt--spec--rules--mutate--foreach--context--api_call--service)) @@ -1135,13 +1149,16 @@ Optional: ### Nested Schema for `spec.rules.mutate.targets.context` +Required: + +- `name` (String) Name is the variable name. + Optional: - `api_call` (Attributes) APICall is an HTTP request to the Kubernetes API server, or other JSON web service.The data returned is stored in the context with the name for the context entry. (see [below for nested schema](#nestedatt--spec--rules--mutate--targets--context--api_call)) - `config_map` (Attributes) ConfigMap is the ConfigMap reference. (see [below for nested schema](#nestedatt--spec--rules--mutate--targets--context--config_map)) - `global_reference` (Attributes) GlobalContextEntryReference is a reference to a cached global context entry. (see [below for nested schema](#nestedatt--spec--rules--mutate--targets--context--global_reference)) - `image_registry` (Attributes) ImageRegistry defines requests to an OCI/Docker V2 registry to fetch imagedetails. (see [below for nested schema](#nestedatt--spec--rules--mutate--targets--context--image_registry)) -- `name` (String) Name is the variable name. - `variable` (Attributes) Variable defines an arbitrary JMESPath context variable that can be defined inline. (see [below for nested schema](#nestedatt--spec--rules--mutate--targets--context--variable)) @@ -1150,6 +1167,7 @@ Optional: Optional: - `data` (Attributes List) The data object specifies the POST data sent to the server.Only applicable when the method field is set to POST. (see [below for nested schema](#nestedatt--spec--rules--mutate--targets--context--api_call--data)) +- `default` (Map of String) Default is an optional arbitrary JSON object that the context may take if the apiCallreturns error - `jmes_path` (String) JMESPath is an optional JSON Match Expression that can be used totransform the JSON response returned from the server. For examplea JMESPath of 'items | length(@)' applied to the API server responsefor the URLPath '/apis/apps/v1/deployments' will return the total countof deployments across all namespaces. - `method` (String) Method is the HTTP request type (GET or POST). Defaults to GET. - `service` (Attributes) Service is an API call to a JSON web service.This is used for non-Kubernetes API server calls.It's mutually exclusive with the URLPath field. (see [below for nested schema](#nestedatt--spec--rules--mutate--targets--context--api_call--service)) @@ -1242,6 +1260,7 @@ Optional: Optional: +- `allow_existing_violations` (Boolean) AllowExistingViolations allows prexisting violating resources to continue violating a policy. - `any_pattern` (Map of String) AnyPattern specifies list of validation patterns. At least one of the patternsmust be satisfied for the validation rule to succeed. - `assert` (Map of String) Assert defines a kyverno-json assertion tree. - `cel` (Attributes) CEL allows validation checks using the Common Expression Language (https://kubernetes.io/docs/reference/using-api/cel/). (see [below for nested schema](#nestedatt--spec--rules--validate--cel)) @@ -1397,13 +1416,16 @@ Optional: ### Nested Schema for `spec.rules.validate.foreach.context` +Required: + +- `name` (String) Name is the variable name. + Optional: - `api_call` (Attributes) APICall is an HTTP request to the Kubernetes API server, or other JSON web service.The data returned is stored in the context with the name for the context entry. (see [below for nested schema](#nestedatt--spec--rules--validate--foreach--context--api_call)) - `config_map` (Attributes) ConfigMap is the ConfigMap reference. (see [below for nested schema](#nestedatt--spec--rules--validate--foreach--context--config_map)) - `global_reference` (Attributes) GlobalContextEntryReference is a reference to a cached global context entry. (see [below for nested schema](#nestedatt--spec--rules--validate--foreach--context--global_reference)) - `image_registry` (Attributes) ImageRegistry defines requests to an OCI/Docker V2 registry to fetch imagedetails. (see [below for nested schema](#nestedatt--spec--rules--validate--foreach--context--image_registry)) -- `name` (String) Name is the variable name. - `variable` (Attributes) Variable defines an arbitrary JMESPath context variable that can be defined inline. (see [below for nested schema](#nestedatt--spec--rules--validate--foreach--context--variable)) @@ -1412,6 +1434,7 @@ Optional: Optional: - `data` (Attributes List) The data object specifies the POST data sent to the server.Only applicable when the method field is set to POST. (see [below for nested schema](#nestedatt--spec--rules--validate--foreach--context--api_call--data)) +- `default` (Map of String) Default is an optional arbitrary JSON object that the context may take if the apiCallreturns error - `jmes_path` (String) JMESPath is an optional JSON Match Expression that can be used totransform the JSON response returned from the server. For examplea JMESPath of 'items | length(@)' applied to the API server responsefor the URLPath '/apis/apps/v1/deployments' will return the total countof deployments across all namespaces. - `method` (String) Method is the HTTP request type (GET or POST). Defaults to GET. - `service` (Attributes) Service is an API call to a JSON web service.This is used for non-Kubernetes API server calls.It's mutually exclusive with the URLPath field. (see [below for nested schema](#nestedatt--spec--rules--validate--foreach--context--api_call--service)) @@ -1567,6 +1590,7 @@ Optional: - `keyless` (Attributes) Keyless is a set of attribute used to verify a Sigstore keyless attestor.See https://github.com/sigstore/cosign/blob/main/KEYLESS.md. (see [below for nested schema](#nestedatt--spec--rules--validate--manifests--attestors--entries--keyless)) - `keys` (Attributes) Keys specifies one or more public keys. (see [below for nested schema](#nestedatt--spec--rules--validate--manifests--attestors--entries--keys)) - `repository` (String) Repository is an optional alternate OCI repository to use for signatures and attestations that match this rule.If specified Repository will override other OCI image repository locations for this Attestor. +- `signature_algorithm` (String) Specify signature algorithm for public keys. Supported values are sha224, sha256, sha384 and sha512. ### Nested Schema for `spec.rules.validate.manifests.attestors.entries.certificates` @@ -1644,7 +1668,7 @@ Optional: - `public_keys` (String) Keys is a set of X.509 public keys used to verify image signatures. The keys can be directlyspecified or can be a variable reference to a key specified in a ConfigMap (seehttps://kyverno.io/docs/writing-policies/variables/), or reference a standard Kubernetes Secretelsewhere in the cluster by specifying it in the format 'k8s:///'.The named Secret must specify a key 'cosign.pub' containing the public key used forverification, (see https://github.com/sigstore/cosign/blob/main/KMS.md#kubernetes-secret).When multiple keys are specified each key is processed as a separate staticKey entry(.attestors[*].entries.keys) within the set of attestors and the count is applied across the keys. - `rekor` (Attributes) Rekor provides configuration for the Rekor transparency log service. If an empty objectis provided the public instance of Rekor (https://rekor.sigstore.dev) is used. (see [below for nested schema](#nestedatt--spec--rules--validate--manifests--attestors--entries--keys--rekor)) - `secret` (Attributes) Reference to a Secret resource that contains a public key (see [below for nested schema](#nestedatt--spec--rules--validate--manifests--attestors--entries--keys--secret)) -- `signature_algorithm` (String) Specify signature algorithm for public keys. Supported values are sha224, sha256, sha384 and sha512. +- `signature_algorithm` (String) Deprecated. Use attestor.signatureAlgorithm instead. ### Nested Schema for `spec.rules.validate.manifests.attestors.entries.keys.ctlog` @@ -1758,6 +1782,7 @@ Optional: - `subject` (String) Deprecated. Use KeylessAttestor instead. - `type` (String) Type specifies the method of signature validation. The allowed optionsare Cosign, Sigstore Bundle and Notary. By default Cosign is used if a type is not specified. - `use_cache` (Boolean) UseCache enables caching of image verify responses for this rule. +- `validate` (Attributes) Validation checks conditions across multiple imageverification attestations or context entries (see [below for nested schema](#nestedatt--spec--rules--verify_images--validate)) - `verify_digest` (Boolean) VerifyDigest validates that images have a digest. @@ -1767,6 +1792,7 @@ Optional: - `attestors` (Attributes List) Attestors specify the required attestors (i.e. authorities). (see [below for nested schema](#nestedatt--spec--rules--verify_images--attestations--attestors)) - `conditions` (Attributes List) Conditions are used to verify attributes within a Predicate. If no Conditions are specifiedthe attestation check is satisfied as long there are predicates that match the predicate type. (see [below for nested schema](#nestedatt--spec--rules--verify_images--attestations--conditions)) +- `name` (String) Name is the variable name. - `predicate_type` (String) Deprecated in favour of 'Type', to be removed soon - `type` (String) Type defines the type of attestation contained within the Statement. @@ -1789,6 +1815,7 @@ Optional: - `keyless` (Attributes) Keyless is a set of attribute used to verify a Sigstore keyless attestor.See https://github.com/sigstore/cosign/blob/main/KEYLESS.md. (see [below for nested schema](#nestedatt--spec--rules--verify_images--attestations--attestors--entries--keyless)) - `keys` (Attributes) Keys specifies one or more public keys. (see [below for nested schema](#nestedatt--spec--rules--verify_images--attestations--attestors--entries--keys)) - `repository` (String) Repository is an optional alternate OCI repository to use for signatures and attestations that match this rule.If specified Repository will override other OCI image repository locations for this Attestor. +- `signature_algorithm` (String) Specify signature algorithm for public keys. Supported values are sha224, sha256, sha384 and sha512. ### Nested Schema for `spec.rules.verify_images.attestations.attestors.entries.certificates` @@ -1866,7 +1893,7 @@ Optional: - `public_keys` (String) Keys is a set of X.509 public keys used to verify image signatures. The keys can be directlyspecified or can be a variable reference to a key specified in a ConfigMap (seehttps://kyverno.io/docs/writing-policies/variables/), or reference a standard Kubernetes Secretelsewhere in the cluster by specifying it in the format 'k8s:///'.The named Secret must specify a key 'cosign.pub' containing the public key used forverification, (see https://github.com/sigstore/cosign/blob/main/KMS.md#kubernetes-secret).When multiple keys are specified each key is processed as a separate staticKey entry(.attestors[*].entries.keys) within the set of attestors and the count is applied across the keys. - `rekor` (Attributes) Rekor provides configuration for the Rekor transparency log service. If an empty objectis provided the public instance of Rekor (https://rekor.sigstore.dev) is used. (see [below for nested schema](#nestedatt--spec--rules--verify_images--attestations--attestors--entries--keys--rekor)) - `secret` (Attributes) Reference to a Secret resource that contains a public key (see [below for nested schema](#nestedatt--spec--rules--verify_images--attestations--attestors--entries--keys--secret)) -- `signature_algorithm` (String) Specify signature algorithm for public keys. Supported values are sha224, sha256, sha384 and sha512. +- `signature_algorithm` (String) Deprecated. Use attestor.signatureAlgorithm instead. ### Nested Schema for `spec.rules.verify_images.attestations.attestors.entries.keys.ctlog` @@ -1951,6 +1978,7 @@ Optional: - `keyless` (Attributes) Keyless is a set of attribute used to verify a Sigstore keyless attestor.See https://github.com/sigstore/cosign/blob/main/KEYLESS.md. (see [below for nested schema](#nestedatt--spec--rules--verify_images--attestors--entries--keyless)) - `keys` (Attributes) Keys specifies one or more public keys. (see [below for nested schema](#nestedatt--spec--rules--verify_images--attestors--entries--keys)) - `repository` (String) Repository is an optional alternate OCI repository to use for signatures and attestations that match this rule.If specified Repository will override other OCI image repository locations for this Attestor. +- `signature_algorithm` (String) Specify signature algorithm for public keys. Supported values are sha224, sha256, sha384 and sha512. ### Nested Schema for `spec.rules.verify_images.attestors.entries.certificates` @@ -2028,7 +2056,7 @@ Optional: - `public_keys` (String) Keys is a set of X.509 public keys used to verify image signatures. The keys can be directlyspecified or can be a variable reference to a key specified in a ConfigMap (seehttps://kyverno.io/docs/writing-policies/variables/), or reference a standard Kubernetes Secretelsewhere in the cluster by specifying it in the format 'k8s:///'.The named Secret must specify a key 'cosign.pub' containing the public key used forverification, (see https://github.com/sigstore/cosign/blob/main/KMS.md#kubernetes-secret).When multiple keys are specified each key is processed as a separate staticKey entry(.attestors[*].entries.keys) within the set of attestors and the count is applied across the keys. - `rekor` (Attributes) Rekor provides configuration for the Rekor transparency log service. If an empty objectis provided the public instance of Rekor (https://rekor.sigstore.dev) is used. (see [below for nested schema](#nestedatt--spec--rules--verify_images--attestors--entries--keys--rekor)) - `secret` (Attributes) Reference to a Secret resource that contains a public key (see [below for nested schema](#nestedatt--spec--rules--verify_images--attestors--entries--keys--secret)) -- `signature_algorithm` (String) Specify signature algorithm for public keys. Supported values are sha224, sha256, sha384 and sha512. +- `signature_algorithm` (String) Deprecated. Use attestor.signatureAlgorithm instead. ### Nested Schema for `spec.rules.verify_images.attestors.entries.keys.ctlog` @@ -2072,6 +2100,23 @@ Optional: - `secrets` (List of String) Secrets specifies a list of secrets that are provided for credentials.Secrets must live in the Kyverno namespace. + +### Nested Schema for `spec.rules.verify_images.validate` + +Optional: + +- `deny` (Attributes) Deny defines conditions used to pass or fail a validation rule. (see [below for nested schema](#nestedatt--spec--rules--verify_images--validate--deny)) +- `message` (String) Message specifies a custom message to be displayed on failure. + + +### Nested Schema for `spec.rules.verify_images.validate.deny` + +Optional: + +- `conditions` (Map of String) Multiple conditions can be declared under an 'any' or 'all' statement. A direct listof conditions (without 'any' or 'all' statements) is also supported for backwards compatibilitybut will be deprecated in the next major release.See: https://kyverno.io/docs/writing-policies/validate/#deny-rules + + + diff --git a/docs/data-sources/kyverno_io_cluster_policy_v2beta1_manifest.md b/docs/data-sources/kyverno_io_cluster_policy_v2beta1_manifest.md index 856b3f147..a28c17a17 100644 --- a/docs/data-sources/kyverno_io_cluster_policy_v2beta1_manifest.md +++ b/docs/data-sources/kyverno_io_cluster_policy_v2beta1_manifest.md @@ -99,13 +99,16 @@ Required: ### Nested Schema for `spec.rules.context` +Required: + +- `name` (String) Name is the variable name. + Optional: - `api_call` (Attributes) APICall is an HTTP request to the Kubernetes API server, or other JSON web service.The data returned is stored in the context with the name for the context entry. (see [below for nested schema](#nestedatt--spec--rules--context--api_call)) - `config_map` (Attributes) ConfigMap is the ConfigMap reference. (see [below for nested schema](#nestedatt--spec--rules--context--config_map)) - `global_reference` (Attributes) GlobalContextEntryReference is a reference to a cached global context entry. (see [below for nested schema](#nestedatt--spec--rules--context--global_reference)) - `image_registry` (Attributes) ImageRegistry defines requests to an OCI/Docker V2 registry to fetch imagedetails. (see [below for nested schema](#nestedatt--spec--rules--context--image_registry)) -- `name` (String) Name is the variable name. - `variable` (Attributes) Variable defines an arbitrary JMESPath context variable that can be defined inline. (see [below for nested schema](#nestedatt--spec--rules--context--variable)) @@ -114,6 +117,7 @@ Optional: Optional: - `data` (Attributes List) The data object specifies the POST data sent to the server.Only applicable when the method field is set to POST. (see [below for nested schema](#nestedatt--spec--rules--context--api_call--data)) +- `default` (Map of String) Default is an optional arbitrary JSON object that the context may take if the apiCallreturns error - `jmes_path` (String) JMESPath is an optional JSON Match Expression that can be used totransform the JSON response returned from the server. For examplea JMESPath of 'items | length(@)' applied to the API server responsefor the URLPath '/apis/apps/v1/deployments' will return the total countof deployments across all namespaces. - `method` (String) Method is the HTTP request type (GET or POST). Defaults to GET. - `service` (Attributes) Service is an API call to a JSON web service.This is used for non-Kubernetes API server calls.It's mutually exclusive with the URLPath field. (see [below for nested schema](#nestedatt--spec--rules--context--api_call--service)) @@ -496,13 +500,16 @@ Optional: ### Nested Schema for `spec.rules.generate.foreach.context` +Required: + +- `name` (String) Name is the variable name. + Optional: - `api_call` (Attributes) APICall is an HTTP request to the Kubernetes API server, or other JSON web service.The data returned is stored in the context with the name for the context entry. (see [below for nested schema](#nestedatt--spec--rules--generate--foreach--context--api_call)) - `config_map` (Attributes) ConfigMap is the ConfigMap reference. (see [below for nested schema](#nestedatt--spec--rules--generate--foreach--context--config_map)) - `global_reference` (Attributes) GlobalContextEntryReference is a reference to a cached global context entry. (see [below for nested schema](#nestedatt--spec--rules--generate--foreach--context--global_reference)) - `image_registry` (Attributes) ImageRegistry defines requests to an OCI/Docker V2 registry to fetch imagedetails. (see [below for nested schema](#nestedatt--spec--rules--generate--foreach--context--image_registry)) -- `name` (String) Name is the variable name. - `variable` (Attributes) Variable defines an arbitrary JMESPath context variable that can be defined inline. (see [below for nested schema](#nestedatt--spec--rules--generate--foreach--context--variable)) @@ -511,6 +518,7 @@ Optional: Optional: - `data` (Attributes List) The data object specifies the POST data sent to the server.Only applicable when the method field is set to POST. (see [below for nested schema](#nestedatt--spec--rules--generate--foreach--context--api_call--data)) +- `default` (Map of String) Default is an optional arbitrary JSON object that the context may take if the apiCallreturns error - `jmes_path` (String) JMESPath is an optional JSON Match Expression that can be used totransform the JSON response returned from the server. For examplea JMESPath of 'items | length(@)' applied to the API server responsefor the URLPath '/apis/apps/v1/deployments' will return the total countof deployments across all namespaces. - `method` (String) Method is the HTTP request type (GET or POST). Defaults to GET. - `service` (Attributes) Service is an API call to a JSON web service.This is used for non-Kubernetes API server calls.It's mutually exclusive with the URLPath field. (see [below for nested schema](#nestedatt--spec--rules--generate--foreach--context--api_call--service)) @@ -833,13 +841,16 @@ Optional: ### Nested Schema for `spec.rules.mutate.foreach.context` +Required: + +- `name` (String) Name is the variable name. + Optional: - `api_call` (Attributes) APICall is an HTTP request to the Kubernetes API server, or other JSON web service.The data returned is stored in the context with the name for the context entry. (see [below for nested schema](#nestedatt--spec--rules--mutate--foreach--context--api_call)) - `config_map` (Attributes) ConfigMap is the ConfigMap reference. (see [below for nested schema](#nestedatt--spec--rules--mutate--foreach--context--config_map)) - `global_reference` (Attributes) GlobalContextEntryReference is a reference to a cached global context entry. (see [below for nested schema](#nestedatt--spec--rules--mutate--foreach--context--global_reference)) - `image_registry` (Attributes) ImageRegistry defines requests to an OCI/Docker V2 registry to fetch imagedetails. (see [below for nested schema](#nestedatt--spec--rules--mutate--foreach--context--image_registry)) -- `name` (String) Name is the variable name. - `variable` (Attributes) Variable defines an arbitrary JMESPath context variable that can be defined inline. (see [below for nested schema](#nestedatt--spec--rules--mutate--foreach--context--variable)) @@ -848,6 +859,7 @@ Optional: Optional: - `data` (Attributes List) The data object specifies the POST data sent to the server.Only applicable when the method field is set to POST. (see [below for nested schema](#nestedatt--spec--rules--mutate--foreach--context--api_call--data)) +- `default` (Map of String) Default is an optional arbitrary JSON object that the context may take if the apiCallreturns error - `jmes_path` (String) JMESPath is an optional JSON Match Expression that can be used totransform the JSON response returned from the server. For examplea JMESPath of 'items | length(@)' applied to the API server responsefor the URLPath '/apis/apps/v1/deployments' will return the total countof deployments across all namespaces. - `method` (String) Method is the HTTP request type (GET or POST). Defaults to GET. - `service` (Attributes) Service is an API call to a JSON web service.This is used for non-Kubernetes API server calls.It's mutually exclusive with the URLPath field. (see [below for nested schema](#nestedatt--spec--rules--mutate--foreach--context--api_call--service)) @@ -981,13 +993,16 @@ Optional: ### Nested Schema for `spec.rules.mutate.targets.context` +Required: + +- `name` (String) Name is the variable name. + Optional: - `api_call` (Attributes) APICall is an HTTP request to the Kubernetes API server, or other JSON web service.The data returned is stored in the context with the name for the context entry. (see [below for nested schema](#nestedatt--spec--rules--mutate--targets--context--api_call)) - `config_map` (Attributes) ConfigMap is the ConfigMap reference. (see [below for nested schema](#nestedatt--spec--rules--mutate--targets--context--config_map)) - `global_reference` (Attributes) GlobalContextEntryReference is a reference to a cached global context entry. (see [below for nested schema](#nestedatt--spec--rules--mutate--targets--context--global_reference)) - `image_registry` (Attributes) ImageRegistry defines requests to an OCI/Docker V2 registry to fetch imagedetails. (see [below for nested schema](#nestedatt--spec--rules--mutate--targets--context--image_registry)) -- `name` (String) Name is the variable name. - `variable` (Attributes) Variable defines an arbitrary JMESPath context variable that can be defined inline. (see [below for nested schema](#nestedatt--spec--rules--mutate--targets--context--variable)) @@ -996,6 +1011,7 @@ Optional: Optional: - `data` (Attributes List) The data object specifies the POST data sent to the server.Only applicable when the method field is set to POST. (see [below for nested schema](#nestedatt--spec--rules--mutate--targets--context--api_call--data)) +- `default` (Map of String) Default is an optional arbitrary JSON object that the context may take if the apiCallreturns error - `jmes_path` (String) JMESPath is an optional JSON Match Expression that can be used totransform the JSON response returned from the server. For examplea JMESPath of 'items | length(@)' applied to the API server responsefor the URLPath '/apis/apps/v1/deployments' will return the total countof deployments across all namespaces. - `method` (String) Method is the HTTP request type (GET or POST). Defaults to GET. - `service` (Attributes) Service is an API call to a JSON web service.This is used for non-Kubernetes API server calls.It's mutually exclusive with the URLPath field. (see [below for nested schema](#nestedatt--spec--rules--mutate--targets--context--api_call--service)) @@ -1305,13 +1321,16 @@ Optional: ### Nested Schema for `spec.rules.validate.foreach.context` +Required: + +- `name` (String) Name is the variable name. + Optional: - `api_call` (Attributes) APICall is an HTTP request to the Kubernetes API server, or other JSON web service.The data returned is stored in the context with the name for the context entry. (see [below for nested schema](#nestedatt--spec--rules--validate--foreach--context--api_call)) - `config_map` (Attributes) ConfigMap is the ConfigMap reference. (see [below for nested schema](#nestedatt--spec--rules--validate--foreach--context--config_map)) - `global_reference` (Attributes) GlobalContextEntryReference is a reference to a cached global context entry. (see [below for nested schema](#nestedatt--spec--rules--validate--foreach--context--global_reference)) - `image_registry` (Attributes) ImageRegistry defines requests to an OCI/Docker V2 registry to fetch imagedetails. (see [below for nested schema](#nestedatt--spec--rules--validate--foreach--context--image_registry)) -- `name` (String) Name is the variable name. - `variable` (Attributes) Variable defines an arbitrary JMESPath context variable that can be defined inline. (see [below for nested schema](#nestedatt--spec--rules--validate--foreach--context--variable)) @@ -1320,6 +1339,7 @@ Optional: Optional: - `data` (Attributes List) The data object specifies the POST data sent to the server.Only applicable when the method field is set to POST. (see [below for nested schema](#nestedatt--spec--rules--validate--foreach--context--api_call--data)) +- `default` (Map of String) Default is an optional arbitrary JSON object that the context may take if the apiCallreturns error - `jmes_path` (String) JMESPath is an optional JSON Match Expression that can be used totransform the JSON response returned from the server. For examplea JMESPath of 'items | length(@)' applied to the API server responsefor the URLPath '/apis/apps/v1/deployments' will return the total countof deployments across all namespaces. - `method` (String) Method is the HTTP request type (GET or POST). Defaults to GET. - `service` (Attributes) Service is an API call to a JSON web service.This is used for non-Kubernetes API server calls.It's mutually exclusive with the URLPath field. (see [below for nested schema](#nestedatt--spec--rules--validate--foreach--context--api_call--service)) @@ -1475,6 +1495,7 @@ Optional: - `keyless` (Attributes) Keyless is a set of attribute used to verify a Sigstore keyless attestor.See https://github.com/sigstore/cosign/blob/main/KEYLESS.md. (see [below for nested schema](#nestedatt--spec--rules--validate--manifests--attestors--entries--keyless)) - `keys` (Attributes) Keys specifies one or more public keys. (see [below for nested schema](#nestedatt--spec--rules--validate--manifests--attestors--entries--keys)) - `repository` (String) Repository is an optional alternate OCI repository to use for signatures and attestations that match this rule.If specified Repository will override other OCI image repository locations for this Attestor. +- `signature_algorithm` (String) Specify signature algorithm for public keys. Supported values are sha224, sha256, sha384 and sha512. ### Nested Schema for `spec.rules.validate.manifests.attestors.entries.certificates` @@ -1552,7 +1573,7 @@ Optional: - `public_keys` (String) Keys is a set of X.509 public keys used to verify image signatures. The keys can be directlyspecified or can be a variable reference to a key specified in a ConfigMap (seehttps://kyverno.io/docs/writing-policies/variables/), or reference a standard Kubernetes Secretelsewhere in the cluster by specifying it in the format 'k8s:///'.The named Secret must specify a key 'cosign.pub' containing the public key used forverification, (see https://github.com/sigstore/cosign/blob/main/KMS.md#kubernetes-secret).When multiple keys are specified each key is processed as a separate staticKey entry(.attestors[*].entries.keys) within the set of attestors and the count is applied across the keys. - `rekor` (Attributes) Rekor provides configuration for the Rekor transparency log service. If an empty objectis provided the public instance of Rekor (https://rekor.sigstore.dev) is used. (see [below for nested schema](#nestedatt--spec--rules--validate--manifests--attestors--entries--keys--rekor)) - `secret` (Attributes) Reference to a Secret resource that contains a public key (see [below for nested schema](#nestedatt--spec--rules--validate--manifests--attestors--entries--keys--secret)) -- `signature_algorithm` (String) Specify signature algorithm for public keys. Supported values are sha224, sha256, sha384 and sha512. +- `signature_algorithm` (String) Deprecated. Use attestor.signatureAlgorithm instead. ### Nested Schema for `spec.rules.validate.manifests.attestors.entries.keys.ctlog` @@ -1658,6 +1679,7 @@ Optional: - `skip_image_references` (List of String) SkipImageReferences is a list of matching image reference patterns that should be skipped.At least one pattern in the list must match the image for the rule to be skipped. Each image referenceconsists of a registry address (defaults to docker.io), repository, image, and tag (defaults to latest).Wildcards ('*' and '?') are allowed. See: https://kubernetes.io/docs/concepts/containers/images. - `type` (String) Type specifies the method of signature validation. The allowed optionsare Cosign and Notary. By default Cosign is used if a type is not specified. - `use_cache` (Boolean) UseCache enables caching of image verify responses for this rule +- `validate` (Attributes) Validation checks conditions across multiple imageverification attestations or context entries (see [below for nested schema](#nestedatt--spec--rules--verify_images--validate)) - `verify_digest` (Boolean) VerifyDigest validates that images have a digest. @@ -1667,6 +1689,7 @@ Optional: - `attestors` (Attributes List) Attestors specify the required attestors (i.e. authorities). (see [below for nested schema](#nestedatt--spec--rules--verify_images--attestations--attestors)) - `conditions` (Attributes List) Conditions are used to verify attributes within a Predicate. If no Conditions are specifiedthe attestation check is satisfied as long there are predicates that match the predicate type. (see [below for nested schema](#nestedatt--spec--rules--verify_images--attestations--conditions)) +- `name` (String) Name is the variable name. - `predicate_type` (String) Deprecated in favour of 'Type', to be removed soon - `type` (String) Type defines the type of attestation contained within the Statement. @@ -1689,6 +1712,7 @@ Optional: - `keyless` (Attributes) Keyless is a set of attribute used to verify a Sigstore keyless attestor.See https://github.com/sigstore/cosign/blob/main/KEYLESS.md. (see [below for nested schema](#nestedatt--spec--rules--verify_images--attestations--attestors--entries--keyless)) - `keys` (Attributes) Keys specifies one or more public keys. (see [below for nested schema](#nestedatt--spec--rules--verify_images--attestations--attestors--entries--keys)) - `repository` (String) Repository is an optional alternate OCI repository to use for signatures and attestations that match this rule.If specified Repository will override other OCI image repository locations for this Attestor. +- `signature_algorithm` (String) Specify signature algorithm for public keys. Supported values are sha224, sha256, sha384 and sha512. ### Nested Schema for `spec.rules.verify_images.attestations.attestors.entries.certificates` @@ -1766,7 +1790,7 @@ Optional: - `public_keys` (String) Keys is a set of X.509 public keys used to verify image signatures. The keys can be directlyspecified or can be a variable reference to a key specified in a ConfigMap (seehttps://kyverno.io/docs/writing-policies/variables/), or reference a standard Kubernetes Secretelsewhere in the cluster by specifying it in the format 'k8s:///'.The named Secret must specify a key 'cosign.pub' containing the public key used forverification, (see https://github.com/sigstore/cosign/blob/main/KMS.md#kubernetes-secret).When multiple keys are specified each key is processed as a separate staticKey entry(.attestors[*].entries.keys) within the set of attestors and the count is applied across the keys. - `rekor` (Attributes) Rekor provides configuration for the Rekor transparency log service. If an empty objectis provided the public instance of Rekor (https://rekor.sigstore.dev) is used. (see [below for nested schema](#nestedatt--spec--rules--verify_images--attestations--attestors--entries--keys--rekor)) - `secret` (Attributes) Reference to a Secret resource that contains a public key (see [below for nested schema](#nestedatt--spec--rules--verify_images--attestations--attestors--entries--keys--secret)) -- `signature_algorithm` (String) Specify signature algorithm for public keys. Supported values are sha224, sha256, sha384 and sha512. +- `signature_algorithm` (String) Deprecated. Use attestor.signatureAlgorithm instead. ### Nested Schema for `spec.rules.verify_images.attestations.attestors.entries.keys.ctlog` @@ -1851,6 +1875,7 @@ Optional: - `keyless` (Attributes) Keyless is a set of attribute used to verify a Sigstore keyless attestor.See https://github.com/sigstore/cosign/blob/main/KEYLESS.md. (see [below for nested schema](#nestedatt--spec--rules--verify_images--attestors--entries--keyless)) - `keys` (Attributes) Keys specifies one or more public keys. (see [below for nested schema](#nestedatt--spec--rules--verify_images--attestors--entries--keys)) - `repository` (String) Repository is an optional alternate OCI repository to use for signatures and attestations that match this rule.If specified Repository will override other OCI image repository locations for this Attestor. +- `signature_algorithm` (String) Specify signature algorithm for public keys. Supported values are sha224, sha256, sha384 and sha512. ### Nested Schema for `spec.rules.verify_images.attestors.entries.certificates` @@ -1928,7 +1953,7 @@ Optional: - `public_keys` (String) Keys is a set of X.509 public keys used to verify image signatures. The keys can be directlyspecified or can be a variable reference to a key specified in a ConfigMap (seehttps://kyverno.io/docs/writing-policies/variables/), or reference a standard Kubernetes Secretelsewhere in the cluster by specifying it in the format 'k8s:///'.The named Secret must specify a key 'cosign.pub' containing the public key used forverification, (see https://github.com/sigstore/cosign/blob/main/KMS.md#kubernetes-secret).When multiple keys are specified each key is processed as a separate staticKey entry(.attestors[*].entries.keys) within the set of attestors and the count is applied across the keys. - `rekor` (Attributes) Rekor provides configuration for the Rekor transparency log service. If an empty objectis provided the public instance of Rekor (https://rekor.sigstore.dev) is used. (see [below for nested schema](#nestedatt--spec--rules--verify_images--attestors--entries--keys--rekor)) - `secret` (Attributes) Reference to a Secret resource that contains a public key (see [below for nested schema](#nestedatt--spec--rules--verify_images--attestors--entries--keys--secret)) -- `signature_algorithm` (String) Specify signature algorithm for public keys. Supported values are sha224, sha256, sha384 and sha512. +- `signature_algorithm` (String) Deprecated. Use attestor.signatureAlgorithm instead. ### Nested Schema for `spec.rules.verify_images.attestors.entries.keys.ctlog` @@ -1972,6 +1997,23 @@ Optional: - `secrets` (List of String) Secrets specifies a list of secrets that are provided for credentials.Secrets must live in the Kyverno namespace. + +### Nested Schema for `spec.rules.verify_images.validate` + +Optional: + +- `deny` (Attributes) Deny defines conditions used to pass or fail a validation rule. (see [below for nested schema](#nestedatt--spec--rules--verify_images--validate--deny)) +- `message` (String) Message specifies a custom message to be displayed on failure. + + +### Nested Schema for `spec.rules.verify_images.validate.deny` + +Optional: + +- `conditions` (Map of String) Multiple conditions can be declared under an 'any' or 'all' statement. A direct listof conditions (without 'any' or 'all' statements) is also supported for backwards compatibilitybut will be deprecated in the next major release.See: https://kyverno.io/docs/writing-policies/validate/#deny-rules + + + diff --git a/docs/data-sources/kyverno_io_policy_v1_manifest.md b/docs/data-sources/kyverno_io_policy_v1_manifest.md index c1577d0bb..32e6e5974 100644 --- a/docs/data-sources/kyverno_io_policy_v1_manifest.md +++ b/docs/data-sources/kyverno_io_policy_v1_manifest.md @@ -56,6 +56,7 @@ Optional: - `admission` (Boolean) Admission controls if rules are applied during admission.Optional. Default value is 'true'. - `apply_rules` (String) ApplyRules controls how rules in a policy are applied. Rule are processed inthe order of declaration. When set to 'One' processing stops after a rule hasbeen applied i.e. the rule matches and results in a pass, fail, or error. Whenset to 'All' all rules in the policy are processed. The default is 'All'. - `background` (Boolean) Background controls if rules are applied to existing resources during a background scan.Optional. Default value is 'true'. The value must be set to 'false' if the policy ruleuses variables that are only available in the admission review request (e.g. user name). +- `emit_warning` (Boolean) EmitWarning enables API response warnings for mutate policy rules or validate policy rules with validationFailureAction set to Audit.Enabling this option will extend admission request processing times. The default value is 'false'. - `failure_policy` (String) Deprecated, use failurePolicy under the webhookConfiguration instead. - `generate_existing` (Boolean) Deprecated, use generateExisting under the generate rule instead - `generate_existing_on_policy_update` (Boolean) Deprecated, use generateExisting instead @@ -85,6 +86,7 @@ Optional: - `match` (Attributes) MatchResources defines when this policy rule should be applied. The matchcriteria can include resource information (e.g. kind, name, namespace, labels)and admission review request information like the user name or role.At least one kind is required. (see [below for nested schema](#nestedatt--spec--rules--match)) - `mutate` (Attributes) Mutation is used to modify matching resources. (see [below for nested schema](#nestedatt--spec--rules--mutate)) - `preconditions` (Map of String) Preconditions are used to determine if a policy rule should be applied by evaluating aset of conditions. The declaration can contain nested 'any' or 'all' statements. A direct listof conditions (without 'any' or 'all' statements is supported for backwards compatibility butwill be deprecated in the next major release.See: https://kyverno.io/docs/writing-policies/preconditions/ +- `report_properties` (Map of String) ReportProperties are the additional properties from the rule that will be added to the policy report result - `skip_background_requests` (Boolean) SkipBackgroundRequests bypasses admission requests that are sent by the background controller.The default value is set to 'true', it must be set to 'false' to applygenerate and mutateExisting rules to those requests. - `validate` (Attributes) Validation is used to validate matching resources. (see [below for nested schema](#nestedatt--spec--rules--validate)) - `verify_images` (Attributes List) VerifyImages is used to verify image signatures and mutate them to add a digest (see [below for nested schema](#nestedatt--spec--rules--verify_images)) @@ -101,13 +103,16 @@ Required: ### Nested Schema for `spec.rules.context` +Required: + +- `name` (String) Name is the variable name. + Optional: - `api_call` (Attributes) APICall is an HTTP request to the Kubernetes API server, or other JSON web service.The data returned is stored in the context with the name for the context entry. (see [below for nested schema](#nestedatt--spec--rules--context--api_call)) - `config_map` (Attributes) ConfigMap is the ConfigMap reference. (see [below for nested schema](#nestedatt--spec--rules--context--config_map)) - `global_reference` (Attributes) GlobalContextEntryReference is a reference to a cached global context entry. (see [below for nested schema](#nestedatt--spec--rules--context--global_reference)) - `image_registry` (Attributes) ImageRegistry defines requests to an OCI/Docker V2 registry to fetch imagedetails. (see [below for nested schema](#nestedatt--spec--rules--context--image_registry)) -- `name` (String) Name is the variable name. - `variable` (Attributes) Variable defines an arbitrary JMESPath context variable that can be defined inline. (see [below for nested schema](#nestedatt--spec--rules--context--variable)) @@ -116,6 +121,7 @@ Optional: Optional: - `data` (Attributes List) The data object specifies the POST data sent to the server.Only applicable when the method field is set to POST. (see [below for nested schema](#nestedatt--spec--rules--context--api_call--data)) +- `default` (Map of String) Default is an optional arbitrary JSON object that the context may take if the apiCallreturns error - `jmes_path` (String) JMESPath is an optional JSON Match Expression that can be used totransform the JSON response returned from the server. For examplea JMESPath of 'items | length(@)' applied to the API server responsefor the URLPath '/apis/apps/v1/deployments' will return the total countof deployments across all namespaces. - `method` (String) Method is the HTTP request type (GET or POST). Defaults to GET. - `service` (Attributes) Service is an API call to a JSON web service.This is used for non-Kubernetes API server calls.It's mutually exclusive with the URLPath field. (see [below for nested schema](#nestedatt--spec--rules--context--api_call--service)) @@ -575,13 +581,16 @@ Optional: ### Nested Schema for `spec.rules.generate.foreach.context` +Required: + +- `name` (String) Name is the variable name. + Optional: - `api_call` (Attributes) APICall is an HTTP request to the Kubernetes API server, or other JSON web service.The data returned is stored in the context with the name for the context entry. (see [below for nested schema](#nestedatt--spec--rules--generate--foreach--context--api_call)) - `config_map` (Attributes) ConfigMap is the ConfigMap reference. (see [below for nested schema](#nestedatt--spec--rules--generate--foreach--context--config_map)) - `global_reference` (Attributes) GlobalContextEntryReference is a reference to a cached global context entry. (see [below for nested schema](#nestedatt--spec--rules--generate--foreach--context--global_reference)) - `image_registry` (Attributes) ImageRegistry defines requests to an OCI/Docker V2 registry to fetch imagedetails. (see [below for nested schema](#nestedatt--spec--rules--generate--foreach--context--image_registry)) -- `name` (String) Name is the variable name. - `variable` (Attributes) Variable defines an arbitrary JMESPath context variable that can be defined inline. (see [below for nested schema](#nestedatt--spec--rules--generate--foreach--context--variable)) @@ -590,6 +599,7 @@ Optional: Optional: - `data` (Attributes List) The data object specifies the POST data sent to the server.Only applicable when the method field is set to POST. (see [below for nested schema](#nestedatt--spec--rules--generate--foreach--context--api_call--data)) +- `default` (Map of String) Default is an optional arbitrary JSON object that the context may take if the apiCallreturns error - `jmes_path` (String) JMESPath is an optional JSON Match Expression that can be used totransform the JSON response returned from the server. For examplea JMESPath of 'items | length(@)' applied to the API server responsefor the URLPath '/apis/apps/v1/deployments' will return the total countof deployments across all namespaces. - `method` (String) Method is the HTTP request type (GET or POST). Defaults to GET. - `service` (Attributes) Service is an API call to a JSON web service.This is used for non-Kubernetes API server calls.It's mutually exclusive with the URLPath field. (see [below for nested schema](#nestedatt--spec--rules--generate--foreach--context--api_call--service)) @@ -989,13 +999,16 @@ Optional: ### Nested Schema for `spec.rules.mutate.foreach.context` +Required: + +- `name` (String) Name is the variable name. + Optional: - `api_call` (Attributes) APICall is an HTTP request to the Kubernetes API server, or other JSON web service.The data returned is stored in the context with the name for the context entry. (see [below for nested schema](#nestedatt--spec--rules--mutate--foreach--context--api_call)) - `config_map` (Attributes) ConfigMap is the ConfigMap reference. (see [below for nested schema](#nestedatt--spec--rules--mutate--foreach--context--config_map)) - `global_reference` (Attributes) GlobalContextEntryReference is a reference to a cached global context entry. (see [below for nested schema](#nestedatt--spec--rules--mutate--foreach--context--global_reference)) - `image_registry` (Attributes) ImageRegistry defines requests to an OCI/Docker V2 registry to fetch imagedetails. (see [below for nested schema](#nestedatt--spec--rules--mutate--foreach--context--image_registry)) -- `name` (String) Name is the variable name. - `variable` (Attributes) Variable defines an arbitrary JMESPath context variable that can be defined inline. (see [below for nested schema](#nestedatt--spec--rules--mutate--foreach--context--variable)) @@ -1004,6 +1017,7 @@ Optional: Optional: - `data` (Attributes List) The data object specifies the POST data sent to the server.Only applicable when the method field is set to POST. (see [below for nested schema](#nestedatt--spec--rules--mutate--foreach--context--api_call--data)) +- `default` (Map of String) Default is an optional arbitrary JSON object that the context may take if the apiCallreturns error - `jmes_path` (String) JMESPath is an optional JSON Match Expression that can be used totransform the JSON response returned from the server. For examplea JMESPath of 'items | length(@)' applied to the API server responsefor the URLPath '/apis/apps/v1/deployments' will return the total countof deployments across all namespaces. - `method` (String) Method is the HTTP request type (GET or POST). Defaults to GET. - `service` (Attributes) Service is an API call to a JSON web service.This is used for non-Kubernetes API server calls.It's mutually exclusive with the URLPath field. (see [below for nested schema](#nestedatt--spec--rules--mutate--foreach--context--api_call--service)) @@ -1137,13 +1151,16 @@ Optional: ### Nested Schema for `spec.rules.mutate.targets.context` +Required: + +- `name` (String) Name is the variable name. + Optional: - `api_call` (Attributes) APICall is an HTTP request to the Kubernetes API server, or other JSON web service.The data returned is stored in the context with the name for the context entry. (see [below for nested schema](#nestedatt--spec--rules--mutate--targets--context--api_call)) - `config_map` (Attributes) ConfigMap is the ConfigMap reference. (see [below for nested schema](#nestedatt--spec--rules--mutate--targets--context--config_map)) - `global_reference` (Attributes) GlobalContextEntryReference is a reference to a cached global context entry. (see [below for nested schema](#nestedatt--spec--rules--mutate--targets--context--global_reference)) - `image_registry` (Attributes) ImageRegistry defines requests to an OCI/Docker V2 registry to fetch imagedetails. (see [below for nested schema](#nestedatt--spec--rules--mutate--targets--context--image_registry)) -- `name` (String) Name is the variable name. - `variable` (Attributes) Variable defines an arbitrary JMESPath context variable that can be defined inline. (see [below for nested schema](#nestedatt--spec--rules--mutate--targets--context--variable)) @@ -1152,6 +1169,7 @@ Optional: Optional: - `data` (Attributes List) The data object specifies the POST data sent to the server.Only applicable when the method field is set to POST. (see [below for nested schema](#nestedatt--spec--rules--mutate--targets--context--api_call--data)) +- `default` (Map of String) Default is an optional arbitrary JSON object that the context may take if the apiCallreturns error - `jmes_path` (String) JMESPath is an optional JSON Match Expression that can be used totransform the JSON response returned from the server. For examplea JMESPath of 'items | length(@)' applied to the API server responsefor the URLPath '/apis/apps/v1/deployments' will return the total countof deployments across all namespaces. - `method` (String) Method is the HTTP request type (GET or POST). Defaults to GET. - `service` (Attributes) Service is an API call to a JSON web service.This is used for non-Kubernetes API server calls.It's mutually exclusive with the URLPath field. (see [below for nested schema](#nestedatt--spec--rules--mutate--targets--context--api_call--service)) @@ -1244,6 +1262,7 @@ Optional: Optional: +- `allow_existing_violations` (Boolean) AllowExistingViolations allows prexisting violating resources to continue violating a policy. - `any_pattern` (Map of String) AnyPattern specifies list of validation patterns. At least one of the patternsmust be satisfied for the validation rule to succeed. - `assert` (Map of String) Assert defines a kyverno-json assertion tree. - `cel` (Attributes) CEL allows validation checks using the Common Expression Language (https://kubernetes.io/docs/reference/using-api/cel/). (see [below for nested schema](#nestedatt--spec--rules--validate--cel)) @@ -1399,13 +1418,16 @@ Optional: ### Nested Schema for `spec.rules.validate.foreach.context` +Required: + +- `name` (String) Name is the variable name. + Optional: - `api_call` (Attributes) APICall is an HTTP request to the Kubernetes API server, or other JSON web service.The data returned is stored in the context with the name for the context entry. (see [below for nested schema](#nestedatt--spec--rules--validate--foreach--context--api_call)) - `config_map` (Attributes) ConfigMap is the ConfigMap reference. (see [below for nested schema](#nestedatt--spec--rules--validate--foreach--context--config_map)) - `global_reference` (Attributes) GlobalContextEntryReference is a reference to a cached global context entry. (see [below for nested schema](#nestedatt--spec--rules--validate--foreach--context--global_reference)) - `image_registry` (Attributes) ImageRegistry defines requests to an OCI/Docker V2 registry to fetch imagedetails. (see [below for nested schema](#nestedatt--spec--rules--validate--foreach--context--image_registry)) -- `name` (String) Name is the variable name. - `variable` (Attributes) Variable defines an arbitrary JMESPath context variable that can be defined inline. (see [below for nested schema](#nestedatt--spec--rules--validate--foreach--context--variable)) @@ -1414,6 +1436,7 @@ Optional: Optional: - `data` (Attributes List) The data object specifies the POST data sent to the server.Only applicable when the method field is set to POST. (see [below for nested schema](#nestedatt--spec--rules--validate--foreach--context--api_call--data)) +- `default` (Map of String) Default is an optional arbitrary JSON object that the context may take if the apiCallreturns error - `jmes_path` (String) JMESPath is an optional JSON Match Expression that can be used totransform the JSON response returned from the server. For examplea JMESPath of 'items | length(@)' applied to the API server responsefor the URLPath '/apis/apps/v1/deployments' will return the total countof deployments across all namespaces. - `method` (String) Method is the HTTP request type (GET or POST). Defaults to GET. - `service` (Attributes) Service is an API call to a JSON web service.This is used for non-Kubernetes API server calls.It's mutually exclusive with the URLPath field. (see [below for nested schema](#nestedatt--spec--rules--validate--foreach--context--api_call--service)) @@ -1569,6 +1592,7 @@ Optional: - `keyless` (Attributes) Keyless is a set of attribute used to verify a Sigstore keyless attestor.See https://github.com/sigstore/cosign/blob/main/KEYLESS.md. (see [below for nested schema](#nestedatt--spec--rules--validate--manifests--attestors--entries--keyless)) - `keys` (Attributes) Keys specifies one or more public keys. (see [below for nested schema](#nestedatt--spec--rules--validate--manifests--attestors--entries--keys)) - `repository` (String) Repository is an optional alternate OCI repository to use for signatures and attestations that match this rule.If specified Repository will override other OCI image repository locations for this Attestor. +- `signature_algorithm` (String) Specify signature algorithm for public keys. Supported values are sha224, sha256, sha384 and sha512. ### Nested Schema for `spec.rules.validate.manifests.attestors.entries.certificates` @@ -1646,7 +1670,7 @@ Optional: - `public_keys` (String) Keys is a set of X.509 public keys used to verify image signatures. The keys can be directlyspecified or can be a variable reference to a key specified in a ConfigMap (seehttps://kyverno.io/docs/writing-policies/variables/), or reference a standard Kubernetes Secretelsewhere in the cluster by specifying it in the format 'k8s:///'.The named Secret must specify a key 'cosign.pub' containing the public key used forverification, (see https://github.com/sigstore/cosign/blob/main/KMS.md#kubernetes-secret).When multiple keys are specified each key is processed as a separate staticKey entry(.attestors[*].entries.keys) within the set of attestors and the count is applied across the keys. - `rekor` (Attributes) Rekor provides configuration for the Rekor transparency log service. If an empty objectis provided the public instance of Rekor (https://rekor.sigstore.dev) is used. (see [below for nested schema](#nestedatt--spec--rules--validate--manifests--attestors--entries--keys--rekor)) - `secret` (Attributes) Reference to a Secret resource that contains a public key (see [below for nested schema](#nestedatt--spec--rules--validate--manifests--attestors--entries--keys--secret)) -- `signature_algorithm` (String) Specify signature algorithm for public keys. Supported values are sha224, sha256, sha384 and sha512. +- `signature_algorithm` (String) Deprecated. Use attestor.signatureAlgorithm instead. ### Nested Schema for `spec.rules.validate.manifests.attestors.entries.keys.ctlog` @@ -1760,6 +1784,7 @@ Optional: - `subject` (String) Deprecated. Use KeylessAttestor instead. - `type` (String) Type specifies the method of signature validation. The allowed optionsare Cosign, Sigstore Bundle and Notary. By default Cosign is used if a type is not specified. - `use_cache` (Boolean) UseCache enables caching of image verify responses for this rule. +- `validate` (Attributes) Validation checks conditions across multiple imageverification attestations or context entries (see [below for nested schema](#nestedatt--spec--rules--verify_images--validate)) - `verify_digest` (Boolean) VerifyDigest validates that images have a digest. @@ -1769,6 +1794,7 @@ Optional: - `attestors` (Attributes List) Attestors specify the required attestors (i.e. authorities). (see [below for nested schema](#nestedatt--spec--rules--verify_images--attestations--attestors)) - `conditions` (Attributes List) Conditions are used to verify attributes within a Predicate. If no Conditions are specifiedthe attestation check is satisfied as long there are predicates that match the predicate type. (see [below for nested schema](#nestedatt--spec--rules--verify_images--attestations--conditions)) +- `name` (String) Name is the variable name. - `predicate_type` (String) Deprecated in favour of 'Type', to be removed soon - `type` (String) Type defines the type of attestation contained within the Statement. @@ -1791,6 +1817,7 @@ Optional: - `keyless` (Attributes) Keyless is a set of attribute used to verify a Sigstore keyless attestor.See https://github.com/sigstore/cosign/blob/main/KEYLESS.md. (see [below for nested schema](#nestedatt--spec--rules--verify_images--attestations--attestors--entries--keyless)) - `keys` (Attributes) Keys specifies one or more public keys. (see [below for nested schema](#nestedatt--spec--rules--verify_images--attestations--attestors--entries--keys)) - `repository` (String) Repository is an optional alternate OCI repository to use for signatures and attestations that match this rule.If specified Repository will override other OCI image repository locations for this Attestor. +- `signature_algorithm` (String) Specify signature algorithm for public keys. Supported values are sha224, sha256, sha384 and sha512. ### Nested Schema for `spec.rules.verify_images.attestations.attestors.entries.certificates` @@ -1868,7 +1895,7 @@ Optional: - `public_keys` (String) Keys is a set of X.509 public keys used to verify image signatures. The keys can be directlyspecified or can be a variable reference to a key specified in a ConfigMap (seehttps://kyverno.io/docs/writing-policies/variables/), or reference a standard Kubernetes Secretelsewhere in the cluster by specifying it in the format 'k8s:///'.The named Secret must specify a key 'cosign.pub' containing the public key used forverification, (see https://github.com/sigstore/cosign/blob/main/KMS.md#kubernetes-secret).When multiple keys are specified each key is processed as a separate staticKey entry(.attestors[*].entries.keys) within the set of attestors and the count is applied across the keys. - `rekor` (Attributes) Rekor provides configuration for the Rekor transparency log service. If an empty objectis provided the public instance of Rekor (https://rekor.sigstore.dev) is used. (see [below for nested schema](#nestedatt--spec--rules--verify_images--attestations--attestors--entries--keys--rekor)) - `secret` (Attributes) Reference to a Secret resource that contains a public key (see [below for nested schema](#nestedatt--spec--rules--verify_images--attestations--attestors--entries--keys--secret)) -- `signature_algorithm` (String) Specify signature algorithm for public keys. Supported values are sha224, sha256, sha384 and sha512. +- `signature_algorithm` (String) Deprecated. Use attestor.signatureAlgorithm instead. ### Nested Schema for `spec.rules.verify_images.attestations.attestors.entries.keys.ctlog` @@ -1953,6 +1980,7 @@ Optional: - `keyless` (Attributes) Keyless is a set of attribute used to verify a Sigstore keyless attestor.See https://github.com/sigstore/cosign/blob/main/KEYLESS.md. (see [below for nested schema](#nestedatt--spec--rules--verify_images--attestors--entries--keyless)) - `keys` (Attributes) Keys specifies one or more public keys. (see [below for nested schema](#nestedatt--spec--rules--verify_images--attestors--entries--keys)) - `repository` (String) Repository is an optional alternate OCI repository to use for signatures and attestations that match this rule.If specified Repository will override other OCI image repository locations for this Attestor. +- `signature_algorithm` (String) Specify signature algorithm for public keys. Supported values are sha224, sha256, sha384 and sha512. ### Nested Schema for `spec.rules.verify_images.attestors.entries.certificates` @@ -2030,7 +2058,7 @@ Optional: - `public_keys` (String) Keys is a set of X.509 public keys used to verify image signatures. The keys can be directlyspecified or can be a variable reference to a key specified in a ConfigMap (seehttps://kyverno.io/docs/writing-policies/variables/), or reference a standard Kubernetes Secretelsewhere in the cluster by specifying it in the format 'k8s:///'.The named Secret must specify a key 'cosign.pub' containing the public key used forverification, (see https://github.com/sigstore/cosign/blob/main/KMS.md#kubernetes-secret).When multiple keys are specified each key is processed as a separate staticKey entry(.attestors[*].entries.keys) within the set of attestors and the count is applied across the keys. - `rekor` (Attributes) Rekor provides configuration for the Rekor transparency log service. If an empty objectis provided the public instance of Rekor (https://rekor.sigstore.dev) is used. (see [below for nested schema](#nestedatt--spec--rules--verify_images--attestors--entries--keys--rekor)) - `secret` (Attributes) Reference to a Secret resource that contains a public key (see [below for nested schema](#nestedatt--spec--rules--verify_images--attestors--entries--keys--secret)) -- `signature_algorithm` (String) Specify signature algorithm for public keys. Supported values are sha224, sha256, sha384 and sha512. +- `signature_algorithm` (String) Deprecated. Use attestor.signatureAlgorithm instead. ### Nested Schema for `spec.rules.verify_images.attestors.entries.keys.ctlog` @@ -2074,6 +2102,23 @@ Optional: - `secrets` (List of String) Secrets specifies a list of secrets that are provided for credentials.Secrets must live in the Kyverno namespace. + +### Nested Schema for `spec.rules.verify_images.validate` + +Optional: + +- `deny` (Attributes) Deny defines conditions used to pass or fail a validation rule. (see [below for nested schema](#nestedatt--spec--rules--verify_images--validate--deny)) +- `message` (String) Message specifies a custom message to be displayed on failure. + + +### Nested Schema for `spec.rules.verify_images.validate.deny` + +Optional: + +- `conditions` (Map of String) Multiple conditions can be declared under an 'any' or 'all' statement. A direct listof conditions (without 'any' or 'all' statements) is also supported for backwards compatibilitybut will be deprecated in the next major release.See: https://kyverno.io/docs/writing-policies/validate/#deny-rules + + + diff --git a/docs/data-sources/kyverno_io_policy_v2beta1_manifest.md b/docs/data-sources/kyverno_io_policy_v2beta1_manifest.md index b96b6f11c..9656046fc 100644 --- a/docs/data-sources/kyverno_io_policy_v2beta1_manifest.md +++ b/docs/data-sources/kyverno_io_policy_v2beta1_manifest.md @@ -101,13 +101,16 @@ Required: ### Nested Schema for `spec.rules.context` +Required: + +- `name` (String) Name is the variable name. + Optional: - `api_call` (Attributes) APICall is an HTTP request to the Kubernetes API server, or other JSON web service.The data returned is stored in the context with the name for the context entry. (see [below for nested schema](#nestedatt--spec--rules--context--api_call)) - `config_map` (Attributes) ConfigMap is the ConfigMap reference. (see [below for nested schema](#nestedatt--spec--rules--context--config_map)) - `global_reference` (Attributes) GlobalContextEntryReference is a reference to a cached global context entry. (see [below for nested schema](#nestedatt--spec--rules--context--global_reference)) - `image_registry` (Attributes) ImageRegistry defines requests to an OCI/Docker V2 registry to fetch imagedetails. (see [below for nested schema](#nestedatt--spec--rules--context--image_registry)) -- `name` (String) Name is the variable name. - `variable` (Attributes) Variable defines an arbitrary JMESPath context variable that can be defined inline. (see [below for nested schema](#nestedatt--spec--rules--context--variable)) @@ -116,6 +119,7 @@ Optional: Optional: - `data` (Attributes List) The data object specifies the POST data sent to the server.Only applicable when the method field is set to POST. (see [below for nested schema](#nestedatt--spec--rules--context--api_call--data)) +- `default` (Map of String) Default is an optional arbitrary JSON object that the context may take if the apiCallreturns error - `jmes_path` (String) JMESPath is an optional JSON Match Expression that can be used totransform the JSON response returned from the server. For examplea JMESPath of 'items | length(@)' applied to the API server responsefor the URLPath '/apis/apps/v1/deployments' will return the total countof deployments across all namespaces. - `method` (String) Method is the HTTP request type (GET or POST). Defaults to GET. - `service` (Attributes) Service is an API call to a JSON web service.This is used for non-Kubernetes API server calls.It's mutually exclusive with the URLPath field. (see [below for nested schema](#nestedatt--spec--rules--context--api_call--service)) @@ -498,13 +502,16 @@ Optional: ### Nested Schema for `spec.rules.generate.foreach.context` +Required: + +- `name` (String) Name is the variable name. + Optional: - `api_call` (Attributes) APICall is an HTTP request to the Kubernetes API server, or other JSON web service.The data returned is stored in the context with the name for the context entry. (see [below for nested schema](#nestedatt--spec--rules--generate--foreach--context--api_call)) - `config_map` (Attributes) ConfigMap is the ConfigMap reference. (see [below for nested schema](#nestedatt--spec--rules--generate--foreach--context--config_map)) - `global_reference` (Attributes) GlobalContextEntryReference is a reference to a cached global context entry. (see [below for nested schema](#nestedatt--spec--rules--generate--foreach--context--global_reference)) - `image_registry` (Attributes) ImageRegistry defines requests to an OCI/Docker V2 registry to fetch imagedetails. (see [below for nested schema](#nestedatt--spec--rules--generate--foreach--context--image_registry)) -- `name` (String) Name is the variable name. - `variable` (Attributes) Variable defines an arbitrary JMESPath context variable that can be defined inline. (see [below for nested schema](#nestedatt--spec--rules--generate--foreach--context--variable)) @@ -513,6 +520,7 @@ Optional: Optional: - `data` (Attributes List) The data object specifies the POST data sent to the server.Only applicable when the method field is set to POST. (see [below for nested schema](#nestedatt--spec--rules--generate--foreach--context--api_call--data)) +- `default` (Map of String) Default is an optional arbitrary JSON object that the context may take if the apiCallreturns error - `jmes_path` (String) JMESPath is an optional JSON Match Expression that can be used totransform the JSON response returned from the server. For examplea JMESPath of 'items | length(@)' applied to the API server responsefor the URLPath '/apis/apps/v1/deployments' will return the total countof deployments across all namespaces. - `method` (String) Method is the HTTP request type (GET or POST). Defaults to GET. - `service` (Attributes) Service is an API call to a JSON web service.This is used for non-Kubernetes API server calls.It's mutually exclusive with the URLPath field. (see [below for nested schema](#nestedatt--spec--rules--generate--foreach--context--api_call--service)) @@ -835,13 +843,16 @@ Optional: ### Nested Schema for `spec.rules.mutate.foreach.context` +Required: + +- `name` (String) Name is the variable name. + Optional: - `api_call` (Attributes) APICall is an HTTP request to the Kubernetes API server, or other JSON web service.The data returned is stored in the context with the name for the context entry. (see [below for nested schema](#nestedatt--spec--rules--mutate--foreach--context--api_call)) - `config_map` (Attributes) ConfigMap is the ConfigMap reference. (see [below for nested schema](#nestedatt--spec--rules--mutate--foreach--context--config_map)) - `global_reference` (Attributes) GlobalContextEntryReference is a reference to a cached global context entry. (see [below for nested schema](#nestedatt--spec--rules--mutate--foreach--context--global_reference)) - `image_registry` (Attributes) ImageRegistry defines requests to an OCI/Docker V2 registry to fetch imagedetails. (see [below for nested schema](#nestedatt--spec--rules--mutate--foreach--context--image_registry)) -- `name` (String) Name is the variable name. - `variable` (Attributes) Variable defines an arbitrary JMESPath context variable that can be defined inline. (see [below for nested schema](#nestedatt--spec--rules--mutate--foreach--context--variable)) @@ -850,6 +861,7 @@ Optional: Optional: - `data` (Attributes List) The data object specifies the POST data sent to the server.Only applicable when the method field is set to POST. (see [below for nested schema](#nestedatt--spec--rules--mutate--foreach--context--api_call--data)) +- `default` (Map of String) Default is an optional arbitrary JSON object that the context may take if the apiCallreturns error - `jmes_path` (String) JMESPath is an optional JSON Match Expression that can be used totransform the JSON response returned from the server. For examplea JMESPath of 'items | length(@)' applied to the API server responsefor the URLPath '/apis/apps/v1/deployments' will return the total countof deployments across all namespaces. - `method` (String) Method is the HTTP request type (GET or POST). Defaults to GET. - `service` (Attributes) Service is an API call to a JSON web service.This is used for non-Kubernetes API server calls.It's mutually exclusive with the URLPath field. (see [below for nested schema](#nestedatt--spec--rules--mutate--foreach--context--api_call--service)) @@ -983,13 +995,16 @@ Optional: ### Nested Schema for `spec.rules.mutate.targets.context` +Required: + +- `name` (String) Name is the variable name. + Optional: - `api_call` (Attributes) APICall is an HTTP request to the Kubernetes API server, or other JSON web service.The data returned is stored in the context with the name for the context entry. (see [below for nested schema](#nestedatt--spec--rules--mutate--targets--context--api_call)) - `config_map` (Attributes) ConfigMap is the ConfigMap reference. (see [below for nested schema](#nestedatt--spec--rules--mutate--targets--context--config_map)) - `global_reference` (Attributes) GlobalContextEntryReference is a reference to a cached global context entry. (see [below for nested schema](#nestedatt--spec--rules--mutate--targets--context--global_reference)) - `image_registry` (Attributes) ImageRegistry defines requests to an OCI/Docker V2 registry to fetch imagedetails. (see [below for nested schema](#nestedatt--spec--rules--mutate--targets--context--image_registry)) -- `name` (String) Name is the variable name. - `variable` (Attributes) Variable defines an arbitrary JMESPath context variable that can be defined inline. (see [below for nested schema](#nestedatt--spec--rules--mutate--targets--context--variable)) @@ -998,6 +1013,7 @@ Optional: Optional: - `data` (Attributes List) The data object specifies the POST data sent to the server.Only applicable when the method field is set to POST. (see [below for nested schema](#nestedatt--spec--rules--mutate--targets--context--api_call--data)) +- `default` (Map of String) Default is an optional arbitrary JSON object that the context may take if the apiCallreturns error - `jmes_path` (String) JMESPath is an optional JSON Match Expression that can be used totransform the JSON response returned from the server. For examplea JMESPath of 'items | length(@)' applied to the API server responsefor the URLPath '/apis/apps/v1/deployments' will return the total countof deployments across all namespaces. - `method` (String) Method is the HTTP request type (GET or POST). Defaults to GET. - `service` (Attributes) Service is an API call to a JSON web service.This is used for non-Kubernetes API server calls.It's mutually exclusive with the URLPath field. (see [below for nested schema](#nestedatt--spec--rules--mutate--targets--context--api_call--service)) @@ -1307,13 +1323,16 @@ Optional: ### Nested Schema for `spec.rules.validate.foreach.context` +Required: + +- `name` (String) Name is the variable name. + Optional: - `api_call` (Attributes) APICall is an HTTP request to the Kubernetes API server, or other JSON web service.The data returned is stored in the context with the name for the context entry. (see [below for nested schema](#nestedatt--spec--rules--validate--foreach--context--api_call)) - `config_map` (Attributes) ConfigMap is the ConfigMap reference. (see [below for nested schema](#nestedatt--spec--rules--validate--foreach--context--config_map)) - `global_reference` (Attributes) GlobalContextEntryReference is a reference to a cached global context entry. (see [below for nested schema](#nestedatt--spec--rules--validate--foreach--context--global_reference)) - `image_registry` (Attributes) ImageRegistry defines requests to an OCI/Docker V2 registry to fetch imagedetails. (see [below for nested schema](#nestedatt--spec--rules--validate--foreach--context--image_registry)) -- `name` (String) Name is the variable name. - `variable` (Attributes) Variable defines an arbitrary JMESPath context variable that can be defined inline. (see [below for nested schema](#nestedatt--spec--rules--validate--foreach--context--variable)) @@ -1322,6 +1341,7 @@ Optional: Optional: - `data` (Attributes List) The data object specifies the POST data sent to the server.Only applicable when the method field is set to POST. (see [below for nested schema](#nestedatt--spec--rules--validate--foreach--context--api_call--data)) +- `default` (Map of String) Default is an optional arbitrary JSON object that the context may take if the apiCallreturns error - `jmes_path` (String) JMESPath is an optional JSON Match Expression that can be used totransform the JSON response returned from the server. For examplea JMESPath of 'items | length(@)' applied to the API server responsefor the URLPath '/apis/apps/v1/deployments' will return the total countof deployments across all namespaces. - `method` (String) Method is the HTTP request type (GET or POST). Defaults to GET. - `service` (Attributes) Service is an API call to a JSON web service.This is used for non-Kubernetes API server calls.It's mutually exclusive with the URLPath field. (see [below for nested schema](#nestedatt--spec--rules--validate--foreach--context--api_call--service)) @@ -1477,6 +1497,7 @@ Optional: - `keyless` (Attributes) Keyless is a set of attribute used to verify a Sigstore keyless attestor.See https://github.com/sigstore/cosign/blob/main/KEYLESS.md. (see [below for nested schema](#nestedatt--spec--rules--validate--manifests--attestors--entries--keyless)) - `keys` (Attributes) Keys specifies one or more public keys. (see [below for nested schema](#nestedatt--spec--rules--validate--manifests--attestors--entries--keys)) - `repository` (String) Repository is an optional alternate OCI repository to use for signatures and attestations that match this rule.If specified Repository will override other OCI image repository locations for this Attestor. +- `signature_algorithm` (String) Specify signature algorithm for public keys. Supported values are sha224, sha256, sha384 and sha512. ### Nested Schema for `spec.rules.validate.manifests.attestors.entries.certificates` @@ -1554,7 +1575,7 @@ Optional: - `public_keys` (String) Keys is a set of X.509 public keys used to verify image signatures. The keys can be directlyspecified or can be a variable reference to a key specified in a ConfigMap (seehttps://kyverno.io/docs/writing-policies/variables/), or reference a standard Kubernetes Secretelsewhere in the cluster by specifying it in the format 'k8s:///'.The named Secret must specify a key 'cosign.pub' containing the public key used forverification, (see https://github.com/sigstore/cosign/blob/main/KMS.md#kubernetes-secret).When multiple keys are specified each key is processed as a separate staticKey entry(.attestors[*].entries.keys) within the set of attestors and the count is applied across the keys. - `rekor` (Attributes) Rekor provides configuration for the Rekor transparency log service. If an empty objectis provided the public instance of Rekor (https://rekor.sigstore.dev) is used. (see [below for nested schema](#nestedatt--spec--rules--validate--manifests--attestors--entries--keys--rekor)) - `secret` (Attributes) Reference to a Secret resource that contains a public key (see [below for nested schema](#nestedatt--spec--rules--validate--manifests--attestors--entries--keys--secret)) -- `signature_algorithm` (String) Specify signature algorithm for public keys. Supported values are sha224, sha256, sha384 and sha512. +- `signature_algorithm` (String) Deprecated. Use attestor.signatureAlgorithm instead. ### Nested Schema for `spec.rules.validate.manifests.attestors.entries.keys.ctlog` @@ -1660,6 +1681,7 @@ Optional: - `skip_image_references` (List of String) SkipImageReferences is a list of matching image reference patterns that should be skipped.At least one pattern in the list must match the image for the rule to be skipped. Each image referenceconsists of a registry address (defaults to docker.io), repository, image, and tag (defaults to latest).Wildcards ('*' and '?') are allowed. See: https://kubernetes.io/docs/concepts/containers/images. - `type` (String) Type specifies the method of signature validation. The allowed optionsare Cosign and Notary. By default Cosign is used if a type is not specified. - `use_cache` (Boolean) UseCache enables caching of image verify responses for this rule +- `validate` (Attributes) Validation checks conditions across multiple imageverification attestations or context entries (see [below for nested schema](#nestedatt--spec--rules--verify_images--validate)) - `verify_digest` (Boolean) VerifyDigest validates that images have a digest. @@ -1669,6 +1691,7 @@ Optional: - `attestors` (Attributes List) Attestors specify the required attestors (i.e. authorities). (see [below for nested schema](#nestedatt--spec--rules--verify_images--attestations--attestors)) - `conditions` (Attributes List) Conditions are used to verify attributes within a Predicate. If no Conditions are specifiedthe attestation check is satisfied as long there are predicates that match the predicate type. (see [below for nested schema](#nestedatt--spec--rules--verify_images--attestations--conditions)) +- `name` (String) Name is the variable name. - `predicate_type` (String) Deprecated in favour of 'Type', to be removed soon - `type` (String) Type defines the type of attestation contained within the Statement. @@ -1691,6 +1714,7 @@ Optional: - `keyless` (Attributes) Keyless is a set of attribute used to verify a Sigstore keyless attestor.See https://github.com/sigstore/cosign/blob/main/KEYLESS.md. (see [below for nested schema](#nestedatt--spec--rules--verify_images--attestations--attestors--entries--keyless)) - `keys` (Attributes) Keys specifies one or more public keys. (see [below for nested schema](#nestedatt--spec--rules--verify_images--attestations--attestors--entries--keys)) - `repository` (String) Repository is an optional alternate OCI repository to use for signatures and attestations that match this rule.If specified Repository will override other OCI image repository locations for this Attestor. +- `signature_algorithm` (String) Specify signature algorithm for public keys. Supported values are sha224, sha256, sha384 and sha512. ### Nested Schema for `spec.rules.verify_images.attestations.attestors.entries.certificates` @@ -1768,7 +1792,7 @@ Optional: - `public_keys` (String) Keys is a set of X.509 public keys used to verify image signatures. The keys can be directlyspecified or can be a variable reference to a key specified in a ConfigMap (seehttps://kyverno.io/docs/writing-policies/variables/), or reference a standard Kubernetes Secretelsewhere in the cluster by specifying it in the format 'k8s:///'.The named Secret must specify a key 'cosign.pub' containing the public key used forverification, (see https://github.com/sigstore/cosign/blob/main/KMS.md#kubernetes-secret).When multiple keys are specified each key is processed as a separate staticKey entry(.attestors[*].entries.keys) within the set of attestors and the count is applied across the keys. - `rekor` (Attributes) Rekor provides configuration for the Rekor transparency log service. If an empty objectis provided the public instance of Rekor (https://rekor.sigstore.dev) is used. (see [below for nested schema](#nestedatt--spec--rules--verify_images--attestations--attestors--entries--keys--rekor)) - `secret` (Attributes) Reference to a Secret resource that contains a public key (see [below for nested schema](#nestedatt--spec--rules--verify_images--attestations--attestors--entries--keys--secret)) -- `signature_algorithm` (String) Specify signature algorithm for public keys. Supported values are sha224, sha256, sha384 and sha512. +- `signature_algorithm` (String) Deprecated. Use attestor.signatureAlgorithm instead. ### Nested Schema for `spec.rules.verify_images.attestations.attestors.entries.keys.ctlog` @@ -1853,6 +1877,7 @@ Optional: - `keyless` (Attributes) Keyless is a set of attribute used to verify a Sigstore keyless attestor.See https://github.com/sigstore/cosign/blob/main/KEYLESS.md. (see [below for nested schema](#nestedatt--spec--rules--verify_images--attestors--entries--keyless)) - `keys` (Attributes) Keys specifies one or more public keys. (see [below for nested schema](#nestedatt--spec--rules--verify_images--attestors--entries--keys)) - `repository` (String) Repository is an optional alternate OCI repository to use for signatures and attestations that match this rule.If specified Repository will override other OCI image repository locations for this Attestor. +- `signature_algorithm` (String) Specify signature algorithm for public keys. Supported values are sha224, sha256, sha384 and sha512. ### Nested Schema for `spec.rules.verify_images.attestors.entries.certificates` @@ -1930,7 +1955,7 @@ Optional: - `public_keys` (String) Keys is a set of X.509 public keys used to verify image signatures. The keys can be directlyspecified or can be a variable reference to a key specified in a ConfigMap (seehttps://kyverno.io/docs/writing-policies/variables/), or reference a standard Kubernetes Secretelsewhere in the cluster by specifying it in the format 'k8s:///'.The named Secret must specify a key 'cosign.pub' containing the public key used forverification, (see https://github.com/sigstore/cosign/blob/main/KMS.md#kubernetes-secret).When multiple keys are specified each key is processed as a separate staticKey entry(.attestors[*].entries.keys) within the set of attestors and the count is applied across the keys. - `rekor` (Attributes) Rekor provides configuration for the Rekor transparency log service. If an empty objectis provided the public instance of Rekor (https://rekor.sigstore.dev) is used. (see [below for nested schema](#nestedatt--spec--rules--verify_images--attestors--entries--keys--rekor)) - `secret` (Attributes) Reference to a Secret resource that contains a public key (see [below for nested schema](#nestedatt--spec--rules--verify_images--attestors--entries--keys--secret)) -- `signature_algorithm` (String) Specify signature algorithm for public keys. Supported values are sha224, sha256, sha384 and sha512. +- `signature_algorithm` (String) Deprecated. Use attestor.signatureAlgorithm instead. ### Nested Schema for `spec.rules.verify_images.attestors.entries.keys.ctlog` @@ -1974,6 +1999,23 @@ Optional: - `secrets` (List of String) Secrets specifies a list of secrets that are provided for credentials.Secrets must live in the Kyverno namespace. + +### Nested Schema for `spec.rules.verify_images.validate` + +Optional: + +- `deny` (Attributes) Deny defines conditions used to pass or fail a validation rule. (see [below for nested schema](#nestedatt--spec--rules--verify_images--validate--deny)) +- `message` (String) Message specifies a custom message to be displayed on failure. + + +### Nested Schema for `spec.rules.verify_images.validate.deny` + +Optional: + +- `conditions` (Map of String) Multiple conditions can be declared under an 'any' or 'all' statement. A direct listof conditions (without 'any' or 'all' statements) is also supported for backwards compatibilitybut will be deprecated in the next major release.See: https://kyverno.io/docs/writing-policies/validate/#deny-rules + + + diff --git a/docs/data-sources/longhorn_io_instance_manager_v1beta2_manifest.md b/docs/data-sources/longhorn_io_instance_manager_v1beta2_manifest.md index 3da231a7c..b60b58fd6 100644 --- a/docs/data-sources/longhorn_io_instance_manager_v1beta2_manifest.md +++ b/docs/data-sources/longhorn_io_instance_manager_v1beta2_manifest.md @@ -56,6 +56,21 @@ Optional: Optional: - `data_engine` (String) +- `data_engine_spec` (Attributes) (see [below for nested schema](#nestedatt--spec--data_engine_spec)) - `image` (String) - `node_id` (String) - `type` (String) + + +### Nested Schema for `spec.data_engine_spec` + +Optional: + +- `v2` (Attributes) (see [below for nested schema](#nestedatt--spec--data_engine_spec--v2)) + + +### Nested Schema for `spec.data_engine_spec.v2` + +Optional: + +- `cpu_mask` (String) diff --git a/docs/data-sources/metal3_io_bare_metal_host_v1alpha1_manifest.md b/docs/data-sources/metal3_io_bare_metal_host_v1alpha1_manifest.md index 9bdd5f16f..d256c3a1f 100644 --- a/docs/data-sources/metal3_io_bare_metal_host_v1alpha1_manifest.md +++ b/docs/data-sources/metal3_io_bare_metal_host_v1alpha1_manifest.md @@ -55,36 +55,36 @@ Optional: Required: -- `online` (Boolean) Should the server be online? +- `online` (Boolean) Should the host be powered on? Changing this value will trigger a change in power state of the host. Optional: - `architecture` (String) CPU architecture of the host, e.g. 'x86_64' or 'aarch64'. If unset, eventually populated by inspection. -- `automated_cleaning_mode` (String) When set to disabled, automated cleaning will be avoided during provisioning and deprovisioning. -- `bmc` (Attributes) How do we connect to the BMC? (see [below for nested schema](#nestedatt--spec--bmc)) -- `boot_mac_address` (String) Which MAC address will PXE boot? This is optional for some types, but required for libvirt VMs driven by vbmc. -- `boot_mode` (String) Select the method of initializing the hardware during boot. Defaults to UEFI. -- `consumer_ref` (Attributes) ConsumerRef can be used to store information about something that is using a host. When it is not empty, the host is considered 'in use'. (see [below for nested schema](#nestedatt--spec--consumer_ref)) -- `custom_deploy` (Attributes) A custom deploy procedure. (see [below for nested schema](#nestedatt--spec--custom_deploy)) -- `description` (String) Description is a human-entered text used to help identify the host -- `externally_provisioned` (Boolean) ExternallyProvisioned means something else is managing the image running on the host and the operator should only manage the power status and hardware inventory inspection. If the Image field is filled in, this field is ignored. -- `firmware` (Attributes) BIOS configuration for bare metal server (see [below for nested schema](#nestedatt--spec--firmware)) +- `automated_cleaning_mode` (String) When set to disabled, automated cleaning will be skipped during provisioning and deprovisioning. +- `bmc` (Attributes) How do we connect to the BMC (Baseboard Management Controller) on the host? (see [below for nested schema](#nestedatt--spec--bmc)) +- `boot_mac_address` (String) The MAC address of the NIC used for provisioning the host. In case of network boot, this is the MAC address of the PXE booting interface. The MAC address of the BMC must never be used here! +- `boot_mode` (String) Select the method of initializing the hardware during boot. Defaults to UEFI. Legacy boot should only be used for hardware that does not support UEFI correctly. Set to UEFISecureBoot to turn secure boot on automatically after provisioning. +- `consumer_ref` (Attributes) ConsumerRef can be used to store information about something that is using a host. When it is not empty, the host is considered 'in use'. The common use case is a link to a Machine resource when the host is used by Cluster API. (see [below for nested schema](#nestedatt--spec--consumer_ref)) +- `custom_deploy` (Attributes) A custom deploy procedure. This is an advanced feature that allows using a custom deploy step provided by a site-specific deployment ramdisk. Most users will want to use 'image' instead. Settings this field triggers provisioning. (see [below for nested schema](#nestedatt--spec--custom_deploy)) +- `description` (String) Description is a human-entered text used to help identify the host. +- `externally_provisioned` (Boolean) ExternallyProvisioned means something else has provisioned the image running on the host, and the operator should only manage the power status. This field is used for integration with already provisioned hosts and when pivoting hosts between clusters. If unsure, leave this field as false. +- `firmware` (Attributes) Firmware (BIOS) configuration for bare metal server. If set, the requested settings will be applied before the host is provisioned. Only some vendor drivers support this field. An alternative is to use HostFirmwareSettings resources that allow changing arbitrary values and support the generic Redfish-based drivers. (see [below for nested schema](#nestedatt--spec--firmware)) - `hardware_profile` (String) What is the name of the hardware profile for this host? Hardware profiles are deprecated and should not be used. Use the separate fields Architecture and RootDeviceHints instead. Set to 'empty' to prepare for the future version of the API without hardware profiles. -- `image` (Attributes) Image holds the details of the image to be provisioned. (see [below for nested schema](#nestedatt--spec--image)) -- `meta_data` (Attributes) MetaData holds the reference to the Secret containing host metadata (e.g. meta_data.json) which is passed to the Config Drive. (see [below for nested schema](#nestedatt--spec--meta_data)) -- `network_data` (Attributes) NetworkData holds the reference to the Secret containing network configuration (e.g content of network_data.json) which is passed to the Config Drive. (see [below for nested schema](#nestedatt--spec--network_data)) -- `preprovisioning_network_data_name` (String) PreprovisioningNetworkDataName is the name of the Secret in the local namespace containing network configuration (e.g content of network_data.json) which is passed to the preprovisioning image, and to the Config Drive if not overridden by specifying NetworkData. -- `raid` (Attributes) RAID configuration for bare metal server (see [below for nested schema](#nestedatt--spec--raid)) -- `root_device_hints` (Attributes) Provide guidance about how to choose the device for the image being provisioned. (see [below for nested schema](#nestedatt--spec--root_device_hints)) +- `image` (Attributes) Image holds the details of the image to be provisioned. Populating the image will cause the host to start provisioning. (see [below for nested schema](#nestedatt--spec--image)) +- `meta_data` (Attributes) MetaData holds the reference to the Secret containing host metadata which is passed to the Config Drive. By default, the operater will generate metadata for the host, so most users do not need to set this field. (see [below for nested schema](#nestedatt--spec--meta_data)) +- `network_data` (Attributes) NetworkData holds the reference to the Secret containing network configuration which is passed to the Config Drive and interpreted by the first boot software such as cloud-init. (see [below for nested schema](#nestedatt--spec--network_data)) +- `preprovisioning_network_data_name` (String) PreprovisioningNetworkDataName is the name of the Secret in the local namespace containing network configuration which is passed to the preprovisioning image, and to the Config Drive if not overridden by specifying NetworkData. +- `raid` (Attributes) RAID configuration for bare metal server. If set, the RAID settings will be applied before the host is provisioned. If not, the current settings will not be modified. Only one of the sub-fields hardwareRAIDVolumes and softwareRAIDVolumes can be set at the same time. (see [below for nested schema](#nestedatt--spec--raid)) +- `root_device_hints` (Attributes) Provide guidance about how to choose the device for the image being provisioned. The default is currently to use /dev/sda as the root device. (see [below for nested schema](#nestedatt--spec--root_device_hints)) - `taints` (Attributes List) Taints is the full, authoritative list of taints to apply to the corresponding Machine. This list will overwrite any modifications made to the Machine on an ongoing basis. (see [below for nested schema](#nestedatt--spec--taints)) -- `user_data` (Attributes) UserData holds the reference to the Secret containing the user data to be passed to the host before it boots. (see [below for nested schema](#nestedatt--spec--user_data)) +- `user_data` (Attributes) UserData holds the reference to the Secret containing the user data which is passed to the Config Drive and interpreted by the first-boot software such as cloud-init. The format of user data is specific to the first-boot software. (see [below for nested schema](#nestedatt--spec--user_data)) ### Nested Schema for `spec.bmc` Required: -- `address` (String) Address holds the URL for accessing the controller on the network. +- `address` (String) Address holds the URL for accessing the controller on the network. The scheme part designates the driver to use with the host. - `credentials_name` (String) The name of the secret containing the BMC credentials (requires keys 'username' and 'password'). Optional: @@ -119,9 +119,9 @@ Required: Optional: -- `simultaneous_multithreading_enabled` (Boolean) Allows a single physical processor core to appear as several logical processors. This supports following options: true, false. -- `sriov_enabled` (Boolean) SR-IOV support enables a hypervisor to create virtual instances of a PCI-express device, potentially increasing performance. This supports following options: true, false. -- `virtualization_enabled` (Boolean) Supports the virtualization of platform hardware. This supports following options: true, false. +- `simultaneous_multithreading_enabled` (Boolean) Allows a single physical processor core to appear as several logical processors. +- `sriov_enabled` (Boolean) SR-IOV support enables a hypervisor to create virtual instances of a PCI-express device, potentially increasing performance. +- `virtualization_enabled` (Boolean) Supports the virtualization of platform hardware. @@ -133,9 +133,9 @@ Required: Optional: -- `checksum` (String) Checksum is the checksum for the image. +- `checksum` (String) Checksum is the checksum for the image. Required for all formats except for 'live-iso'. - `checksum_type` (String) ChecksumType is the checksum algorithm for the image, e.g md5, sha256 or sha512. The special value 'auto' can be used to detect the algorithm from the checksum. If missing, MD5 is used. If in doubt, use 'auto'. -- `format` (String) DiskFormat contains the format of the image (raw, qcow2, ...). Needs to be set to raw for raw images streaming. Note live-iso means an iso referenced by the url will be live-booted and not deployed to disk, and in this case the checksum options are not required and if specified will be ignored. +- `format` (String) Format contains the format of the image (raw, qcow2, ...). When set to 'live-iso', an ISO 9660 image referenced by the url will be live-booted and not deployed to disk. @@ -169,16 +169,16 @@ Optional: Required: -- `level` (String) RAID level for the logical disk. The following levels are supported: 0;1;2;5;6;1+0;5+0;6+0. +- `level` (String) RAID level for the logical disk. The following levels are supported: 0, 1, 2, 5, 6, 1+0, 5+0, 6+0 (drivers may support only some of them). Optional: -- `controller` (String) The name of the RAID controller to use -- `name` (String) Name of the volume. Should be unique within the Node. If not specified, volume name will be auto-generated. +- `controller` (String) The name of the RAID controller to use. +- `name` (String) Name of the volume. Should be unique within the Node. If not specified, the name will be auto-generated. - `number_of_physical_disks` (Number) Integer, number of physical disks to use for the logical disk. Defaults to minimum number of disks required for the particular RAID level. -- `physical_disks` (List of String) Optional list of physical disk names to be used for the Hardware RAID volumes. The disk names are interpreted by the Hardware RAID controller, and the format is hardware specific. -- `rotational` (Boolean) Select disks with only rotational or solid-state storage -- `size_gibibytes` (Number) Size (Integer) of the logical disk to be created in GiB. If unspecified or set be 0, the maximum capacity of disk will be used for logical disk. +- `physical_disks` (List of String) Optional list of physical disk names to be used for the hardware RAID volumes. The disk names are interpreted by the hardware RAID controller, and the format is hardware specific. +- `rotational` (Boolean) Select disks with only rotational (if set to true) or solid-state (if set to false) storage. By default, any disks can be picked. +- `size_gibibytes` (Number) Size of the logical disk to be created in GiB. If unspecified or set be 0, the maximum capacity of disk will be used for logical disk. @@ -186,12 +186,12 @@ Optional: Required: -- `level` (String) RAID level for the logical disk. The following levels are supported: 0;1;1+0. +- `level` (String) RAID level for the logical disk. The following levels are supported: 0, 1 and 1+0. Optional: - `physical_disks` (Attributes List) A list of device hints, the number of items should be greater than or equal to 2. (see [below for nested schema](#nestedatt--spec--raid--software_raid_volumes--physical_disks)) -- `size_gibibytes` (Number) Size (Integer) of the logical disk to be created in GiB. If unspecified or set be 0, the maximum capacity of disk will be used for logical disk. +- `size_gibibytes` (Number) Size of the logical disk to be created in GiB. If unspecified or set be 0, the maximum capacity of disk will be used for logical disk. ### Nested Schema for `spec.raid.software_raid_volumes.physical_disks` diff --git a/docs/data-sources/metal3_io_hardware_data_v1alpha1_manifest.md b/docs/data-sources/metal3_io_hardware_data_v1alpha1_manifest.md index bbc346181..cb17cd47c 100644 --- a/docs/data-sources/metal3_io_hardware_data_v1alpha1_manifest.md +++ b/docs/data-sources/metal3_io_hardware_data_v1alpha1_manifest.md @@ -62,13 +62,13 @@ Optional: Optional: -- `cpu` (Attributes) CPU describes one processor on the host. (see [below for nested schema](#nestedatt--spec--hardware--cpu)) -- `firmware` (Attributes) Firmware describes the firmware on the host. (see [below for nested schema](#nestedatt--spec--hardware--firmware)) +- `cpu` (Attributes) Details of the CPU(s) in the system. (see [below for nested schema](#nestedatt--spec--hardware--cpu)) +- `firmware` (Attributes) System firmware information. (see [below for nested schema](#nestedatt--spec--hardware--firmware)) - `hostname` (String) -- `nics` (Attributes List) (see [below for nested schema](#nestedatt--spec--hardware--nics)) -- `ram_mebibytes` (Number) -- `storage` (Attributes List) (see [below for nested schema](#nestedatt--spec--hardware--storage)) -- `system_vendor` (Attributes) HardwareSystemVendor stores details about the whole hardware system. (see [below for nested schema](#nestedatt--spec--hardware--system_vendor)) +- `nics` (Attributes List) List of network interfaces for the host. (see [below for nested schema](#nestedatt--spec--hardware--nics)) +- `ram_mebibytes` (Number) The host's amount of memory in Mebibytes. +- `storage` (Attributes List) List of storage (disk, SSD, etc.) available to the host. (see [below for nested schema](#nestedatt--spec--hardware--storage)) +- `system_vendor` (Attributes) System vendor information. (see [below for nested schema](#nestedatt--spec--hardware--system_vendor)) ### Nested Schema for `spec.hardware.cpu` diff --git a/docs/data-sources/monitoring_coreos_com_scrape_config_v1alpha1_manifest.md b/docs/data-sources/monitoring_coreos_com_scrape_config_v1alpha1_manifest.md index 29b0c2ccc..aa7e74e04 100644 --- a/docs/data-sources/monitoring_coreos_com_scrape_config_v1alpha1_manifest.md +++ b/docs/data-sources/monitoring_coreos_com_scrape_config_v1alpha1_manifest.md @@ -70,6 +70,7 @@ Optional: - `honor_labels` (Boolean) HonorLabels chooses the metric's labels on collisions with target labels. - `honor_timestamps` (Boolean) HonorTimestamps controls whether Prometheus respects the timestamps present in scraped data. - `http_sd_configs` (Attributes List) HTTPSDConfigs defines a list of HTTP service discovery configurations. (see [below for nested schema](#nestedatt--spec--http_sd_configs)) +- `ionos_sd_configs` (Attributes List) IonosSDConfigs defines a list of IONOS service discovery configurations. (see [below for nested schema](#nestedatt--spec--ionos_sd_configs)) - `job_name` (String) The value of the 'job' label assigned to the scraped metrics by default.The 'job_name' field in the rendered scrape configuration is always controlled by theoperator to prevent duplicate job names, which Prometheus does not allow. Instead the'job' label is set by means of relabeling configs. - `keep_dropped_targets` (Number) Per-scrape limit on the number of targets dropped by relabelingthat will be kept in memory. 0 means no limit.It requires Prometheus >= v2.47.0. - `kubernetes_sd_configs` (Attributes List) KubernetesSDConfigs defines a list of Kubernetes service discovery configurations. (see [below for nested schema](#nestedatt--spec--kubernetes_sd_configs)) @@ -83,7 +84,7 @@ Optional: - `metrics_path` (String) MetricsPath HTTP path to scrape for metrics. If empty, Prometheus uses the default value (e.g. /metrics). - `no_proxy` (String) 'noProxy' is a comma-separated string that can contain IPs, CIDR notation, domain namesthat should be excluded from proxying. IP and domain names cancontain port numbers.It requires Prometheus >= v2.43.0. - `nomad_sd_configs` (Attributes List) NomadSDConfigs defines a list of Nomad service discovery configurations. (see [below for nested schema](#nestedatt--spec--nomad_sd_configs)) -- `oauth2` (Attributes) OAuth2 client credentials used to fetch a token for the targets. (see [below for nested schema](#nestedatt--spec--oauth2)) +- `oauth2` (Attributes) OAuth2 configuration to use on every scrape request. (see [below for nested schema](#nestedatt--spec--oauth2)) - `openstack_sd_configs` (Attributes List) OpenStackSDConfigs defines a list of OpenStack service discovery configurations. (see [below for nested schema](#nestedatt--spec--openstack_sd_configs)) - `ovhcloud_sd_configs` (Attributes List) OVHCloudSDConfigs defines a list of OVHcloud service discovery configurations. (see [below for nested schema](#nestedatt--spec--ovhcloud_sd_configs)) - `params` (Map of List of String) Optional HTTP URL parameters @@ -888,7 +889,7 @@ Optional: - `filters` (Attributes List) Optional filters to limit the discovery process to a subset of the available resources. (see [below for nested schema](#nestedatt--spec--docker_sd_configs--filters)) - `follow_redirects` (Boolean) Configure whether HTTP requests follow HTTP 3xx redirects. - `host_networking_host` (String) The host to use if the container is in host networking mode. -- `match_first_network` (Boolean) Configure whether to match the first network if the container has multiple networks defined.If unset, Prometheus uses true by default.It requires Prometheus >= v2.54.0. +- `match_first_network` (Boolean) Configure whether to match the first network if the container has multiple networks defined.If unset, Prometheus uses true by default.It requires Prometheus >= v2.54.1. - `no_proxy` (String) 'noProxy' is a comma-separated string that can contain IPs, CIDR notation, domain namesthat should be excluded from proxying. IP and domain names cancontain port numbers.It requires Prometheus >= v2.43.0. - `oauth2` (Attributes) Optional OAuth 2.0 configuration.Cannot be set at the same time as 'authorization'. (see [below for nested schema](#nestedatt--spec--docker_sd_configs--oauth2)) - `port` (Number) The port to scrape metrics from. @@ -2785,6 +2786,146 @@ Optional: + +### Nested Schema for `spec.ionos_sd_configs` + +Required: + +- `authorization` (Attributes) Authorization' header configuration, required when using IONOS. (see [below for nested schema](#nestedatt--spec--ionos_sd_configs--authorization)) +- `datacenter_id` (String) The unique ID of the IONOS data center. + +Optional: + +- `enable_http2` (Boolean) Configure whether to enable HTTP2. +- `follow_redirects` (Boolean) Configure whether the HTTP requests should follow HTTP 3xx redirects. +- `no_proxy` (String) 'noProxy' is a comma-separated string that can contain IPs, CIDR notation, domain namesthat should be excluded from proxying. IP and domain names cancontain port numbers.It requires Prometheus >= v2.43.0. +- `port` (Number) Port to scrape the metrics from. +- `proxy_connect_header` (Map of String) ProxyConnectHeader optionally specifies headers to send toproxies during CONNECT requests.It requires Prometheus >= v2.43.0. +- `proxy_from_environment` (Boolean) Whether to use the proxy configuration defined by environment variables (HTTP_PROXY, HTTPS_PROXY, and NO_PROXY).If unset, Prometheus uses its default value.It requires Prometheus >= v2.43.0. +- `proxy_url` (String) 'proxyURL' defines the HTTP proxy server to use. +- `refresh_interval` (String) Refresh interval to re-read the list of resources. +- `tls_config` (Attributes) TLS configuration to use when connecting to the IONOS API. (see [below for nested schema](#nestedatt--spec--ionos_sd_configs--tls_config)) + + +### Nested Schema for `spec.ionos_sd_configs.authorization` + +Optional: + +- `credentials` (Attributes) Selects a key of a Secret in the namespace that contains the credentials for authentication. (see [below for nested schema](#nestedatt--spec--ionos_sd_configs--authorization--credentials)) +- `type` (String) Defines the authentication type. The value is case-insensitive.'Basic' is not a supported value.Default: 'Bearer' + + +### Nested Schema for `spec.ionos_sd_configs.authorization.credentials` + +Required: + +- `key` (String) The key of the secret to select from. Must be a valid secret key. + +Optional: + +- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names +- `optional` (Boolean) Specify whether the Secret or its key must be defined + + + + +### Nested Schema for `spec.ionos_sd_configs.tls_config` + +Optional: + +- `ca` (Attributes) Certificate authority used when verifying server certificates. (see [below for nested schema](#nestedatt--spec--ionos_sd_configs--tls_config--ca)) +- `cert` (Attributes) Client certificate to present when doing client-authentication. (see [below for nested schema](#nestedatt--spec--ionos_sd_configs--tls_config--cert)) +- `insecure_skip_verify` (Boolean) Disable target certificate validation. +- `key_secret` (Attributes) Secret containing the client key file for the targets. (see [below for nested schema](#nestedatt--spec--ionos_sd_configs--tls_config--key_secret)) +- `max_version` (String) Maximum acceptable TLS version.It requires Prometheus >= v2.41.0. +- `min_version` (String) Minimum acceptable TLS version.It requires Prometheus >= v2.35.0. +- `server_name` (String) Used to verify the hostname for the targets. + + +### Nested Schema for `spec.ionos_sd_configs.tls_config.ca` + +Optional: + +- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--ionos_sd_configs--tls_config--ca--config_map)) +- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--ionos_sd_configs--tls_config--ca--secret)) + + +### Nested Schema for `spec.ionos_sd_configs.tls_config.ca.config_map` + +Required: + +- `key` (String) The key to select. + +Optional: + +- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names +- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined + + + +### Nested Schema for `spec.ionos_sd_configs.tls_config.ca.secret` + +Required: + +- `key` (String) The key of the secret to select from. Must be a valid secret key. + +Optional: + +- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names +- `optional` (Boolean) Specify whether the Secret or its key must be defined + + + + +### Nested Schema for `spec.ionos_sd_configs.tls_config.cert` + +Optional: + +- `config_map` (Attributes) ConfigMap containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--ionos_sd_configs--tls_config--cert--config_map)) +- `secret` (Attributes) Secret containing data to use for the targets. (see [below for nested schema](#nestedatt--spec--ionos_sd_configs--tls_config--cert--secret)) + + +### Nested Schema for `spec.ionos_sd_configs.tls_config.cert.config_map` + +Required: + +- `key` (String) The key to select. + +Optional: + +- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names +- `optional` (Boolean) Specify whether the ConfigMap or its key must be defined + + + +### Nested Schema for `spec.ionos_sd_configs.tls_config.cert.secret` + +Required: + +- `key` (String) The key of the secret to select from. Must be a valid secret key. + +Optional: + +- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names +- `optional` (Boolean) Specify whether the Secret or its key must be defined + + + + +### Nested Schema for `spec.ionos_sd_configs.tls_config.key_secret` + +Required: + +- `key` (String) The key of the secret to select from. Must be a valid secret key. + +Optional: + +- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names +- `optional` (Boolean) Specify whether the Secret or its key must be defined + + + + ### Nested Schema for `spec.kubernetes_sd_configs` diff --git a/docs/data-sources/networkfirewall_services_k8s_aws_rule_group_v1alpha1_manifest.md b/docs/data-sources/networkfirewall_services_k8s_aws_rule_group_v1alpha1_manifest.md index 66f63a9c2..c45d5ceee 100644 --- a/docs/data-sources/networkfirewall_services_k8s_aws_rule_group_v1alpha1_manifest.md +++ b/docs/data-sources/networkfirewall_services_k8s_aws_rule_group_v1alpha1_manifest.md @@ -94,10 +94,10 @@ Optional: Optional: -- `i_p_set_references` (Attributes) (see [below for nested schema](#nestedatt--spec--rule_group--reference_sets--i_p_set_references)) +- `ip_set_references` (Attributes) (see [below for nested schema](#nestedatt--spec--rule_group--reference_sets--ip_set_references)) - -### Nested Schema for `spec.rule_group.reference_sets.i_p_set_references` + +### Nested Schema for `spec.rule_group.reference_sets.ip_set_references` Optional: @@ -110,11 +110,11 @@ Optional: Optional: -- `i_p_sets` (Attributes) (see [below for nested schema](#nestedatt--spec--rule_group--rule_variables--i_p_sets)) +- `ip_sets` (Attributes) (see [below for nested schema](#nestedatt--spec--rule_group--rule_variables--ip_sets)) - `port_sets` (Attributes) (see [below for nested schema](#nestedatt--spec--rule_group--rule_variables--port_sets)) - -### Nested Schema for `spec.rule_group.rule_variables.i_p_sets` + +### Nested Schema for `spec.rule_group.rule_variables.ip_sets` Optional: diff --git a/docs/data-sources/pgv2_percona_com_percona_pg_cluster_v2_manifest.md b/docs/data-sources/pgv2_percona_com_percona_pg_cluster_v2_manifest.md index 65dfee9f9..e322ef60c 100644 --- a/docs/data-sources/pgv2_percona_com_percona_pg_cluster_v2_manifest.md +++ b/docs/data-sources/pgv2_percona_com_percona_pg_cluster_v2_manifest.md @@ -95,6 +95,10 @@ Required: - `pgbackrest` (Attributes) pgBackRest archive configuration (see [below for nested schema](#nestedatt--spec--backups--pgbackrest)) +Optional: + +- `track_latest_restorable_time` (Boolean) Enable tracking latest restorable time + ### Nested Schema for `spec.backups.pgbackrest` @@ -184,7 +188,7 @@ Optional: - `resources` (Attributes) resources represents the minimum resources the volume should have.If RecoverVolumeExpansionFailure feature is enabled users are allowed to specify resource requirementsthat are lower than previous value but must still be higher than capacity recorded in thestatus field of the claim.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources (see [below for nested schema](#nestedatt--spec--backups--pgbackrest--repos--volume--volume_claim_spec--resources)) - `selector` (Attributes) selector is a label query over volumes to consider for binding. (see [below for nested schema](#nestedatt--spec--backups--pgbackrest--repos--volume--volume_claim_spec--selector)) - `storage_class_name` (String) storageClassName is the name of the StorageClass required by the claim.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#class-1 -- `volume_attributes_class_name` (String) volumeAttributesClassName may be used to set the VolumeAttributesClass used by this claim.If specified, the CSI driver will create or update the volume with the attributes definedin the corresponding VolumeAttributesClass. This has a different purpose than storageClassName,it can be changed after the claim is created. An empty string value means that no VolumeAttributesClasswill be applied to the claim but it's not allowed to reset this field to empty string once it is set.If unspecified and the PersistentVolumeClaim is unbound, the default VolumeAttributesClasswill be set by the persistentvolume controller if it exists.If the resource referred to by volumeAttributesClass does not exist, this PersistentVolumeClaim will beset to a Pending state, as reflected by the modifyVolumeStatus field, until such as a resourceexists.More info: https://kubernetes.io/docs/concepts/storage/volume-attributes-classes/(Alpha) Using this field requires the VolumeAttributesClass feature gate to be enabled. +- `volume_attributes_class_name` (String) volumeAttributesClassName may be used to set the VolumeAttributesClass used by this claim.If specified, the CSI driver will create or update the volume with the attributes definedin the corresponding VolumeAttributesClass. This has a different purpose than storageClassName,it can be changed after the claim is created. An empty string value means that no VolumeAttributesClasswill be applied to the claim but it's not allowed to reset this field to empty string once it is set.If unspecified and the PersistentVolumeClaim is unbound, the default VolumeAttributesClasswill be set by the persistentvolume controller if it exists.If the resource referred to by volumeAttributesClass does not exist, this PersistentVolumeClaim will beset to a Pending state, as reflected by the modifyVolumeStatus field, until such as a resourceexists.More info: https://kubernetes.io/docs/concepts/storage/volume-attributes-classes/(Beta) Using this field requires the VolumeAttributesClass feature gate to be enabled (off by default). - `volume_mode` (String) volumeMode defines what type of volume is required by the claim.Value of Filesystem is implied when not included in claim spec. - `volume_name` (String) volumeName is the binding reference to the PersistentVolume backing this claim. @@ -303,7 +307,7 @@ Optional: Optional: - `items` (Attributes List) items if unspecified, each key-value pair in the Data field of the referencedConfigMap will be projected into the volume as a file whose name is thekey and content is the value. If specified, the listed keys will beprojected into the specified paths, and unlisted keys will not bepresent. If a key is specified which is not present in the ConfigMap,the volume setup will error unless it is marked optional. Paths must berelative and may not contain the '..' path or start with '..'. (see [below for nested schema](#nestedatt--spec--backups--pgbackrest--configuration--config_map--items)) -- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896. +- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names - `optional` (Boolean) optional specify whether the ConfigMap or its keys must be defined @@ -373,7 +377,7 @@ Optional: Optional: - `items` (Attributes List) items if unspecified, each key-value pair in the Data field of the referencedSecret will be projected into the volume as a file whose name is thekey and content is the value. If specified, the listed keys will beprojected into the specified paths, and unlisted keys will not bepresent. If a key is specified which is not present in the Secret,the volume setup will error unless it is marked optional. Paths must berelative and may not contain the '..' path or start with '..'. (see [below for nested schema](#nestedatt--spec--backups--pgbackrest--configuration--secret--items)) -- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896. +- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names - `optional` (Boolean) optional field specify whether the Secret or its key must be defined @@ -435,6 +439,10 @@ Required: - `name` (String) Name must match the name of one entry in pod.spec.resourceClaims ofthe Pod where this field is used. It makes that resource availableinside a container. +Optional: + +- `request` (String) Request is the name chosen for a request in the referenced claim.If empty, everything from the claim is made available, otherwiseonly the result of this request. + @@ -461,6 +469,10 @@ Required: - `name` (String) Name must match the name of one entry in pod.spec.resourceClaims ofthe Pod where this field is used. It makes that resource availableinside a container. +Optional: + +- `request` (String) Request is the name chosen for a request in the referenced claim.If empty, everything from the claim is made available, otherwiseonly the result of this request. + @@ -608,8 +620,8 @@ Required: Optional: - `label_selector` (Attributes) A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods. (see [below for nested schema](#nestedatt--spec--backups--pgbackrest--jobs--affinity--pod_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--label_selector)) -- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate. -- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate. +- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). +- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). - `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--backups--pgbackrest--jobs--affinity--pod_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--namespace_selector)) - `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'. @@ -669,8 +681,8 @@ Required: Optional: - `label_selector` (Attributes) A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods. (see [below for nested schema](#nestedatt--spec--backups--pgbackrest--jobs--affinity--pod_affinity--required_during_scheduling_ignored_during_execution--label_selector)) -- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate. -- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate. +- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). +- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). - `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--backups--pgbackrest--jobs--affinity--pod_affinity--required_during_scheduling_ignored_during_execution--namespace_selector)) - `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'. @@ -746,8 +758,8 @@ Required: Optional: - `label_selector` (Attributes) A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods. (see [below for nested schema](#nestedatt--spec--backups--pgbackrest--jobs--affinity--pod_anti_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--label_selector)) -- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate. -- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate. +- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). +- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). - `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--backups--pgbackrest--jobs--affinity--pod_anti_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--namespace_selector)) - `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'. @@ -807,8 +819,8 @@ Required: Optional: - `label_selector` (Attributes) A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods. (see [below for nested schema](#nestedatt--spec--backups--pgbackrest--jobs--affinity--pod_anti_affinity--required_during_scheduling_ignored_during_execution--label_selector)) -- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate. -- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate. +- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). +- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). - `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--backups--pgbackrest--jobs--affinity--pod_anti_affinity--required_during_scheduling_ignored_during_execution--namespace_selector)) - `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'. @@ -875,6 +887,10 @@ Required: - `name` (String) Name must match the name of one entry in pod.spec.resourceClaims ofthe Pod where this field is used. It makes that resource availableinside a container. +Optional: + +- `request` (String) Request is the name chosen for a request in the referenced claim.If empty, everything from the claim is made available, otherwiseonly the result of this request. + @@ -890,7 +906,8 @@ Optional: - `run_as_user` (Number) The UID to run the entrypoint of the container process.Defaults to user specified in image metadata if unspecified.May also be set in SecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedencefor that container.Note that this field cannot be set when spec.os.name is windows. - `se_linux_options` (Attributes) The SELinux context to be applied to all containers.If unspecified, the container runtime will allocate a random SELinux context for eachcontainer. May also be set in SecurityContext. If set inboth SecurityContext and PodSecurityContext, the value specified in SecurityContexttakes precedence for that container.Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--backups--pgbackrest--jobs--security_context--se_linux_options)) - `seccomp_profile` (Attributes) The seccomp options to use by the containers in this pod.Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--backups--pgbackrest--jobs--security_context--seccomp_profile)) -- `supplemental_groups` (List of String) A list of groups applied to the first process run in each container, in additionto the container's primary GID, the fsGroup (if specified), and group membershipsdefined in the container image for the uid of the container process. If unspecified,no additional groups are added to any container. Note that group membershipsdefined in the container image for the uid of the container process are still effective,even if they are not included in this list.Note that this field cannot be set when spec.os.name is windows. +- `supplemental_groups` (List of String) A list of groups applied to the first process run in each container, inaddition to the container's primary GID and fsGroup (if specified). Ifthe SupplementalGroupsPolicy feature is enabled, thesupplementalGroupsPolicy field determines whether these are in additionto or instead of any group memberships defined in the container image.If unspecified, no additional groups are added, though group membershipsdefined in the container image may still be used, depending on thesupplementalGroupsPolicy field.Note that this field cannot be set when spec.os.name is windows. +- `supplemental_groups_policy` (String) Defines how supplemental groups of the first container processes are calculated.Valid values are 'Merge' and 'Strict'. If not specified, 'Merge' is used.(Alpha) Using the field requires the SupplementalGroupsPolicy feature gate to be enabledand the container runtime must implement support for this feature.Note that this field cannot be set when spec.os.name is windows. - `sysctls` (Attributes List) Sysctls hold a list of namespaced sysctls used for the pod. Pods with unsupportedsysctls (by the container runtime) might fail to launch.Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--backups--pgbackrest--jobs--security_context--sysctls)) - `windows_options` (Attributes) The Windows specific settings applied to all containers.If unspecified, the options within a container's SecurityContext will be used.If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.Note that this field cannot be set when spec.os.name is linux. (see [below for nested schema](#nestedatt--spec--backups--pgbackrest--jobs--security_context--windows_options)) @@ -1129,8 +1146,8 @@ Required: Optional: - `label_selector` (Attributes) A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods. (see [below for nested schema](#nestedatt--spec--backups--pgbackrest--repo_host--affinity--pod_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--label_selector)) -- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate. -- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate. +- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). +- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). - `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--backups--pgbackrest--repo_host--affinity--pod_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--namespace_selector)) - `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'. @@ -1190,8 +1207,8 @@ Required: Optional: - `label_selector` (Attributes) A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods. (see [below for nested schema](#nestedatt--spec--backups--pgbackrest--repo_host--affinity--pod_affinity--required_during_scheduling_ignored_during_execution--label_selector)) -- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate. -- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate. +- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). +- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). - `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--backups--pgbackrest--repo_host--affinity--pod_affinity--required_during_scheduling_ignored_during_execution--namespace_selector)) - `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'. @@ -1267,8 +1284,8 @@ Required: Optional: - `label_selector` (Attributes) A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods. (see [below for nested schema](#nestedatt--spec--backups--pgbackrest--repo_host--affinity--pod_anti_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--label_selector)) -- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate. -- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate. +- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). +- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). - `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--backups--pgbackrest--repo_host--affinity--pod_anti_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--namespace_selector)) - `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'. @@ -1328,8 +1345,8 @@ Required: Optional: - `label_selector` (Attributes) A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods. (see [below for nested schema](#nestedatt--spec--backups--pgbackrest--repo_host--affinity--pod_anti_affinity--required_during_scheduling_ignored_during_execution--label_selector)) -- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate. -- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate. +- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). +- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). - `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--backups--pgbackrest--repo_host--affinity--pod_anti_affinity--required_during_scheduling_ignored_during_execution--namespace_selector)) - `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'. @@ -1396,6 +1413,10 @@ Required: - `name` (String) Name must match the name of one entry in pod.spec.resourceClaims ofthe Pod where this field is used. It makes that resource availableinside a container. +Optional: + +- `request` (String) Request is the name chosen for a request in the referenced claim.If empty, everything from the claim is made available, otherwiseonly the result of this request. + @@ -1411,7 +1432,8 @@ Optional: - `run_as_user` (Number) The UID to run the entrypoint of the container process.Defaults to user specified in image metadata if unspecified.May also be set in SecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedencefor that container.Note that this field cannot be set when spec.os.name is windows. - `se_linux_options` (Attributes) The SELinux context to be applied to all containers.If unspecified, the container runtime will allocate a random SELinux context for eachcontainer. May also be set in SecurityContext. If set inboth SecurityContext and PodSecurityContext, the value specified in SecurityContexttakes precedence for that container.Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--backups--pgbackrest--repo_host--security_context--se_linux_options)) - `seccomp_profile` (Attributes) The seccomp options to use by the containers in this pod.Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--backups--pgbackrest--repo_host--security_context--seccomp_profile)) -- `supplemental_groups` (List of String) A list of groups applied to the first process run in each container, in additionto the container's primary GID, the fsGroup (if specified), and group membershipsdefined in the container image for the uid of the container process. If unspecified,no additional groups are added to any container. Note that group membershipsdefined in the container image for the uid of the container process are still effective,even if they are not included in this list.Note that this field cannot be set when spec.os.name is windows. +- `supplemental_groups` (List of String) A list of groups applied to the first process run in each container, inaddition to the container's primary GID and fsGroup (if specified). Ifthe SupplementalGroupsPolicy feature is enabled, thesupplementalGroupsPolicy field determines whether these are in additionto or instead of any group memberships defined in the container image.If unspecified, no additional groups are added, though group membershipsdefined in the container image may still be used, depending on thesupplementalGroupsPolicy field.Note that this field cannot be set when spec.os.name is windows. +- `supplemental_groups_policy` (String) Defines how supplemental groups of the first container processes are calculated.Valid values are 'Merge' and 'Strict'. If not specified, 'Merge' is used.(Alpha) Using the field requires the SupplementalGroupsPolicy feature gate to be enabledand the container runtime must implement support for this feature.Note that this field cannot be set when spec.os.name is windows. - `sysctls` (Attributes List) Sysctls hold a list of namespaced sysctls used for the pod. Pods with unsupportedsysctls (by the container runtime) might fail to launch.Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--backups--pgbackrest--repo_host--security_context--sysctls)) - `windows_options` (Attributes) The Windows specific settings applied to all containers.If unspecified, the options within a container's SecurityContext will be used.If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.Note that this field cannot be set when spec.os.name is linux. (see [below for nested schema](#nestedatt--spec--backups--pgbackrest--repo_host--security_context--windows_options)) @@ -1477,7 +1499,7 @@ Optional: Optional: - `items` (Attributes List) items if unspecified, each key-value pair in the Data field of the referencedConfigMap will be projected into the volume as a file whose name is thekey and content is the value. If specified, the listed keys will beprojected into the specified paths, and unlisted keys will not bepresent. If a key is specified which is not present in the ConfigMap,the volume setup will error unless it is marked optional. Paths must berelative and may not contain the '..' path or start with '..'. (see [below for nested schema](#nestedatt--spec--backups--pgbackrest--repo_host--ssh_config_map--items)) -- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896. +- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names - `optional` (Boolean) optional specify whether the ConfigMap or its keys must be defined @@ -1500,7 +1522,7 @@ Optional: Optional: - `items` (Attributes List) items if unspecified, each key-value pair in the Data field of the referencedSecret will be projected into the volume as a file whose name is thekey and content is the value. If specified, the listed keys will beprojected into the specified paths, and unlisted keys will not bepresent. If a key is specified which is not present in the Secret,the volume setup will error unless it is marked optional. Paths must berelative and may not contain the '..' path or start with '..'. (see [below for nested schema](#nestedatt--spec--backups--pgbackrest--repo_host--ssh_secret--items)) -- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896. +- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names - `optional` (Boolean) optional field specify whether the Secret or its key must be defined @@ -1719,8 +1741,8 @@ Required: Optional: - `label_selector` (Attributes) A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods. (see [below for nested schema](#nestedatt--spec--backups--pgbackrest--restore--affinity--pod_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--label_selector)) -- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate. -- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate. +- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). +- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). - `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--backups--pgbackrest--restore--affinity--pod_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--namespace_selector)) - `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'. @@ -1780,8 +1802,8 @@ Required: Optional: - `label_selector` (Attributes) A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods. (see [below for nested schema](#nestedatt--spec--backups--pgbackrest--restore--affinity--pod_affinity--required_during_scheduling_ignored_during_execution--label_selector)) -- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate. -- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate. +- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). +- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). - `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--backups--pgbackrest--restore--affinity--pod_affinity--required_during_scheduling_ignored_during_execution--namespace_selector)) - `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'. @@ -1857,8 +1879,8 @@ Required: Optional: - `label_selector` (Attributes) A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods. (see [below for nested schema](#nestedatt--spec--backups--pgbackrest--restore--affinity--pod_anti_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--label_selector)) -- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate. -- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate. +- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). +- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). - `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--backups--pgbackrest--restore--affinity--pod_anti_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--namespace_selector)) - `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'. @@ -1918,8 +1940,8 @@ Required: Optional: - `label_selector` (Attributes) A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods. (see [below for nested schema](#nestedatt--spec--backups--pgbackrest--restore--affinity--pod_anti_affinity--required_during_scheduling_ignored_during_execution--label_selector)) -- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate. -- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate. +- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). +- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). - `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--backups--pgbackrest--restore--affinity--pod_anti_affinity--required_during_scheduling_ignored_during_execution--namespace_selector)) - `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'. @@ -1986,6 +2008,10 @@ Required: - `name` (String) Name must match the name of one entry in pod.spec.resourceClaims ofthe Pod where this field is used. It makes that resource availableinside a container. +Optional: + +- `request` (String) Request is the name chosen for a request in the referenced claim.If empty, everything from the claim is made available, otherwiseonly the result of this request. + @@ -2032,6 +2058,10 @@ Required: - `name` (String) Name must match the name of one entry in pod.spec.resourceClaims ofthe Pod where this field is used. It makes that resource availableinside a container. +Optional: + +- `request` (String) Request is the name chosen for a request in the referenced claim.If empty, everything from the claim is made available, otherwiseonly the result of this request. + @@ -2058,6 +2088,10 @@ Required: - `name` (String) Name must match the name of one entry in pod.spec.resourceClaims ofthe Pod where this field is used. It makes that resource availableinside a container. +Optional: + +- `request` (String) Request is the name chosen for a request in the referenced claim.If empty, everything from the claim is made available, otherwiseonly the result of this request. + @@ -2101,7 +2135,7 @@ Optional: - `resources` (Attributes) resources represents the minimum resources the volume should have.If RecoverVolumeExpansionFailure feature is enabled users are allowed to specify resource requirementsthat are lower than previous value but must still be higher than capacity recorded in thestatus field of the claim.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources (see [below for nested schema](#nestedatt--spec--instances--data_volume_claim_spec--resources)) - `selector` (Attributes) selector is a label query over volumes to consider for binding. (see [below for nested schema](#nestedatt--spec--instances--data_volume_claim_spec--selector)) - `storage_class_name` (String) storageClassName is the name of the StorageClass required by the claim.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#class-1 -- `volume_attributes_class_name` (String) volumeAttributesClassName may be used to set the VolumeAttributesClass used by this claim.If specified, the CSI driver will create or update the volume with the attributes definedin the corresponding VolumeAttributesClass. This has a different purpose than storageClassName,it can be changed after the claim is created. An empty string value means that no VolumeAttributesClasswill be applied to the claim but it's not allowed to reset this field to empty string once it is set.If unspecified and the PersistentVolumeClaim is unbound, the default VolumeAttributesClasswill be set by the persistentvolume controller if it exists.If the resource referred to by volumeAttributesClass does not exist, this PersistentVolumeClaim will beset to a Pending state, as reflected by the modifyVolumeStatus field, until such as a resourceexists.More info: https://kubernetes.io/docs/concepts/storage/volume-attributes-classes/(Alpha) Using this field requires the VolumeAttributesClass feature gate to be enabled. +- `volume_attributes_class_name` (String) volumeAttributesClassName may be used to set the VolumeAttributesClass used by this claim.If specified, the CSI driver will create or update the volume with the attributes definedin the corresponding VolumeAttributesClass. This has a different purpose than storageClassName,it can be changed after the claim is created. An empty string value means that no VolumeAttributesClasswill be applied to the claim but it's not allowed to reset this field to empty string once it is set.If unspecified and the PersistentVolumeClaim is unbound, the default VolumeAttributesClasswill be set by the persistentvolume controller if it exists.If the resource referred to by volumeAttributesClass does not exist, this PersistentVolumeClaim will beset to a Pending state, as reflected by the modifyVolumeStatus field, until such as a resourceexists.More info: https://kubernetes.io/docs/concepts/storage/volume-attributes-classes/(Beta) Using this field requires the VolumeAttributesClass feature gate to be enabled (off by default). - `volume_mode` (String) volumeMode defines what type of volume is required by the claim.Value of Filesystem is implied when not included in claim spec. - `volume_name` (String) volumeName is the binding reference to the PersistentVolume backing this claim. @@ -2295,8 +2329,8 @@ Required: Optional: - `label_selector` (Attributes) A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods. (see [below for nested schema](#nestedatt--spec--instances--affinity--pod_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--label_selector)) -- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate. -- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate. +- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). +- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). - `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--instances--affinity--pod_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--namespace_selector)) - `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'. @@ -2356,8 +2390,8 @@ Required: Optional: - `label_selector` (Attributes) A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods. (see [below for nested schema](#nestedatt--spec--instances--affinity--pod_affinity--required_during_scheduling_ignored_during_execution--label_selector)) -- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate. -- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate. +- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). +- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). - `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--instances--affinity--pod_affinity--required_during_scheduling_ignored_during_execution--namespace_selector)) - `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'. @@ -2433,8 +2467,8 @@ Required: Optional: - `label_selector` (Attributes) A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods. (see [below for nested schema](#nestedatt--spec--instances--affinity--pod_anti_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--label_selector)) -- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate. -- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate. +- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). +- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). - `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--instances--affinity--pod_anti_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--namespace_selector)) - `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'. @@ -2494,8 +2528,8 @@ Required: Optional: - `label_selector` (Attributes) A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods. (see [below for nested schema](#nestedatt--spec--instances--affinity--pod_anti_affinity--required_during_scheduling_ignored_during_execution--label_selector)) -- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate. -- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate. +- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). +- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). - `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--instances--affinity--pod_anti_affinity--required_during_scheduling_ignored_during_execution--namespace_selector)) - `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'. @@ -2576,6 +2610,10 @@ Required: - `name` (String) Name must match the name of one entry in pod.spec.resourceClaims ofthe Pod where this field is used. It makes that resource availableinside a container. +Optional: + +- `request` (String) Request is the name chosen for a request in the referenced claim.If empty, everything from the claim is made available, otherwiseonly the result of this request. + @@ -2644,7 +2682,7 @@ Required: Optional: -- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896. +- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names - `optional` (Boolean) Specify whether the ConfigMap or its key must be defined @@ -2682,7 +2720,7 @@ Required: Optional: -- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896. +- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names - `optional` (Boolean) Specify whether the Secret or its key must be defined @@ -2702,7 +2740,7 @@ Optional: Optional: -- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896. +- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names - `optional` (Boolean) Specify whether the ConfigMap must be defined @@ -2711,7 +2749,7 @@ Optional: Optional: -- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896. +- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names - `optional` (Boolean) Specify whether the Secret must be defined @@ -3037,6 +3075,10 @@ Required: - `name` (String) Name must match the name of one entry in pod.spec.resourceClaims ofthe Pod where this field is used. It makes that resource availableinside a container. +Optional: + +- `request` (String) Request is the name chosen for a request in the referenced claim.If empty, everything from the claim is made available, otherwiseonly the result of this request. + @@ -3048,7 +3090,7 @@ Optional: - `app_armor_profile` (Attributes) appArmorProfile is the AppArmor options to use by this container. If set, this profileoverrides the pod's appArmorProfile.Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--instances--init_containers--security_context--app_armor_profile)) - `capabilities` (Attributes) The capabilities to add/drop when running containers.Defaults to the default set of capabilities granted by the container runtime.Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--instances--init_containers--security_context--capabilities)) - `privileged` (Boolean) Run container in privileged mode.Processes in privileged containers are essentially equivalent to root on the host.Defaults to false.Note that this field cannot be set when spec.os.name is windows. -- `proc_mount` (String) procMount denotes the type of proc mount to use for the containers.The default is DefaultProcMount which uses the container runtime defaults forreadonly paths and masked paths.This requires the ProcMountType feature flag to be enabled.Note that this field cannot be set when spec.os.name is windows. +- `proc_mount` (String) procMount denotes the type of proc mount to use for the containers.The default value is Default which uses the container runtime defaults forreadonly paths and masked paths.This requires the ProcMountType feature flag to be enabled.Note that this field cannot be set when spec.os.name is windows. - `read_only_root_filesystem` (Boolean) Whether this container has a read-only root filesystem.Default is false.Note that this field cannot be set when spec.os.name is windows. - `run_as_group` (Number) The GID to run the entrypoint of the container process.Uses runtime default if unset.May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.Note that this field cannot be set when spec.os.name is windows. - `run_as_non_root` (Boolean) Indicates that the container must run as a non-root user.If true, the Kubelet will validate the image at runtime to ensure that itdoes not run as UID 0 (root) and fail to start the container if it does.If unset or false, no such validation will be performed.May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence. @@ -3238,6 +3280,10 @@ Required: - `name` (String) Name must match the name of one entry in pod.spec.resourceClaims ofthe Pod where this field is used. It makes that resource availableinside a container. +Optional: + +- `request` (String) Request is the name chosen for a request in the referenced claim.If empty, everything from the claim is made available, otherwiseonly the result of this request. + @@ -3253,7 +3299,8 @@ Optional: - `run_as_user` (Number) The UID to run the entrypoint of the container process.Defaults to user specified in image metadata if unspecified.May also be set in SecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedencefor that container.Note that this field cannot be set when spec.os.name is windows. - `se_linux_options` (Attributes) The SELinux context to be applied to all containers.If unspecified, the container runtime will allocate a random SELinux context for eachcontainer. May also be set in SecurityContext. If set inboth SecurityContext and PodSecurityContext, the value specified in SecurityContexttakes precedence for that container.Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--instances--security_context--se_linux_options)) - `seccomp_profile` (Attributes) The seccomp options to use by the containers in this pod.Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--instances--security_context--seccomp_profile)) -- `supplemental_groups` (List of String) A list of groups applied to the first process run in each container, in additionto the container's primary GID, the fsGroup (if specified), and group membershipsdefined in the container image for the uid of the container process. If unspecified,no additional groups are added to any container. Note that group membershipsdefined in the container image for the uid of the container process are still effective,even if they are not included in this list.Note that this field cannot be set when spec.os.name is windows. +- `supplemental_groups` (List of String) A list of groups applied to the first process run in each container, inaddition to the container's primary GID and fsGroup (if specified). Ifthe SupplementalGroupsPolicy feature is enabled, thesupplementalGroupsPolicy field determines whether these are in additionto or instead of any group memberships defined in the container image.If unspecified, no additional groups are added, though group membershipsdefined in the container image may still be used, depending on thesupplementalGroupsPolicy field.Note that this field cannot be set when spec.os.name is windows. +- `supplemental_groups_policy` (String) Defines how supplemental groups of the first container processes are calculated.Valid values are 'Merge' and 'Strict'. If not specified, 'Merge' is used.(Alpha) Using the field requires the SupplementalGroupsPolicy feature gate to be enabledand the container runtime must implement support for this feature.Note that this field cannot be set when spec.os.name is windows. - `sysctls` (Attributes List) Sysctls hold a list of namespaced sysctls used for the pod. Pods with unsupportedsysctls (by the container runtime) might fail to launch.Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--instances--security_context--sysctls)) - `windows_options` (Attributes) The Windows specific settings applied to all containers.If unspecified, the options within a container's SecurityContext will be used.If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.Note that this field cannot be set when spec.os.name is linux. (see [below for nested schema](#nestedatt--spec--instances--security_context--windows_options)) @@ -3377,7 +3424,7 @@ Required: Optional: -- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896. +- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names - `optional` (Boolean) Specify whether the ConfigMap or its key must be defined @@ -3415,7 +3462,7 @@ Required: Optional: -- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896. +- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names - `optional` (Boolean) Specify whether the Secret or its key must be defined @@ -3435,7 +3482,7 @@ Optional: Optional: -- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896. +- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names - `optional` (Boolean) Specify whether the ConfigMap must be defined @@ -3444,7 +3491,7 @@ Optional: Optional: -- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896. +- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names - `optional` (Boolean) Specify whether the Secret must be defined @@ -3770,6 +3817,10 @@ Required: - `name` (String) Name must match the name of one entry in pod.spec.resourceClaims ofthe Pod where this field is used. It makes that resource availableinside a container. +Optional: + +- `request` (String) Request is the name chosen for a request in the referenced claim.If empty, everything from the claim is made available, otherwiseonly the result of this request. + @@ -3781,7 +3832,7 @@ Optional: - `app_armor_profile` (Attributes) appArmorProfile is the AppArmor options to use by this container. If set, this profileoverrides the pod's appArmorProfile.Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--instances--sidecars--security_context--app_armor_profile)) - `capabilities` (Attributes) The capabilities to add/drop when running containers.Defaults to the default set of capabilities granted by the container runtime.Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--instances--sidecars--security_context--capabilities)) - `privileged` (Boolean) Run container in privileged mode.Processes in privileged containers are essentially equivalent to root on the host.Defaults to false.Note that this field cannot be set when spec.os.name is windows. -- `proc_mount` (String) procMount denotes the type of proc mount to use for the containers.The default is DefaultProcMount which uses the container runtime defaults forreadonly paths and masked paths.This requires the ProcMountType feature flag to be enabled.Note that this field cannot be set when spec.os.name is windows. +- `proc_mount` (String) procMount denotes the type of proc mount to use for the containers.The default value is Default which uses the container runtime defaults forreadonly paths and masked paths.This requires the ProcMountType feature flag to be enabled.Note that this field cannot be set when spec.os.name is windows. - `read_only_root_filesystem` (Boolean) Whether this container has a read-only root filesystem.Default is false.Note that this field cannot be set when spec.os.name is windows. - `run_as_group` (Number) The GID to run the entrypoint of the container process.Uses runtime default if unset.May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.Note that this field cannot be set when spec.os.name is windows. - `run_as_non_root` (Boolean) Indicates that the container must run as a non-root user.If true, the Kubelet will validate the image at runtime to ensure that itdoes not run as UID 0 (root) and fail to start the container if it does.If unset or false, no such validation will be performed.May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence. @@ -3965,7 +4016,7 @@ Optional: - `resources` (Attributes) resources represents the minimum resources the volume should have.If RecoverVolumeExpansionFailure feature is enabled users are allowed to specify resource requirementsthat are lower than previous value but must still be higher than capacity recorded in thestatus field of the claim.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources (see [below for nested schema](#nestedatt--spec--instances--tablespace_volumes--data_volume_claim_spec--resources)) - `selector` (Attributes) selector is a label query over volumes to consider for binding. (see [below for nested schema](#nestedatt--spec--instances--tablespace_volumes--data_volume_claim_spec--selector)) - `storage_class_name` (String) storageClassName is the name of the StorageClass required by the claim.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#class-1 -- `volume_attributes_class_name` (String) volumeAttributesClassName may be used to set the VolumeAttributesClass used by this claim.If specified, the CSI driver will create or update the volume with the attributes definedin the corresponding VolumeAttributesClass. This has a different purpose than storageClassName,it can be changed after the claim is created. An empty string value means that no VolumeAttributesClasswill be applied to the claim but it's not allowed to reset this field to empty string once it is set.If unspecified and the PersistentVolumeClaim is unbound, the default VolumeAttributesClasswill be set by the persistentvolume controller if it exists.If the resource referred to by volumeAttributesClass does not exist, this PersistentVolumeClaim will beset to a Pending state, as reflected by the modifyVolumeStatus field, until such as a resourceexists.More info: https://kubernetes.io/docs/concepts/storage/volume-attributes-classes/(Alpha) Using this field requires the VolumeAttributesClass feature gate to be enabled. +- `volume_attributes_class_name` (String) volumeAttributesClassName may be used to set the VolumeAttributesClass used by this claim.If specified, the CSI driver will create or update the volume with the attributes definedin the corresponding VolumeAttributesClass. This has a different purpose than storageClassName,it can be changed after the claim is created. An empty string value means that no VolumeAttributesClasswill be applied to the claim but it's not allowed to reset this field to empty string once it is set.If unspecified and the PersistentVolumeClaim is unbound, the default VolumeAttributesClasswill be set by the persistentvolume controller if it exists.If the resource referred to by volumeAttributesClass does not exist, this PersistentVolumeClaim will beset to a Pending state, as reflected by the modifyVolumeStatus field, until such as a resourceexists.More info: https://kubernetes.io/docs/concepts/storage/volume-attributes-classes/(Beta) Using this field requires the VolumeAttributesClass feature gate to be enabled (off by default). - `volume_mode` (String) volumeMode defines what type of volume is required by the claim.Value of Filesystem is implied when not included in claim spec. - `volume_name` (String) volumeName is the binding reference to the PersistentVolume backing this claim. @@ -4109,7 +4160,7 @@ Optional: - `resources` (Attributes) resources represents the minimum resources the volume should have.If RecoverVolumeExpansionFailure feature is enabled users are allowed to specify resource requirementsthat are lower than previous value but must still be higher than capacity recorded in thestatus field of the claim.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources (see [below for nested schema](#nestedatt--spec--instances--wal_volume_claim_spec--resources)) - `selector` (Attributes) selector is a label query over volumes to consider for binding. (see [below for nested schema](#nestedatt--spec--instances--wal_volume_claim_spec--selector)) - `storage_class_name` (String) storageClassName is the name of the StorageClass required by the claim.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#class-1 -- `volume_attributes_class_name` (String) volumeAttributesClassName may be used to set the VolumeAttributesClass used by this claim.If specified, the CSI driver will create or update the volume with the attributes definedin the corresponding VolumeAttributesClass. This has a different purpose than storageClassName,it can be changed after the claim is created. An empty string value means that no VolumeAttributesClasswill be applied to the claim but it's not allowed to reset this field to empty string once it is set.If unspecified and the PersistentVolumeClaim is unbound, the default VolumeAttributesClasswill be set by the persistentvolume controller if it exists.If the resource referred to by volumeAttributesClass does not exist, this PersistentVolumeClaim will beset to a Pending state, as reflected by the modifyVolumeStatus field, until such as a resourceexists.More info: https://kubernetes.io/docs/concepts/storage/volume-attributes-classes/(Alpha) Using this field requires the VolumeAttributesClass feature gate to be enabled. +- `volume_attributes_class_name` (String) volumeAttributesClassName may be used to set the VolumeAttributesClass used by this claim.If specified, the CSI driver will create or update the volume with the attributes definedin the corresponding VolumeAttributesClass. This has a different purpose than storageClassName,it can be changed after the claim is created. An empty string value means that no VolumeAttributesClasswill be applied to the claim but it's not allowed to reset this field to empty string once it is set.If unspecified and the PersistentVolumeClaim is unbound, the default VolumeAttributesClasswill be set by the persistentvolume controller if it exists.If the resource referred to by volumeAttributesClass does not exist, this PersistentVolumeClaim will beset to a Pending state, as reflected by the modifyVolumeStatus field, until such as a resourceexists.More info: https://kubernetes.io/docs/concepts/storage/volume-attributes-classes/(Beta) Using this field requires the VolumeAttributesClass feature gate to be enabled (off by default). - `volume_mode` (String) volumeMode defines what type of volume is required by the claim.Value of Filesystem is implied when not included in claim spec. - `volume_name` (String) volumeName is the binding reference to the PersistentVolume backing this claim. @@ -4269,7 +4320,7 @@ Optional: - `resources` (Attributes) resources represents the minimum resources the volume should have.If RecoverVolumeExpansionFailure feature is enabled users are allowed to specify resource requirementsthat are lower than previous value but must still be higher than capacity recorded in thestatus field of the claim.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources (see [below for nested schema](#nestedatt--spec--data_source--pgbackrest--repo--volume--volume_claim_spec--resources)) - `selector` (Attributes) selector is a label query over volumes to consider for binding. (see [below for nested schema](#nestedatt--spec--data_source--pgbackrest--repo--volume--volume_claim_spec--selector)) - `storage_class_name` (String) storageClassName is the name of the StorageClass required by the claim.More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#class-1 -- `volume_attributes_class_name` (String) volumeAttributesClassName may be used to set the VolumeAttributesClass used by this claim.If specified, the CSI driver will create or update the volume with the attributes definedin the corresponding VolumeAttributesClass. This has a different purpose than storageClassName,it can be changed after the claim is created. An empty string value means that no VolumeAttributesClasswill be applied to the claim but it's not allowed to reset this field to empty string once it is set.If unspecified and the PersistentVolumeClaim is unbound, the default VolumeAttributesClasswill be set by the persistentvolume controller if it exists.If the resource referred to by volumeAttributesClass does not exist, this PersistentVolumeClaim will beset to a Pending state, as reflected by the modifyVolumeStatus field, until such as a resourceexists.More info: https://kubernetes.io/docs/concepts/storage/volume-attributes-classes/(Alpha) Using this field requires the VolumeAttributesClass feature gate to be enabled. +- `volume_attributes_class_name` (String) volumeAttributesClassName may be used to set the VolumeAttributesClass used by this claim.If specified, the CSI driver will create or update the volume with the attributes definedin the corresponding VolumeAttributesClass. This has a different purpose than storageClassName,it can be changed after the claim is created. An empty string value means that no VolumeAttributesClasswill be applied to the claim but it's not allowed to reset this field to empty string once it is set.If unspecified and the PersistentVolumeClaim is unbound, the default VolumeAttributesClasswill be set by the persistentvolume controller if it exists.If the resource referred to by volumeAttributesClass does not exist, this PersistentVolumeClaim will beset to a Pending state, as reflected by the modifyVolumeStatus field, until such as a resourceexists.More info: https://kubernetes.io/docs/concepts/storage/volume-attributes-classes/(Beta) Using this field requires the VolumeAttributesClass feature gate to be enabled (off by default). - `volume_mode` (String) volumeMode defines what type of volume is required by the claim.Value of Filesystem is implied when not included in claim spec. - `volume_name` (String) volumeName is the binding reference to the PersistentVolume backing this claim. @@ -4465,8 +4516,8 @@ Required: Optional: - `label_selector` (Attributes) A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods. (see [below for nested schema](#nestedatt--spec--data_source--pgbackrest--affinity--pod_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--label_selector)) -- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate. -- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate. +- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). +- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). - `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--data_source--pgbackrest--affinity--pod_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--namespace_selector)) - `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'. @@ -4526,8 +4577,8 @@ Required: Optional: - `label_selector` (Attributes) A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods. (see [below for nested schema](#nestedatt--spec--data_source--pgbackrest--affinity--pod_affinity--required_during_scheduling_ignored_during_execution--label_selector)) -- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate. -- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate. +- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). +- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). - `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--data_source--pgbackrest--affinity--pod_affinity--required_during_scheduling_ignored_during_execution--namespace_selector)) - `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'. @@ -4603,8 +4654,8 @@ Required: Optional: - `label_selector` (Attributes) A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods. (see [below for nested schema](#nestedatt--spec--data_source--pgbackrest--affinity--pod_anti_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--label_selector)) -- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate. -- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate. +- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). +- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). - `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--data_source--pgbackrest--affinity--pod_anti_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--namespace_selector)) - `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'. @@ -4664,8 +4715,8 @@ Required: Optional: - `label_selector` (Attributes) A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods. (see [below for nested schema](#nestedatt--spec--data_source--pgbackrest--affinity--pod_anti_affinity--required_during_scheduling_ignored_during_execution--label_selector)) -- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate. -- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate. +- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). +- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). - `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--data_source--pgbackrest--affinity--pod_anti_affinity--required_during_scheduling_ignored_during_execution--namespace_selector)) - `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'. @@ -4770,7 +4821,7 @@ Optional: Optional: - `items` (Attributes List) items if unspecified, each key-value pair in the Data field of the referencedConfigMap will be projected into the volume as a file whose name is thekey and content is the value. If specified, the listed keys will beprojected into the specified paths, and unlisted keys will not bepresent. If a key is specified which is not present in the ConfigMap,the volume setup will error unless it is marked optional. Paths must berelative and may not contain the '..' path or start with '..'. (see [below for nested schema](#nestedatt--spec--data_source--pgbackrest--configuration--config_map--items)) -- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896. +- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names - `optional` (Boolean) optional specify whether the ConfigMap or its keys must be defined @@ -4840,7 +4891,7 @@ Optional: Optional: - `items` (Attributes List) items if unspecified, each key-value pair in the Data field of the referencedSecret will be projected into the volume as a file whose name is thekey and content is the value. If specified, the listed keys will beprojected into the specified paths, and unlisted keys will not bepresent. If a key is specified which is not present in the Secret,the volume setup will error unless it is marked optional. Paths must berelative and may not contain the '..' path or start with '..'. (see [below for nested schema](#nestedatt--spec--data_source--pgbackrest--configuration--secret--items)) -- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896. +- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names - `optional` (Boolean) optional field specify whether the Secret or its key must be defined @@ -4887,6 +4938,10 @@ Required: - `name` (String) Name must match the name of one entry in pod.spec.resourceClaims ofthe Pod where this field is used. It makes that resource availableinside a container. +Optional: + +- `request` (String) Request is the name chosen for a request in the referenced claim.If empty, everything from the claim is made available, otherwiseonly the result of this request. + @@ -5050,8 +5105,8 @@ Required: Optional: - `label_selector` (Attributes) A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods. (see [below for nested schema](#nestedatt--spec--data_source--postgres_cluster--affinity--pod_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--label_selector)) -- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate. -- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate. +- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). +- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). - `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--data_source--postgres_cluster--affinity--pod_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--namespace_selector)) - `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'. @@ -5111,8 +5166,8 @@ Required: Optional: - `label_selector` (Attributes) A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods. (see [below for nested schema](#nestedatt--spec--data_source--postgres_cluster--affinity--pod_affinity--required_during_scheduling_ignored_during_execution--label_selector)) -- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate. -- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate. +- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). +- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). - `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--data_source--postgres_cluster--affinity--pod_affinity--required_during_scheduling_ignored_during_execution--namespace_selector)) - `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'. @@ -5188,8 +5243,8 @@ Required: Optional: - `label_selector` (Attributes) A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods. (see [below for nested schema](#nestedatt--spec--data_source--postgres_cluster--affinity--pod_anti_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--label_selector)) -- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate. -- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate. +- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). +- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). - `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--data_source--postgres_cluster--affinity--pod_anti_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--namespace_selector)) - `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'. @@ -5249,8 +5304,8 @@ Required: Optional: - `label_selector` (Attributes) A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods. (see [below for nested schema](#nestedatt--spec--data_source--postgres_cluster--affinity--pod_anti_affinity--required_during_scheduling_ignored_during_execution--label_selector)) -- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate. -- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate. +- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). +- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). - `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--data_source--postgres_cluster--affinity--pod_anti_affinity--required_during_scheduling_ignored_during_execution--namespace_selector)) - `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'. @@ -5317,6 +5372,10 @@ Required: - `name` (String) Name must match the name of one entry in pod.spec.resourceClaims ofthe Pod where this field is used. It makes that resource availableinside a container. +Optional: + +- `request` (String) Request is the name chosen for a request in the referenced claim.If empty, everything from the claim is made available, otherwiseonly the result of this request. + @@ -5507,7 +5566,7 @@ Optional: Optional: - `items` (Attributes List) items if unspecified, each key-value pair in the Data field of the referencedSecret will be projected into the volume as a file whose name is thekey and content is the value. If specified, the listed keys will beprojected into the specified paths, and unlisted keys will not bepresent. If a key is specified which is not present in the Secret,the volume setup will error unless it is marked optional. Paths must berelative and may not contain the '..' path or start with '..'. (see [below for nested schema](#nestedatt--spec--extensions--storage--secret--items)) -- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896. +- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names - `optional` (Boolean) optional field specify whether the Secret or its key must be defined @@ -5531,7 +5590,7 @@ Optional: Optional: -- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896. +- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names @@ -5575,6 +5634,8 @@ Required: - `enabled` (Boolean) - `image` (String) +- `secret` (String) +- `server_host` (String) Optional: @@ -5582,8 +5643,6 @@ Optional: - `image_pull_policy` (String) ImagePullPolicy is used to determine when Kubernetes will attempt topull (download) container images.More info: https://kubernetes.io/docs/concepts/containers/images/#image-pull-policy - `resources` (Attributes) Compute resources of a PMM container. (see [below for nested schema](#nestedatt--spec--pmm--resources)) - `runtime_class_name` (String) -- `secret` (String) -- `server_host` (String) ### Nested Schema for `spec.pmm.container_security_context` @@ -5594,7 +5653,7 @@ Optional: - `app_armor_profile` (Attributes) appArmorProfile is the AppArmor options to use by this container. If set, this profileoverrides the pod's appArmorProfile.Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--pmm--container_security_context--app_armor_profile)) - `capabilities` (Attributes) The capabilities to add/drop when running containers.Defaults to the default set of capabilities granted by the container runtime.Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--pmm--container_security_context--capabilities)) - `privileged` (Boolean) Run container in privileged mode.Processes in privileged containers are essentially equivalent to root on the host.Defaults to false.Note that this field cannot be set when spec.os.name is windows. -- `proc_mount` (String) procMount denotes the type of proc mount to use for the containers.The default is DefaultProcMount which uses the container runtime defaults forreadonly paths and masked paths.This requires the ProcMountType feature flag to be enabled.Note that this field cannot be set when spec.os.name is windows. +- `proc_mount` (String) procMount denotes the type of proc mount to use for the containers.The default value is Default which uses the container runtime defaults forreadonly paths and masked paths.This requires the ProcMountType feature flag to be enabled.Note that this field cannot be set when spec.os.name is windows. - `read_only_root_filesystem` (Boolean) Whether this container has a read-only root filesystem.Default is false.Note that this field cannot be set when spec.os.name is windows. - `run_as_group` (Number) The GID to run the entrypoint of the container process.Uses runtime default if unset.May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.Note that this field cannot be set when spec.os.name is windows. - `run_as_non_root` (Boolean) Indicates that the container must run as a non-root user.If true, the Kubelet will validate the image at runtime to ensure that itdoes not run as UID 0 (root) and fail to start the container if it does.If unset or false, no such validation will be performed.May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence. @@ -5675,6 +5734,10 @@ Required: - `name` (String) Name must match the name of one entry in pod.spec.resourceClaims ofthe Pod where this field is used. It makes that resource availableinside a container. +Optional: + +- `request` (String) Request is the name chosen for a request in the referenced claim.If empty, everything from the claim is made available, otherwiseonly the result of this request. + @@ -5839,8 +5902,8 @@ Required: Optional: - `label_selector` (Attributes) A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods. (see [below for nested schema](#nestedatt--spec--proxy--pg_bouncer--affinity--pod_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--label_selector)) -- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate. -- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate. +- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). +- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). - `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--proxy--pg_bouncer--affinity--pod_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--namespace_selector)) - `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'. @@ -5900,8 +5963,8 @@ Required: Optional: - `label_selector` (Attributes) A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods. (see [below for nested schema](#nestedatt--spec--proxy--pg_bouncer--affinity--pod_affinity--required_during_scheduling_ignored_during_execution--label_selector)) -- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate. -- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate. +- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). +- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). - `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--proxy--pg_bouncer--affinity--pod_affinity--required_during_scheduling_ignored_during_execution--namespace_selector)) - `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'. @@ -5977,8 +6040,8 @@ Required: Optional: - `label_selector` (Attributes) A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods. (see [below for nested schema](#nestedatt--spec--proxy--pg_bouncer--affinity--pod_anti_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--label_selector)) -- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate. -- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate. +- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). +- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). - `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--proxy--pg_bouncer--affinity--pod_anti_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--namespace_selector)) - `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'. @@ -6038,8 +6101,8 @@ Required: Optional: - `label_selector` (Attributes) A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods. (see [below for nested schema](#nestedatt--spec--proxy--pg_bouncer--affinity--pod_anti_affinity--required_during_scheduling_ignored_during_execution--label_selector)) -- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate. -- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate. +- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). +- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). - `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--proxy--pg_bouncer--affinity--pod_anti_affinity--required_during_scheduling_ignored_during_execution--namespace_selector)) - `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'. @@ -6154,7 +6217,7 @@ Optional: Optional: - `items` (Attributes List) items if unspecified, each key-value pair in the Data field of the referencedConfigMap will be projected into the volume as a file whose name is thekey and content is the value. If specified, the listed keys will beprojected into the specified paths, and unlisted keys will not bepresent. If a key is specified which is not present in the ConfigMap,the volume setup will error unless it is marked optional. Paths must berelative and may not contain the '..' path or start with '..'. (see [below for nested schema](#nestedatt--spec--proxy--pg_bouncer--config--files--config_map--items)) -- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896. +- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names - `optional` (Boolean) optional specify whether the ConfigMap or its keys must be defined @@ -6224,7 +6287,7 @@ Optional: Optional: - `items` (Attributes List) items if unspecified, each key-value pair in the Data field of the referencedSecret will be projected into the volume as a file whose name is thekey and content is the value. If specified, the listed keys will beprojected into the specified paths, and unlisted keys will not bepresent. If a key is specified which is not present in the Secret,the volume setup will error unless it is marked optional. Paths must berelative and may not contain the '..' path or start with '..'. (see [below for nested schema](#nestedatt--spec--proxy--pg_bouncer--config--files--secret--items)) -- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896. +- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names - `optional` (Boolean) optional field specify whether the Secret or its key must be defined @@ -6286,6 +6349,10 @@ Required: - `name` (String) Name must match the name of one entry in pod.spec.resourceClaims ofthe Pod where this field is used. It makes that resource availableinside a container. +Optional: + +- `request` (String) Request is the name chosen for a request in the referenced claim.If empty, everything from the claim is made available, otherwiseonly the result of this request. + @@ -6296,7 +6363,7 @@ Required: Optional: - `items` (Attributes List) items if unspecified, each key-value pair in the Data field of the referencedSecret will be projected into the volume as a file whose name is thekey and content is the value. If specified, the listed keys will beprojected into the specified paths, and unlisted keys will not bepresent. If a key is specified which is not present in the Secret,the volume setup will error unless it is marked optional. Paths must berelative and may not contain the '..' path or start with '..'. (see [below for nested schema](#nestedatt--spec--proxy--pg_bouncer--custom_tls_secret--items)) -- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896. +- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names - `optional` (Boolean) optional field specify whether the Secret or its key must be defined @@ -6350,6 +6417,10 @@ Required: - `name` (String) Name must match the name of one entry in pod.spec.resourceClaims ofthe Pod where this field is used. It makes that resource availableinside a container. +Optional: + +- `request` (String) Request is the name chosen for a request in the referenced claim.If empty, everything from the claim is made available, otherwiseonly the result of this request. + @@ -6365,7 +6436,8 @@ Optional: - `run_as_user` (Number) The UID to run the entrypoint of the container process.Defaults to user specified in image metadata if unspecified.May also be set in SecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedencefor that container.Note that this field cannot be set when spec.os.name is windows. - `se_linux_options` (Attributes) The SELinux context to be applied to all containers.If unspecified, the container runtime will allocate a random SELinux context for eachcontainer. May also be set in SecurityContext. If set inboth SecurityContext and PodSecurityContext, the value specified in SecurityContexttakes precedence for that container.Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--proxy--pg_bouncer--security_context--se_linux_options)) - `seccomp_profile` (Attributes) The seccomp options to use by the containers in this pod.Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--proxy--pg_bouncer--security_context--seccomp_profile)) -- `supplemental_groups` (List of String) A list of groups applied to the first process run in each container, in additionto the container's primary GID, the fsGroup (if specified), and group membershipsdefined in the container image for the uid of the container process. If unspecified,no additional groups are added to any container. Note that group membershipsdefined in the container image for the uid of the container process are still effective,even if they are not included in this list.Note that this field cannot be set when spec.os.name is windows. +- `supplemental_groups` (List of String) A list of groups applied to the first process run in each container, inaddition to the container's primary GID and fsGroup (if specified). Ifthe SupplementalGroupsPolicy feature is enabled, thesupplementalGroupsPolicy field determines whether these are in additionto or instead of any group memberships defined in the container image.If unspecified, no additional groups are added, though group membershipsdefined in the container image may still be used, depending on thesupplementalGroupsPolicy field.Note that this field cannot be set when spec.os.name is windows. +- `supplemental_groups_policy` (String) Defines how supplemental groups of the first container processes are calculated.Valid values are 'Merge' and 'Strict'. If not specified, 'Merge' is used.(Alpha) Using the field requires the SupplementalGroupsPolicy feature gate to be enabledand the container runtime must implement support for this feature.Note that this field cannot be set when spec.os.name is windows. - `sysctls` (Attributes List) Sysctls hold a list of namespaced sysctls used for the pod. Pods with unsupportedsysctls (by the container runtime) might fail to launch.Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--proxy--pg_bouncer--security_context--sysctls)) - `windows_options` (Attributes) The Windows specific settings applied to all containers.If unspecified, the options within a container's SecurityContext will be used.If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.Note that this field cannot be set when spec.os.name is linux. (see [below for nested schema](#nestedatt--spec--proxy--pg_bouncer--security_context--windows_options)) @@ -6489,7 +6561,7 @@ Required: Optional: -- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896. +- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names - `optional` (Boolean) Specify whether the ConfigMap or its key must be defined @@ -6527,7 +6599,7 @@ Required: Optional: -- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896. +- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names - `optional` (Boolean) Specify whether the Secret or its key must be defined @@ -6547,7 +6619,7 @@ Optional: Optional: -- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896. +- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names - `optional` (Boolean) Specify whether the ConfigMap must be defined @@ -6556,7 +6628,7 @@ Optional: Optional: -- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896. +- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names - `optional` (Boolean) Specify whether the Secret must be defined @@ -6882,6 +6954,10 @@ Required: - `name` (String) Name must match the name of one entry in pod.spec.resourceClaims ofthe Pod where this field is used. It makes that resource availableinside a container. +Optional: + +- `request` (String) Request is the name chosen for a request in the referenced claim.If empty, everything from the claim is made available, otherwiseonly the result of this request. + @@ -6893,7 +6969,7 @@ Optional: - `app_armor_profile` (Attributes) appArmorProfile is the AppArmor options to use by this container. If set, this profileoverrides the pod's appArmorProfile.Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--proxy--pg_bouncer--sidecars--security_context--app_armor_profile)) - `capabilities` (Attributes) The capabilities to add/drop when running containers.Defaults to the default set of capabilities granted by the container runtime.Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--proxy--pg_bouncer--sidecars--security_context--capabilities)) - `privileged` (Boolean) Run container in privileged mode.Processes in privileged containers are essentially equivalent to root on the host.Defaults to false.Note that this field cannot be set when spec.os.name is windows. -- `proc_mount` (String) procMount denotes the type of proc mount to use for the containers.The default is DefaultProcMount which uses the container runtime defaults forreadonly paths and masked paths.This requires the ProcMountType feature flag to be enabled.Note that this field cannot be set when spec.os.name is windows. +- `proc_mount` (String) procMount denotes the type of proc mount to use for the containers.The default value is Default which uses the container runtime defaults forreadonly paths and masked paths.This requires the ProcMountType feature flag to be enabled.Note that this field cannot be set when spec.os.name is windows. - `read_only_root_filesystem` (Boolean) Whether this container has a read-only root filesystem.Default is false.Note that this field cannot be set when spec.os.name is windows. - `run_as_group` (Number) The GID to run the entrypoint of the container process.Uses runtime default if unset.May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.Note that this field cannot be set when spec.os.name is windows. - `run_as_non_root` (Boolean) Indicates that the container must run as a non-root user.If true, the Kubelet will validate the image at runtime to ensure that itdoes not run as UID 0 (root) and fail to start the container if it does.If unset or false, no such validation will be performed.May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence. @@ -7126,7 +7202,7 @@ Optional: Optional: - `items` (Attributes List) items if unspecified, each key-value pair in the Data field of the referencedSecret will be projected into the volume as a file whose name is thekey and content is the value. If specified, the listed keys will beprojected into the specified paths, and unlisted keys will not bepresent. If a key is specified which is not present in the Secret,the volume setup will error unless it is marked optional. Paths must berelative and may not contain the '..' path or start with '..'. (see [below for nested schema](#nestedatt--spec--secrets--custom_replication_tls_secret--items)) -- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896. +- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names - `optional` (Boolean) optional field specify whether the Secret or its key must be defined @@ -7149,7 +7225,7 @@ Optional: Optional: - `items` (Attributes List) items if unspecified, each key-value pair in the Data field of the referencedSecret will be projected into the volume as a file whose name is thekey and content is the value. If specified, the listed keys will beprojected into the specified paths, and unlisted keys will not bepresent. If a key is specified which is not present in the Secret,the volume setup will error unless it is marked optional. Paths must berelative and may not contain the '..' path or start with '..'. (see [below for nested schema](#nestedatt--spec--secrets--custom_tls_secret--items)) -- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896. +- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names - `optional` (Boolean) optional field specify whether the Secret or its key must be defined diff --git a/docs/data-sources/pgv2_percona_com_percona_pg_upgrade_v2_manifest.md b/docs/data-sources/pgv2_percona_com_percona_pg_upgrade_v2_manifest.md index ca47c50a7..432428078 100644 --- a/docs/data-sources/pgv2_percona_com_percona_pg_upgrade_v2_manifest.md +++ b/docs/data-sources/pgv2_percona_com_percona_pg_upgrade_v2_manifest.md @@ -209,8 +209,8 @@ Required: Optional: - `label_selector` (Attributes) A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods. (see [below for nested schema](#nestedatt--spec--affinity--pod_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--label_selector)) -- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate. -- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate. +- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). +- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). - `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--affinity--pod_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--namespace_selector)) - `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'. @@ -270,8 +270,8 @@ Required: Optional: - `label_selector` (Attributes) A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods. (see [below for nested schema](#nestedatt--spec--affinity--pod_affinity--required_during_scheduling_ignored_during_execution--label_selector)) -- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate. -- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate. +- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). +- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). - `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--affinity--pod_affinity--required_during_scheduling_ignored_during_execution--namespace_selector)) - `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'. @@ -347,8 +347,8 @@ Required: Optional: - `label_selector` (Attributes) A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods. (see [below for nested schema](#nestedatt--spec--affinity--pod_anti_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--label_selector)) -- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate. -- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate. +- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). +- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). - `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--affinity--pod_anti_affinity--preferred_during_scheduling_ignored_during_execution--pod_affinity_term--namespace_selector)) - `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'. @@ -408,8 +408,8 @@ Required: Optional: - `label_selector` (Attributes) A label query over a set of resources, in this case pods.If it's null, this PodAffinityTerm matches with no Pods. (see [below for nested schema](#nestedatt--spec--affinity--pod_anti_affinity--required_during_scheduling_ignored_during_execution--label_selector)) -- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate. -- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate. +- `match_label_keys` (List of String) MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). +- `mismatch_label_keys` (List of String) MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). - `namespace_selector` (Attributes) A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces. (see [below for nested schema](#nestedatt--spec--affinity--pod_anti_affinity--required_during_scheduling_ignored_during_execution--namespace_selector)) - `namespaces` (List of String) namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'. @@ -465,7 +465,7 @@ Optional: Optional: -- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896. +- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names @@ -532,7 +532,7 @@ Required: Optional: -- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896. +- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names - `optional` (Boolean) Specify whether the ConfigMap or its key must be defined @@ -570,7 +570,7 @@ Required: Optional: -- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896. +- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names - `optional` (Boolean) Specify whether the Secret or its key must be defined @@ -590,7 +590,7 @@ Optional: Optional: -- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896. +- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names - `optional` (Boolean) Specify whether the ConfigMap must be defined @@ -599,7 +599,7 @@ Optional: Optional: -- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896. +- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names - `optional` (Boolean) Specify whether the Secret must be defined @@ -925,6 +925,10 @@ Required: - `name` (String) Name must match the name of one entry in pod.spec.resourceClaims ofthe Pod where this field is used. It makes that resource availableinside a container. +Optional: + +- `request` (String) Request is the name chosen for a request in the referenced claim.If empty, everything from the claim is made available, otherwiseonly the result of this request. + @@ -936,7 +940,7 @@ Optional: - `app_armor_profile` (Attributes) appArmorProfile is the AppArmor options to use by this container. If set, this profileoverrides the pod's appArmorProfile.Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--init_containers--security_context--app_armor_profile)) - `capabilities` (Attributes) The capabilities to add/drop when running containers.Defaults to the default set of capabilities granted by the container runtime.Note that this field cannot be set when spec.os.name is windows. (see [below for nested schema](#nestedatt--spec--init_containers--security_context--capabilities)) - `privileged` (Boolean) Run container in privileged mode.Processes in privileged containers are essentially equivalent to root on the host.Defaults to false.Note that this field cannot be set when spec.os.name is windows. -- `proc_mount` (String) procMount denotes the type of proc mount to use for the containers.The default is DefaultProcMount which uses the container runtime defaults forreadonly paths and masked paths.This requires the ProcMountType feature flag to be enabled.Note that this field cannot be set when spec.os.name is windows. +- `proc_mount` (String) procMount denotes the type of proc mount to use for the containers.The default value is Default which uses the container runtime defaults forreadonly paths and masked paths.This requires the ProcMountType feature flag to be enabled.Note that this field cannot be set when spec.os.name is windows. - `read_only_root_filesystem` (Boolean) Whether this container has a read-only root filesystem.Default is false.Note that this field cannot be set when spec.os.name is windows. - `run_as_group` (Number) The GID to run the entrypoint of the container process.Uses runtime default if unset.May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence.Note that this field cannot be set when spec.os.name is windows. - `run_as_non_root` (Boolean) Indicates that the container must run as a non-root user.If true, the Kubelet will validate the image at runtime to ensure that itdoes not run as UID 0 (root) and fail to start the container if it does.If unset or false, no such validation will be performed.May also be set in PodSecurityContext. If set in both SecurityContext andPodSecurityContext, the value specified in SecurityContext takes precedence. @@ -1126,6 +1130,10 @@ Required: - `name` (String) Name must match the name of one entry in pod.spec.resourceClaims ofthe Pod where this field is used. It makes that resource availableinside a container. +Optional: + +- `request` (String) Request is the name chosen for a request in the referenced claim.If empty, everything from the claim is made available, otherwiseonly the result of this request. + diff --git a/docs/data-sources/pkg_crossplane_io_configuration_revision_v1_manifest.md b/docs/data-sources/pkg_crossplane_io_configuration_revision_v1_manifest.md index 920c498f2..f47f8ca8a 100644 --- a/docs/data-sources/pkg_crossplane_io_configuration_revision_v1_manifest.md +++ b/docs/data-sources/pkg_crossplane_io_configuration_revision_v1_manifest.md @@ -71,4 +71,4 @@ Optional: Optional: -- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid? +- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896. diff --git a/docs/data-sources/pkg_crossplane_io_configuration_v1_manifest.md b/docs/data-sources/pkg_crossplane_io_configuration_v1_manifest.md index 07e948347..41065b6b6 100644 --- a/docs/data-sources/pkg_crossplane_io_configuration_v1_manifest.md +++ b/docs/data-sources/pkg_crossplane_io_configuration_v1_manifest.md @@ -71,4 +71,4 @@ Optional: Optional: -- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid? +- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896. diff --git a/docs/data-sources/pkg_crossplane_io_controller_config_v1alpha1_manifest.md b/docs/data-sources/pkg_crossplane_io_controller_config_v1alpha1_manifest.md index 71b639451..146ed116a 100644 --- a/docs/data-sources/pkg_crossplane_io_controller_config_v1alpha1_manifest.md +++ b/docs/data-sources/pkg_crossplane_io_controller_config_v1alpha1_manifest.md @@ -489,7 +489,7 @@ Required: Optional: -- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid? +- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896. - `optional` (Boolean) Specify whether the ConfigMap or its key must be defined @@ -527,7 +527,7 @@ Required: Optional: -- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid? +- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896. - `optional` (Boolean) Specify whether the Secret or its key must be defined @@ -547,7 +547,7 @@ Optional: Optional: -- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid? +- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896. - `optional` (Boolean) Specify whether the ConfigMap must be defined @@ -556,7 +556,7 @@ Optional: Optional: -- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid? +- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896. - `optional` (Boolean) Specify whether the Secret must be defined @@ -566,7 +566,7 @@ Optional: Optional: -- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid? +- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896. @@ -889,7 +889,7 @@ Optional: Optional: -- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid? +- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896. @@ -911,7 +911,7 @@ Optional: Optional: -- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid? +- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896. @@ -922,7 +922,7 @@ Optional: - `default_mode` (Number) defaultMode is optional: mode bits used to set permissions on created files by default.Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511.YAML accepts both octal and decimal values, JSON requires decimal values for mode bits.Defaults to 0644.Directories within the path are not affected by this setting.This might be in conflict with other options that affect the filemode, like fsGroup, and the result can be other mode bits set. - `items` (Attributes List) items if unspecified, each key-value pair in the Data field of the referencedConfigMap will be projected into the volume as a file whose name is thekey and content is the value. If specified, the listed keys will beprojected into the specified paths, and unlisted keys will not bepresent. If a key is specified which is not present in the ConfigMap,the volume setup will error unless it is marked optional. Paths must berelative and may not contain the '..' path or start with '..'. (see [below for nested schema](#nestedatt--spec--volumes--config_map--items)) -- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid? +- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896. - `optional` (Boolean) optional specify whether the ConfigMap or its keys must be defined @@ -958,7 +958,7 @@ Optional: Optional: -- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid? +- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896. @@ -1156,7 +1156,7 @@ Optional: Optional: -- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid? +- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896. @@ -1246,7 +1246,7 @@ Optional: Optional: -- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid? +- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896. @@ -1362,7 +1362,7 @@ Optional: Optional: - `items` (Attributes List) items if unspecified, each key-value pair in the Data field of the referencedConfigMap will be projected into the volume as a file whose name is thekey and content is the value. If specified, the listed keys will beprojected into the specified paths, and unlisted keys will not bepresent. If a key is specified which is not present in the ConfigMap,the volume setup will error unless it is marked optional. Paths must berelative and may not contain the '..' path or start with '..'. (see [below for nested schema](#nestedatt--spec--volumes--projected--sources--config_map--items)) -- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid? +- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896. - `optional` (Boolean) optional specify whether the ConfigMap or its keys must be defined @@ -1432,7 +1432,7 @@ Optional: Optional: - `items` (Attributes List) items if unspecified, each key-value pair in the Data field of the referencedSecret will be projected into the volume as a file whose name is thekey and content is the value. If specified, the listed keys will beprojected into the specified paths, and unlisted keys will not bepresent. If a key is specified which is not present in the Secret,the volume setup will error unless it is marked optional. Paths must berelative and may not contain the '..' path or start with '..'. (see [below for nested schema](#nestedatt--spec--volumes--projected--sources--secret--items)) -- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid? +- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896. - `optional` (Boolean) optional field specify whether the Secret or its key must be defined @@ -1502,7 +1502,7 @@ Optional: Optional: -- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid? +- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896. @@ -1530,7 +1530,7 @@ Optional: Optional: -- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid? +- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896. @@ -1574,7 +1574,7 @@ Optional: Optional: -- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid? +- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896. diff --git a/docs/data-sources/pkg_crossplane_io_provider_revision_v1_manifest.md b/docs/data-sources/pkg_crossplane_io_provider_revision_v1_manifest.md index b996fe405..7043277c0 100644 --- a/docs/data-sources/pkg_crossplane_io_provider_revision_v1_manifest.md +++ b/docs/data-sources/pkg_crossplane_io_provider_revision_v1_manifest.md @@ -83,7 +83,7 @@ Required: Optional: -- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid? +- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896. diff --git a/docs/data-sources/pkg_crossplane_io_provider_v1_manifest.md b/docs/data-sources/pkg_crossplane_io_provider_v1_manifest.md index 32cc57dc2..6cddfc3a3 100644 --- a/docs/data-sources/pkg_crossplane_io_provider_v1_manifest.md +++ b/docs/data-sources/pkg_crossplane_io_provider_v1_manifest.md @@ -81,7 +81,7 @@ Required: Optional: -- `name` (String) Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid? +- `name` (String) Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896. diff --git a/docs/data-sources/scheduling_koordinator_sh_reservation_v1alpha1_manifest.md b/docs/data-sources/scheduling_koordinator_sh_reservation_v1alpha1_manifest.md index d64d2ee1e..53a5847ac 100644 --- a/docs/data-sources/scheduling_koordinator_sh_reservation_v1alpha1_manifest.md +++ b/docs/data-sources/scheduling_koordinator_sh_reservation_v1alpha1_manifest.md @@ -63,6 +63,7 @@ Optional: - `allocate_policy` (String) AllocatePolicy represents the allocation policy of reserved resources that Reservation expects. - `expires` (String) Expired timestamp when the reservation is expected to expire.If both 'expires' and 'ttl' are set, 'expires' is checked first.'expires' and 'ttl' are mutually exclusive. Defaults to being set dynamically at runtime based on the 'ttl'. - `pre_allocation` (Boolean) By default, the resources requirements of reservation (specified in 'template.spec') is filtered by whether thenode has sufficient free resources (i.e. Reservation Request < Node Free).When 'preAllocation' is set, the scheduler will skip this validation and allow overcommitment. The scheduledreservation would be waiting to be available until free resources are sufficient. +- `taints` (Attributes List) Specifies the reservation's taints. This can be toleranted by the reservation tolerance.Eviction is not supported for NoExecute taints (see [below for nested schema](#nestedatt--spec--taints)) - `ttl` (String) Time-to-Live period for the reservation.'expires' and 'ttl' are mutually exclusive. Defaults to 24h. Set 0 to disable expiration. - `unschedulable` (Boolean) Unschedulable controls reservation schedulability of new pods. By default, reservation is schedulable. @@ -126,3 +127,18 @@ Optional: - `namespace` (String) Namespace of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/ - `resource_version` (String) Specific resourceVersion to which this reference is made, if any.More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency - `uid` (String) UID of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids + + + + +### Nested Schema for `spec.taints` + +Required: + +- `effect` (String) Required. The effect of the taint on podsthat do not tolerate the taint.Valid effects are NoSchedule, PreferNoSchedule and NoExecute. +- `key` (String) Required. The taint key to be applied to a node. + +Optional: + +- `time_added` (String) TimeAdded represents the time at which the taint was added.It is only written for NoExecute taints. +- `value` (String) The taint value corresponding to the taint key. diff --git a/docs/data-sources/scheduling_volcano_sh_queue_v1beta1_manifest.md b/docs/data-sources/scheduling_volcano_sh_queue_v1beta1_manifest.md index 80a8825d2..b52380dab 100644 --- a/docs/data-sources/scheduling_volcano_sh_queue_v1beta1_manifest.md +++ b/docs/data-sources/scheduling_volcano_sh_queue_v1beta1_manifest.md @@ -60,6 +60,7 @@ Optional: - `extend_clusters` (Attributes List) extendCluster indicate the jobs in this Queue will be dispatched to these clusters. (see [below for nested schema](#nestedatt--spec--extend_clusters)) - `guarantee` (Attributes) Guarantee indicate configuration about resource reservation (see [below for nested schema](#nestedatt--spec--guarantee)) - `parent` (String) Parent define the parent of queue +- `priority` (Number) Priority define the priority of queue. Higher values are prioritized for scheduling and considered later during reclamation. - `reclaimable` (Boolean) Reclaimable indicate whether the queue can be reclaimed by other queue - `type` (String) Type define the type of queue - `weight` (Number) diff --git a/docs/data-sources/scylla_scylladb_com_scylla_operator_config_v1alpha1_manifest.md b/docs/data-sources/scylla_scylladb_com_scylla_operator_config_v1alpha1_manifest.md index 417c0503c..b12fc50a4 100644 --- a/docs/data-sources/scylla_scylladb_com_scylla_operator_config_v1alpha1_manifest.md +++ b/docs/data-sources/scylla_scylladb_com_scylla_operator_config_v1alpha1_manifest.md @@ -54,4 +54,7 @@ Optional: Optional: -- `scylla_utils_image` (String) scyllaUtilsImage is a Scylla image used for running scylla utilities. +- `scylla_utils_image` (String) scyllaUtilsImage is a ScyllaDB image used for running ScyllaDB utilities. +- `unsupported_bash_tools_image_override` (String) unsupportedBashToolsImageOverride allows to adjust a generic Bash image with extra tools used by the operator for auxiliary purposes. Setting this field renders your cluster unsupported. Use at your own risk. +- `unsupported_grafana_image_override` (String) unsupportedGrafanaImageOverride allows to adjust Grafana image used by the operator for testing, dev or emergencies. Setting this field renders your cluster unsupported. Use at your own risk. +- `unsupported_prometheus_version_override` (String) unsupportedPrometheusVersionOverride allows to adjust Prometheus version used by the operator for testing, dev or emergencies. Setting this field renders your cluster unsupported. Use at your own risk. diff --git a/docs/data-sources/service_v1_manifest.md b/docs/data-sources/service_v1_manifest.md index 97c9511c8..3ba2a1d6d 100644 --- a/docs/data-sources/service_v1_manifest.md +++ b/docs/data-sources/service_v1_manifest.md @@ -73,7 +73,7 @@ Optional: - `selector` (Map of String) Route service traffic to pods with label keys and values matching this selector. If empty or not present, the service is assumed to have an external process managing its endpoints, which Kubernetes will not modify. Only applies to types ClusterIP, NodePort, and LoadBalancer. Ignored if type is ExternalName. More info: https://kubernetes.io/docs/concepts/services-networking/service/ - `session_affinity` (String) Supports 'ClientIP' and 'None'. Used to maintain session affinity. Enable client IP based session affinity. Must be ClientIP or None. Defaults to None. More info: https://kubernetes.io/docs/concepts/services-networking/service/#virtual-ips-and-service-proxies - `session_affinity_config` (Attributes) SessionAffinityConfig represents the configurations of session affinity. (see [below for nested schema](#nestedatt--spec--session_affinity_config)) -- `traffic_distribution` (String) TrafficDistribution offers a way to express preferences for how traffic is distributed to Service endpoints. Implementations can use this field as a hint, but are not required to guarantee strict adherence. If the field is not set, the implementation will apply its default routing strategy. If set to 'PreferClose', implementations should prioritize endpoints that are topologically close (e.g., same zone). This is an alpha field and requires enabling ServiceTrafficDistribution feature. +- `traffic_distribution` (String) TrafficDistribution offers a way to express preferences for how traffic is distributed to Service endpoints. Implementations can use this field as a hint, but are not required to guarantee strict adherence. If the field is not set, the implementation will apply its default routing strategy. If set to 'PreferClose', implementations should prioritize endpoints that are topologically close (e.g., same zone). This is a beta field and requires enabling ServiceTrafficDistribution feature. - `type` (String) type determines how the Service is exposed. Defaults to ClusterIP. Valid options are ExternalName, ClusterIP, NodePort, and LoadBalancer. 'ClusterIP' allocates a cluster-internal IP address for load-balancing to endpoints. Endpoints are determined by the selector or if that is not specified, by manual construction of an Endpoints object or EndpointSlice objects. If clusterIP is 'None', no virtual IP is allocated and the endpoints are published as a set of endpoints rather than a virtual IP. 'NodePort' builds on ClusterIP and allocates a port on every node which routes to the same endpoints as the clusterIP. 'LoadBalancer' builds on NodePort and creates an external load-balancer (if supported in the current cloud) which routes to the same endpoints as the clusterIP. 'ExternalName' aliases this service to the specified externalName. Several other fields do not apply to ExternalName services. More info: https://kubernetes.io/docs/concepts/services-networking/service/#publishing-services-service-types diff --git a/docs/data-sources/tempo_grafana_com_tempo_stack_v1alpha1_manifest.md b/docs/data-sources/tempo_grafana_com_tempo_stack_v1alpha1_manifest.md index be8b9ab94..304685e8c 100644 --- a/docs/data-sources/tempo_grafana_com_tempo_stack_v1alpha1_manifest.md +++ b/docs/data-sources/tempo_grafana_com_tempo_stack_v1alpha1_manifest.md @@ -136,6 +136,7 @@ Optional: Optional: +- `jaeger_query` (String) JaegerQuery defines the tempo-query container image. - `oauth_proxy` (String) OauthProxy defines the oauth proxy image used to protect the jaegerUI on single tenant. - `tempo` (String) Tempo defines the tempo container image. - `tempo_gateway` (String) TempoGateway defines the tempo-gateway container image. @@ -662,6 +663,7 @@ Optional: - `monitor_tab` (Attributes) MonitorTab defines the monitor tab configuration. (see [below for nested schema](#nestedatt--spec--template--query_frontend--jaeger_query--monitor_tab)) - `resources` (Attributes) Resources defines resources for this component, this will override the calculated resources derived from total (see [below for nested schema](#nestedatt--spec--template--query_frontend--jaeger_query--resources)) - `services_query_duration` (String) ServicesQueryDuration defines how long the services will be available in the services list +- `tempo_query` (Attributes) TempoQuery defines options specific to the Tempoo Query component. (see [below for nested schema](#nestedatt--spec--template--query_frontend--jaeger_query--tempo_query)) ### Nested Schema for `spec.template.query_frontend.jaeger_query.authentication` @@ -738,6 +740,32 @@ Required: + +### Nested Schema for `spec.template.query_frontend.jaeger_query.tempo_query` + +Optional: + +- `resources` (Attributes) Resources defines resources for this component, this will override the calculated resources derived from total (see [below for nested schema](#nestedatt--spec--template--query_frontend--jaeger_query--tempo_query--resources)) + + +### Nested Schema for `spec.template.query_frontend.jaeger_query.tempo_query.resources` + +Optional: + +- `claims` (Attributes List) Claims lists the names of resources, defined in spec.resourceClaims,that are used by this container.This is an alpha field and requires enabling theDynamicResourceAllocation feature gate.This field is immutable. It can only be set for containers. (see [below for nested schema](#nestedatt--spec--template--query_frontend--jaeger_query--tempo_query--resources--claims)) +- `limits` (Map of String) Limits describes the maximum amount of compute resources allowed.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/ +- `requests` (Map of String) Requests describes the minimum amount of compute resources required.If Requests is omitted for a container, it defaults to Limits if that is explicitly specified,otherwise to an implementation-defined value. Requests cannot exceed Limits.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/ + + +### Nested Schema for `spec.template.query_frontend.jaeger_query.tempo_query.resources.claims` + +Required: + +- `name` (String) Name must match the name of one entry in pod.spec.resourceClaims ofthe Pod where this field is used. It makes that resource availableinside a container. + + + + diff --git a/docs/data-sources/traefik_io_traefik_service_v1alpha1_manifest.md b/docs/data-sources/traefik_io_traefik_service_v1alpha1_manifest.md index efc46250c..27027cbc2 100644 --- a/docs/data-sources/traefik_io_traefik_service_v1alpha1_manifest.md +++ b/docs/data-sources/traefik_io_traefik_service_v1alpha1_manifest.md @@ -70,6 +70,7 @@ Optional: - `health_check` (Attributes) Healthcheck defines health checks for ExternalName services. (see [below for nested schema](#nestedatt--spec--mirroring--health_check)) - `kind` (String) Kind defines the kind of the Service. - `max_body_size` (Number) MaxBodySize defines the maximum size allowed for the body of the request.If the body is larger, the request is not mirrored.Default value is -1, which means unlimited size. +- `mirror_body` (Boolean) MirrorBody defines whether the body of the request should be mirrored.Default value is true. - `mirrors` (Attributes List) Mirrors defines the list of mirrors where Traefik will duplicate the traffic. (see [below for nested schema](#nestedatt--spec--mirroring--mirrors)) - `namespace` (String) Namespace defines the namespace of the referenced Kubernetes Service or TraefikService. - `native_lb` (Boolean) NativeLB controls, when creating the load-balancer,whether the LB's children are directly the pods IPs or if the only child is the Kubernetes Service clusterIP.The Kubernetes Service itself does load-balance to the pods.By default, NativeLB is false. diff --git a/internal/provider/acmpca_services_k8s_aws_v1alpha1/acmpca_services_k8s_aws_certificate_v1alpha1_manifest.go b/internal/provider/acmpca_services_k8s_aws_v1alpha1/acmpca_services_k8s_aws_certificate_v1alpha1_manifest.go index 65ecd0eb5..f508870bf 100644 --- a/internal/provider/acmpca_services_k8s_aws_v1alpha1/acmpca_services_k8s_aws_certificate_v1alpha1_manifest.go +++ b/internal/provider/acmpca_services_k8s_aws_v1alpha1/acmpca_services_k8s_aws_certificate_v1alpha1_manifest.go @@ -138,6 +138,11 @@ type AcmpcaServicesK8SAwsCertificateV1Alpha1ManifestData struct { Namespace *string `tfsdk:"namespace" json:"namespace,omitempty"` } `tfsdk:"from" json:"from,omitempty"` } `tfsdk:"certificate_authority_ref" json:"certificateAuthorityRef,omitempty"` + CertificateOutput *struct { + Key *string `tfsdk:"key" json:"key,omitempty"` + Name *string `tfsdk:"name" json:"name,omitempty"` + Namespace *string `tfsdk:"namespace" json:"namespace,omitempty"` + } `tfsdk:"certificate_output" json:"certificateOutput,omitempty"` CertificateSigningRequest *string `tfsdk:"certificate_signing_request" json:"certificateSigningRequest,omitempty"` CertificateSigningRequestRef *struct { From *struct { @@ -890,6 +895,39 @@ func (r *AcmpcaServicesK8SAwsCertificateV1Alpha1Manifest) Schema(_ context.Conte Computed: false, }, + "certificate_output": schema.SingleNestedAttribute{ + Description: "SecretKeyReference combines a k8s corev1.SecretReference with aspecific key within the referred-to Secret", + MarkdownDescription: "SecretKeyReference combines a k8s corev1.SecretReference with aspecific key within the referred-to Secret", + Attributes: map[string]schema.Attribute{ + "key": schema.StringAttribute{ + Description: "Key is the key within the secret", + MarkdownDescription: "Key is the key within the secret", + Required: true, + Optional: false, + Computed: false, + }, + + "name": schema.StringAttribute{ + Description: "name is unique within a namespace to reference a secret resource.", + MarkdownDescription: "name is unique within a namespace to reference a secret resource.", + Required: false, + Optional: true, + Computed: false, + }, + + "namespace": schema.StringAttribute{ + Description: "namespace defines the space within which the secret name must be unique.", + MarkdownDescription: "namespace defines the space within which the secret name must be unique.", + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + "certificate_signing_request": schema.StringAttribute{ Description: "", MarkdownDescription: "", diff --git a/internal/provider/apps_emqx_io_v1beta3/apps_emqx_io_emqx_broker_v1beta3_manifest.go b/internal/provider/apps_emqx_io_v1beta3/apps_emqx_io_emqx_broker_v1beta3_manifest.go index 5124e9302..7bf034f1c 100644 --- a/internal/provider/apps_emqx_io_v1beta3/apps_emqx_io_emqx_broker_v1beta3_manifest.go +++ b/internal/provider/apps_emqx_io_v1beta3/apps_emqx_io_emqx_broker_v1beta3_manifest.go @@ -4332,8 +4332,8 @@ func (r *AppsEmqxIoEmqxBrokerV1Beta3Manifest) Schema(_ context.Context, _ dataso "image": schema.StringAttribute{ Description: "", MarkdownDescription: "", - Required: false, - Optional: true, + Required: true, + Optional: false, Computed: false, }, diff --git a/internal/provider/apps_emqx_io_v1beta3/apps_emqx_io_emqx_enterprise_v1beta3_manifest.go b/internal/provider/apps_emqx_io_v1beta3/apps_emqx_io_emqx_enterprise_v1beta3_manifest.go index 2d1e9428c..bf3b176b0 100644 --- a/internal/provider/apps_emqx_io_v1beta3/apps_emqx_io_emqx_enterprise_v1beta3_manifest.go +++ b/internal/provider/apps_emqx_io_v1beta3/apps_emqx_io_emqx_enterprise_v1beta3_manifest.go @@ -4338,8 +4338,8 @@ func (r *AppsEmqxIoEmqxEnterpriseV1Beta3Manifest) Schema(_ context.Context, _ da "image": schema.StringAttribute{ Description: "", MarkdownDescription: "", - Required: false, - Optional: true, + Required: true, + Optional: false, Computed: false, }, diff --git a/internal/provider/apps_emqx_io_v1beta3/apps_emqx_io_emqx_plugin_v1beta3_manifest.go b/internal/provider/apps_emqx_io_v1beta3/apps_emqx_io_emqx_plugin_v1beta3_manifest.go index df2a4cfa3..e24f6bde8 100644 --- a/internal/provider/apps_emqx_io_v1beta3/apps_emqx_io_emqx_plugin_v1beta3_manifest.go +++ b/internal/provider/apps_emqx_io_v1beta3/apps_emqx_io_emqx_plugin_v1beta3_manifest.go @@ -138,8 +138,8 @@ func (r *AppsEmqxIoEmqxPluginV1Beta3Manifest) Schema(_ context.Context, _ dataso "plugin_name": schema.StringAttribute{ Description: "", MarkdownDescription: "", - Required: false, - Optional: true, + Required: true, + Optional: false, Computed: false, }, @@ -147,8 +147,8 @@ func (r *AppsEmqxIoEmqxPluginV1Beta3Manifest) Schema(_ context.Context, _ dataso Description: "", MarkdownDescription: "", ElementType: types.StringType, - Required: false, - Optional: true, + Required: true, + Optional: false, Computed: false, }, }, diff --git a/internal/provider/apps_emqx_io_v1beta4/apps_emqx_io_emqx_broker_v1beta4_manifest.go b/internal/provider/apps_emqx_io_v1beta4/apps_emqx_io_emqx_broker_v1beta4_manifest.go index a5179f7c4..7d348a860 100644 --- a/internal/provider/apps_emqx_io_v1beta4/apps_emqx_io_emqx_broker_v1beta4_manifest.go +++ b/internal/provider/apps_emqx_io_v1beta4/apps_emqx_io_emqx_broker_v1beta4_manifest.go @@ -3543,8 +3543,8 @@ func (r *AppsEmqxIoEmqxBrokerV1Beta4Manifest) Schema(_ context.Context, _ dataso "version": schema.StringAttribute{ Description: "", MarkdownDescription: "", - Required: false, - Optional: true, + Required: true, + Optional: false, Computed: false, }, }, diff --git a/internal/provider/apps_emqx_io_v1beta4/apps_emqx_io_emqx_enterprise_v1beta4_manifest.go b/internal/provider/apps_emqx_io_v1beta4/apps_emqx_io_emqx_enterprise_v1beta4_manifest.go index 1ab308a67..00431d1c0 100644 --- a/internal/provider/apps_emqx_io_v1beta4/apps_emqx_io_emqx_enterprise_v1beta4_manifest.go +++ b/internal/provider/apps_emqx_io_v1beta4/apps_emqx_io_emqx_enterprise_v1beta4_manifest.go @@ -3652,8 +3652,8 @@ func (r *AppsEmqxIoEmqxEnterpriseV1Beta4Manifest) Schema(_ context.Context, _ da "version": schema.StringAttribute{ Description: "", MarkdownDescription: "", - Required: false, - Optional: true, + Required: true, + Optional: false, Computed: false, }, }, diff --git a/internal/provider/apps_emqx_io_v1beta4/apps_emqx_io_emqx_plugin_v1beta4_manifest.go b/internal/provider/apps_emqx_io_v1beta4/apps_emqx_io_emqx_plugin_v1beta4_manifest.go index 9314d2148..137572769 100644 --- a/internal/provider/apps_emqx_io_v1beta4/apps_emqx_io_emqx_plugin_v1beta4_manifest.go +++ b/internal/provider/apps_emqx_io_v1beta4/apps_emqx_io_emqx_plugin_v1beta4_manifest.go @@ -138,8 +138,8 @@ func (r *AppsEmqxIoEmqxPluginV1Beta4Manifest) Schema(_ context.Context, _ dataso "plugin_name": schema.StringAttribute{ Description: "", MarkdownDescription: "", - Required: false, - Optional: true, + Required: true, + Optional: false, Computed: false, }, @@ -147,8 +147,8 @@ func (r *AppsEmqxIoEmqxPluginV1Beta4Manifest) Schema(_ context.Context, _ dataso Description: "", MarkdownDescription: "", ElementType: types.StringType, - Required: false, - Optional: true, + Required: true, + Optional: false, Computed: false, }, }, diff --git a/internal/provider/apps_emqx_io_v2alpha1/apps_emqx_io_emqx_v2alpha1_manifest.go b/internal/provider/apps_emqx_io_v2alpha1/apps_emqx_io_emqx_v2alpha1_manifest.go index 206bb8599..1e46685ad 100644 --- a/internal/provider/apps_emqx_io_v2alpha1/apps_emqx_io_emqx_v2alpha1_manifest.go +++ b/internal/provider/apps_emqx_io_v2alpha1/apps_emqx_io_emqx_v2alpha1_manifest.go @@ -11323,8 +11323,8 @@ func (r *AppsEmqxIoEmqxV2Alpha1Manifest) Schema(_ context.Context, _ datasource. "error": schema.StringAttribute{ Description: "", MarkdownDescription: "", - Required: false, - Optional: true, + Required: true, + Optional: false, Computed: false, Validators: []validator.String{ stringvalidator.LengthAtMost(316), @@ -11842,8 +11842,8 @@ func (r *AppsEmqxIoEmqxV2Alpha1Manifest) Schema(_ context.Context, _ datasource. "error": schema.StringAttribute{ Description: "", MarkdownDescription: "", - Required: false, - Optional: true, + Required: true, + Optional: false, Computed: false, Validators: []validator.String{ stringvalidator.LengthAtMost(316), diff --git a/internal/provider/camel_apache_org_v1/camel_apache_org_integration_platform_v1_manifest.go b/internal/provider/camel_apache_org_v1/camel_apache_org_integration_platform_v1_manifest.go index 278f53218..130e3199c 100644 --- a/internal/provider/camel_apache_org_v1/camel_apache_org_integration_platform_v1_manifest.go +++ b/internal/provider/camel_apache_org_v1/camel_apache_org_integration_platform_v1_manifest.go @@ -122,9 +122,10 @@ type CamelApacheOrgIntegrationPlatformV1ManifestData struct { Organization *string `tfsdk:"organization" json:"organization,omitempty"` Secret *string `tfsdk:"secret" json:"secret,omitempty"` } `tfsdk:"registry" json:"registry,omitempty"` - RuntimeProvider *string `tfsdk:"runtime_provider" json:"runtimeProvider,omitempty"` - RuntimeVersion *string `tfsdk:"runtime_version" json:"runtimeVersion,omitempty"` - Timeout *string `tfsdk:"timeout" json:"timeout,omitempty"` + RuntimeCoreVersion *string `tfsdk:"runtime_core_version" json:"runtimeCoreVersion,omitempty"` + RuntimeProvider *string `tfsdk:"runtime_provider" json:"runtimeProvider,omitempty"` + RuntimeVersion *string `tfsdk:"runtime_version" json:"runtimeVersion,omitempty"` + Timeout *string `tfsdk:"timeout" json:"timeout,omitempty"` } `tfsdk:"build" json:"build,omitempty"` Cluster *string `tfsdk:"cluster" json:"cluster,omitempty"` Configuration *[]struct { @@ -478,6 +479,16 @@ type CamelApacheOrgIntegrationPlatformV1ManifestData struct { Strimzi *struct { Configuration *map[string]string `tfsdk:"configuration" json:"configuration,omitempty"` } `tfsdk:"strimzi" json:"strimzi,omitempty"` + Telemetry *struct { + Auto *bool `tfsdk:"auto" json:"auto,omitempty"` + Configuration *map[string]string `tfsdk:"configuration" json:"configuration,omitempty"` + Enabled *bool `tfsdk:"enabled" json:"enabled,omitempty"` + Endpoint *string `tfsdk:"endpoint" json:"endpoint,omitempty"` + Sampler *string `tfsdk:"sampler" json:"sampler,omitempty"` + Sampler_parent_based *bool `tfsdk:"sampler_parent_based" json:"sampler-parent-based,omitempty"` + Sampler_ratio *string `tfsdk:"sampler_ratio" json:"sampler-ratio,omitempty"` + ServiceName *string `tfsdk:"service_name" json:"serviceName,omitempty"` + } `tfsdk:"telemetry" json:"telemetry,omitempty"` Toleration *struct { Configuration *map[string]string `tfsdk:"configuration" json:"configuration,omitempty"` Enabled *bool `tfsdk:"enabled" json:"enabled,omitempty"` @@ -1115,6 +1126,14 @@ func (r *CamelApacheOrgIntegrationPlatformV1Manifest) Schema(_ context.Context, Computed: false, }, + "runtime_core_version": schema.StringAttribute{ + Description: "the Camel core version used by this IntegrationPlatform", + MarkdownDescription: "the Camel core version used by this IntegrationPlatform", + Required: false, + Optional: true, + Computed: false, + }, + "runtime_provider": schema.StringAttribute{ Description: "the runtime used. Likely Camel Quarkus (we used to have main runtime which has been discontinued since version 1.5)", MarkdownDescription: "the runtime used. Likely Camel Quarkus (we used to have main runtime which has been discontinued since version 1.5)", @@ -3802,6 +3821,80 @@ func (r *CamelApacheOrgIntegrationPlatformV1Manifest) Schema(_ context.Context, Computed: false, }, + "telemetry": schema.SingleNestedAttribute{ + Description: "The configuration of Telemetry trait", + MarkdownDescription: "The configuration of Telemetry trait", + Attributes: map[string]schema.Attribute{ + "auto": schema.BoolAttribute{ + Description: "Enables automatic configuration of the trait, including automatic discovery of the telemetry endpoint.", + MarkdownDescription: "Enables automatic configuration of the trait, including automatic discovery of the telemetry endpoint.", + Required: false, + Optional: true, + Computed: false, + }, + + "configuration": schema.MapAttribute{ + Description: "Legacy trait configuration parameters.Deprecated: for backward compatibility.", + MarkdownDescription: "Legacy trait configuration parameters.Deprecated: for backward compatibility.", + ElementType: types.StringType, + Required: false, + Optional: true, + Computed: false, + }, + + "enabled": schema.BoolAttribute{ + Description: "Can be used to enable or disable a trait. All traits share this common property.", + MarkdownDescription: "Can be used to enable or disable a trait. All traits share this common property.", + Required: false, + Optional: true, + Computed: false, + }, + + "endpoint": schema.StringAttribute{ + Description: "The target endpoint of the Telemetry service (automatically discovered by default)", + MarkdownDescription: "The target endpoint of the Telemetry service (automatically discovered by default)", + Required: false, + Optional: true, + Computed: false, + }, + + "sampler": schema.StringAttribute{ + Description: "The sampler of the telemetry used for tracing (default 'on')", + MarkdownDescription: "The sampler of the telemetry used for tracing (default 'on')", + Required: false, + Optional: true, + Computed: false, + }, + + "sampler_parent_based": schema.BoolAttribute{ + Description: "The sampler of the telemetry used for tracing is parent based (default 'true')", + MarkdownDescription: "The sampler of the telemetry used for tracing is parent based (default 'true')", + Required: false, + Optional: true, + Computed: false, + }, + + "sampler_ratio": schema.StringAttribute{ + Description: "The sampler ratio of the telemetry used for tracing", + MarkdownDescription: "The sampler ratio of the telemetry used for tracing", + Required: false, + Optional: true, + Computed: false, + }, + + "service_name": schema.StringAttribute{ + Description: "The name of the service that publishes telemetry data (defaults to the integration name)", + MarkdownDescription: "The name of the service that publishes telemetry data (defaults to the integration name)", + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + "toleration": schema.SingleNestedAttribute{ Description: "The configuration of Toleration trait", MarkdownDescription: "The configuration of Toleration trait", diff --git a/internal/provider/camel_apache_org_v1/camel_apache_org_integration_profile_v1_manifest.go b/internal/provider/camel_apache_org_v1/camel_apache_org_integration_profile_v1_manifest.go index a607f2b53..f4c3ec896 100644 --- a/internal/provider/camel_apache_org_v1/camel_apache_org_integration_profile_v1_manifest.go +++ b/internal/provider/camel_apache_org_v1/camel_apache_org_integration_profile_v1_manifest.go @@ -455,6 +455,16 @@ type CamelApacheOrgIntegrationProfileV1ManifestData struct { Strimzi *struct { Configuration *map[string]string `tfsdk:"configuration" json:"configuration,omitempty"` } `tfsdk:"strimzi" json:"strimzi,omitempty"` + Telemetry *struct { + Auto *bool `tfsdk:"auto" json:"auto,omitempty"` + Configuration *map[string]string `tfsdk:"configuration" json:"configuration,omitempty"` + Enabled *bool `tfsdk:"enabled" json:"enabled,omitempty"` + Endpoint *string `tfsdk:"endpoint" json:"endpoint,omitempty"` + Sampler *string `tfsdk:"sampler" json:"sampler,omitempty"` + Sampler_parent_based *bool `tfsdk:"sampler_parent_based" json:"sampler-parent-based,omitempty"` + Sampler_ratio *string `tfsdk:"sampler_ratio" json:"sampler-ratio,omitempty"` + ServiceName *string `tfsdk:"service_name" json:"serviceName,omitempty"` + } `tfsdk:"telemetry" json:"telemetry,omitempty"` Toleration *struct { Configuration *map[string]string `tfsdk:"configuration" json:"configuration,omitempty"` Enabled *bool `tfsdk:"enabled" json:"enabled,omitempty"` @@ -3597,6 +3607,80 @@ func (r *CamelApacheOrgIntegrationProfileV1Manifest) Schema(_ context.Context, _ Computed: false, }, + "telemetry": schema.SingleNestedAttribute{ + Description: "The configuration of Telemetry trait", + MarkdownDescription: "The configuration of Telemetry trait", + Attributes: map[string]schema.Attribute{ + "auto": schema.BoolAttribute{ + Description: "Enables automatic configuration of the trait, including automatic discovery of the telemetry endpoint.", + MarkdownDescription: "Enables automatic configuration of the trait, including automatic discovery of the telemetry endpoint.", + Required: false, + Optional: true, + Computed: false, + }, + + "configuration": schema.MapAttribute{ + Description: "Legacy trait configuration parameters.Deprecated: for backward compatibility.", + MarkdownDescription: "Legacy trait configuration parameters.Deprecated: for backward compatibility.", + ElementType: types.StringType, + Required: false, + Optional: true, + Computed: false, + }, + + "enabled": schema.BoolAttribute{ + Description: "Can be used to enable or disable a trait. All traits share this common property.", + MarkdownDescription: "Can be used to enable or disable a trait. All traits share this common property.", + Required: false, + Optional: true, + Computed: false, + }, + + "endpoint": schema.StringAttribute{ + Description: "The target endpoint of the Telemetry service (automatically discovered by default)", + MarkdownDescription: "The target endpoint of the Telemetry service (automatically discovered by default)", + Required: false, + Optional: true, + Computed: false, + }, + + "sampler": schema.StringAttribute{ + Description: "The sampler of the telemetry used for tracing (default 'on')", + MarkdownDescription: "The sampler of the telemetry used for tracing (default 'on')", + Required: false, + Optional: true, + Computed: false, + }, + + "sampler_parent_based": schema.BoolAttribute{ + Description: "The sampler of the telemetry used for tracing is parent based (default 'true')", + MarkdownDescription: "The sampler of the telemetry used for tracing is parent based (default 'true')", + Required: false, + Optional: true, + Computed: false, + }, + + "sampler_ratio": schema.StringAttribute{ + Description: "The sampler ratio of the telemetry used for tracing", + MarkdownDescription: "The sampler ratio of the telemetry used for tracing", + Required: false, + Optional: true, + Computed: false, + }, + + "service_name": schema.StringAttribute{ + Description: "The name of the service that publishes telemetry data (defaults to the integration name)", + MarkdownDescription: "The name of the service that publishes telemetry data (defaults to the integration name)", + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + "toleration": schema.SingleNestedAttribute{ Description: "The configuration of Toleration trait", MarkdownDescription: "The configuration of Toleration trait", diff --git a/internal/provider/camel_apache_org_v1/camel_apache_org_integration_v1_manifest.go b/internal/provider/camel_apache_org_v1/camel_apache_org_integration_v1_manifest.go index 90c8f74a0..bb2abe1eb 100644 --- a/internal/provider/camel_apache_org_v1/camel_apache_org_integration_v1_manifest.go +++ b/internal/provider/camel_apache_org_v1/camel_apache_org_integration_v1_manifest.go @@ -1504,6 +1504,16 @@ type CamelApacheOrgIntegrationV1ManifestData struct { Strimzi *struct { Configuration *map[string]string `tfsdk:"configuration" json:"configuration,omitempty"` } `tfsdk:"strimzi" json:"strimzi,omitempty"` + Telemetry *struct { + Auto *bool `tfsdk:"auto" json:"auto,omitempty"` + Configuration *map[string]string `tfsdk:"configuration" json:"configuration,omitempty"` + Enabled *bool `tfsdk:"enabled" json:"enabled,omitempty"` + Endpoint *string `tfsdk:"endpoint" json:"endpoint,omitempty"` + Sampler *string `tfsdk:"sampler" json:"sampler,omitempty"` + Sampler_parent_based *bool `tfsdk:"sampler_parent_based" json:"sampler-parent-based,omitempty"` + Sampler_ratio *string `tfsdk:"sampler_ratio" json:"sampler-ratio,omitempty"` + ServiceName *string `tfsdk:"service_name" json:"serviceName,omitempty"` + } `tfsdk:"telemetry" json:"telemetry,omitempty"` Toleration *struct { Configuration *map[string]string `tfsdk:"configuration" json:"configuration,omitempty"` Enabled *bool `tfsdk:"enabled" json:"enabled,omitempty"` @@ -11685,6 +11695,80 @@ func (r *CamelApacheOrgIntegrationV1Manifest) Schema(_ context.Context, _ dataso Computed: false, }, + "telemetry": schema.SingleNestedAttribute{ + Description: "The configuration of Telemetry trait", + MarkdownDescription: "The configuration of Telemetry trait", + Attributes: map[string]schema.Attribute{ + "auto": schema.BoolAttribute{ + Description: "Enables automatic configuration of the trait, including automatic discovery of the telemetry endpoint.", + MarkdownDescription: "Enables automatic configuration of the trait, including automatic discovery of the telemetry endpoint.", + Required: false, + Optional: true, + Computed: false, + }, + + "configuration": schema.MapAttribute{ + Description: "Legacy trait configuration parameters.Deprecated: for backward compatibility.", + MarkdownDescription: "Legacy trait configuration parameters.Deprecated: for backward compatibility.", + ElementType: types.StringType, + Required: false, + Optional: true, + Computed: false, + }, + + "enabled": schema.BoolAttribute{ + Description: "Can be used to enable or disable a trait. All traits share this common property.", + MarkdownDescription: "Can be used to enable or disable a trait. All traits share this common property.", + Required: false, + Optional: true, + Computed: false, + }, + + "endpoint": schema.StringAttribute{ + Description: "The target endpoint of the Telemetry service (automatically discovered by default)", + MarkdownDescription: "The target endpoint of the Telemetry service (automatically discovered by default)", + Required: false, + Optional: true, + Computed: false, + }, + + "sampler": schema.StringAttribute{ + Description: "The sampler of the telemetry used for tracing (default 'on')", + MarkdownDescription: "The sampler of the telemetry used for tracing (default 'on')", + Required: false, + Optional: true, + Computed: false, + }, + + "sampler_parent_based": schema.BoolAttribute{ + Description: "The sampler of the telemetry used for tracing is parent based (default 'true')", + MarkdownDescription: "The sampler of the telemetry used for tracing is parent based (default 'true')", + Required: false, + Optional: true, + Computed: false, + }, + + "sampler_ratio": schema.StringAttribute{ + Description: "The sampler ratio of the telemetry used for tracing", + MarkdownDescription: "The sampler ratio of the telemetry used for tracing", + Required: false, + Optional: true, + Computed: false, + }, + + "service_name": schema.StringAttribute{ + Description: "The name of the service that publishes telemetry data (defaults to the integration name)", + MarkdownDescription: "The name of the service that publishes telemetry data (defaults to the integration name)", + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + "toleration": schema.SingleNestedAttribute{ Description: "The configuration of Toleration trait", MarkdownDescription: "The configuration of Toleration trait", diff --git a/internal/provider/camel_apache_org_v1/camel_apache_org_kamelet_v1_manifest.go b/internal/provider/camel_apache_org_v1/camel_apache_org_kamelet_v1_manifest.go index 95cc24da8..aa4d579a5 100644 --- a/internal/provider/camel_apache_org_v1/camel_apache_org_kamelet_v1_manifest.go +++ b/internal/provider/camel_apache_org_v1/camel_apache_org_kamelet_v1_manifest.go @@ -205,6 +205,170 @@ type CamelApacheOrgKameletV1ManifestData struct { Type *string `tfsdk:"type" json:"type,omitempty"` } `tfsdk:"schema" json:"schema,omitempty"` } `tfsdk:"types" json:"types,omitempty"` + Versions *struct { + DataTypes *struct { + Default *string `tfsdk:"default" json:"default,omitempty"` + Headers *struct { + Default *string `tfsdk:"default" json:"default,omitempty"` + Description *string `tfsdk:"description" json:"description,omitempty"` + Required *bool `tfsdk:"required" json:"required,omitempty"` + Title *string `tfsdk:"title" json:"title,omitempty"` + Type *string `tfsdk:"type" json:"type,omitempty"` + } `tfsdk:"headers" json:"headers,omitempty"` + Types *struct { + Dependencies *[]string `tfsdk:"dependencies" json:"dependencies,omitempty"` + Description *string `tfsdk:"description" json:"description,omitempty"` + Format *string `tfsdk:"format" json:"format,omitempty"` + Headers *struct { + Default *string `tfsdk:"default" json:"default,omitempty"` + Description *string `tfsdk:"description" json:"description,omitempty"` + Required *bool `tfsdk:"required" json:"required,omitempty"` + Title *string `tfsdk:"title" json:"title,omitempty"` + Type *string `tfsdk:"type" json:"type,omitempty"` + } `tfsdk:"headers" json:"headers,omitempty"` + MediaType *string `tfsdk:"media_type" json:"mediaType,omitempty"` + Schema *struct { + Dollarschema *string `tfsdk:"dollarschema" json:"$schema,omitempty"` + Description *string `tfsdk:"description" json:"description,omitempty"` + Example *map[string]string `tfsdk:"example" json:"example,omitempty"` + ExternalDocs *struct { + Description *string `tfsdk:"description" json:"description,omitempty"` + Url *string `tfsdk:"url" json:"url,omitempty"` + } `tfsdk:"external_docs" json:"externalDocs,omitempty"` + Id *string `tfsdk:"id" json:"id,omitempty"` + Properties *struct { + Default *map[string]string `tfsdk:"default" json:"default,omitempty"` + Deprecated *bool `tfsdk:"deprecated" json:"deprecated,omitempty"` + Description *string `tfsdk:"description" json:"description,omitempty"` + Enum *[]string `tfsdk:"enum" json:"enum,omitempty"` + Example *map[string]string `tfsdk:"example" json:"example,omitempty"` + ExclusiveMaximum *bool `tfsdk:"exclusive_maximum" json:"exclusiveMaximum,omitempty"` + ExclusiveMinimum *bool `tfsdk:"exclusive_minimum" json:"exclusiveMinimum,omitempty"` + Format *string `tfsdk:"format" json:"format,omitempty"` + Id *string `tfsdk:"id" json:"id,omitempty"` + MaxItems *int64 `tfsdk:"max_items" json:"maxItems,omitempty"` + MaxLength *int64 `tfsdk:"max_length" json:"maxLength,omitempty"` + MaxProperties *int64 `tfsdk:"max_properties" json:"maxProperties,omitempty"` + Maximum *string `tfsdk:"maximum" json:"maximum,omitempty"` + MinItems *int64 `tfsdk:"min_items" json:"minItems,omitempty"` + MinLength *int64 `tfsdk:"min_length" json:"minLength,omitempty"` + MinProperties *int64 `tfsdk:"min_properties" json:"minProperties,omitempty"` + Minimum *string `tfsdk:"minimum" json:"minimum,omitempty"` + MultipleOf *string `tfsdk:"multiple_of" json:"multipleOf,omitempty"` + Nullable *bool `tfsdk:"nullable" json:"nullable,omitempty"` + Pattern *string `tfsdk:"pattern" json:"pattern,omitempty"` + Title *string `tfsdk:"title" json:"title,omitempty"` + Type *string `tfsdk:"type" json:"type,omitempty"` + UniqueItems *bool `tfsdk:"unique_items" json:"uniqueItems,omitempty"` + X_descriptors *[]string `tfsdk:"x_descriptors" json:"x-descriptors,omitempty"` + } `tfsdk:"properties" json:"properties,omitempty"` + Required *[]string `tfsdk:"required" json:"required,omitempty"` + Title *string `tfsdk:"title" json:"title,omitempty"` + Type *string `tfsdk:"type" json:"type,omitempty"` + } `tfsdk:"schema" json:"schema,omitempty"` + Scheme *string `tfsdk:"scheme" json:"scheme,omitempty"` + } `tfsdk:"types" json:"types,omitempty"` + } `tfsdk:"data_types" json:"dataTypes,omitempty"` + Definition *struct { + Dollarschema *string `tfsdk:"dollarschema" json:"$schema,omitempty"` + Description *string `tfsdk:"description" json:"description,omitempty"` + Example *map[string]string `tfsdk:"example" json:"example,omitempty"` + ExternalDocs *struct { + Description *string `tfsdk:"description" json:"description,omitempty"` + Url *string `tfsdk:"url" json:"url,omitempty"` + } `tfsdk:"external_docs" json:"externalDocs,omitempty"` + Id *string `tfsdk:"id" json:"id,omitempty"` + Properties *struct { + Default *map[string]string `tfsdk:"default" json:"default,omitempty"` + Deprecated *bool `tfsdk:"deprecated" json:"deprecated,omitempty"` + Description *string `tfsdk:"description" json:"description,omitempty"` + Enum *[]string `tfsdk:"enum" json:"enum,omitempty"` + Example *map[string]string `tfsdk:"example" json:"example,omitempty"` + ExclusiveMaximum *bool `tfsdk:"exclusive_maximum" json:"exclusiveMaximum,omitempty"` + ExclusiveMinimum *bool `tfsdk:"exclusive_minimum" json:"exclusiveMinimum,omitempty"` + Format *string `tfsdk:"format" json:"format,omitempty"` + Id *string `tfsdk:"id" json:"id,omitempty"` + MaxItems *int64 `tfsdk:"max_items" json:"maxItems,omitempty"` + MaxLength *int64 `tfsdk:"max_length" json:"maxLength,omitempty"` + MaxProperties *int64 `tfsdk:"max_properties" json:"maxProperties,omitempty"` + Maximum *string `tfsdk:"maximum" json:"maximum,omitempty"` + MinItems *int64 `tfsdk:"min_items" json:"minItems,omitempty"` + MinLength *int64 `tfsdk:"min_length" json:"minLength,omitempty"` + MinProperties *int64 `tfsdk:"min_properties" json:"minProperties,omitempty"` + Minimum *string `tfsdk:"minimum" json:"minimum,omitempty"` + MultipleOf *string `tfsdk:"multiple_of" json:"multipleOf,omitempty"` + Nullable *bool `tfsdk:"nullable" json:"nullable,omitempty"` + Pattern *string `tfsdk:"pattern" json:"pattern,omitempty"` + Title *string `tfsdk:"title" json:"title,omitempty"` + Type *string `tfsdk:"type" json:"type,omitempty"` + UniqueItems *bool `tfsdk:"unique_items" json:"uniqueItems,omitempty"` + X_descriptors *[]string `tfsdk:"x_descriptors" json:"x-descriptors,omitempty"` + } `tfsdk:"properties" json:"properties,omitempty"` + Required *[]string `tfsdk:"required" json:"required,omitempty"` + Title *string `tfsdk:"title" json:"title,omitempty"` + Type *string `tfsdk:"type" json:"type,omitempty"` + } `tfsdk:"definition" json:"definition,omitempty"` + Dependencies *[]string `tfsdk:"dependencies" json:"dependencies,omitempty"` + Sources *[]struct { + Compression *bool `tfsdk:"compression" json:"compression,omitempty"` + Content *string `tfsdk:"content" json:"content,omitempty"` + ContentKey *string `tfsdk:"content_key" json:"contentKey,omitempty"` + ContentRef *string `tfsdk:"content_ref" json:"contentRef,omitempty"` + ContentType *string `tfsdk:"content_type" json:"contentType,omitempty"` + From_kamelet *bool `tfsdk:"from_kamelet" json:"from-kamelet,omitempty"` + Interceptors *[]string `tfsdk:"interceptors" json:"interceptors,omitempty"` + Language *string `tfsdk:"language" json:"language,omitempty"` + Loader *string `tfsdk:"loader" json:"loader,omitempty"` + Name *string `tfsdk:"name" json:"name,omitempty"` + Path *string `tfsdk:"path" json:"path,omitempty"` + Property_names *[]string `tfsdk:"property_names" json:"property-names,omitempty"` + RawContent *string `tfsdk:"raw_content" json:"rawContent,omitempty"` + Type *string `tfsdk:"type" json:"type,omitempty"` + } `tfsdk:"sources" json:"sources,omitempty"` + Template *map[string]string `tfsdk:"template" json:"template,omitempty"` + Types *struct { + MediaType *string `tfsdk:"media_type" json:"mediaType,omitempty"` + Schema *struct { + Dollarschema *string `tfsdk:"dollarschema" json:"$schema,omitempty"` + Description *string `tfsdk:"description" json:"description,omitempty"` + Example *map[string]string `tfsdk:"example" json:"example,omitempty"` + ExternalDocs *struct { + Description *string `tfsdk:"description" json:"description,omitempty"` + Url *string `tfsdk:"url" json:"url,omitempty"` + } `tfsdk:"external_docs" json:"externalDocs,omitempty"` + Id *string `tfsdk:"id" json:"id,omitempty"` + Properties *struct { + Default *map[string]string `tfsdk:"default" json:"default,omitempty"` + Deprecated *bool `tfsdk:"deprecated" json:"deprecated,omitempty"` + Description *string `tfsdk:"description" json:"description,omitempty"` + Enum *[]string `tfsdk:"enum" json:"enum,omitempty"` + Example *map[string]string `tfsdk:"example" json:"example,omitempty"` + ExclusiveMaximum *bool `tfsdk:"exclusive_maximum" json:"exclusiveMaximum,omitempty"` + ExclusiveMinimum *bool `tfsdk:"exclusive_minimum" json:"exclusiveMinimum,omitempty"` + Format *string `tfsdk:"format" json:"format,omitempty"` + Id *string `tfsdk:"id" json:"id,omitempty"` + MaxItems *int64 `tfsdk:"max_items" json:"maxItems,omitempty"` + MaxLength *int64 `tfsdk:"max_length" json:"maxLength,omitempty"` + MaxProperties *int64 `tfsdk:"max_properties" json:"maxProperties,omitempty"` + Maximum *string `tfsdk:"maximum" json:"maximum,omitempty"` + MinItems *int64 `tfsdk:"min_items" json:"minItems,omitempty"` + MinLength *int64 `tfsdk:"min_length" json:"minLength,omitempty"` + MinProperties *int64 `tfsdk:"min_properties" json:"minProperties,omitempty"` + Minimum *string `tfsdk:"minimum" json:"minimum,omitempty"` + MultipleOf *string `tfsdk:"multiple_of" json:"multipleOf,omitempty"` + Nullable *bool `tfsdk:"nullable" json:"nullable,omitempty"` + Pattern *string `tfsdk:"pattern" json:"pattern,omitempty"` + Title *string `tfsdk:"title" json:"title,omitempty"` + Type *string `tfsdk:"type" json:"type,omitempty"` + UniqueItems *bool `tfsdk:"unique_items" json:"uniqueItems,omitempty"` + X_descriptors *[]string `tfsdk:"x_descriptors" json:"x-descriptors,omitempty"` + } `tfsdk:"properties" json:"properties,omitempty"` + Required *[]string `tfsdk:"required" json:"required,omitempty"` + Title *string `tfsdk:"title" json:"title,omitempty"` + Type *string `tfsdk:"type" json:"type,omitempty"` + } `tfsdk:"schema" json:"schema,omitempty"` + } `tfsdk:"types" json:"types,omitempty"` + } `tfsdk:"versions" json:"versions,omitempty"` } `tfsdk:"spec" json:"spec,omitempty"` } @@ -1503,6 +1667,1234 @@ func (r *CamelApacheOrgKameletV1Manifest) Schema(_ context.Context, _ datasource Optional: true, Computed: false, }, + + "versions": schema.SingleNestedAttribute{ + Description: "the optional versions available for this Kamelet. This field may not be taken in account by Camel core and is meant to supportany user defined versioning model on cluster only. If the user wants to use any given version, she must materialize a file with the given version specas the 'main' Kamelet spec on the runtime.", + MarkdownDescription: "the optional versions available for this Kamelet. This field may not be taken in account by Camel core and is meant to supportany user defined versioning model on cluster only. If the user wants to use any given version, she must materialize a file with the given version specas the 'main' Kamelet spec on the runtime.", + Attributes: map[string]schema.Attribute{ + "data_types": schema.SingleNestedAttribute{ + Description: "data specification types for the events consumed/produced by the Kamelet", + MarkdownDescription: "data specification types for the events consumed/produced by the Kamelet", + Attributes: map[string]schema.Attribute{ + "default": schema.StringAttribute{ + Description: "the default data type for this Kamelet", + MarkdownDescription: "the default data type for this Kamelet", + Required: false, + Optional: true, + Computed: false, + }, + + "headers": schema.SingleNestedAttribute{ + Description: "one to many header specifications", + MarkdownDescription: "one to many header specifications", + Attributes: map[string]schema.Attribute{ + "default": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "description": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "required": schema.BoolAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "title": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "type": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + + "types": schema.SingleNestedAttribute{ + Description: "one to many data type specifications", + MarkdownDescription: "one to many data type specifications", + Attributes: map[string]schema.Attribute{ + "dependencies": schema.ListAttribute{ + Description: "the list of Camel or Maven dependencies required by the data type", + MarkdownDescription: "the list of Camel or Maven dependencies required by the data type", + ElementType: types.StringType, + Required: false, + Optional: true, + Computed: false, + }, + + "description": schema.StringAttribute{ + Description: "optional description", + MarkdownDescription: "optional description", + Required: false, + Optional: true, + Computed: false, + }, + + "format": schema.StringAttribute{ + Description: "the data type format name", + MarkdownDescription: "the data type format name", + Required: false, + Optional: true, + Computed: false, + }, + + "headers": schema.SingleNestedAttribute{ + Description: "one to many header specifications", + MarkdownDescription: "one to many header specifications", + Attributes: map[string]schema.Attribute{ + "default": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "description": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "required": schema.BoolAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "title": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "type": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + + "media_type": schema.StringAttribute{ + Description: "media type as expected for HTTP media types (ie, application/json)", + MarkdownDescription: "media type as expected for HTTP media types (ie, application/json)", + Required: false, + Optional: true, + Computed: false, + }, + + "schema": schema.SingleNestedAttribute{ + Description: "the expected schema for the data type", + MarkdownDescription: "the expected schema for the data type", + Attributes: map[string]schema.Attribute{ + "dollarschema": schema.StringAttribute{ + Description: "JSONSchemaURL represents a schema url.", + MarkdownDescription: "JSONSchemaURL represents a schema url.", + Required: false, + Optional: true, + Computed: false, + }, + + "description": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "example": schema.MapAttribute{ + Description: "JSON represents any valid JSON value.These types are supported: bool, int64, float64, string, []interface{}, map[string]interface{} and nil.", + MarkdownDescription: "JSON represents any valid JSON value.These types are supported: bool, int64, float64, string, []interface{}, map[string]interface{} and nil.", + ElementType: types.StringType, + Required: false, + Optional: true, + Computed: false, + }, + + "external_docs": schema.SingleNestedAttribute{ + Description: "ExternalDocumentation allows referencing an external resource for extended documentation.", + MarkdownDescription: "ExternalDocumentation allows referencing an external resource for extended documentation.", + Attributes: map[string]schema.Attribute{ + "description": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "url": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + + "id": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "properties": schema.SingleNestedAttribute{ + Description: "", + MarkdownDescription: "", + Attributes: map[string]schema.Attribute{ + "default": schema.MapAttribute{ + Description: "default is a default value for undefined object fields.", + MarkdownDescription: "default is a default value for undefined object fields.", + ElementType: types.StringType, + Required: false, + Optional: true, + Computed: false, + }, + + "deprecated": schema.BoolAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "description": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "enum": schema.ListAttribute{ + Description: "", + MarkdownDescription: "", + ElementType: types.StringType, + Required: false, + Optional: true, + Computed: false, + }, + + "example": schema.MapAttribute{ + Description: "JSON represents any valid JSON value.These types are supported: bool, int64, float64, string, []interface{}, map[string]interface{} and nil.", + MarkdownDescription: "JSON represents any valid JSON value.These types are supported: bool, int64, float64, string, []interface{}, map[string]interface{} and nil.", + ElementType: types.StringType, + Required: false, + Optional: true, + Computed: false, + }, + + "exclusive_maximum": schema.BoolAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "exclusive_minimum": schema.BoolAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "format": schema.StringAttribute{ + Description: "format is an OpenAPI v3 format string. Unknown formats are ignored. The following formats are validated:- bsonobjectid: a bson object ID, i.e. a 24 characters hex string- uri: an URI as parsed by Golang net/url.ParseRequestURI- email: an email address as parsed by Golang net/mail.ParseAddress- hostname: a valid representation for an Internet host name, as defined by RFC 1034, section 3.1 [RFC1034].- ipv4: an IPv4 IP as parsed by Golang net.ParseIP- ipv6: an IPv6 IP as parsed by Golang net.ParseIP- cidr: a CIDR as parsed by Golang net.ParseCIDR- mac: a MAC address as parsed by Golang net.ParseMAC- uuid: an UUID that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?[0-9a-f]{4}-?[0-9a-f]{4}-?[0-9a-f]{12}$- uuid3: an UUID3 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?3[0-9a-f]{3}-?[0-9a-f]{4}-?[0-9a-f]{12}$- uuid4: an UUID4 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?4[0-9a-f]{3}-?[89ab][0-9a-f]{3}-?[0-9a-f]{12}$- uuid5: an UUID5 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?5[0-9a-f]{3}-?[89ab][0-9a-f]{3}-?[0-9a-f]{12}$- isbn: an ISBN10 or ISBN13 number string like '0321751043' or '978-0321751041'- isbn10: an ISBN10 number string like '0321751043'- isbn13: an ISBN13 number string like '978-0321751041'- creditcard: a credit card number defined by the regex ^(?:4[0-9]{12}(?:[0-9]{3})?|5[1-5][0-9]{14}|6(?:011|5[0-9][0-9])[0-9]{12}|3[47][0-9]{13}|3(?:0[0-5]|[68][0-9])[0-9]{11}|(?:2131|1800|35d{3})d{11})$ with any non digit characters mixed in- ssn: a U.S. social security number following the regex ^d{3}[- ]?d{2}[- ]?d{4}$- hexcolor: an hexadecimal color code like '#FFFFFF' following the regex ^#?([0-9a-fA-F]{3}|[0-9a-fA-F]{6})$- rgbcolor: an RGB color code like rgb like 'rgb(255,255,255)'- byte: base64 encoded binary data- password: any kind of string- date: a date string like '2006-01-02' as defined by full-date in RFC3339- duration: a duration string like '22 ns' as parsed by Golang time.ParseDuration or compatible with Scala duration format- datetime: a date time string like '2014-12-15T19:30:20.000Z' as defined by date-time in RFC3339.", + MarkdownDescription: "format is an OpenAPI v3 format string. Unknown formats are ignored. The following formats are validated:- bsonobjectid: a bson object ID, i.e. a 24 characters hex string- uri: an URI as parsed by Golang net/url.ParseRequestURI- email: an email address as parsed by Golang net/mail.ParseAddress- hostname: a valid representation for an Internet host name, as defined by RFC 1034, section 3.1 [RFC1034].- ipv4: an IPv4 IP as parsed by Golang net.ParseIP- ipv6: an IPv6 IP as parsed by Golang net.ParseIP- cidr: a CIDR as parsed by Golang net.ParseCIDR- mac: a MAC address as parsed by Golang net.ParseMAC- uuid: an UUID that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?[0-9a-f]{4}-?[0-9a-f]{4}-?[0-9a-f]{12}$- uuid3: an UUID3 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?3[0-9a-f]{3}-?[0-9a-f]{4}-?[0-9a-f]{12}$- uuid4: an UUID4 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?4[0-9a-f]{3}-?[89ab][0-9a-f]{3}-?[0-9a-f]{12}$- uuid5: an UUID5 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?5[0-9a-f]{3}-?[89ab][0-9a-f]{3}-?[0-9a-f]{12}$- isbn: an ISBN10 or ISBN13 number string like '0321751043' or '978-0321751041'- isbn10: an ISBN10 number string like '0321751043'- isbn13: an ISBN13 number string like '978-0321751041'- creditcard: a credit card number defined by the regex ^(?:4[0-9]{12}(?:[0-9]{3})?|5[1-5][0-9]{14}|6(?:011|5[0-9][0-9])[0-9]{12}|3[47][0-9]{13}|3(?:0[0-5]|[68][0-9])[0-9]{11}|(?:2131|1800|35d{3})d{11})$ with any non digit characters mixed in- ssn: a U.S. social security number following the regex ^d{3}[- ]?d{2}[- ]?d{4}$- hexcolor: an hexadecimal color code like '#FFFFFF' following the regex ^#?([0-9a-fA-F]{3}|[0-9a-fA-F]{6})$- rgbcolor: an RGB color code like rgb like 'rgb(255,255,255)'- byte: base64 encoded binary data- password: any kind of string- date: a date string like '2006-01-02' as defined by full-date in RFC3339- duration: a duration string like '22 ns' as parsed by Golang time.ParseDuration or compatible with Scala duration format- datetime: a date time string like '2014-12-15T19:30:20.000Z' as defined by date-time in RFC3339.", + Required: false, + Optional: true, + Computed: false, + }, + + "id": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "max_items": schema.Int64Attribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "max_length": schema.Int64Attribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "max_properties": schema.Int64Attribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "maximum": schema.StringAttribute{ + Description: "A Number represents a JSON number literal.", + MarkdownDescription: "A Number represents a JSON number literal.", + Required: false, + Optional: true, + Computed: false, + }, + + "min_items": schema.Int64Attribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "min_length": schema.Int64Attribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "min_properties": schema.Int64Attribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "minimum": schema.StringAttribute{ + Description: "A Number represents a JSON number literal.", + MarkdownDescription: "A Number represents a JSON number literal.", + Required: false, + Optional: true, + Computed: false, + }, + + "multiple_of": schema.StringAttribute{ + Description: "A Number represents a JSON number literal.", + MarkdownDescription: "A Number represents a JSON number literal.", + Required: false, + Optional: true, + Computed: false, + }, + + "nullable": schema.BoolAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "pattern": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "title": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "type": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "unique_items": schema.BoolAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "x_descriptors": schema.ListAttribute{ + Description: "XDescriptors is a list of extended properties that trigger a custom behavior in external systems", + MarkdownDescription: "XDescriptors is a list of extended properties that trigger a custom behavior in external systems", + ElementType: types.StringType, + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + + "required": schema.ListAttribute{ + Description: "", + MarkdownDescription: "", + ElementType: types.StringType, + Required: false, + Optional: true, + Computed: false, + }, + + "title": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "type": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + + "scheme": schema.StringAttribute{ + Description: "the data type component scheme", + MarkdownDescription: "the data type component scheme", + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + + "definition": schema.SingleNestedAttribute{ + Description: "defines the formal configuration of the Kamelet", + MarkdownDescription: "defines the formal configuration of the Kamelet", + Attributes: map[string]schema.Attribute{ + "dollarschema": schema.StringAttribute{ + Description: "JSONSchemaURL represents a schema url.", + MarkdownDescription: "JSONSchemaURL represents a schema url.", + Required: false, + Optional: true, + Computed: false, + }, + + "description": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "example": schema.MapAttribute{ + Description: "JSON represents any valid JSON value.These types are supported: bool, int64, float64, string, []interface{}, map[string]interface{} and nil.", + MarkdownDescription: "JSON represents any valid JSON value.These types are supported: bool, int64, float64, string, []interface{}, map[string]interface{} and nil.", + ElementType: types.StringType, + Required: false, + Optional: true, + Computed: false, + }, + + "external_docs": schema.SingleNestedAttribute{ + Description: "ExternalDocumentation allows referencing an external resource for extended documentation.", + MarkdownDescription: "ExternalDocumentation allows referencing an external resource for extended documentation.", + Attributes: map[string]schema.Attribute{ + "description": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "url": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + + "id": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "properties": schema.SingleNestedAttribute{ + Description: "", + MarkdownDescription: "", + Attributes: map[string]schema.Attribute{ + "default": schema.MapAttribute{ + Description: "default is a default value for undefined object fields.", + MarkdownDescription: "default is a default value for undefined object fields.", + ElementType: types.StringType, + Required: false, + Optional: true, + Computed: false, + }, + + "deprecated": schema.BoolAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "description": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "enum": schema.ListAttribute{ + Description: "", + MarkdownDescription: "", + ElementType: types.StringType, + Required: false, + Optional: true, + Computed: false, + }, + + "example": schema.MapAttribute{ + Description: "JSON represents any valid JSON value.These types are supported: bool, int64, float64, string, []interface{}, map[string]interface{} and nil.", + MarkdownDescription: "JSON represents any valid JSON value.These types are supported: bool, int64, float64, string, []interface{}, map[string]interface{} and nil.", + ElementType: types.StringType, + Required: false, + Optional: true, + Computed: false, + }, + + "exclusive_maximum": schema.BoolAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "exclusive_minimum": schema.BoolAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "format": schema.StringAttribute{ + Description: "format is an OpenAPI v3 format string. Unknown formats are ignored. The following formats are validated:- bsonobjectid: a bson object ID, i.e. a 24 characters hex string- uri: an URI as parsed by Golang net/url.ParseRequestURI- email: an email address as parsed by Golang net/mail.ParseAddress- hostname: a valid representation for an Internet host name, as defined by RFC 1034, section 3.1 [RFC1034].- ipv4: an IPv4 IP as parsed by Golang net.ParseIP- ipv6: an IPv6 IP as parsed by Golang net.ParseIP- cidr: a CIDR as parsed by Golang net.ParseCIDR- mac: a MAC address as parsed by Golang net.ParseMAC- uuid: an UUID that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?[0-9a-f]{4}-?[0-9a-f]{4}-?[0-9a-f]{12}$- uuid3: an UUID3 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?3[0-9a-f]{3}-?[0-9a-f]{4}-?[0-9a-f]{12}$- uuid4: an UUID4 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?4[0-9a-f]{3}-?[89ab][0-9a-f]{3}-?[0-9a-f]{12}$- uuid5: an UUID5 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?5[0-9a-f]{3}-?[89ab][0-9a-f]{3}-?[0-9a-f]{12}$- isbn: an ISBN10 or ISBN13 number string like '0321751043' or '978-0321751041'- isbn10: an ISBN10 number string like '0321751043'- isbn13: an ISBN13 number string like '978-0321751041'- creditcard: a credit card number defined by the regex ^(?:4[0-9]{12}(?:[0-9]{3})?|5[1-5][0-9]{14}|6(?:011|5[0-9][0-9])[0-9]{12}|3[47][0-9]{13}|3(?:0[0-5]|[68][0-9])[0-9]{11}|(?:2131|1800|35d{3})d{11})$ with any non digit characters mixed in- ssn: a U.S. social security number following the regex ^d{3}[- ]?d{2}[- ]?d{4}$- hexcolor: an hexadecimal color code like '#FFFFFF' following the regex ^#?([0-9a-fA-F]{3}|[0-9a-fA-F]{6})$- rgbcolor: an RGB color code like rgb like 'rgb(255,255,255)'- byte: base64 encoded binary data- password: any kind of string- date: a date string like '2006-01-02' as defined by full-date in RFC3339- duration: a duration string like '22 ns' as parsed by Golang time.ParseDuration or compatible with Scala duration format- datetime: a date time string like '2014-12-15T19:30:20.000Z' as defined by date-time in RFC3339.", + MarkdownDescription: "format is an OpenAPI v3 format string. Unknown formats are ignored. The following formats are validated:- bsonobjectid: a bson object ID, i.e. a 24 characters hex string- uri: an URI as parsed by Golang net/url.ParseRequestURI- email: an email address as parsed by Golang net/mail.ParseAddress- hostname: a valid representation for an Internet host name, as defined by RFC 1034, section 3.1 [RFC1034].- ipv4: an IPv4 IP as parsed by Golang net.ParseIP- ipv6: an IPv6 IP as parsed by Golang net.ParseIP- cidr: a CIDR as parsed by Golang net.ParseCIDR- mac: a MAC address as parsed by Golang net.ParseMAC- uuid: an UUID that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?[0-9a-f]{4}-?[0-9a-f]{4}-?[0-9a-f]{12}$- uuid3: an UUID3 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?3[0-9a-f]{3}-?[0-9a-f]{4}-?[0-9a-f]{12}$- uuid4: an UUID4 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?4[0-9a-f]{3}-?[89ab][0-9a-f]{3}-?[0-9a-f]{12}$- uuid5: an UUID5 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?5[0-9a-f]{3}-?[89ab][0-9a-f]{3}-?[0-9a-f]{12}$- isbn: an ISBN10 or ISBN13 number string like '0321751043' or '978-0321751041'- isbn10: an ISBN10 number string like '0321751043'- isbn13: an ISBN13 number string like '978-0321751041'- creditcard: a credit card number defined by the regex ^(?:4[0-9]{12}(?:[0-9]{3})?|5[1-5][0-9]{14}|6(?:011|5[0-9][0-9])[0-9]{12}|3[47][0-9]{13}|3(?:0[0-5]|[68][0-9])[0-9]{11}|(?:2131|1800|35d{3})d{11})$ with any non digit characters mixed in- ssn: a U.S. social security number following the regex ^d{3}[- ]?d{2}[- ]?d{4}$- hexcolor: an hexadecimal color code like '#FFFFFF' following the regex ^#?([0-9a-fA-F]{3}|[0-9a-fA-F]{6})$- rgbcolor: an RGB color code like rgb like 'rgb(255,255,255)'- byte: base64 encoded binary data- password: any kind of string- date: a date string like '2006-01-02' as defined by full-date in RFC3339- duration: a duration string like '22 ns' as parsed by Golang time.ParseDuration or compatible with Scala duration format- datetime: a date time string like '2014-12-15T19:30:20.000Z' as defined by date-time in RFC3339.", + Required: false, + Optional: true, + Computed: false, + }, + + "id": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "max_items": schema.Int64Attribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "max_length": schema.Int64Attribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "max_properties": schema.Int64Attribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "maximum": schema.StringAttribute{ + Description: "A Number represents a JSON number literal.", + MarkdownDescription: "A Number represents a JSON number literal.", + Required: false, + Optional: true, + Computed: false, + }, + + "min_items": schema.Int64Attribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "min_length": schema.Int64Attribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "min_properties": schema.Int64Attribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "minimum": schema.StringAttribute{ + Description: "A Number represents a JSON number literal.", + MarkdownDescription: "A Number represents a JSON number literal.", + Required: false, + Optional: true, + Computed: false, + }, + + "multiple_of": schema.StringAttribute{ + Description: "A Number represents a JSON number literal.", + MarkdownDescription: "A Number represents a JSON number literal.", + Required: false, + Optional: true, + Computed: false, + }, + + "nullable": schema.BoolAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "pattern": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "title": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "type": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "unique_items": schema.BoolAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "x_descriptors": schema.ListAttribute{ + Description: "XDescriptors is a list of extended properties that trigger a custom behavior in external systems", + MarkdownDescription: "XDescriptors is a list of extended properties that trigger a custom behavior in external systems", + ElementType: types.StringType, + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + + "required": schema.ListAttribute{ + Description: "", + MarkdownDescription: "", + ElementType: types.StringType, + Required: false, + Optional: true, + Computed: false, + }, + + "title": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "type": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + + "dependencies": schema.ListAttribute{ + Description: "Camel dependencies needed by the Kamelet", + MarkdownDescription: "Camel dependencies needed by the Kamelet", + ElementType: types.StringType, + Required: false, + Optional: true, + Computed: false, + }, + + "sources": schema.ListNestedAttribute{ + Description: "sources in any Camel DSL supported", + MarkdownDescription: "sources in any Camel DSL supported", + NestedObject: schema.NestedAttributeObject{ + Attributes: map[string]schema.Attribute{ + "compression": schema.BoolAttribute{ + Description: "if the content is compressed (base64 encrypted)", + MarkdownDescription: "if the content is compressed (base64 encrypted)", + Required: false, + Optional: true, + Computed: false, + }, + + "content": schema.StringAttribute{ + Description: "the source code (plain text)", + MarkdownDescription: "the source code (plain text)", + Required: false, + Optional: true, + Computed: false, + }, + + "content_key": schema.StringAttribute{ + Description: "the confimap key holding the source content", + MarkdownDescription: "the confimap key holding the source content", + Required: false, + Optional: true, + Computed: false, + }, + + "content_ref": schema.StringAttribute{ + Description: "the confimap reference holding the source content", + MarkdownDescription: "the confimap reference holding the source content", + Required: false, + Optional: true, + Computed: false, + }, + + "content_type": schema.StringAttribute{ + Description: "the content type (tipically text or binary)", + MarkdownDescription: "the content type (tipically text or binary)", + Required: false, + Optional: true, + Computed: false, + }, + + "from_kamelet": schema.BoolAttribute{ + Description: "True if the spec is generated from a Kamelet", + MarkdownDescription: "True if the spec is generated from a Kamelet", + Required: false, + Optional: true, + Computed: false, + }, + + "interceptors": schema.ListAttribute{ + Description: "Interceptors are optional identifiers the org.apache.camel.k.RoutesLoaderuses to pre/post process sources", + MarkdownDescription: "Interceptors are optional identifiers the org.apache.camel.k.RoutesLoaderuses to pre/post process sources", + ElementType: types.StringType, + Required: false, + Optional: true, + Computed: false, + }, + + "language": schema.StringAttribute{ + Description: "specify which is the language (Camel DSL) used to interpret this source code", + MarkdownDescription: "specify which is the language (Camel DSL) used to interpret this source code", + Required: false, + Optional: true, + Computed: false, + }, + + "loader": schema.StringAttribute{ + Description: "Loader is an optional id of the org.apache.camel.k.RoutesLoader that willinterpret this source at runtime", + MarkdownDescription: "Loader is an optional id of the org.apache.camel.k.RoutesLoader that willinterpret this source at runtime", + Required: false, + Optional: true, + Computed: false, + }, + + "name": schema.StringAttribute{ + Description: "the name of the specification", + MarkdownDescription: "the name of the specification", + Required: false, + Optional: true, + Computed: false, + }, + + "path": schema.StringAttribute{ + Description: "the path where the file is stored", + MarkdownDescription: "the path where the file is stored", + Required: false, + Optional: true, + Computed: false, + }, + + "property_names": schema.ListAttribute{ + Description: "List of property names defined in the source (e.g. if type is 'template')", + MarkdownDescription: "List of property names defined in the source (e.g. if type is 'template')", + ElementType: types.StringType, + Required: false, + Optional: true, + Computed: false, + }, + + "raw_content": schema.StringAttribute{ + Description: "the source code (binary)", + MarkdownDescription: "the source code (binary)", + Required: false, + Optional: true, + Computed: false, + Validators: []validator.String{ + validators.Base64Validator(), + }, + }, + + "type": schema.StringAttribute{ + Description: "Type defines the kind of source described by this object", + MarkdownDescription: "Type defines the kind of source described by this object", + Required: false, + Optional: true, + Computed: false, + }, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + + "template": schema.MapAttribute{ + Description: "the main source in YAML DSL", + MarkdownDescription: "the main source in YAML DSL", + ElementType: types.StringType, + Required: false, + Optional: true, + Computed: false, + }, + + "types": schema.SingleNestedAttribute{ + Description: "data specification types for the events consumed/produced by the KameletDeprecated: In favor of using DataTypes", + MarkdownDescription: "data specification types for the events consumed/produced by the KameletDeprecated: In favor of using DataTypes", + Attributes: map[string]schema.Attribute{ + "media_type": schema.StringAttribute{ + Description: "media type as expected for HTTP media types (ie, application/json)", + MarkdownDescription: "media type as expected for HTTP media types (ie, application/json)", + Required: false, + Optional: true, + Computed: false, + }, + + "schema": schema.SingleNestedAttribute{ + Description: "the expected schema for the event", + MarkdownDescription: "the expected schema for the event", + Attributes: map[string]schema.Attribute{ + "dollarschema": schema.StringAttribute{ + Description: "JSONSchemaURL represents a schema url.", + MarkdownDescription: "JSONSchemaURL represents a schema url.", + Required: false, + Optional: true, + Computed: false, + }, + + "description": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "example": schema.MapAttribute{ + Description: "JSON represents any valid JSON value.These types are supported: bool, int64, float64, string, []interface{}, map[string]interface{} and nil.", + MarkdownDescription: "JSON represents any valid JSON value.These types are supported: bool, int64, float64, string, []interface{}, map[string]interface{} and nil.", + ElementType: types.StringType, + Required: false, + Optional: true, + Computed: false, + }, + + "external_docs": schema.SingleNestedAttribute{ + Description: "ExternalDocumentation allows referencing an external resource for extended documentation.", + MarkdownDescription: "ExternalDocumentation allows referencing an external resource for extended documentation.", + Attributes: map[string]schema.Attribute{ + "description": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "url": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + + "id": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "properties": schema.SingleNestedAttribute{ + Description: "", + MarkdownDescription: "", + Attributes: map[string]schema.Attribute{ + "default": schema.MapAttribute{ + Description: "default is a default value for undefined object fields.", + MarkdownDescription: "default is a default value for undefined object fields.", + ElementType: types.StringType, + Required: false, + Optional: true, + Computed: false, + }, + + "deprecated": schema.BoolAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "description": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "enum": schema.ListAttribute{ + Description: "", + MarkdownDescription: "", + ElementType: types.StringType, + Required: false, + Optional: true, + Computed: false, + }, + + "example": schema.MapAttribute{ + Description: "JSON represents any valid JSON value.These types are supported: bool, int64, float64, string, []interface{}, map[string]interface{} and nil.", + MarkdownDescription: "JSON represents any valid JSON value.These types are supported: bool, int64, float64, string, []interface{}, map[string]interface{} and nil.", + ElementType: types.StringType, + Required: false, + Optional: true, + Computed: false, + }, + + "exclusive_maximum": schema.BoolAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "exclusive_minimum": schema.BoolAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "format": schema.StringAttribute{ + Description: "format is an OpenAPI v3 format string. Unknown formats are ignored. The following formats are validated:- bsonobjectid: a bson object ID, i.e. a 24 characters hex string- uri: an URI as parsed by Golang net/url.ParseRequestURI- email: an email address as parsed by Golang net/mail.ParseAddress- hostname: a valid representation for an Internet host name, as defined by RFC 1034, section 3.1 [RFC1034].- ipv4: an IPv4 IP as parsed by Golang net.ParseIP- ipv6: an IPv6 IP as parsed by Golang net.ParseIP- cidr: a CIDR as parsed by Golang net.ParseCIDR- mac: a MAC address as parsed by Golang net.ParseMAC- uuid: an UUID that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?[0-9a-f]{4}-?[0-9a-f]{4}-?[0-9a-f]{12}$- uuid3: an UUID3 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?3[0-9a-f]{3}-?[0-9a-f]{4}-?[0-9a-f]{12}$- uuid4: an UUID4 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?4[0-9a-f]{3}-?[89ab][0-9a-f]{3}-?[0-9a-f]{12}$- uuid5: an UUID5 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?5[0-9a-f]{3}-?[89ab][0-9a-f]{3}-?[0-9a-f]{12}$- isbn: an ISBN10 or ISBN13 number string like '0321751043' or '978-0321751041'- isbn10: an ISBN10 number string like '0321751043'- isbn13: an ISBN13 number string like '978-0321751041'- creditcard: a credit card number defined by the regex ^(?:4[0-9]{12}(?:[0-9]{3})?|5[1-5][0-9]{14}|6(?:011|5[0-9][0-9])[0-9]{12}|3[47][0-9]{13}|3(?:0[0-5]|[68][0-9])[0-9]{11}|(?:2131|1800|35d{3})d{11})$ with any non digit characters mixed in- ssn: a U.S. social security number following the regex ^d{3}[- ]?d{2}[- ]?d{4}$- hexcolor: an hexadecimal color code like '#FFFFFF' following the regex ^#?([0-9a-fA-F]{3}|[0-9a-fA-F]{6})$- rgbcolor: an RGB color code like rgb like 'rgb(255,255,255)'- byte: base64 encoded binary data- password: any kind of string- date: a date string like '2006-01-02' as defined by full-date in RFC3339- duration: a duration string like '22 ns' as parsed by Golang time.ParseDuration or compatible with Scala duration format- datetime: a date time string like '2014-12-15T19:30:20.000Z' as defined by date-time in RFC3339.", + MarkdownDescription: "format is an OpenAPI v3 format string. Unknown formats are ignored. The following formats are validated:- bsonobjectid: a bson object ID, i.e. a 24 characters hex string- uri: an URI as parsed by Golang net/url.ParseRequestURI- email: an email address as parsed by Golang net/mail.ParseAddress- hostname: a valid representation for an Internet host name, as defined by RFC 1034, section 3.1 [RFC1034].- ipv4: an IPv4 IP as parsed by Golang net.ParseIP- ipv6: an IPv6 IP as parsed by Golang net.ParseIP- cidr: a CIDR as parsed by Golang net.ParseCIDR- mac: a MAC address as parsed by Golang net.ParseMAC- uuid: an UUID that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?[0-9a-f]{4}-?[0-9a-f]{4}-?[0-9a-f]{12}$- uuid3: an UUID3 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?3[0-9a-f]{3}-?[0-9a-f]{4}-?[0-9a-f]{12}$- uuid4: an UUID4 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?4[0-9a-f]{3}-?[89ab][0-9a-f]{3}-?[0-9a-f]{12}$- uuid5: an UUID5 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?5[0-9a-f]{3}-?[89ab][0-9a-f]{3}-?[0-9a-f]{12}$- isbn: an ISBN10 or ISBN13 number string like '0321751043' or '978-0321751041'- isbn10: an ISBN10 number string like '0321751043'- isbn13: an ISBN13 number string like '978-0321751041'- creditcard: a credit card number defined by the regex ^(?:4[0-9]{12}(?:[0-9]{3})?|5[1-5][0-9]{14}|6(?:011|5[0-9][0-9])[0-9]{12}|3[47][0-9]{13}|3(?:0[0-5]|[68][0-9])[0-9]{11}|(?:2131|1800|35d{3})d{11})$ with any non digit characters mixed in- ssn: a U.S. social security number following the regex ^d{3}[- ]?d{2}[- ]?d{4}$- hexcolor: an hexadecimal color code like '#FFFFFF' following the regex ^#?([0-9a-fA-F]{3}|[0-9a-fA-F]{6})$- rgbcolor: an RGB color code like rgb like 'rgb(255,255,255)'- byte: base64 encoded binary data- password: any kind of string- date: a date string like '2006-01-02' as defined by full-date in RFC3339- duration: a duration string like '22 ns' as parsed by Golang time.ParseDuration or compatible with Scala duration format- datetime: a date time string like '2014-12-15T19:30:20.000Z' as defined by date-time in RFC3339.", + Required: false, + Optional: true, + Computed: false, + }, + + "id": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "max_items": schema.Int64Attribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "max_length": schema.Int64Attribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "max_properties": schema.Int64Attribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "maximum": schema.StringAttribute{ + Description: "A Number represents a JSON number literal.", + MarkdownDescription: "A Number represents a JSON number literal.", + Required: false, + Optional: true, + Computed: false, + }, + + "min_items": schema.Int64Attribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "min_length": schema.Int64Attribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "min_properties": schema.Int64Attribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "minimum": schema.StringAttribute{ + Description: "A Number represents a JSON number literal.", + MarkdownDescription: "A Number represents a JSON number literal.", + Required: false, + Optional: true, + Computed: false, + }, + + "multiple_of": schema.StringAttribute{ + Description: "A Number represents a JSON number literal.", + MarkdownDescription: "A Number represents a JSON number literal.", + Required: false, + Optional: true, + Computed: false, + }, + + "nullable": schema.BoolAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "pattern": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "title": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "type": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "unique_items": schema.BoolAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "x_descriptors": schema.ListAttribute{ + Description: "XDescriptors is a list of extended properties that trigger a custom behavior in external systems", + MarkdownDescription: "XDescriptors is a list of extended properties that trigger a custom behavior in external systems", + ElementType: types.StringType, + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + + "required": schema.ListAttribute{ + Description: "", + MarkdownDescription: "", + ElementType: types.StringType, + Required: false, + Optional: true, + Computed: false, + }, + + "title": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "type": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, }, Required: false, Optional: true, diff --git a/internal/provider/camel_apache_org_v1/camel_apache_org_pipe_v1_manifest.go b/internal/provider/camel_apache_org_v1/camel_apache_org_pipe_v1_manifest.go index d6241ec63..69cd09a3e 100644 --- a/internal/provider/camel_apache_org_v1/camel_apache_org_pipe_v1_manifest.go +++ b/internal/provider/camel_apache_org_v1/camel_apache_org_pipe_v1_manifest.go @@ -1506,6 +1506,16 @@ type CamelApacheOrgPipeV1ManifestData struct { Strimzi *struct { Configuration *map[string]string `tfsdk:"configuration" json:"configuration,omitempty"` } `tfsdk:"strimzi" json:"strimzi,omitempty"` + Telemetry *struct { + Auto *bool `tfsdk:"auto" json:"auto,omitempty"` + Configuration *map[string]string `tfsdk:"configuration" json:"configuration,omitempty"` + Enabled *bool `tfsdk:"enabled" json:"enabled,omitempty"` + Endpoint *string `tfsdk:"endpoint" json:"endpoint,omitempty"` + Sampler *string `tfsdk:"sampler" json:"sampler,omitempty"` + Sampler_parent_based *bool `tfsdk:"sampler_parent_based" json:"sampler-parent-based,omitempty"` + Sampler_ratio *string `tfsdk:"sampler_ratio" json:"sampler-ratio,omitempty"` + ServiceName *string `tfsdk:"service_name" json:"serviceName,omitempty"` + } `tfsdk:"telemetry" json:"telemetry,omitempty"` Toleration *struct { Configuration *map[string]string `tfsdk:"configuration" json:"configuration,omitempty"` Enabled *bool `tfsdk:"enabled" json:"enabled,omitempty"` @@ -11754,6 +11764,80 @@ func (r *CamelApacheOrgPipeV1Manifest) Schema(_ context.Context, _ datasource.Sc Computed: false, }, + "telemetry": schema.SingleNestedAttribute{ + Description: "The configuration of Telemetry trait", + MarkdownDescription: "The configuration of Telemetry trait", + Attributes: map[string]schema.Attribute{ + "auto": schema.BoolAttribute{ + Description: "Enables automatic configuration of the trait, including automatic discovery of the telemetry endpoint.", + MarkdownDescription: "Enables automatic configuration of the trait, including automatic discovery of the telemetry endpoint.", + Required: false, + Optional: true, + Computed: false, + }, + + "configuration": schema.MapAttribute{ + Description: "Legacy trait configuration parameters.Deprecated: for backward compatibility.", + MarkdownDescription: "Legacy trait configuration parameters.Deprecated: for backward compatibility.", + ElementType: types.StringType, + Required: false, + Optional: true, + Computed: false, + }, + + "enabled": schema.BoolAttribute{ + Description: "Can be used to enable or disable a trait. All traits share this common property.", + MarkdownDescription: "Can be used to enable or disable a trait. All traits share this common property.", + Required: false, + Optional: true, + Computed: false, + }, + + "endpoint": schema.StringAttribute{ + Description: "The target endpoint of the Telemetry service (automatically discovered by default)", + MarkdownDescription: "The target endpoint of the Telemetry service (automatically discovered by default)", + Required: false, + Optional: true, + Computed: false, + }, + + "sampler": schema.StringAttribute{ + Description: "The sampler of the telemetry used for tracing (default 'on')", + MarkdownDescription: "The sampler of the telemetry used for tracing (default 'on')", + Required: false, + Optional: true, + Computed: false, + }, + + "sampler_parent_based": schema.BoolAttribute{ + Description: "The sampler of the telemetry used for tracing is parent based (default 'true')", + MarkdownDescription: "The sampler of the telemetry used for tracing is parent based (default 'true')", + Required: false, + Optional: true, + Computed: false, + }, + + "sampler_ratio": schema.StringAttribute{ + Description: "The sampler ratio of the telemetry used for tracing", + MarkdownDescription: "The sampler ratio of the telemetry used for tracing", + Required: false, + Optional: true, + Computed: false, + }, + + "service_name": schema.StringAttribute{ + Description: "The name of the service that publishes telemetry data (defaults to the integration name)", + MarkdownDescription: "The name of the service that publishes telemetry data (defaults to the integration name)", + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + "toleration": schema.SingleNestedAttribute{ Description: "The configuration of Toleration trait", MarkdownDescription: "The configuration of Toleration trait", diff --git a/internal/provider/camel_apache_org_v1alpha1/camel_apache_org_kamelet_binding_v1alpha1_manifest.go b/internal/provider/camel_apache_org_v1alpha1/camel_apache_org_kamelet_binding_v1alpha1_manifest.go index aa5a15f28..b083c6960 100644 --- a/internal/provider/camel_apache_org_v1alpha1/camel_apache_org_kamelet_binding_v1alpha1_manifest.go +++ b/internal/provider/camel_apache_org_v1alpha1/camel_apache_org_kamelet_binding_v1alpha1_manifest.go @@ -1506,6 +1506,16 @@ type CamelApacheOrgKameletBindingV1Alpha1ManifestData struct { Strimzi *struct { Configuration *map[string]string `tfsdk:"configuration" json:"configuration,omitempty"` } `tfsdk:"strimzi" json:"strimzi,omitempty"` + Telemetry *struct { + Auto *bool `tfsdk:"auto" json:"auto,omitempty"` + Configuration *map[string]string `tfsdk:"configuration" json:"configuration,omitempty"` + Enabled *bool `tfsdk:"enabled" json:"enabled,omitempty"` + Endpoint *string `tfsdk:"endpoint" json:"endpoint,omitempty"` + Sampler *string `tfsdk:"sampler" json:"sampler,omitempty"` + Sampler_parent_based *bool `tfsdk:"sampler_parent_based" json:"sampler-parent-based,omitempty"` + Sampler_ratio *string `tfsdk:"sampler_ratio" json:"sampler-ratio,omitempty"` + ServiceName *string `tfsdk:"service_name" json:"serviceName,omitempty"` + } `tfsdk:"telemetry" json:"telemetry,omitempty"` Toleration *struct { Configuration *map[string]string `tfsdk:"configuration" json:"configuration,omitempty"` Enabled *bool `tfsdk:"enabled" json:"enabled,omitempty"` @@ -11880,6 +11890,80 @@ func (r *CamelApacheOrgKameletBindingV1Alpha1Manifest) Schema(_ context.Context, Computed: false, }, + "telemetry": schema.SingleNestedAttribute{ + Description: "The configuration of Telemetry trait", + MarkdownDescription: "The configuration of Telemetry trait", + Attributes: map[string]schema.Attribute{ + "auto": schema.BoolAttribute{ + Description: "Enables automatic configuration of the trait, including automatic discovery of the telemetry endpoint.", + MarkdownDescription: "Enables automatic configuration of the trait, including automatic discovery of the telemetry endpoint.", + Required: false, + Optional: true, + Computed: false, + }, + + "configuration": schema.MapAttribute{ + Description: "Legacy trait configuration parameters.Deprecated: for backward compatibility.", + MarkdownDescription: "Legacy trait configuration parameters.Deprecated: for backward compatibility.", + ElementType: types.StringType, + Required: false, + Optional: true, + Computed: false, + }, + + "enabled": schema.BoolAttribute{ + Description: "Can be used to enable or disable a trait. All traits share this common property.", + MarkdownDescription: "Can be used to enable or disable a trait. All traits share this common property.", + Required: false, + Optional: true, + Computed: false, + }, + + "endpoint": schema.StringAttribute{ + Description: "The target endpoint of the Telemetry service (automatically discovered by default)", + MarkdownDescription: "The target endpoint of the Telemetry service (automatically discovered by default)", + Required: false, + Optional: true, + Computed: false, + }, + + "sampler": schema.StringAttribute{ + Description: "The sampler of the telemetry used for tracing (default 'on')", + MarkdownDescription: "The sampler of the telemetry used for tracing (default 'on')", + Required: false, + Optional: true, + Computed: false, + }, + + "sampler_parent_based": schema.BoolAttribute{ + Description: "The sampler of the telemetry used for tracing is parent based (default 'true')", + MarkdownDescription: "The sampler of the telemetry used for tracing is parent based (default 'true')", + Required: false, + Optional: true, + Computed: false, + }, + + "sampler_ratio": schema.StringAttribute{ + Description: "The sampler ratio of the telemetry used for tracing", + MarkdownDescription: "The sampler ratio of the telemetry used for tracing", + Required: false, + Optional: true, + Computed: false, + }, + + "service_name": schema.StringAttribute{ + Description: "The name of the service that publishes telemetry data (defaults to the integration name)", + MarkdownDescription: "The name of the service that publishes telemetry data (defaults to the integration name)", + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + "toleration": schema.SingleNestedAttribute{ Description: "The configuration of Toleration trait", MarkdownDescription: "The configuration of Toleration trait", diff --git a/internal/provider/canaries_flanksource_com_v1/canaries_flanksource_com_component_v1_manifest.go b/internal/provider/canaries_flanksource_com_v1/canaries_flanksource_com_component_v1_manifest.go index b62a1a78e..6bad65a6e 100644 --- a/internal/provider/canaries_flanksource_com_v1/canaries_flanksource_com_component_v1_manifest.go +++ b/internal/provider/canaries_flanksource_com_v1/canaries_flanksource_com_component_v1_manifest.go @@ -68,6 +68,7 @@ type CanariesFlanksourceComComponentV1ManifestData struct { ExternalID *string `tfsdk:"external_id" json:"externalID,omitempty"` ForEach *map[string]string `tfsdk:"for_each" json:"forEach,omitempty"` Health *string `tfsdk:"health" json:"health,omitempty"` + HealthExpr *string `tfsdk:"health_expr" json:"healthExpr,omitempty"` Hidden *bool `tfsdk:"hidden" json:"hidden,omitempty"` Icon *string `tfsdk:"icon" json:"icon,omitempty"` Id *struct { @@ -403,6 +404,14 @@ func (r *CanariesFlanksourceComComponentV1Manifest) Schema(_ context.Context, _ Computed: false, }, + "health_expr": schema.StringAttribute{ + Description: "healthExpr allows defining a cel expression to evaluate the health of a componentbased on the summary.", + MarkdownDescription: "healthExpr allows defining a cel expression to evaluate the health of a componentbased on the summary.", + Required: false, + Optional: true, + Computed: false, + }, + "hidden": schema.BoolAttribute{ Description: "If set to true, do not display in UI", MarkdownDescription: "If set to true, do not display in UI", @@ -749,8 +758,8 @@ func (r *CanariesFlanksourceComComponentV1Manifest) Schema(_ context.Context, _ }, "status_expr": schema.StringAttribute{ - Description: "statusExpr allows defining a cel expression to evaluate the status of a componentbased on the summary and the related config", - MarkdownDescription: "statusExpr allows defining a cel expression to evaluate the status of a componentbased on the summary and the related config", + Description: "statusExpr allows defining a cel expression to evaluate the status of a componentbased on the summary.", + MarkdownDescription: "statusExpr allows defining a cel expression to evaluate the status of a componentbased on the summary.", Required: false, Optional: true, Computed: false, diff --git a/internal/provider/canaries_flanksource_com_v1/canaries_flanksource_com_topology_v1_manifest.go b/internal/provider/canaries_flanksource_com_v1/canaries_flanksource_com_topology_v1_manifest.go index f721b8e70..2c9276729 100644 --- a/internal/provider/canaries_flanksource_com_v1/canaries_flanksource_com_topology_v1_manifest.go +++ b/internal/provider/canaries_flanksource_com_v1/canaries_flanksource_com_topology_v1_manifest.go @@ -85,6 +85,7 @@ type CanariesFlanksourceComTopologyV1ManifestData struct { ExternalID *string `tfsdk:"external_id" json:"externalID,omitempty"` ForEach *map[string]string `tfsdk:"for_each" json:"forEach,omitempty"` Health *string `tfsdk:"health" json:"health,omitempty"` + HealthExpr *string `tfsdk:"health_expr" json:"healthExpr,omitempty"` Hidden *bool `tfsdk:"hidden" json:"hidden,omitempty"` Icon *string `tfsdk:"icon" json:"icon,omitempty"` Id *struct { @@ -183,8 +184,9 @@ type CanariesFlanksourceComTopologyV1ManifestData struct { } `tfsdk:"selector" json:"selector,omitempty"` Tag *string `tfsdk:"tag" json:"tag,omitempty"` } `tfsdk:"group_by" json:"groupBy,omitempty"` - Icon *string `tfsdk:"icon" json:"icon,omitempty"` - Id *struct { + HealthExpr *string `tfsdk:"health_expr" json:"healthExpr,omitempty"` + Icon *string `tfsdk:"icon" json:"icon,omitempty"` + Id *struct { Expr *string `tfsdk:"expr" json:"expr,omitempty"` Javascript *string `tfsdk:"javascript" json:"javascript,omitempty"` JsonPath *string `tfsdk:"json_path" json:"jsonPath,omitempty"` @@ -830,6 +832,14 @@ func (r *CanariesFlanksourceComTopologyV1Manifest) Schema(_ context.Context, _ d Computed: false, }, + "health_expr": schema.StringAttribute{ + Description: "healthExpr allows defining a cel expression to evaluate the health of a componentbased on the summary.", + MarkdownDescription: "healthExpr allows defining a cel expression to evaluate the health of a componentbased on the summary.", + Required: false, + Optional: true, + Computed: false, + }, + "hidden": schema.BoolAttribute{ Description: "If set to true, do not display in UI", MarkdownDescription: "If set to true, do not display in UI", @@ -1176,8 +1186,8 @@ func (r *CanariesFlanksourceComTopologyV1Manifest) Schema(_ context.Context, _ d }, "status_expr": schema.StringAttribute{ - Description: "statusExpr allows defining a cel expression to evaluate the status of a componentbased on the summary and the related config", - MarkdownDescription: "statusExpr allows defining a cel expression to evaluate the status of a componentbased on the summary and the related config", + Description: "statusExpr allows defining a cel expression to evaluate the status of a componentbased on the summary.", + MarkdownDescription: "statusExpr allows defining a cel expression to evaluate the status of a componentbased on the summary.", Required: false, Optional: true, Computed: false, @@ -1555,6 +1565,14 @@ func (r *CanariesFlanksourceComTopologyV1Manifest) Schema(_ context.Context, _ d Computed: false, }, + "health_expr": schema.StringAttribute{ + Description: "statusExpr allows defining a cel expression to evaluate the status of a componentbased on the summary.", + MarkdownDescription: "statusExpr allows defining a cel expression to evaluate the status of a componentbased on the summary.", + Required: false, + Optional: true, + Computed: false, + }, + "icon": schema.StringAttribute{ Description: "", MarkdownDescription: "", @@ -3128,8 +3146,8 @@ func (r *CanariesFlanksourceComTopologyV1Manifest) Schema(_ context.Context, _ d }, "status_expr": schema.StringAttribute{ - Description: "statusExpr allows defining a cel expression to evaluate the status of a componentbased on the summary and the related config", - MarkdownDescription: "statusExpr allows defining a cel expression to evaluate the status of a componentbased on the summary and the related config", + Description: "statusExpr allows defining a cel expression to evaluate the status of a componentbased on the summary.", + MarkdownDescription: "statusExpr allows defining a cel expression to evaluate the status of a componentbased on the summary.", Required: false, Optional: true, Computed: false, diff --git a/internal/provider/chainsaw_kyverno_io_v1alpha1/chainsaw_kyverno_io_configuration_v1alpha1_manifest.go b/internal/provider/chainsaw_kyverno_io_v1alpha1/chainsaw_kyverno_io_configuration_v1alpha1_manifest.go index 41bf3ca40..e57dffaf1 100644 --- a/internal/provider/chainsaw_kyverno_io_v1alpha1/chainsaw_kyverno_io_configuration_v1alpha1_manifest.go +++ b/internal/provider/chainsaw_kyverno_io_v1alpha1/chainsaw_kyverno_io_configuration_v1alpha1_manifest.go @@ -69,6 +69,7 @@ type ChainsawKyvernoIoConfigurationV1Alpha1ManifestData struct { } `tfsdk:"outputs" json:"outputs,omitempty"` SkipLogOutput *bool `tfsdk:"skip_log_output" json:"skipLogOutput,omitempty"` Timeout *string `tfsdk:"timeout" json:"timeout,omitempty"` + WorkDir *string `tfsdk:"work_dir" json:"workDir,omitempty"` } `tfsdk:"command" json:"command,omitempty"` Delete *struct { Bindings *[]struct { @@ -173,6 +174,7 @@ type ChainsawKyvernoIoConfigurationV1Alpha1ManifestData struct { } `tfsdk:"outputs" json:"outputs,omitempty"` SkipLogOutput *bool `tfsdk:"skip_log_output" json:"skipLogOutput,omitempty"` Timeout *string `tfsdk:"timeout" json:"timeout,omitempty"` + WorkDir *string `tfsdk:"work_dir" json:"workDir,omitempty"` } `tfsdk:"script" json:"script,omitempty"` Sleep *struct { Duration *string `tfsdk:"duration" json:"duration,omitempty"` @@ -485,6 +487,14 @@ func (r *ChainsawKyvernoIoConfigurationV1Alpha1Manifest) Schema(_ context.Contex Optional: true, Computed: false, }, + + "work_dir": schema.StringAttribute{ + Description: "WorkDir is the working directory for command.", + MarkdownDescription: "WorkDir is the working directory for command.", + Required: false, + Optional: true, + Computed: false, + }, }, Required: false, Optional: true, @@ -1231,6 +1241,14 @@ func (r *ChainsawKyvernoIoConfigurationV1Alpha1Manifest) Schema(_ context.Contex Optional: true, Computed: false, }, + + "work_dir": schema.StringAttribute{ + Description: "WorkDir is the working directory for script.", + MarkdownDescription: "WorkDir is the working directory for script.", + Required: false, + Optional: true, + Computed: false, + }, }, Required: false, Optional: true, diff --git a/internal/provider/chainsaw_kyverno_io_v1alpha1/chainsaw_kyverno_io_test_v1alpha1_manifest.go b/internal/provider/chainsaw_kyverno_io_v1alpha1/chainsaw_kyverno_io_test_v1alpha1_manifest.go index 01c213a1c..71d64aecf 100644 --- a/internal/provider/chainsaw_kyverno_io_v1alpha1/chainsaw_kyverno_io_test_v1alpha1_manifest.go +++ b/internal/provider/chainsaw_kyverno_io_v1alpha1/chainsaw_kyverno_io_test_v1alpha1_manifest.go @@ -72,6 +72,7 @@ type ChainsawKyvernoIoTestV1Alpha1ManifestData struct { } `tfsdk:"outputs" json:"outputs,omitempty"` SkipLogOutput *bool `tfsdk:"skip_log_output" json:"skipLogOutput,omitempty"` Timeout *string `tfsdk:"timeout" json:"timeout,omitempty"` + WorkDir *string `tfsdk:"work_dir" json:"workDir,omitempty"` } `tfsdk:"command" json:"command,omitempty"` Delete *struct { Bindings *[]struct { @@ -176,6 +177,7 @@ type ChainsawKyvernoIoTestV1Alpha1ManifestData struct { } `tfsdk:"outputs" json:"outputs,omitempty"` SkipLogOutput *bool `tfsdk:"skip_log_output" json:"skipLogOutput,omitempty"` Timeout *string `tfsdk:"timeout" json:"timeout,omitempty"` + WorkDir *string `tfsdk:"work_dir" json:"workDir,omitempty"` } `tfsdk:"script" json:"script,omitempty"` Sleep *struct { Duration *string `tfsdk:"duration" json:"duration,omitempty"` @@ -257,6 +259,7 @@ type ChainsawKyvernoIoTestV1Alpha1ManifestData struct { } `tfsdk:"outputs" json:"outputs,omitempty"` SkipLogOutput *bool `tfsdk:"skip_log_output" json:"skipLogOutput,omitempty"` Timeout *string `tfsdk:"timeout" json:"timeout,omitempty"` + WorkDir *string `tfsdk:"work_dir" json:"workDir,omitempty"` } `tfsdk:"command" json:"command,omitempty"` Delete *struct { Bindings *[]struct { @@ -361,6 +364,7 @@ type ChainsawKyvernoIoTestV1Alpha1ManifestData struct { } `tfsdk:"outputs" json:"outputs,omitempty"` SkipLogOutput *bool `tfsdk:"skip_log_output" json:"skipLogOutput,omitempty"` Timeout *string `tfsdk:"timeout" json:"timeout,omitempty"` + WorkDir *string `tfsdk:"work_dir" json:"workDir,omitempty"` } `tfsdk:"script" json:"script,omitempty"` Sleep *struct { Duration *string `tfsdk:"duration" json:"duration,omitempty"` @@ -416,6 +420,7 @@ type ChainsawKyvernoIoTestV1Alpha1ManifestData struct { } `tfsdk:"outputs" json:"outputs,omitempty"` SkipLogOutput *bool `tfsdk:"skip_log_output" json:"skipLogOutput,omitempty"` Timeout *string `tfsdk:"timeout" json:"timeout,omitempty"` + WorkDir *string `tfsdk:"work_dir" json:"workDir,omitempty"` } `tfsdk:"command" json:"command,omitempty"` Delete *struct { Bindings *[]struct { @@ -520,6 +525,7 @@ type ChainsawKyvernoIoTestV1Alpha1ManifestData struct { } `tfsdk:"outputs" json:"outputs,omitempty"` SkipLogOutput *bool `tfsdk:"skip_log_output" json:"skipLogOutput,omitempty"` Timeout *string `tfsdk:"timeout" json:"timeout,omitempty"` + WorkDir *string `tfsdk:"work_dir" json:"workDir,omitempty"` } `tfsdk:"script" json:"script,omitempty"` Sleep *struct { Duration *string `tfsdk:"duration" json:"duration,omitempty"` @@ -582,6 +588,7 @@ type ChainsawKyvernoIoTestV1Alpha1ManifestData struct { } `tfsdk:"outputs" json:"outputs,omitempty"` SkipLogOutput *bool `tfsdk:"skip_log_output" json:"skipLogOutput,omitempty"` Timeout *string `tfsdk:"timeout" json:"timeout,omitempty"` + WorkDir *string `tfsdk:"work_dir" json:"workDir,omitempty"` } `tfsdk:"command" json:"command,omitempty"` Delete *struct { Bindings *[]struct { @@ -686,6 +693,7 @@ type ChainsawKyvernoIoTestV1Alpha1ManifestData struct { } `tfsdk:"outputs" json:"outputs,omitempty"` SkipLogOutput *bool `tfsdk:"skip_log_output" json:"skipLogOutput,omitempty"` Timeout *string `tfsdk:"timeout" json:"timeout,omitempty"` + WorkDir *string `tfsdk:"work_dir" json:"workDir,omitempty"` } `tfsdk:"script" json:"script,omitempty"` Sleep *struct { Duration *string `tfsdk:"duration" json:"duration,omitempty"` @@ -792,6 +800,7 @@ type ChainsawKyvernoIoTestV1Alpha1ManifestData struct { } `tfsdk:"outputs" json:"outputs,omitempty"` SkipLogOutput *bool `tfsdk:"skip_log_output" json:"skipLogOutput,omitempty"` Timeout *string `tfsdk:"timeout" json:"timeout,omitempty"` + WorkDir *string `tfsdk:"work_dir" json:"workDir,omitempty"` } `tfsdk:"command" json:"command,omitempty"` ContinueOnError *bool `tfsdk:"continue_on_error" json:"continueOnError,omitempty"` Create *struct { @@ -981,6 +990,7 @@ type ChainsawKyvernoIoTestV1Alpha1ManifestData struct { } `tfsdk:"outputs" json:"outputs,omitempty"` SkipLogOutput *bool `tfsdk:"skip_log_output" json:"skipLogOutput,omitempty"` Timeout *string `tfsdk:"timeout" json:"timeout,omitempty"` + WorkDir *string `tfsdk:"work_dir" json:"workDir,omitempty"` } `tfsdk:"script" json:"script,omitempty"` Sleep *struct { Duration *string `tfsdk:"duration" json:"duration,omitempty"` @@ -1333,6 +1343,14 @@ func (r *ChainsawKyvernoIoTestV1Alpha1Manifest) Schema(_ context.Context, _ data Optional: true, Computed: false, }, + + "work_dir": schema.StringAttribute{ + Description: "WorkDir is the working directory for command.", + MarkdownDescription: "WorkDir is the working directory for command.", + Required: false, + Optional: true, + Computed: false, + }, }, Required: false, Optional: true, @@ -2079,6 +2097,14 @@ func (r *ChainsawKyvernoIoTestV1Alpha1Manifest) Schema(_ context.Context, _ data Optional: true, Computed: false, }, + + "work_dir": schema.StringAttribute{ + Description: "WorkDir is the working directory for script.", + MarkdownDescription: "WorkDir is the working directory for script.", + Required: false, + Optional: true, + Computed: false, + }, }, Required: false, Optional: true, @@ -2657,6 +2683,14 @@ func (r *ChainsawKyvernoIoTestV1Alpha1Manifest) Schema(_ context.Context, _ data Optional: true, Computed: false, }, + + "work_dir": schema.StringAttribute{ + Description: "WorkDir is the working directory for command.", + MarkdownDescription: "WorkDir is the working directory for command.", + Required: false, + Optional: true, + Computed: false, + }, }, Required: false, Optional: true, @@ -3403,6 +3437,14 @@ func (r *ChainsawKyvernoIoTestV1Alpha1Manifest) Schema(_ context.Context, _ data Optional: true, Computed: false, }, + + "work_dir": schema.StringAttribute{ + Description: "WorkDir is the working directory for script.", + MarkdownDescription: "WorkDir is the working directory for script.", + Required: false, + Optional: true, + Computed: false, + }, }, Required: false, Optional: true, @@ -3786,6 +3828,14 @@ func (r *ChainsawKyvernoIoTestV1Alpha1Manifest) Schema(_ context.Context, _ data Optional: true, Computed: false, }, + + "work_dir": schema.StringAttribute{ + Description: "WorkDir is the working directory for command.", + MarkdownDescription: "WorkDir is the working directory for command.", + Required: false, + Optional: true, + Computed: false, + }, }, Required: false, Optional: true, @@ -4532,6 +4582,14 @@ func (r *ChainsawKyvernoIoTestV1Alpha1Manifest) Schema(_ context.Context, _ data Optional: true, Computed: false, }, + + "work_dir": schema.StringAttribute{ + Description: "WorkDir is the working directory for script.", + MarkdownDescription: "WorkDir is the working directory for script.", + Required: false, + Optional: true, + Computed: false, + }, }, Required: false, Optional: true, @@ -4967,6 +5025,14 @@ func (r *ChainsawKyvernoIoTestV1Alpha1Manifest) Schema(_ context.Context, _ data Optional: true, Computed: false, }, + + "work_dir": schema.StringAttribute{ + Description: "WorkDir is the working directory for command.", + MarkdownDescription: "WorkDir is the working directory for command.", + Required: false, + Optional: true, + Computed: false, + }, }, Required: false, Optional: true, @@ -5713,6 +5779,14 @@ func (r *ChainsawKyvernoIoTestV1Alpha1Manifest) Schema(_ context.Context, _ data Optional: true, Computed: false, }, + + "work_dir": schema.StringAttribute{ + Description: "WorkDir is the working directory for script.", + MarkdownDescription: "WorkDir is the working directory for script.", + Required: false, + Optional: true, + Computed: false, + }, }, Required: false, Optional: true, @@ -6466,6 +6540,14 @@ func (r *ChainsawKyvernoIoTestV1Alpha1Manifest) Schema(_ context.Context, _ data Optional: true, Computed: false, }, + + "work_dir": schema.StringAttribute{ + Description: "WorkDir is the working directory for command.", + MarkdownDescription: "WorkDir is the working directory for command.", + Required: false, + Optional: true, + Computed: false, + }, }, Required: false, Optional: true, @@ -7830,6 +7912,14 @@ func (r *ChainsawKyvernoIoTestV1Alpha1Manifest) Schema(_ context.Context, _ data Optional: true, Computed: false, }, + + "work_dir": schema.StringAttribute{ + Description: "WorkDir is the working directory for script.", + MarkdownDescription: "WorkDir is the working directory for script.", + Required: false, + Optional: true, + Computed: false, + }, }, Required: false, Optional: true, diff --git a/internal/provider/chainsaw_kyverno_io_v1alpha2/chainsaw_kyverno_io_configuration_v1alpha2_manifest.go b/internal/provider/chainsaw_kyverno_io_v1alpha2/chainsaw_kyverno_io_configuration_v1alpha2_manifest.go index ee9dd95ed..febf19fd8 100644 --- a/internal/provider/chainsaw_kyverno_io_v1alpha2/chainsaw_kyverno_io_configuration_v1alpha2_manifest.go +++ b/internal/provider/chainsaw_kyverno_io_v1alpha2/chainsaw_kyverno_io_configuration_v1alpha2_manifest.go @@ -87,6 +87,7 @@ type ChainsawKyvernoIoConfigurationV1Alpha2ManifestData struct { } `tfsdk:"outputs" json:"outputs,omitempty"` SkipLogOutput *bool `tfsdk:"skip_log_output" json:"skipLogOutput,omitempty"` Timeout *string `tfsdk:"timeout" json:"timeout,omitempty"` + WorkDir *string `tfsdk:"work_dir" json:"workDir,omitempty"` } `tfsdk:"command" json:"command,omitempty"` Delete *struct { Bindings *[]struct { @@ -191,6 +192,7 @@ type ChainsawKyvernoIoConfigurationV1Alpha2ManifestData struct { } `tfsdk:"outputs" json:"outputs,omitempty"` SkipLogOutput *bool `tfsdk:"skip_log_output" json:"skipLogOutput,omitempty"` Timeout *string `tfsdk:"timeout" json:"timeout,omitempty"` + WorkDir *string `tfsdk:"work_dir" json:"workDir,omitempty"` } `tfsdk:"script" json:"script,omitempty"` Sleep *struct { Duration *string `tfsdk:"duration" json:"duration,omitempty"` @@ -616,6 +618,14 @@ func (r *ChainsawKyvernoIoConfigurationV1Alpha2Manifest) Schema(_ context.Contex Optional: true, Computed: false, }, + + "work_dir": schema.StringAttribute{ + Description: "WorkDir is the working directory for command.", + MarkdownDescription: "WorkDir is the working directory for command.", + Required: false, + Optional: true, + Computed: false, + }, }, Required: false, Optional: true, @@ -1362,6 +1372,14 @@ func (r *ChainsawKyvernoIoConfigurationV1Alpha2Manifest) Schema(_ context.Contex Optional: true, Computed: false, }, + + "work_dir": schema.StringAttribute{ + Description: "WorkDir is the working directory for script.", + MarkdownDescription: "WorkDir is the working directory for script.", + Required: false, + Optional: true, + Computed: false, + }, }, Required: false, Optional: true, diff --git a/internal/provider/chainsaw_kyverno_io_v1alpha2/chainsaw_kyverno_io_test_v1alpha2_manifest.go b/internal/provider/chainsaw_kyverno_io_v1alpha2/chainsaw_kyverno_io_test_v1alpha2_manifest.go index 836d1d4c4..1b9219c53 100644 --- a/internal/provider/chainsaw_kyverno_io_v1alpha2/chainsaw_kyverno_io_test_v1alpha2_manifest.go +++ b/internal/provider/chainsaw_kyverno_io_v1alpha2/chainsaw_kyverno_io_test_v1alpha2_manifest.go @@ -86,6 +86,7 @@ type ChainsawKyvernoIoTestV1Alpha2ManifestData struct { } `tfsdk:"outputs" json:"outputs,omitempty"` SkipLogOutput *bool `tfsdk:"skip_log_output" json:"skipLogOutput,omitempty"` Timeout *string `tfsdk:"timeout" json:"timeout,omitempty"` + WorkDir *string `tfsdk:"work_dir" json:"workDir,omitempty"` } `tfsdk:"command" json:"command,omitempty"` Delete *struct { Bindings *[]struct { @@ -190,6 +191,7 @@ type ChainsawKyvernoIoTestV1Alpha2ManifestData struct { } `tfsdk:"outputs" json:"outputs,omitempty"` SkipLogOutput *bool `tfsdk:"skip_log_output" json:"skipLogOutput,omitempty"` Timeout *string `tfsdk:"timeout" json:"timeout,omitempty"` + WorkDir *string `tfsdk:"work_dir" json:"workDir,omitempty"` } `tfsdk:"script" json:"script,omitempty"` Sleep *struct { Duration *string `tfsdk:"duration" json:"duration,omitempty"` @@ -1336,6 +1338,14 @@ func (r *ChainsawKyvernoIoTestV1Alpha2Manifest) Schema(_ context.Context, _ data Optional: true, Computed: false, }, + + "work_dir": schema.StringAttribute{ + Description: "WorkDir is the working directory for command.", + MarkdownDescription: "WorkDir is the working directory for command.", + Required: false, + Optional: true, + Computed: false, + }, }, Required: false, Optional: true, @@ -2082,6 +2092,14 @@ func (r *ChainsawKyvernoIoTestV1Alpha2Manifest) Schema(_ context.Context, _ data Optional: true, Computed: false, }, + + "work_dir": schema.StringAttribute{ + Description: "WorkDir is the working directory for script.", + MarkdownDescription: "WorkDir is the working directory for script.", + Required: false, + Optional: true, + Computed: false, + }, }, Required: false, Optional: true, diff --git a/internal/provider/cloudfront_services_k8s_aws_v1alpha1/cloudfront_services_k8s_aws_response_headers_policy_v1alpha1_manifest.go b/internal/provider/cloudfront_services_k8s_aws_v1alpha1/cloudfront_services_k8s_aws_response_headers_policy_v1alpha1_manifest.go index 2cf98737d..56f877309 100644 --- a/internal/provider/cloudfront_services_k8s_aws_v1alpha1/cloudfront_services_k8s_aws_response_headers_policy_v1alpha1_manifest.go +++ b/internal/provider/cloudfront_services_k8s_aws_v1alpha1/cloudfront_services_k8s_aws_response_headers_policy_v1alpha1_manifest.go @@ -97,12 +97,12 @@ type CloudfrontServicesK8SAwsResponseHeadersPolicyV1Alpha1ManifestData struct { Override *bool `tfsdk:"override" json:"override,omitempty"` Preload *bool `tfsdk:"preload" json:"preload,omitempty"` } `tfsdk:"strict_transport_security" json:"strictTransportSecurity,omitempty"` - XSSProtection *struct { + XssProtection *struct { ModeBlock *bool `tfsdk:"mode_block" json:"modeBlock,omitempty"` Override *bool `tfsdk:"override" json:"override,omitempty"` Protection *bool `tfsdk:"protection" json:"protection,omitempty"` ReportURI *string `tfsdk:"report_uri" json:"reportURI,omitempty"` - } `tfsdk:"x_ss_protection" json:"xSSProtection,omitempty"` + } `tfsdk:"xss_protection" json:"xssProtection,omitempty"` } `tfsdk:"security_headers_config" json:"securityHeadersConfig,omitempty"` ServerTimingHeadersConfig *struct { Enabled *bool `tfsdk:"enabled" json:"enabled,omitempty"` @@ -523,7 +523,7 @@ func (r *CloudfrontServicesK8SAwsResponseHeadersPolicyV1Alpha1Manifest) Schema(_ Computed: false, }, - "x_ss_protection": schema.SingleNestedAttribute{ + "xss_protection": schema.SingleNestedAttribute{ Description: "Determines whether CloudFront includes the X-XSS-Protection HTTP responseheader and the header's value.For more information about the X-XSS-Protection HTTP response header, seeX-XSS-Protection (https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-XSS-Protection)in the MDN Web Docs.", MarkdownDescription: "Determines whether CloudFront includes the X-XSS-Protection HTTP responseheader and the header's value.For more information about the X-XSS-Protection HTTP response header, seeX-XSS-Protection (https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-XSS-Protection)in the MDN Web Docs.", Attributes: map[string]schema.Attribute{ diff --git a/internal/provider/core_v1/service_v1_manifest.go b/internal/provider/core_v1/service_v1_manifest.go index f30b62568..532c114e4 100644 --- a/internal/provider/core_v1/service_v1_manifest.go +++ b/internal/provider/core_v1/service_v1_manifest.go @@ -373,8 +373,8 @@ func (r *ServiceV1Manifest) Schema(_ context.Context, _ datasource.SchemaRequest }, "traffic_distribution": schema.StringAttribute{ - Description: "TrafficDistribution offers a way to express preferences for how traffic is distributed to Service endpoints. Implementations can use this field as a hint, but are not required to guarantee strict adherence. If the field is not set, the implementation will apply its default routing strategy. If set to 'PreferClose', implementations should prioritize endpoints that are topologically close (e.g., same zone). This is an alpha field and requires enabling ServiceTrafficDistribution feature.", - MarkdownDescription: "TrafficDistribution offers a way to express preferences for how traffic is distributed to Service endpoints. Implementations can use this field as a hint, but are not required to guarantee strict adherence. If the field is not set, the implementation will apply its default routing strategy. If set to 'PreferClose', implementations should prioritize endpoints that are topologically close (e.g., same zone). This is an alpha field and requires enabling ServiceTrafficDistribution feature.", + Description: "TrafficDistribution offers a way to express preferences for how traffic is distributed to Service endpoints. Implementations can use this field as a hint, but are not required to guarantee strict adherence. If the field is not set, the implementation will apply its default routing strategy. If set to 'PreferClose', implementations should prioritize endpoints that are topologically close (e.g., same zone). This is a beta field and requires enabling ServiceTrafficDistribution feature.", + MarkdownDescription: "TrafficDistribution offers a way to express preferences for how traffic is distributed to Service endpoints. Implementations can use this field as a hint, but are not required to guarantee strict adherence. If the field is not set, the implementation will apply its default routing strategy. If set to 'PreferClose', implementations should prioritize endpoints that are topologically close (e.g., same zone). This is a beta field and requires enabling ServiceTrafficDistribution feature.", Required: false, Optional: true, Computed: false, diff --git a/internal/provider/dataprotection_kubeblocks_io_v1alpha1/dataprotection_kubeblocks_io_action_set_v1alpha1_manifest.go b/internal/provider/dataprotection_kubeblocks_io_v1alpha1/dataprotection_kubeblocks_io_action_set_v1alpha1_manifest.go index 59562569f..2ba1513d2 100644 --- a/internal/provider/dataprotection_kubeblocks_io_v1alpha1/dataprotection_kubeblocks_io_action_set_v1alpha1_manifest.go +++ b/internal/provider/dataprotection_kubeblocks_io_v1alpha1/dataprotection_kubeblocks_io_action_set_v1alpha1_manifest.go @@ -90,7 +90,8 @@ type DataprotectionKubeblocksIoActionSetV1Alpha1ManifestData struct { Env *map[string]string `tfsdk:"env" json:"env,omitempty"` EnvFrom *map[string]string `tfsdk:"env_from" json:"envFrom,omitempty"` Restore *struct { - PostReady *[]struct { + BaseBackupRequired *bool `tfsdk:"base_backup_required" json:"baseBackupRequired,omitempty"` + PostReady *[]struct { Exec *struct { Command *[]string `tfsdk:"command" json:"command,omitempty"` Container *string `tfsdk:"container" json:"container,omitempty"` @@ -516,6 +517,14 @@ func (r *DataprotectionKubeblocksIoActionSetV1Alpha1Manifest) Schema(_ context.C Description: "Specifies the restore action.", MarkdownDescription: "Specifies the restore action.", Attributes: map[string]schema.Attribute{ + "base_backup_required": schema.BoolAttribute{ + Description: "Determines if a base backup is required during restoration.", + MarkdownDescription: "Determines if a base backup is required during restoration.", + Required: false, + Optional: true, + Computed: false, + }, + "post_ready": schema.ListNestedAttribute{ Description: "Specifies the actions that should be executed after the data has been prepared and is ready for restoration.", MarkdownDescription: "Specifies the actions that should be executed after the data has been prepared and is ready for restoration.", diff --git a/internal/provider/enterprise_gloo_solo_io_v1/enterprise_gloo_solo_io_auth_config_v1_manifest.go b/internal/provider/enterprise_gloo_solo_io_v1/enterprise_gloo_solo_io_auth_config_v1_manifest.go index 446723b73..e3edd1ba4 100644 --- a/internal/provider/enterprise_gloo_solo_io_v1/enterprise_gloo_solo_io_auth_config_v1_manifest.go +++ b/internal/provider/enterprise_gloo_solo_io_v1/enterprise_gloo_solo_io_auth_config_v1_manifest.go @@ -318,6 +318,9 @@ type EnterpriseGlooSoloIoAuthConfigV1ManifestData struct { EndSessionProperties *struct { MethodType *string `tfsdk:"method_type" json:"methodType,omitempty"` } `tfsdk:"end_session_properties" json:"endSessionProperties,omitempty"` + FrontChannelLogout *struct { + Path *string `tfsdk:"path" json:"path,omitempty"` + } `tfsdk:"front_channel_logout" json:"frontChannelLogout,omitempty"` Headers *struct { AccessTokenHeader *string `tfsdk:"access_token_header" json:"accessTokenHeader,omitempty"` IdTokenHeader *string `tfsdk:"id_token_header" json:"idTokenHeader,omitempty"` @@ -2414,6 +2417,23 @@ func (r *EnterpriseGlooSoloIoAuthConfigV1Manifest) Schema(_ context.Context, _ d Computed: false, }, + "front_channel_logout": schema.SingleNestedAttribute{ + Description: "", + MarkdownDescription: "", + Attributes: map[string]schema.Attribute{ + "path": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + "headers": schema.SingleNestedAttribute{ Description: "", MarkdownDescription: "", diff --git a/internal/provider/flink_apache_org_v1beta1/flink_apache_org_flink_deployment_v1beta1_manifest.go b/internal/provider/flink_apache_org_v1beta1/flink_apache_org_flink_deployment_v1beta1_manifest.go index 8fc819592..7362b44f2 100644 --- a/internal/provider/flink_apache_org_v1beta1/flink_apache_org_flink_deployment_v1beta1_manifest.go +++ b/internal/provider/flink_apache_org_v1beta1/flink_apache_org_flink_deployment_v1beta1_manifest.go @@ -58,22 +58,17 @@ type FlinkApacheOrgFlinkDeploymentV1Beta1ManifestData struct { } `tfsdk:"tls" json:"tls,omitempty"` } `tfsdk:"ingress" json:"ingress,omitempty"` Job *struct { - AllowNonRestoredState *bool `tfsdk:"allow_non_restored_state" json:"allowNonRestoredState,omitempty"` - Args *[]string `tfsdk:"args" json:"args,omitempty"` - CheckpointTriggerNonce *int64 `tfsdk:"checkpoint_trigger_nonce" json:"checkpointTriggerNonce,omitempty"` - EntryClass *string `tfsdk:"entry_class" json:"entryClass,omitempty"` - FlinkStateSnapshotReference *struct { - Name *string `tfsdk:"name" json:"name,omitempty"` - Namespace *string `tfsdk:"namespace" json:"namespace,omitempty"` - Path *string `tfsdk:"path" json:"path,omitempty"` - } `tfsdk:"flink_state_snapshot_reference" json:"flinkStateSnapshotReference,omitempty"` - InitialSavepointPath *string `tfsdk:"initial_savepoint_path" json:"initialSavepointPath,omitempty"` - JarURI *string `tfsdk:"jar_uri" json:"jarURI,omitempty"` - Parallelism *int64 `tfsdk:"parallelism" json:"parallelism,omitempty"` - SavepointRedeployNonce *int64 `tfsdk:"savepoint_redeploy_nonce" json:"savepointRedeployNonce,omitempty"` - SavepointTriggerNonce *int64 `tfsdk:"savepoint_trigger_nonce" json:"savepointTriggerNonce,omitempty"` - State *string `tfsdk:"state" json:"state,omitempty"` - UpgradeMode *string `tfsdk:"upgrade_mode" json:"upgradeMode,omitempty"` + AllowNonRestoredState *bool `tfsdk:"allow_non_restored_state" json:"allowNonRestoredState,omitempty"` + Args *[]string `tfsdk:"args" json:"args,omitempty"` + CheckpointTriggerNonce *int64 `tfsdk:"checkpoint_trigger_nonce" json:"checkpointTriggerNonce,omitempty"` + EntryClass *string `tfsdk:"entry_class" json:"entryClass,omitempty"` + InitialSavepointPath *string `tfsdk:"initial_savepoint_path" json:"initialSavepointPath,omitempty"` + JarURI *string `tfsdk:"jar_uri" json:"jarURI,omitempty"` + Parallelism *int64 `tfsdk:"parallelism" json:"parallelism,omitempty"` + SavepointRedeployNonce *int64 `tfsdk:"savepoint_redeploy_nonce" json:"savepointRedeployNonce,omitempty"` + SavepointTriggerNonce *int64 `tfsdk:"savepoint_trigger_nonce" json:"savepointTriggerNonce,omitempty"` + State *string `tfsdk:"state" json:"state,omitempty"` + UpgradeMode *string `tfsdk:"upgrade_mode" json:"upgradeMode,omitempty"` } `tfsdk:"job" json:"job,omitempty"` JobManager *struct { PodTemplate *struct { @@ -5005,39 +5000,6 @@ func (r *FlinkApacheOrgFlinkDeploymentV1Beta1Manifest) Schema(_ context.Context, Computed: false, }, - "flink_state_snapshot_reference": schema.SingleNestedAttribute{ - Description: "", - MarkdownDescription: "", - Attributes: map[string]schema.Attribute{ - "name": schema.StringAttribute{ - Description: "", - MarkdownDescription: "", - Required: false, - Optional: true, - Computed: false, - }, - - "namespace": schema.StringAttribute{ - Description: "", - MarkdownDescription: "", - Required: false, - Optional: true, - Computed: false, - }, - - "path": schema.StringAttribute{ - Description: "", - MarkdownDescription: "", - Required: false, - Optional: true, - Computed: false, - }, - }, - Required: false, - Optional: true, - Computed: false, - }, - "initial_savepoint_path": schema.StringAttribute{ Description: "", MarkdownDescription: "", diff --git a/internal/provider/flink_apache_org_v1beta1/flink_apache_org_flink_session_job_v1beta1_manifest.go b/internal/provider/flink_apache_org_v1beta1/flink_apache_org_flink_session_job_v1beta1_manifest.go index 62aba0780..98b3cdf06 100644 --- a/internal/provider/flink_apache_org_v1beta1/flink_apache_org_flink_session_job_v1beta1_manifest.go +++ b/internal/provider/flink_apache_org_v1beta1/flink_apache_org_flink_session_job_v1beta1_manifest.go @@ -46,22 +46,17 @@ type FlinkApacheOrgFlinkSessionJobV1Beta1ManifestData struct { DeploymentName *string `tfsdk:"deployment_name" json:"deploymentName,omitempty"` FlinkConfiguration *map[string]string `tfsdk:"flink_configuration" json:"flinkConfiguration,omitempty"` Job *struct { - AllowNonRestoredState *bool `tfsdk:"allow_non_restored_state" json:"allowNonRestoredState,omitempty"` - Args *[]string `tfsdk:"args" json:"args,omitempty"` - CheckpointTriggerNonce *int64 `tfsdk:"checkpoint_trigger_nonce" json:"checkpointTriggerNonce,omitempty"` - EntryClass *string `tfsdk:"entry_class" json:"entryClass,omitempty"` - FlinkStateSnapshotReference *struct { - Name *string `tfsdk:"name" json:"name,omitempty"` - Namespace *string `tfsdk:"namespace" json:"namespace,omitempty"` - Path *string `tfsdk:"path" json:"path,omitempty"` - } `tfsdk:"flink_state_snapshot_reference" json:"flinkStateSnapshotReference,omitempty"` - InitialSavepointPath *string `tfsdk:"initial_savepoint_path" json:"initialSavepointPath,omitempty"` - JarURI *string `tfsdk:"jar_uri" json:"jarURI,omitempty"` - Parallelism *int64 `tfsdk:"parallelism" json:"parallelism,omitempty"` - SavepointRedeployNonce *int64 `tfsdk:"savepoint_redeploy_nonce" json:"savepointRedeployNonce,omitempty"` - SavepointTriggerNonce *int64 `tfsdk:"savepoint_trigger_nonce" json:"savepointTriggerNonce,omitempty"` - State *string `tfsdk:"state" json:"state,omitempty"` - UpgradeMode *string `tfsdk:"upgrade_mode" json:"upgradeMode,omitempty"` + AllowNonRestoredState *bool `tfsdk:"allow_non_restored_state" json:"allowNonRestoredState,omitempty"` + Args *[]string `tfsdk:"args" json:"args,omitempty"` + CheckpointTriggerNonce *int64 `tfsdk:"checkpoint_trigger_nonce" json:"checkpointTriggerNonce,omitempty"` + EntryClass *string `tfsdk:"entry_class" json:"entryClass,omitempty"` + InitialSavepointPath *string `tfsdk:"initial_savepoint_path" json:"initialSavepointPath,omitempty"` + JarURI *string `tfsdk:"jar_uri" json:"jarURI,omitempty"` + Parallelism *int64 `tfsdk:"parallelism" json:"parallelism,omitempty"` + SavepointRedeployNonce *int64 `tfsdk:"savepoint_redeploy_nonce" json:"savepointRedeployNonce,omitempty"` + SavepointTriggerNonce *int64 `tfsdk:"savepoint_trigger_nonce" json:"savepointTriggerNonce,omitempty"` + State *string `tfsdk:"state" json:"state,omitempty"` + UpgradeMode *string `tfsdk:"upgrade_mode" json:"upgradeMode,omitempty"` } `tfsdk:"job" json:"job,omitempty"` RestartNonce *int64 `tfsdk:"restart_nonce" json:"restartNonce,omitempty"` } `tfsdk:"spec" json:"spec,omitempty"` @@ -198,39 +193,6 @@ func (r *FlinkApacheOrgFlinkSessionJobV1Beta1Manifest) Schema(_ context.Context, Computed: false, }, - "flink_state_snapshot_reference": schema.SingleNestedAttribute{ - Description: "", - MarkdownDescription: "", - Attributes: map[string]schema.Attribute{ - "name": schema.StringAttribute{ - Description: "", - MarkdownDescription: "", - Required: false, - Optional: true, - Computed: false, - }, - - "namespace": schema.StringAttribute{ - Description: "", - MarkdownDescription: "", - Required: false, - Optional: true, - Computed: false, - }, - - "path": schema.StringAttribute{ - Description: "", - MarkdownDescription: "", - Required: false, - Optional: true, - Computed: false, - }, - }, - Required: false, - Optional: true, - Computed: false, - }, - "initial_savepoint_path": schema.StringAttribute{ Description: "", MarkdownDescription: "", diff --git a/internal/provider/flows_netobserv_io_v1beta1/flows_netobserv_io_flow_collector_v1beta1_manifest.go b/internal/provider/flows_netobserv_io_v1beta1/flows_netobserv_io_flow_collector_v1beta1_manifest.go index e97b5cc49..8a00a6970 100644 --- a/internal/provider/flows_netobserv_io_v1beta1/flows_netobserv_io_flow_collector_v1beta1_manifest.go +++ b/internal/provider/flows_netobserv_io_v1beta1/flows_netobserv_io_flow_collector_v1beta1_manifest.go @@ -675,8 +675,8 @@ func (r *FlowsNetobservIoFlowCollectorV1Beta1Manifest) Schema(_ context.Context, }, "features": schema.ListAttribute{ - Description: "List of additional features to enable. They are all disabled by default. Enabling additional features might have performance impacts. Possible values are:
- 'PacketDrop': enable the packets drop flows logging feature. This feature requires mountingthe kernel debug filesystem, so the eBPF pod has to run as privileged.If the 'spec.agent.ebpf.privileged' parameter is not set, an error is reported.
- 'DNSTracking': enable the DNS tracking feature.
- 'FlowRTT': enable flow latency (sRTT) extraction in the eBPF agent from TCP traffic.
", - MarkdownDescription: "List of additional features to enable. They are all disabled by default. Enabling additional features might have performance impacts. Possible values are:
- 'PacketDrop': enable the packets drop flows logging feature. This feature requires mountingthe kernel debug filesystem, so the eBPF pod has to run as privileged.If the 'spec.agent.ebpf.privileged' parameter is not set, an error is reported.
- 'DNSTracking': enable the DNS tracking feature.
- 'FlowRTT': enable flow latency (sRTT) extraction in the eBPF agent from TCP traffic.
", + Description: "List of additional features to enable. They are all disabled by default. Enabling additional features might have performance impacts. Possible values are:
- 'PacketDrop': enable the packets drop flows logging feature. This feature requires mountingthe kernel debug filesystem, so the eBPF pod has to run as privileged.If the 'spec.agent.ebpf.privileged' parameter is not set, an error is reported.
- 'DNSTracking': enable the DNS tracking feature.
- 'FlowRTT': enable flow latency (sRTT) extraction in the eBPF agent from TCP traffic.
- 'NetworkEvents': enable the Network events monitoring feature. This feature requires mountingthe kernel debug filesystem, so the eBPF pod has to run as privileged.", + MarkdownDescription: "List of additional features to enable. They are all disabled by default. Enabling additional features might have performance impacts. Possible values are:
- 'PacketDrop': enable the packets drop flows logging feature. This feature requires mountingthe kernel debug filesystem, so the eBPF pod has to run as privileged.If the 'spec.agent.ebpf.privileged' parameter is not set, an error is reported.
- 'DNSTracking': enable the DNS tracking feature.
- 'FlowRTT': enable flow latency (sRTT) extraction in the eBPF agent from TCP traffic.
- 'NetworkEvents': enable the Network events monitoring feature. This feature requires mountingthe kernel debug filesystem, so the eBPF pod has to run as privileged.", ElementType: types.StringType, Required: false, Optional: true, diff --git a/internal/provider/flows_netobserv_io_v1beta2/flows_netobserv_io_flow_collector_v1beta2_manifest.go b/internal/provider/flows_netobserv_io_v1beta2/flows_netobserv_io_flow_collector_v1beta2_manifest.go index ca99d255a..2bf693c10 100644 --- a/internal/provider/flows_netobserv_io_v1beta2/flows_netobserv_io_flow_collector_v1beta2_manifest.go +++ b/internal/provider/flows_netobserv_io_v1beta2/flows_netobserv_io_flow_collector_v1beta2_manifest.go @@ -2153,8 +2153,8 @@ func (r *FlowsNetobservIoFlowCollectorV1Beta2Manifest) Schema(_ context.Context, }, "features": schema.ListAttribute{ - Description: "List of additional features to enable. They are all disabled by default. Enabling additional features might have performance impacts. Possible values are:
- 'PacketDrop': enable the packets drop flows logging feature. This feature requires mountingthe kernel debug filesystem, so the eBPF pod has to run as privileged.If the 'spec.agent.ebpf.privileged' parameter is not set, an error is reported.
- 'DNSTracking': enable the DNS tracking feature.
- 'FlowRTT': enable flow latency (sRTT) extraction in the eBPF agent from TCP traffic.
", - MarkdownDescription: "List of additional features to enable. They are all disabled by default. Enabling additional features might have performance impacts. Possible values are:
- 'PacketDrop': enable the packets drop flows logging feature. This feature requires mountingthe kernel debug filesystem, so the eBPF pod has to run as privileged.If the 'spec.agent.ebpf.privileged' parameter is not set, an error is reported.
- 'DNSTracking': enable the DNS tracking feature.
- 'FlowRTT': enable flow latency (sRTT) extraction in the eBPF agent from TCP traffic.
", + Description: "List of additional features to enable. They are all disabled by default. Enabling additional features might have performance impacts. Possible values are:
- 'PacketDrop': enable the packets drop flows logging feature. This feature requires mountingthe kernel debug filesystem, so the eBPF pod has to run as privileged.If the 'spec.agent.ebpf.privileged' parameter is not set, an error is reported.
- 'DNSTracking': enable the DNS tracking feature.
- 'FlowRTT': enable flow latency (sRTT) extraction in the eBPF agent from TCP traffic.
- 'NetworkEvents': enable the Network events monitoring feature. This feature requires mountingthe kernel debug filesystem, so the eBPF pod has to run as privileged.", + MarkdownDescription: "List of additional features to enable. They are all disabled by default. Enabling additional features might have performance impacts. Possible values are:
- 'PacketDrop': enable the packets drop flows logging feature. This feature requires mountingthe kernel debug filesystem, so the eBPF pod has to run as privileged.If the 'spec.agent.ebpf.privileged' parameter is not set, an error is reported.
- 'DNSTracking': enable the DNS tracking feature.
- 'FlowRTT': enable flow latency (sRTT) extraction in the eBPF agent from TCP traffic.
- 'NetworkEvents': enable the Network events monitoring feature. This feature requires mountingthe kernel debug filesystem, so the eBPF pod has to run as privileged.", ElementType: types.StringType, Required: false, Optional: true, diff --git a/internal/provider/fluentbit_fluent_io_v1alpha2/fluentbit_fluent_io_cluster_input_v1alpha2_manifest.go b/internal/provider/fluentbit_fluent_io_v1alpha2/fluentbit_fluent_io_cluster_input_v1alpha2_manifest.go index 7acb3254e..24603cbf5 100644 --- a/internal/provider/fluentbit_fluent_io_v1alpha2/fluentbit_fluent_io_cluster_input_v1alpha2_manifest.go +++ b/internal/provider/fluentbit_fluent_io_v1alpha2/fluentbit_fluent_io_cluster_input_v1alpha2_manifest.go @@ -60,6 +60,17 @@ type FluentbitFluentIoClusterInputV1Alpha2ManifestData struct { Samples *int64 `tfsdk:"samples" json:"samples,omitempty"` Tag *string `tfsdk:"tag" json:"tag,omitempty"` } `tfsdk:"dummy" json:"dummy,omitempty"` + ExecWasi *struct { + AccessiblePaths *[]string `tfsdk:"accessible_paths" json:"accessiblePaths,omitempty"` + BufSize *string `tfsdk:"buf_size" json:"bufSize,omitempty"` + IntervalNSec *int64 `tfsdk:"interval_n_sec" json:"intervalNSec,omitempty"` + IntervalSec *int64 `tfsdk:"interval_sec" json:"intervalSec,omitempty"` + Parser *string `tfsdk:"parser" json:"parser,omitempty"` + Threaded *bool `tfsdk:"threaded" json:"threaded,omitempty"` + WasiPath *string `tfsdk:"wasi_path" json:"wasiPath,omitempty"` + WasmHeapSize *string `tfsdk:"wasm_heap_size" json:"wasmHeapSize,omitempty"` + WasmStackSize *string `tfsdk:"wasm_stack_size" json:"wasmStackSize,omitempty"` + } `tfsdk:"exec_wasi" json:"execWasi,omitempty"` FluentBitMetrics *struct { ScrapeInterval *string `tfsdk:"scrape_interval" json:"scrapeInterval,omitempty"` ScrapeOnStart *bool `tfsdk:"scrape_on_start" json:"scrapeOnStart,omitempty"` @@ -417,6 +428,97 @@ func (r *FluentbitFluentIoClusterInputV1Alpha2Manifest) Schema(_ context.Context Computed: false, }, + "exec_wasi": schema.SingleNestedAttribute{ + Description: "ExecWasi defines the exec wasi input plugin configuration", + MarkdownDescription: "ExecWasi defines the exec wasi input plugin configuration", + Attributes: map[string]schema.Attribute{ + "accessible_paths": schema.ListAttribute{ + Description: "Specify the whitelist of paths to be able to access paths from WASM programs.", + MarkdownDescription: "Specify the whitelist of paths to be able to access paths from WASM programs.", + ElementType: types.StringType, + Required: false, + Optional: true, + Computed: false, + }, + + "buf_size": schema.StringAttribute{ + Description: "Size of the buffer (check unit sizes for allowed values)", + MarkdownDescription: "Size of the buffer (check unit sizes for allowed values)", + Required: false, + Optional: true, + Computed: false, + Validators: []validator.String{ + stringvalidator.RegexMatches(regexp.MustCompile(`^\d+(k|K|KB|kb|m|M|MB|mb|g|G|GB|gb)?$`), ""), + }, + }, + + "interval_n_sec": schema.Int64Attribute{ + Description: "Polling interval (nanoseconds).", + MarkdownDescription: "Polling interval (nanoseconds).", + Required: false, + Optional: true, + Computed: false, + }, + + "interval_sec": schema.Int64Attribute{ + Description: "Polling interval (seconds).", + MarkdownDescription: "Polling interval (seconds).", + Required: false, + Optional: true, + Computed: false, + }, + + "parser": schema.StringAttribute{ + Description: "Specify the name of a parser to interpret the entry as a structured message.", + MarkdownDescription: "Specify the name of a parser to interpret the entry as a structured message.", + Required: false, + Optional: true, + Computed: false, + }, + + "threaded": schema.BoolAttribute{ + Description: "Indicates whether to run this input in its own thread. Default: false.", + MarkdownDescription: "Indicates whether to run this input in its own thread. Default: false.", + Required: false, + Optional: true, + Computed: false, + }, + + "wasi_path": schema.StringAttribute{ + Description: "The place of a WASM program file.", + MarkdownDescription: "The place of a WASM program file.", + Required: false, + Optional: true, + Computed: false, + }, + + "wasm_heap_size": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + Validators: []validator.String{ + stringvalidator.RegexMatches(regexp.MustCompile(`^\d+(k|K|KB|kb|m|M|MB|mb|g|G|GB|gb)?$`), ""), + }, + }, + + "wasm_stack_size": schema.StringAttribute{ + Description: "Size of the stack size of Wasm execution. Review unit sizes for allowed values.", + MarkdownDescription: "Size of the stack size of Wasm execution. Review unit sizes for allowed values.", + Required: false, + Optional: true, + Computed: false, + Validators: []validator.String{ + stringvalidator.RegexMatches(regexp.MustCompile(`^\d+(k|K|KB|kb|m|M|MB|mb|g|G|GB|gb)?$`), ""), + }, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + "fluent_bit_metrics": schema.SingleNestedAttribute{ Description: "FluentBitMetrics defines Fluent Bit Metrics Input configuration.", MarkdownDescription: "FluentBitMetrics defines Fluent Bit Metrics Input configuration.", diff --git a/internal/provider/gateway_networking_k8s_io_v1/gateway_networking_k8s_io_gateway_v1_manifest.go b/internal/provider/gateway_networking_k8s_io_v1/gateway_networking_k8s_io_gateway_v1_manifest.go index 5fa15c664..1b01deea3 100644 --- a/internal/provider/gateway_networking_k8s_io_v1/gateway_networking_k8s_io_gateway_v1_manifest.go +++ b/internal/provider/gateway_networking_k8s_io_v1/gateway_networking_k8s_io_gateway_v1_manifest.go @@ -49,6 +49,14 @@ type GatewayNetworkingK8SIoGatewayV1ManifestData struct { Type *string `tfsdk:"type" json:"type,omitempty"` Value *string `tfsdk:"value" json:"value,omitempty"` } `tfsdk:"addresses" json:"addresses,omitempty"` + BackendTLS *struct { + ClientCertificateRef *struct { + Group *string `tfsdk:"group" json:"group,omitempty"` + Kind *string `tfsdk:"kind" json:"kind,omitempty"` + Name *string `tfsdk:"name" json:"name,omitempty"` + Namespace *string `tfsdk:"namespace" json:"namespace,omitempty"` + } `tfsdk:"client_certificate_ref" json:"clientCertificateRef,omitempty"` + } `tfsdk:"backend_tls" json:"backendTLS,omitempty"` GatewayClassName *string `tfsdk:"gateway_class_name" json:"gatewayClassName,omitempty"` Infrastructure *struct { Annotations *map[string]string `tfsdk:"annotations" json:"annotations,omitempty"` @@ -216,6 +224,74 @@ func (r *GatewayNetworkingK8SIoGatewayV1Manifest) Schema(_ context.Context, _ da Computed: false, }, + "backend_tls": schema.SingleNestedAttribute{ + Description: "BackendTLS configures TLS settings for when this Gateway is connecting tobackends with TLS.Support: Core", + MarkdownDescription: "BackendTLS configures TLS settings for when this Gateway is connecting tobackends with TLS.Support: Core", + Attributes: map[string]schema.Attribute{ + "client_certificate_ref": schema.SingleNestedAttribute{ + Description: "ClientCertificateRef is a reference to an object that contains a ClientCertificate and the associated private key.References to a resource in different namespace are invalid UNLESS thereis a ReferenceGrant in the target namespace that allows the certificateto be attached. If a ReferenceGrant does not allow this reference, the'ResolvedRefs' condition MUST be set to False for this listener with the'RefNotPermitted' reason.ClientCertificateRef can reference to standard Kubernetes resources, i.e.Secret, or implementation-specific custom resources.This setting can be overridden on the service level by use of BackendTLSPolicy.Support: Core", + MarkdownDescription: "ClientCertificateRef is a reference to an object that contains a ClientCertificate and the associated private key.References to a resource in different namespace are invalid UNLESS thereis a ReferenceGrant in the target namespace that allows the certificateto be attached. If a ReferenceGrant does not allow this reference, the'ResolvedRefs' condition MUST be set to False for this listener with the'RefNotPermitted' reason.ClientCertificateRef can reference to standard Kubernetes resources, i.e.Secret, or implementation-specific custom resources.This setting can be overridden on the service level by use of BackendTLSPolicy.Support: Core", + Attributes: map[string]schema.Attribute{ + "group": schema.StringAttribute{ + Description: "Group is the group of the referent. For example, 'gateway.networking.k8s.io'.When unspecified or empty string, core API group is inferred.", + MarkdownDescription: "Group is the group of the referent. For example, 'gateway.networking.k8s.io'.When unspecified or empty string, core API group is inferred.", + Required: false, + Optional: true, + Computed: false, + Validators: []validator.String{ + stringvalidator.LengthAtMost(253), + stringvalidator.RegexMatches(regexp.MustCompile(`^$|^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$`), ""), + }, + }, + + "kind": schema.StringAttribute{ + Description: "Kind is kind of the referent. For example 'Secret'.", + MarkdownDescription: "Kind is kind of the referent. For example 'Secret'.", + Required: false, + Optional: true, + Computed: false, + Validators: []validator.String{ + stringvalidator.LengthAtLeast(1), + stringvalidator.LengthAtMost(63), + stringvalidator.RegexMatches(regexp.MustCompile(`^[a-zA-Z]([-a-zA-Z0-9]*[a-zA-Z0-9])?$`), ""), + }, + }, + + "name": schema.StringAttribute{ + Description: "Name is the name of the referent.", + MarkdownDescription: "Name is the name of the referent.", + Required: true, + Optional: false, + Computed: false, + Validators: []validator.String{ + stringvalidator.LengthAtLeast(1), + stringvalidator.LengthAtMost(253), + }, + }, + + "namespace": schema.StringAttribute{ + Description: "Namespace is the namespace of the referenced object. When unspecified, the localnamespace is inferred.Note that when a namespace different than the local namespace is specified,a ReferenceGrant object is required in the referent namespace to allow thatnamespace's owner to accept the reference. See the ReferenceGrantdocumentation for details.Support: Core", + MarkdownDescription: "Namespace is the namespace of the referenced object. When unspecified, the localnamespace is inferred.Note that when a namespace different than the local namespace is specified,a ReferenceGrant object is required in the referent namespace to allow thatnamespace's owner to accept the reference. See the ReferenceGrantdocumentation for details.Support: Core", + Required: false, + Optional: true, + Computed: false, + Validators: []validator.String{ + stringvalidator.LengthAtLeast(1), + stringvalidator.LengthAtMost(63), + stringvalidator.RegexMatches(regexp.MustCompile(`^[a-z0-9]([-a-z0-9]*[a-z0-9])?$`), ""), + }, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + "gateway_class_name": schema.StringAttribute{ Description: "GatewayClassName used for this Gateway. This is the name of aGatewayClass resource.", MarkdownDescription: "GatewayClassName used for this Gateway. This is the name of aGatewayClass resource.", @@ -229,8 +305,8 @@ func (r *GatewayNetworkingK8SIoGatewayV1Manifest) Schema(_ context.Context, _ da }, "infrastructure": schema.SingleNestedAttribute{ - Description: "Infrastructure defines infrastructure level attributes about this Gateway instance.Support: Core", - MarkdownDescription: "Infrastructure defines infrastructure level attributes about this Gateway instance.Support: Core", + Description: "Infrastructure defines infrastructure level attributes about this Gateway instance.Support: Extended", + MarkdownDescription: "Infrastructure defines infrastructure level attributes about this Gateway instance.Support: Extended", Attributes: map[string]schema.Attribute{ "annotations": schema.MapAttribute{ Description: "Annotations that SHOULD be applied to any resources created in response to this Gateway.For implementations creating other Kubernetes objects, this should be the 'metadata.annotations' field on resources.For other implementations, this refers to any relevant (implementation specific) 'annotations' concepts.An implementation may chose to add additional implementation-specific annotations as they see fit.Support: Extended", @@ -242,8 +318,8 @@ func (r *GatewayNetworkingK8SIoGatewayV1Manifest) Schema(_ context.Context, _ da }, "labels": schema.MapAttribute{ - Description: "Labels that SHOULD be applied to any resources created in response to this Gateway.For implementations creating other Kubernetes objects, this should be the 'metadata.labels' field on resources.For other implementations, this refers to any relevant (implementation specific) 'labels' concepts.An implementation may chose to add additional implementation-specific labels as they see fit.Support: Extended", - MarkdownDescription: "Labels that SHOULD be applied to any resources created in response to this Gateway.For implementations creating other Kubernetes objects, this should be the 'metadata.labels' field on resources.For other implementations, this refers to any relevant (implementation specific) 'labels' concepts.An implementation may chose to add additional implementation-specific labels as they see fit.Support: Extended", + Description: "Labels that SHOULD be applied to any resources created in response to this Gateway.For implementations creating other Kubernetes objects, this should be the 'metadata.labels' field on resources.For other implementations, this refers to any relevant (implementation specific) 'labels' concepts.An implementation may chose to add additional implementation-specific labels as they see fit.If an implementation maps these labels to Pods, or any other resource that would need to be recreated when labelschange, it SHOULD clearly warn about this behavior in documentation.Support: Extended", + MarkdownDescription: "Labels that SHOULD be applied to any resources created in response to this Gateway.For implementations creating other Kubernetes objects, this should be the 'metadata.labels' field on resources.For other implementations, this refers to any relevant (implementation specific) 'labels' concepts.An implementation may chose to add additional implementation-specific labels as they see fit.If an implementation maps these labels to Pods, or any other resource that would need to be recreated when labelschange, it SHOULD clearly warn about this behavior in documentation.Support: Extended", ElementType: types.StringType, Required: false, Optional: true, diff --git a/internal/provider/gateway_networking_k8s_io_v1/gateway_networking_k8s_io_http_route_v1_manifest.go b/internal/provider/gateway_networking_k8s_io_v1/gateway_networking_k8s_io_http_route_v1_manifest.go index fbf2481bc..f86630fb8 100644 --- a/internal/provider/gateway_networking_k8s_io_v1/gateway_networking_k8s_io_http_route_v1_manifest.go +++ b/internal/provider/gateway_networking_k8s_io_v1/gateway_networking_k8s_io_http_route_v1_manifest.go @@ -206,7 +206,12 @@ type GatewayNetworkingK8SIoHttprouteV1ManifestData struct { Value *string `tfsdk:"value" json:"value,omitempty"` } `tfsdk:"query_params" json:"queryParams,omitempty"` } `tfsdk:"matches" json:"matches,omitempty"` - Name *string `tfsdk:"name" json:"name,omitempty"` + Name *string `tfsdk:"name" json:"name,omitempty"` + Retry *struct { + Attempts *int64 `tfsdk:"attempts" json:"attempts,omitempty"` + Backoff *string `tfsdk:"backoff" json:"backoff,omitempty"` + Codes *[]string `tfsdk:"codes" json:"codes,omitempty"` + } `tfsdk:"retry" json:"retry,omitempty"` SessionPersistence *struct { AbsoluteTimeout *string `tfsdk:"absolute_timeout" json:"absoluteTimeout,omitempty"` CookieConfig *struct { @@ -1712,6 +1717,43 @@ func (r *GatewayNetworkingK8SIoHttprouteV1Manifest) Schema(_ context.Context, _ }, }, + "retry": schema.SingleNestedAttribute{ + Description: "Retry defines the configuration for when to retry an HTTP request.Support: Extended", + MarkdownDescription: "Retry defines the configuration for when to retry an HTTP request.Support: Extended", + Attributes: map[string]schema.Attribute{ + "attempts": schema.Int64Attribute{ + Description: "Attempts specifies the maxmimum number of times an individual requestfrom the gateway to a backend should be retried.If the maximum number of retries has been attempted without a successfulresponse from the backend, the Gateway MUST return an error.When this field is unspecified, the number of times to attempt to retrya backend request is implementation-specific.Support: Extended", + MarkdownDescription: "Attempts specifies the maxmimum number of times an individual requestfrom the gateway to a backend should be retried.If the maximum number of retries has been attempted without a successfulresponse from the backend, the Gateway MUST return an error.When this field is unspecified, the number of times to attempt to retrya backend request is implementation-specific.Support: Extended", + Required: false, + Optional: true, + Computed: false, + }, + + "backoff": schema.StringAttribute{ + Description: "Backoff specifies the minimum duration a Gateway should wait betweenretry attempts and is represented in Gateway API Duration formatting.For example, setting the 'rules[].retry.backoff' field to the value'100ms' will cause a backend request to first be retried approximately100 milliseconds after timing out or receiving a response code configuredto be retryable.An implementation MAY use an exponential or alternative backoff strategyfor subsequent retry attempts, MAY cap the maximum backoff duration tosome amount greater than the specified minimum, and MAY add arbitraryjitter to stagger requests, as long as unsuccessful backend requests arenot retried before the configured minimum duration.If a Request timeout ('rules[].timeouts.request') is configured on theroute, the entire duration of the initial request and any retry attemptsMUST not exceed the Request timeout duration. If any retry attempts arestill in progress when the Request timeout duration has been reached,these SHOULD be canceled if possible and the Gateway MUST immediatelyreturn a timeout error.If a BackendRequest timeout ('rules[].timeouts.backendRequest') isconfigured on the route, any retry attempts which reach the configuredBackendRequest timeout duration without a response SHOULD be canceled ifpossible and the Gateway should wait for at least the specified backoffduration before attempting to retry the backend request again.If a BackendRequest timeout is _not_ configured on the route, retryattempts MAY time out after an implementation default duration, or MAYremain pending until a configured Request timeout or implementationdefault duration for total request time is reached.When this field is unspecified, the time to wait between retry attemptsis implementation-specific.Support: Extended", + MarkdownDescription: "Backoff specifies the minimum duration a Gateway should wait betweenretry attempts and is represented in Gateway API Duration formatting.For example, setting the 'rules[].retry.backoff' field to the value'100ms' will cause a backend request to first be retried approximately100 milliseconds after timing out or receiving a response code configuredto be retryable.An implementation MAY use an exponential or alternative backoff strategyfor subsequent retry attempts, MAY cap the maximum backoff duration tosome amount greater than the specified minimum, and MAY add arbitraryjitter to stagger requests, as long as unsuccessful backend requests arenot retried before the configured minimum duration.If a Request timeout ('rules[].timeouts.request') is configured on theroute, the entire duration of the initial request and any retry attemptsMUST not exceed the Request timeout duration. If any retry attempts arestill in progress when the Request timeout duration has been reached,these SHOULD be canceled if possible and the Gateway MUST immediatelyreturn a timeout error.If a BackendRequest timeout ('rules[].timeouts.backendRequest') isconfigured on the route, any retry attempts which reach the configuredBackendRequest timeout duration without a response SHOULD be canceled ifpossible and the Gateway should wait for at least the specified backoffduration before attempting to retry the backend request again.If a BackendRequest timeout is _not_ configured on the route, retryattempts MAY time out after an implementation default duration, or MAYremain pending until a configured Request timeout or implementationdefault duration for total request time is reached.When this field is unspecified, the time to wait between retry attemptsis implementation-specific.Support: Extended", + Required: false, + Optional: true, + Computed: false, + Validators: []validator.String{ + stringvalidator.RegexMatches(regexp.MustCompile(`^([0-9]{1,5}(h|m|s|ms)){1,4}$`), ""), + }, + }, + + "codes": schema.ListAttribute{ + Description: "Codes defines the HTTP response status codes for which a backend requestshould be retried.Support: Extended", + MarkdownDescription: "Codes defines the HTTP response status codes for which a backend requestshould be retried.Support: Extended", + ElementType: types.StringType, + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + "session_persistence": schema.SingleNestedAttribute{ Description: "SessionPersistence defines and configures session persistencefor the route rule.Support: Extended", MarkdownDescription: "SessionPersistence defines and configures session persistencefor the route rule.Support: Extended", diff --git a/internal/provider/gateway_networking_k8s_io_v1beta1/gateway_networking_k8s_io_gateway_v1beta1_manifest.go b/internal/provider/gateway_networking_k8s_io_v1beta1/gateway_networking_k8s_io_gateway_v1beta1_manifest.go index ab3763ede..d80808004 100644 --- a/internal/provider/gateway_networking_k8s_io_v1beta1/gateway_networking_k8s_io_gateway_v1beta1_manifest.go +++ b/internal/provider/gateway_networking_k8s_io_v1beta1/gateway_networking_k8s_io_gateway_v1beta1_manifest.go @@ -49,6 +49,14 @@ type GatewayNetworkingK8SIoGatewayV1Beta1ManifestData struct { Type *string `tfsdk:"type" json:"type,omitempty"` Value *string `tfsdk:"value" json:"value,omitempty"` } `tfsdk:"addresses" json:"addresses,omitempty"` + BackendTLS *struct { + ClientCertificateRef *struct { + Group *string `tfsdk:"group" json:"group,omitempty"` + Kind *string `tfsdk:"kind" json:"kind,omitempty"` + Name *string `tfsdk:"name" json:"name,omitempty"` + Namespace *string `tfsdk:"namespace" json:"namespace,omitempty"` + } `tfsdk:"client_certificate_ref" json:"clientCertificateRef,omitempty"` + } `tfsdk:"backend_tls" json:"backendTLS,omitempty"` GatewayClassName *string `tfsdk:"gateway_class_name" json:"gatewayClassName,omitempty"` Infrastructure *struct { Annotations *map[string]string `tfsdk:"annotations" json:"annotations,omitempty"` @@ -216,6 +224,74 @@ func (r *GatewayNetworkingK8SIoGatewayV1Beta1Manifest) Schema(_ context.Context, Computed: false, }, + "backend_tls": schema.SingleNestedAttribute{ + Description: "BackendTLS configures TLS settings for when this Gateway is connecting tobackends with TLS.Support: Core", + MarkdownDescription: "BackendTLS configures TLS settings for when this Gateway is connecting tobackends with TLS.Support: Core", + Attributes: map[string]schema.Attribute{ + "client_certificate_ref": schema.SingleNestedAttribute{ + Description: "ClientCertificateRef is a reference to an object that contains a ClientCertificate and the associated private key.References to a resource in different namespace are invalid UNLESS thereis a ReferenceGrant in the target namespace that allows the certificateto be attached. If a ReferenceGrant does not allow this reference, the'ResolvedRefs' condition MUST be set to False for this listener with the'RefNotPermitted' reason.ClientCertificateRef can reference to standard Kubernetes resources, i.e.Secret, or implementation-specific custom resources.This setting can be overridden on the service level by use of BackendTLSPolicy.Support: Core", + MarkdownDescription: "ClientCertificateRef is a reference to an object that contains a ClientCertificate and the associated private key.References to a resource in different namespace are invalid UNLESS thereis a ReferenceGrant in the target namespace that allows the certificateto be attached. If a ReferenceGrant does not allow this reference, the'ResolvedRefs' condition MUST be set to False for this listener with the'RefNotPermitted' reason.ClientCertificateRef can reference to standard Kubernetes resources, i.e.Secret, or implementation-specific custom resources.This setting can be overridden on the service level by use of BackendTLSPolicy.Support: Core", + Attributes: map[string]schema.Attribute{ + "group": schema.StringAttribute{ + Description: "Group is the group of the referent. For example, 'gateway.networking.k8s.io'.When unspecified or empty string, core API group is inferred.", + MarkdownDescription: "Group is the group of the referent. For example, 'gateway.networking.k8s.io'.When unspecified or empty string, core API group is inferred.", + Required: false, + Optional: true, + Computed: false, + Validators: []validator.String{ + stringvalidator.LengthAtMost(253), + stringvalidator.RegexMatches(regexp.MustCompile(`^$|^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$`), ""), + }, + }, + + "kind": schema.StringAttribute{ + Description: "Kind is kind of the referent. For example 'Secret'.", + MarkdownDescription: "Kind is kind of the referent. For example 'Secret'.", + Required: false, + Optional: true, + Computed: false, + Validators: []validator.String{ + stringvalidator.LengthAtLeast(1), + stringvalidator.LengthAtMost(63), + stringvalidator.RegexMatches(regexp.MustCompile(`^[a-zA-Z]([-a-zA-Z0-9]*[a-zA-Z0-9])?$`), ""), + }, + }, + + "name": schema.StringAttribute{ + Description: "Name is the name of the referent.", + MarkdownDescription: "Name is the name of the referent.", + Required: true, + Optional: false, + Computed: false, + Validators: []validator.String{ + stringvalidator.LengthAtLeast(1), + stringvalidator.LengthAtMost(253), + }, + }, + + "namespace": schema.StringAttribute{ + Description: "Namespace is the namespace of the referenced object. When unspecified, the localnamespace is inferred.Note that when a namespace different than the local namespace is specified,a ReferenceGrant object is required in the referent namespace to allow thatnamespace's owner to accept the reference. See the ReferenceGrantdocumentation for details.Support: Core", + MarkdownDescription: "Namespace is the namespace of the referenced object. When unspecified, the localnamespace is inferred.Note that when a namespace different than the local namespace is specified,a ReferenceGrant object is required in the referent namespace to allow thatnamespace's owner to accept the reference. See the ReferenceGrantdocumentation for details.Support: Core", + Required: false, + Optional: true, + Computed: false, + Validators: []validator.String{ + stringvalidator.LengthAtLeast(1), + stringvalidator.LengthAtMost(63), + stringvalidator.RegexMatches(regexp.MustCompile(`^[a-z0-9]([-a-z0-9]*[a-z0-9])?$`), ""), + }, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + "gateway_class_name": schema.StringAttribute{ Description: "GatewayClassName used for this Gateway. This is the name of aGatewayClass resource.", MarkdownDescription: "GatewayClassName used for this Gateway. This is the name of aGatewayClass resource.", @@ -229,8 +305,8 @@ func (r *GatewayNetworkingK8SIoGatewayV1Beta1Manifest) Schema(_ context.Context, }, "infrastructure": schema.SingleNestedAttribute{ - Description: "Infrastructure defines infrastructure level attributes about this Gateway instance.Support: Core", - MarkdownDescription: "Infrastructure defines infrastructure level attributes about this Gateway instance.Support: Core", + Description: "Infrastructure defines infrastructure level attributes about this Gateway instance.Support: Extended", + MarkdownDescription: "Infrastructure defines infrastructure level attributes about this Gateway instance.Support: Extended", Attributes: map[string]schema.Attribute{ "annotations": schema.MapAttribute{ Description: "Annotations that SHOULD be applied to any resources created in response to this Gateway.For implementations creating other Kubernetes objects, this should be the 'metadata.annotations' field on resources.For other implementations, this refers to any relevant (implementation specific) 'annotations' concepts.An implementation may chose to add additional implementation-specific annotations as they see fit.Support: Extended", @@ -242,8 +318,8 @@ func (r *GatewayNetworkingK8SIoGatewayV1Beta1Manifest) Schema(_ context.Context, }, "labels": schema.MapAttribute{ - Description: "Labels that SHOULD be applied to any resources created in response to this Gateway.For implementations creating other Kubernetes objects, this should be the 'metadata.labels' field on resources.For other implementations, this refers to any relevant (implementation specific) 'labels' concepts.An implementation may chose to add additional implementation-specific labels as they see fit.Support: Extended", - MarkdownDescription: "Labels that SHOULD be applied to any resources created in response to this Gateway.For implementations creating other Kubernetes objects, this should be the 'metadata.labels' field on resources.For other implementations, this refers to any relevant (implementation specific) 'labels' concepts.An implementation may chose to add additional implementation-specific labels as they see fit.Support: Extended", + Description: "Labels that SHOULD be applied to any resources created in response to this Gateway.For implementations creating other Kubernetes objects, this should be the 'metadata.labels' field on resources.For other implementations, this refers to any relevant (implementation specific) 'labels' concepts.An implementation may chose to add additional implementation-specific labels as they see fit.If an implementation maps these labels to Pods, or any other resource that would need to be recreated when labelschange, it SHOULD clearly warn about this behavior in documentation.Support: Extended", + MarkdownDescription: "Labels that SHOULD be applied to any resources created in response to this Gateway.For implementations creating other Kubernetes objects, this should be the 'metadata.labels' field on resources.For other implementations, this refers to any relevant (implementation specific) 'labels' concepts.An implementation may chose to add additional implementation-specific labels as they see fit.If an implementation maps these labels to Pods, or any other resource that would need to be recreated when labelschange, it SHOULD clearly warn about this behavior in documentation.Support: Extended", ElementType: types.StringType, Required: false, Optional: true, diff --git a/internal/provider/gateway_networking_k8s_io_v1beta1/gateway_networking_k8s_io_http_route_v1beta1_manifest.go b/internal/provider/gateway_networking_k8s_io_v1beta1/gateway_networking_k8s_io_http_route_v1beta1_manifest.go index 60ac806b5..71b19f7c9 100644 --- a/internal/provider/gateway_networking_k8s_io_v1beta1/gateway_networking_k8s_io_http_route_v1beta1_manifest.go +++ b/internal/provider/gateway_networking_k8s_io_v1beta1/gateway_networking_k8s_io_http_route_v1beta1_manifest.go @@ -206,7 +206,12 @@ type GatewayNetworkingK8SIoHttprouteV1Beta1ManifestData struct { Value *string `tfsdk:"value" json:"value,omitempty"` } `tfsdk:"query_params" json:"queryParams,omitempty"` } `tfsdk:"matches" json:"matches,omitempty"` - Name *string `tfsdk:"name" json:"name,omitempty"` + Name *string `tfsdk:"name" json:"name,omitempty"` + Retry *struct { + Attempts *int64 `tfsdk:"attempts" json:"attempts,omitempty"` + Backoff *string `tfsdk:"backoff" json:"backoff,omitempty"` + Codes *[]string `tfsdk:"codes" json:"codes,omitempty"` + } `tfsdk:"retry" json:"retry,omitempty"` SessionPersistence *struct { AbsoluteTimeout *string `tfsdk:"absolute_timeout" json:"absoluteTimeout,omitempty"` CookieConfig *struct { @@ -1712,6 +1717,43 @@ func (r *GatewayNetworkingK8SIoHttprouteV1Beta1Manifest) Schema(_ context.Contex }, }, + "retry": schema.SingleNestedAttribute{ + Description: "Retry defines the configuration for when to retry an HTTP request.Support: Extended", + MarkdownDescription: "Retry defines the configuration for when to retry an HTTP request.Support: Extended", + Attributes: map[string]schema.Attribute{ + "attempts": schema.Int64Attribute{ + Description: "Attempts specifies the maxmimum number of times an individual requestfrom the gateway to a backend should be retried.If the maximum number of retries has been attempted without a successfulresponse from the backend, the Gateway MUST return an error.When this field is unspecified, the number of times to attempt to retrya backend request is implementation-specific.Support: Extended", + MarkdownDescription: "Attempts specifies the maxmimum number of times an individual requestfrom the gateway to a backend should be retried.If the maximum number of retries has been attempted without a successfulresponse from the backend, the Gateway MUST return an error.When this field is unspecified, the number of times to attempt to retrya backend request is implementation-specific.Support: Extended", + Required: false, + Optional: true, + Computed: false, + }, + + "backoff": schema.StringAttribute{ + Description: "Backoff specifies the minimum duration a Gateway should wait betweenretry attempts and is represented in Gateway API Duration formatting.For example, setting the 'rules[].retry.backoff' field to the value'100ms' will cause a backend request to first be retried approximately100 milliseconds after timing out or receiving a response code configuredto be retryable.An implementation MAY use an exponential or alternative backoff strategyfor subsequent retry attempts, MAY cap the maximum backoff duration tosome amount greater than the specified minimum, and MAY add arbitraryjitter to stagger requests, as long as unsuccessful backend requests arenot retried before the configured minimum duration.If a Request timeout ('rules[].timeouts.request') is configured on theroute, the entire duration of the initial request and any retry attemptsMUST not exceed the Request timeout duration. If any retry attempts arestill in progress when the Request timeout duration has been reached,these SHOULD be canceled if possible and the Gateway MUST immediatelyreturn a timeout error.If a BackendRequest timeout ('rules[].timeouts.backendRequest') isconfigured on the route, any retry attempts which reach the configuredBackendRequest timeout duration without a response SHOULD be canceled ifpossible and the Gateway should wait for at least the specified backoffduration before attempting to retry the backend request again.If a BackendRequest timeout is _not_ configured on the route, retryattempts MAY time out after an implementation default duration, or MAYremain pending until a configured Request timeout or implementationdefault duration for total request time is reached.When this field is unspecified, the time to wait between retry attemptsis implementation-specific.Support: Extended", + MarkdownDescription: "Backoff specifies the minimum duration a Gateway should wait betweenretry attempts and is represented in Gateway API Duration formatting.For example, setting the 'rules[].retry.backoff' field to the value'100ms' will cause a backend request to first be retried approximately100 milliseconds after timing out or receiving a response code configuredto be retryable.An implementation MAY use an exponential or alternative backoff strategyfor subsequent retry attempts, MAY cap the maximum backoff duration tosome amount greater than the specified minimum, and MAY add arbitraryjitter to stagger requests, as long as unsuccessful backend requests arenot retried before the configured minimum duration.If a Request timeout ('rules[].timeouts.request') is configured on theroute, the entire duration of the initial request and any retry attemptsMUST not exceed the Request timeout duration. If any retry attempts arestill in progress when the Request timeout duration has been reached,these SHOULD be canceled if possible and the Gateway MUST immediatelyreturn a timeout error.If a BackendRequest timeout ('rules[].timeouts.backendRequest') isconfigured on the route, any retry attempts which reach the configuredBackendRequest timeout duration without a response SHOULD be canceled ifpossible and the Gateway should wait for at least the specified backoffduration before attempting to retry the backend request again.If a BackendRequest timeout is _not_ configured on the route, retryattempts MAY time out after an implementation default duration, or MAYremain pending until a configured Request timeout or implementationdefault duration for total request time is reached.When this field is unspecified, the time to wait between retry attemptsis implementation-specific.Support: Extended", + Required: false, + Optional: true, + Computed: false, + Validators: []validator.String{ + stringvalidator.RegexMatches(regexp.MustCompile(`^([0-9]{1,5}(h|m|s|ms)){1,4}$`), ""), + }, + }, + + "codes": schema.ListAttribute{ + Description: "Codes defines the HTTP response status codes for which a backend requestshould be retried.Support: Extended", + MarkdownDescription: "Codes defines the HTTP response status codes for which a backend requestshould be retried.Support: Extended", + ElementType: types.StringType, + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + "session_persistence": schema.SingleNestedAttribute{ Description: "SessionPersistence defines and configures session persistencefor the route rule.Support: Extended", MarkdownDescription: "SessionPersistence defines and configures session persistencefor the route rule.Support: Extended", diff --git a/internal/provider/gateway_solo_io_v1/gateway_solo_io_route_option_v1_manifest.go b/internal/provider/gateway_solo_io_v1/gateway_solo_io_route_option_v1_manifest.go index ec6632c87..3981a0ee6 100644 --- a/internal/provider/gateway_solo_io_v1/gateway_solo_io_route_option_v1_manifest.go +++ b/internal/provider/gateway_solo_io_v1/gateway_solo_io_route_option_v1_manifest.go @@ -289,6 +289,82 @@ type GatewaySoloIoRouteOptionV1ManifestData struct { Jwt *struct { Disable *bool `tfsdk:"disable" json:"disable,omitempty"` } `tfsdk:"jwt" json:"jwt,omitempty"` + JwtProvidersStaged *struct { + AfterExtAuth *struct { + AllowMissingOrFailedJwt *bool `tfsdk:"allow_missing_or_failed_jwt" json:"allowMissingOrFailedJwt,omitempty"` + Providers *struct { + Audiences *[]string `tfsdk:"audiences" json:"audiences,omitempty"` + ClaimsToHeaders *[]struct { + Append *bool `tfsdk:"append" json:"append,omitempty"` + Claim *string `tfsdk:"claim" json:"claim,omitempty"` + Header *string `tfsdk:"header" json:"header,omitempty"` + } `tfsdk:"claims_to_headers" json:"claimsToHeaders,omitempty"` + ClockSkewSeconds *int64 `tfsdk:"clock_skew_seconds" json:"clockSkewSeconds,omitempty"` + Issuer *string `tfsdk:"issuer" json:"issuer,omitempty"` + Jwks *struct { + Local *struct { + Key *string `tfsdk:"key" json:"key,omitempty"` + } `tfsdk:"local" json:"local,omitempty"` + Remote *struct { + AsyncFetch *struct { + FastListener *bool `tfsdk:"fast_listener" json:"fastListener,omitempty"` + } `tfsdk:"async_fetch" json:"asyncFetch,omitempty"` + CacheDuration *string `tfsdk:"cache_duration" json:"cacheDuration,omitempty"` + UpstreamRef *struct { + Name *string `tfsdk:"name" json:"name,omitempty"` + Namespace *string `tfsdk:"namespace" json:"namespace,omitempty"` + } `tfsdk:"upstream_ref" json:"upstreamRef,omitempty"` + Url *string `tfsdk:"url" json:"url,omitempty"` + } `tfsdk:"remote" json:"remote,omitempty"` + } `tfsdk:"jwks" json:"jwks,omitempty"` + KeepToken *bool `tfsdk:"keep_token" json:"keepToken,omitempty"` + TokenSource *struct { + Headers *[]struct { + Header *string `tfsdk:"header" json:"header,omitempty"` + Prefix *string `tfsdk:"prefix" json:"prefix,omitempty"` + } `tfsdk:"headers" json:"headers,omitempty"` + QueryParams *[]string `tfsdk:"query_params" json:"queryParams,omitempty"` + } `tfsdk:"token_source" json:"tokenSource,omitempty"` + } `tfsdk:"providers" json:"providers,omitempty"` + } `tfsdk:"after_ext_auth" json:"afterExtAuth,omitempty"` + BeforeExtAuth *struct { + AllowMissingOrFailedJwt *bool `tfsdk:"allow_missing_or_failed_jwt" json:"allowMissingOrFailedJwt,omitempty"` + Providers *struct { + Audiences *[]string `tfsdk:"audiences" json:"audiences,omitempty"` + ClaimsToHeaders *[]struct { + Append *bool `tfsdk:"append" json:"append,omitempty"` + Claim *string `tfsdk:"claim" json:"claim,omitempty"` + Header *string `tfsdk:"header" json:"header,omitempty"` + } `tfsdk:"claims_to_headers" json:"claimsToHeaders,omitempty"` + ClockSkewSeconds *int64 `tfsdk:"clock_skew_seconds" json:"clockSkewSeconds,omitempty"` + Issuer *string `tfsdk:"issuer" json:"issuer,omitempty"` + Jwks *struct { + Local *struct { + Key *string `tfsdk:"key" json:"key,omitempty"` + } `tfsdk:"local" json:"local,omitempty"` + Remote *struct { + AsyncFetch *struct { + FastListener *bool `tfsdk:"fast_listener" json:"fastListener,omitempty"` + } `tfsdk:"async_fetch" json:"asyncFetch,omitempty"` + CacheDuration *string `tfsdk:"cache_duration" json:"cacheDuration,omitempty"` + UpstreamRef *struct { + Name *string `tfsdk:"name" json:"name,omitempty"` + Namespace *string `tfsdk:"namespace" json:"namespace,omitempty"` + } `tfsdk:"upstream_ref" json:"upstreamRef,omitempty"` + Url *string `tfsdk:"url" json:"url,omitempty"` + } `tfsdk:"remote" json:"remote,omitempty"` + } `tfsdk:"jwks" json:"jwks,omitempty"` + KeepToken *bool `tfsdk:"keep_token" json:"keepToken,omitempty"` + TokenSource *struct { + Headers *[]struct { + Header *string `tfsdk:"header" json:"header,omitempty"` + Prefix *string `tfsdk:"prefix" json:"prefix,omitempty"` + } `tfsdk:"headers" json:"headers,omitempty"` + QueryParams *[]string `tfsdk:"query_params" json:"queryParams,omitempty"` + } `tfsdk:"token_source" json:"tokenSource,omitempty"` + } `tfsdk:"providers" json:"providers,omitempty"` + } `tfsdk:"before_ext_auth" json:"beforeExtAuth,omitempty"` + } `tfsdk:"jwt_providers_staged" json:"jwtProvidersStaged,omitempty"` JwtStaged *struct { AfterExtAuth *struct { Disable *bool `tfsdk:"disable" json:"disable,omitempty"` @@ -3111,6 +3187,487 @@ func (r *GatewaySoloIoRouteOptionV1Manifest) Schema(_ context.Context, _ datasou Computed: false, }, + "jwt_providers_staged": schema.SingleNestedAttribute{ + Description: "", + MarkdownDescription: "", + Attributes: map[string]schema.Attribute{ + "after_ext_auth": schema.SingleNestedAttribute{ + Description: "", + MarkdownDescription: "", + Attributes: map[string]schema.Attribute{ + "allow_missing_or_failed_jwt": schema.BoolAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "providers": schema.SingleNestedAttribute{ + Description: "", + MarkdownDescription: "", + Attributes: map[string]schema.Attribute{ + "audiences": schema.ListAttribute{ + Description: "", + MarkdownDescription: "", + ElementType: types.StringType, + Required: false, + Optional: true, + Computed: false, + }, + + "claims_to_headers": schema.ListNestedAttribute{ + Description: "", + MarkdownDescription: "", + NestedObject: schema.NestedAttributeObject{ + Attributes: map[string]schema.Attribute{ + "append": schema.BoolAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "claim": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "header": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + + "clock_skew_seconds": schema.Int64Attribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + Validators: []validator.Int64{ + int64validator.AtLeast(0), + int64validator.AtMost(4.294967295e+09), + }, + }, + + "issuer": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "jwks": schema.SingleNestedAttribute{ + Description: "", + MarkdownDescription: "", + Attributes: map[string]schema.Attribute{ + "local": schema.SingleNestedAttribute{ + Description: "", + MarkdownDescription: "", + Attributes: map[string]schema.Attribute{ + "key": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + + "remote": schema.SingleNestedAttribute{ + Description: "", + MarkdownDescription: "", + Attributes: map[string]schema.Attribute{ + "async_fetch": schema.SingleNestedAttribute{ + Description: "", + MarkdownDescription: "", + Attributes: map[string]schema.Attribute{ + "fast_listener": schema.BoolAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + + "cache_duration": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "upstream_ref": schema.SingleNestedAttribute{ + Description: "", + MarkdownDescription: "", + Attributes: map[string]schema.Attribute{ + "name": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "namespace": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + + "url": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + + "keep_token": schema.BoolAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "token_source": schema.SingleNestedAttribute{ + Description: "", + MarkdownDescription: "", + Attributes: map[string]schema.Attribute{ + "headers": schema.ListNestedAttribute{ + Description: "", + MarkdownDescription: "", + NestedObject: schema.NestedAttributeObject{ + Attributes: map[string]schema.Attribute{ + "header": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "prefix": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + + "query_params": schema.ListAttribute{ + Description: "", + MarkdownDescription: "", + ElementType: types.StringType, + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + + "before_ext_auth": schema.SingleNestedAttribute{ + Description: "", + MarkdownDescription: "", + Attributes: map[string]schema.Attribute{ + "allow_missing_or_failed_jwt": schema.BoolAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "providers": schema.SingleNestedAttribute{ + Description: "", + MarkdownDescription: "", + Attributes: map[string]schema.Attribute{ + "audiences": schema.ListAttribute{ + Description: "", + MarkdownDescription: "", + ElementType: types.StringType, + Required: false, + Optional: true, + Computed: false, + }, + + "claims_to_headers": schema.ListNestedAttribute{ + Description: "", + MarkdownDescription: "", + NestedObject: schema.NestedAttributeObject{ + Attributes: map[string]schema.Attribute{ + "append": schema.BoolAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "claim": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "header": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + + "clock_skew_seconds": schema.Int64Attribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + Validators: []validator.Int64{ + int64validator.AtLeast(0), + int64validator.AtMost(4.294967295e+09), + }, + }, + + "issuer": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "jwks": schema.SingleNestedAttribute{ + Description: "", + MarkdownDescription: "", + Attributes: map[string]schema.Attribute{ + "local": schema.SingleNestedAttribute{ + Description: "", + MarkdownDescription: "", + Attributes: map[string]schema.Attribute{ + "key": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + + "remote": schema.SingleNestedAttribute{ + Description: "", + MarkdownDescription: "", + Attributes: map[string]schema.Attribute{ + "async_fetch": schema.SingleNestedAttribute{ + Description: "", + MarkdownDescription: "", + Attributes: map[string]schema.Attribute{ + "fast_listener": schema.BoolAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + + "cache_duration": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "upstream_ref": schema.SingleNestedAttribute{ + Description: "", + MarkdownDescription: "", + Attributes: map[string]schema.Attribute{ + "name": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "namespace": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + + "url": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + + "keep_token": schema.BoolAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "token_source": schema.SingleNestedAttribute{ + Description: "", + MarkdownDescription: "", + Attributes: map[string]schema.Attribute{ + "headers": schema.ListNestedAttribute{ + Description: "", + MarkdownDescription: "", + NestedObject: schema.NestedAttributeObject{ + Attributes: map[string]schema.Attribute{ + "header": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "prefix": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + + "query_params": schema.ListAttribute{ + Description: "", + MarkdownDescription: "", + ElementType: types.StringType, + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + "jwt_staged": schema.SingleNestedAttribute{ Description: "", MarkdownDescription: "", diff --git a/internal/provider/gateway_solo_io_v1/gateway_solo_io_route_table_v1_manifest.go b/internal/provider/gateway_solo_io_v1/gateway_solo_io_route_table_v1_manifest.go index 385553828..10fdfd1d5 100644 --- a/internal/provider/gateway_solo_io_v1/gateway_solo_io_route_table_v1_manifest.go +++ b/internal/provider/gateway_solo_io_v1/gateway_solo_io_route_table_v1_manifest.go @@ -337,6 +337,82 @@ type GatewaySoloIoRouteTableV1ManifestData struct { Jwt *struct { Disable *bool `tfsdk:"disable" json:"disable,omitempty"` } `tfsdk:"jwt" json:"jwt,omitempty"` + JwtProvidersStaged *struct { + AfterExtAuth *struct { + AllowMissingOrFailedJwt *bool `tfsdk:"allow_missing_or_failed_jwt" json:"allowMissingOrFailedJwt,omitempty"` + Providers *struct { + Audiences *[]string `tfsdk:"audiences" json:"audiences,omitempty"` + ClaimsToHeaders *[]struct { + Append *bool `tfsdk:"append" json:"append,omitempty"` + Claim *string `tfsdk:"claim" json:"claim,omitempty"` + Header *string `tfsdk:"header" json:"header,omitempty"` + } `tfsdk:"claims_to_headers" json:"claimsToHeaders,omitempty"` + ClockSkewSeconds *int64 `tfsdk:"clock_skew_seconds" json:"clockSkewSeconds,omitempty"` + Issuer *string `tfsdk:"issuer" json:"issuer,omitempty"` + Jwks *struct { + Local *struct { + Key *string `tfsdk:"key" json:"key,omitempty"` + } `tfsdk:"local" json:"local,omitempty"` + Remote *struct { + AsyncFetch *struct { + FastListener *bool `tfsdk:"fast_listener" json:"fastListener,omitempty"` + } `tfsdk:"async_fetch" json:"asyncFetch,omitempty"` + CacheDuration *string `tfsdk:"cache_duration" json:"cacheDuration,omitempty"` + UpstreamRef *struct { + Name *string `tfsdk:"name" json:"name,omitempty"` + Namespace *string `tfsdk:"namespace" json:"namespace,omitempty"` + } `tfsdk:"upstream_ref" json:"upstreamRef,omitempty"` + Url *string `tfsdk:"url" json:"url,omitempty"` + } `tfsdk:"remote" json:"remote,omitempty"` + } `tfsdk:"jwks" json:"jwks,omitempty"` + KeepToken *bool `tfsdk:"keep_token" json:"keepToken,omitempty"` + TokenSource *struct { + Headers *[]struct { + Header *string `tfsdk:"header" json:"header,omitempty"` + Prefix *string `tfsdk:"prefix" json:"prefix,omitempty"` + } `tfsdk:"headers" json:"headers,omitempty"` + QueryParams *[]string `tfsdk:"query_params" json:"queryParams,omitempty"` + } `tfsdk:"token_source" json:"tokenSource,omitempty"` + } `tfsdk:"providers" json:"providers,omitempty"` + } `tfsdk:"after_ext_auth" json:"afterExtAuth,omitempty"` + BeforeExtAuth *struct { + AllowMissingOrFailedJwt *bool `tfsdk:"allow_missing_or_failed_jwt" json:"allowMissingOrFailedJwt,omitempty"` + Providers *struct { + Audiences *[]string `tfsdk:"audiences" json:"audiences,omitempty"` + ClaimsToHeaders *[]struct { + Append *bool `tfsdk:"append" json:"append,omitempty"` + Claim *string `tfsdk:"claim" json:"claim,omitempty"` + Header *string `tfsdk:"header" json:"header,omitempty"` + } `tfsdk:"claims_to_headers" json:"claimsToHeaders,omitempty"` + ClockSkewSeconds *int64 `tfsdk:"clock_skew_seconds" json:"clockSkewSeconds,omitempty"` + Issuer *string `tfsdk:"issuer" json:"issuer,omitempty"` + Jwks *struct { + Local *struct { + Key *string `tfsdk:"key" json:"key,omitempty"` + } `tfsdk:"local" json:"local,omitempty"` + Remote *struct { + AsyncFetch *struct { + FastListener *bool `tfsdk:"fast_listener" json:"fastListener,omitempty"` + } `tfsdk:"async_fetch" json:"asyncFetch,omitempty"` + CacheDuration *string `tfsdk:"cache_duration" json:"cacheDuration,omitempty"` + UpstreamRef *struct { + Name *string `tfsdk:"name" json:"name,omitempty"` + Namespace *string `tfsdk:"namespace" json:"namespace,omitempty"` + } `tfsdk:"upstream_ref" json:"upstreamRef,omitempty"` + Url *string `tfsdk:"url" json:"url,omitempty"` + } `tfsdk:"remote" json:"remote,omitempty"` + } `tfsdk:"jwks" json:"jwks,omitempty"` + KeepToken *bool `tfsdk:"keep_token" json:"keepToken,omitempty"` + TokenSource *struct { + Headers *[]struct { + Header *string `tfsdk:"header" json:"header,omitempty"` + Prefix *string `tfsdk:"prefix" json:"prefix,omitempty"` + } `tfsdk:"headers" json:"headers,omitempty"` + QueryParams *[]string `tfsdk:"query_params" json:"queryParams,omitempty"` + } `tfsdk:"token_source" json:"tokenSource,omitempty"` + } `tfsdk:"providers" json:"providers,omitempty"` + } `tfsdk:"before_ext_auth" json:"beforeExtAuth,omitempty"` + } `tfsdk:"jwt_providers_staged" json:"jwtProvidersStaged,omitempty"` JwtStaged *struct { AfterExtAuth *struct { Disable *bool `tfsdk:"disable" json:"disable,omitempty"` @@ -4517,6 +4593,487 @@ func (r *GatewaySoloIoRouteTableV1Manifest) Schema(_ context.Context, _ datasour Computed: false, }, + "jwt_providers_staged": schema.SingleNestedAttribute{ + Description: "", + MarkdownDescription: "", + Attributes: map[string]schema.Attribute{ + "after_ext_auth": schema.SingleNestedAttribute{ + Description: "", + MarkdownDescription: "", + Attributes: map[string]schema.Attribute{ + "allow_missing_or_failed_jwt": schema.BoolAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "providers": schema.SingleNestedAttribute{ + Description: "", + MarkdownDescription: "", + Attributes: map[string]schema.Attribute{ + "audiences": schema.ListAttribute{ + Description: "", + MarkdownDescription: "", + ElementType: types.StringType, + Required: false, + Optional: true, + Computed: false, + }, + + "claims_to_headers": schema.ListNestedAttribute{ + Description: "", + MarkdownDescription: "", + NestedObject: schema.NestedAttributeObject{ + Attributes: map[string]schema.Attribute{ + "append": schema.BoolAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "claim": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "header": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + + "clock_skew_seconds": schema.Int64Attribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + Validators: []validator.Int64{ + int64validator.AtLeast(0), + int64validator.AtMost(4.294967295e+09), + }, + }, + + "issuer": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "jwks": schema.SingleNestedAttribute{ + Description: "", + MarkdownDescription: "", + Attributes: map[string]schema.Attribute{ + "local": schema.SingleNestedAttribute{ + Description: "", + MarkdownDescription: "", + Attributes: map[string]schema.Attribute{ + "key": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + + "remote": schema.SingleNestedAttribute{ + Description: "", + MarkdownDescription: "", + Attributes: map[string]schema.Attribute{ + "async_fetch": schema.SingleNestedAttribute{ + Description: "", + MarkdownDescription: "", + Attributes: map[string]schema.Attribute{ + "fast_listener": schema.BoolAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + + "cache_duration": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "upstream_ref": schema.SingleNestedAttribute{ + Description: "", + MarkdownDescription: "", + Attributes: map[string]schema.Attribute{ + "name": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "namespace": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + + "url": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + + "keep_token": schema.BoolAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "token_source": schema.SingleNestedAttribute{ + Description: "", + MarkdownDescription: "", + Attributes: map[string]schema.Attribute{ + "headers": schema.ListNestedAttribute{ + Description: "", + MarkdownDescription: "", + NestedObject: schema.NestedAttributeObject{ + Attributes: map[string]schema.Attribute{ + "header": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "prefix": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + + "query_params": schema.ListAttribute{ + Description: "", + MarkdownDescription: "", + ElementType: types.StringType, + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + + "before_ext_auth": schema.SingleNestedAttribute{ + Description: "", + MarkdownDescription: "", + Attributes: map[string]schema.Attribute{ + "allow_missing_or_failed_jwt": schema.BoolAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "providers": schema.SingleNestedAttribute{ + Description: "", + MarkdownDescription: "", + Attributes: map[string]schema.Attribute{ + "audiences": schema.ListAttribute{ + Description: "", + MarkdownDescription: "", + ElementType: types.StringType, + Required: false, + Optional: true, + Computed: false, + }, + + "claims_to_headers": schema.ListNestedAttribute{ + Description: "", + MarkdownDescription: "", + NestedObject: schema.NestedAttributeObject{ + Attributes: map[string]schema.Attribute{ + "append": schema.BoolAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "claim": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "header": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + + "clock_skew_seconds": schema.Int64Attribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + Validators: []validator.Int64{ + int64validator.AtLeast(0), + int64validator.AtMost(4.294967295e+09), + }, + }, + + "issuer": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "jwks": schema.SingleNestedAttribute{ + Description: "", + MarkdownDescription: "", + Attributes: map[string]schema.Attribute{ + "local": schema.SingleNestedAttribute{ + Description: "", + MarkdownDescription: "", + Attributes: map[string]schema.Attribute{ + "key": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + + "remote": schema.SingleNestedAttribute{ + Description: "", + MarkdownDescription: "", + Attributes: map[string]schema.Attribute{ + "async_fetch": schema.SingleNestedAttribute{ + Description: "", + MarkdownDescription: "", + Attributes: map[string]schema.Attribute{ + "fast_listener": schema.BoolAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + + "cache_duration": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "upstream_ref": schema.SingleNestedAttribute{ + Description: "", + MarkdownDescription: "", + Attributes: map[string]schema.Attribute{ + "name": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "namespace": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + + "url": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + + "keep_token": schema.BoolAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "token_source": schema.SingleNestedAttribute{ + Description: "", + MarkdownDescription: "", + Attributes: map[string]schema.Attribute{ + "headers": schema.ListNestedAttribute{ + Description: "", + MarkdownDescription: "", + NestedObject: schema.NestedAttributeObject{ + Attributes: map[string]schema.Attribute{ + "header": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "prefix": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + + "query_params": schema.ListAttribute{ + Description: "", + MarkdownDescription: "", + ElementType: types.StringType, + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + "jwt_staged": schema.SingleNestedAttribute{ Description: "", MarkdownDescription: "", diff --git a/internal/provider/gateway_solo_io_v1/gateway_solo_io_virtual_service_v1_manifest.go b/internal/provider/gateway_solo_io_v1/gateway_solo_io_virtual_service_v1_manifest.go index a2cae4c1c..d42658f2b 100644 --- a/internal/provider/gateway_solo_io_v1/gateway_solo_io_virtual_service_v1_manifest.go +++ b/internal/provider/gateway_solo_io_v1/gateway_solo_io_virtual_service_v1_manifest.go @@ -1757,6 +1757,82 @@ type GatewaySoloIoVirtualServiceV1ManifestData struct { Jwt *struct { Disable *bool `tfsdk:"disable" json:"disable,omitempty"` } `tfsdk:"jwt" json:"jwt,omitempty"` + JwtProvidersStaged *struct { + AfterExtAuth *struct { + AllowMissingOrFailedJwt *bool `tfsdk:"allow_missing_or_failed_jwt" json:"allowMissingOrFailedJwt,omitempty"` + Providers *struct { + Audiences *[]string `tfsdk:"audiences" json:"audiences,omitempty"` + ClaimsToHeaders *[]struct { + Append *bool `tfsdk:"append" json:"append,omitempty"` + Claim *string `tfsdk:"claim" json:"claim,omitempty"` + Header *string `tfsdk:"header" json:"header,omitempty"` + } `tfsdk:"claims_to_headers" json:"claimsToHeaders,omitempty"` + ClockSkewSeconds *int64 `tfsdk:"clock_skew_seconds" json:"clockSkewSeconds,omitempty"` + Issuer *string `tfsdk:"issuer" json:"issuer,omitempty"` + Jwks *struct { + Local *struct { + Key *string `tfsdk:"key" json:"key,omitempty"` + } `tfsdk:"local" json:"local,omitempty"` + Remote *struct { + AsyncFetch *struct { + FastListener *bool `tfsdk:"fast_listener" json:"fastListener,omitempty"` + } `tfsdk:"async_fetch" json:"asyncFetch,omitempty"` + CacheDuration *string `tfsdk:"cache_duration" json:"cacheDuration,omitempty"` + UpstreamRef *struct { + Name *string `tfsdk:"name" json:"name,omitempty"` + Namespace *string `tfsdk:"namespace" json:"namespace,omitempty"` + } `tfsdk:"upstream_ref" json:"upstreamRef,omitempty"` + Url *string `tfsdk:"url" json:"url,omitempty"` + } `tfsdk:"remote" json:"remote,omitempty"` + } `tfsdk:"jwks" json:"jwks,omitempty"` + KeepToken *bool `tfsdk:"keep_token" json:"keepToken,omitempty"` + TokenSource *struct { + Headers *[]struct { + Header *string `tfsdk:"header" json:"header,omitempty"` + Prefix *string `tfsdk:"prefix" json:"prefix,omitempty"` + } `tfsdk:"headers" json:"headers,omitempty"` + QueryParams *[]string `tfsdk:"query_params" json:"queryParams,omitempty"` + } `tfsdk:"token_source" json:"tokenSource,omitempty"` + } `tfsdk:"providers" json:"providers,omitempty"` + } `tfsdk:"after_ext_auth" json:"afterExtAuth,omitempty"` + BeforeExtAuth *struct { + AllowMissingOrFailedJwt *bool `tfsdk:"allow_missing_or_failed_jwt" json:"allowMissingOrFailedJwt,omitempty"` + Providers *struct { + Audiences *[]string `tfsdk:"audiences" json:"audiences,omitempty"` + ClaimsToHeaders *[]struct { + Append *bool `tfsdk:"append" json:"append,omitempty"` + Claim *string `tfsdk:"claim" json:"claim,omitempty"` + Header *string `tfsdk:"header" json:"header,omitempty"` + } `tfsdk:"claims_to_headers" json:"claimsToHeaders,omitempty"` + ClockSkewSeconds *int64 `tfsdk:"clock_skew_seconds" json:"clockSkewSeconds,omitempty"` + Issuer *string `tfsdk:"issuer" json:"issuer,omitempty"` + Jwks *struct { + Local *struct { + Key *string `tfsdk:"key" json:"key,omitempty"` + } `tfsdk:"local" json:"local,omitempty"` + Remote *struct { + AsyncFetch *struct { + FastListener *bool `tfsdk:"fast_listener" json:"fastListener,omitempty"` + } `tfsdk:"async_fetch" json:"asyncFetch,omitempty"` + CacheDuration *string `tfsdk:"cache_duration" json:"cacheDuration,omitempty"` + UpstreamRef *struct { + Name *string `tfsdk:"name" json:"name,omitempty"` + Namespace *string `tfsdk:"namespace" json:"namespace,omitempty"` + } `tfsdk:"upstream_ref" json:"upstreamRef,omitempty"` + Url *string `tfsdk:"url" json:"url,omitempty"` + } `tfsdk:"remote" json:"remote,omitempty"` + } `tfsdk:"jwks" json:"jwks,omitempty"` + KeepToken *bool `tfsdk:"keep_token" json:"keepToken,omitempty"` + TokenSource *struct { + Headers *[]struct { + Header *string `tfsdk:"header" json:"header,omitempty"` + Prefix *string `tfsdk:"prefix" json:"prefix,omitempty"` + } `tfsdk:"headers" json:"headers,omitempty"` + QueryParams *[]string `tfsdk:"query_params" json:"queryParams,omitempty"` + } `tfsdk:"token_source" json:"tokenSource,omitempty"` + } `tfsdk:"providers" json:"providers,omitempty"` + } `tfsdk:"before_ext_auth" json:"beforeExtAuth,omitempty"` + } `tfsdk:"jwt_providers_staged" json:"jwtProvidersStaged,omitempty"` JwtStaged *struct { AfterExtAuth *struct { Disable *bool `tfsdk:"disable" json:"disable,omitempty"` @@ -15188,6 +15264,487 @@ func (r *GatewaySoloIoVirtualServiceV1Manifest) Schema(_ context.Context, _ data Computed: false, }, + "jwt_providers_staged": schema.SingleNestedAttribute{ + Description: "", + MarkdownDescription: "", + Attributes: map[string]schema.Attribute{ + "after_ext_auth": schema.SingleNestedAttribute{ + Description: "", + MarkdownDescription: "", + Attributes: map[string]schema.Attribute{ + "allow_missing_or_failed_jwt": schema.BoolAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "providers": schema.SingleNestedAttribute{ + Description: "", + MarkdownDescription: "", + Attributes: map[string]schema.Attribute{ + "audiences": schema.ListAttribute{ + Description: "", + MarkdownDescription: "", + ElementType: types.StringType, + Required: false, + Optional: true, + Computed: false, + }, + + "claims_to_headers": schema.ListNestedAttribute{ + Description: "", + MarkdownDescription: "", + NestedObject: schema.NestedAttributeObject{ + Attributes: map[string]schema.Attribute{ + "append": schema.BoolAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "claim": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "header": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + + "clock_skew_seconds": schema.Int64Attribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + Validators: []validator.Int64{ + int64validator.AtLeast(0), + int64validator.AtMost(4.294967295e+09), + }, + }, + + "issuer": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "jwks": schema.SingleNestedAttribute{ + Description: "", + MarkdownDescription: "", + Attributes: map[string]schema.Attribute{ + "local": schema.SingleNestedAttribute{ + Description: "", + MarkdownDescription: "", + Attributes: map[string]schema.Attribute{ + "key": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + + "remote": schema.SingleNestedAttribute{ + Description: "", + MarkdownDescription: "", + Attributes: map[string]schema.Attribute{ + "async_fetch": schema.SingleNestedAttribute{ + Description: "", + MarkdownDescription: "", + Attributes: map[string]schema.Attribute{ + "fast_listener": schema.BoolAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + + "cache_duration": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "upstream_ref": schema.SingleNestedAttribute{ + Description: "", + MarkdownDescription: "", + Attributes: map[string]schema.Attribute{ + "name": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "namespace": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + + "url": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + + "keep_token": schema.BoolAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "token_source": schema.SingleNestedAttribute{ + Description: "", + MarkdownDescription: "", + Attributes: map[string]schema.Attribute{ + "headers": schema.ListNestedAttribute{ + Description: "", + MarkdownDescription: "", + NestedObject: schema.NestedAttributeObject{ + Attributes: map[string]schema.Attribute{ + "header": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "prefix": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + + "query_params": schema.ListAttribute{ + Description: "", + MarkdownDescription: "", + ElementType: types.StringType, + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + + "before_ext_auth": schema.SingleNestedAttribute{ + Description: "", + MarkdownDescription: "", + Attributes: map[string]schema.Attribute{ + "allow_missing_or_failed_jwt": schema.BoolAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "providers": schema.SingleNestedAttribute{ + Description: "", + MarkdownDescription: "", + Attributes: map[string]schema.Attribute{ + "audiences": schema.ListAttribute{ + Description: "", + MarkdownDescription: "", + ElementType: types.StringType, + Required: false, + Optional: true, + Computed: false, + }, + + "claims_to_headers": schema.ListNestedAttribute{ + Description: "", + MarkdownDescription: "", + NestedObject: schema.NestedAttributeObject{ + Attributes: map[string]schema.Attribute{ + "append": schema.BoolAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "claim": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "header": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + + "clock_skew_seconds": schema.Int64Attribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + Validators: []validator.Int64{ + int64validator.AtLeast(0), + int64validator.AtMost(4.294967295e+09), + }, + }, + + "issuer": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "jwks": schema.SingleNestedAttribute{ + Description: "", + MarkdownDescription: "", + Attributes: map[string]schema.Attribute{ + "local": schema.SingleNestedAttribute{ + Description: "", + MarkdownDescription: "", + Attributes: map[string]schema.Attribute{ + "key": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + + "remote": schema.SingleNestedAttribute{ + Description: "", + MarkdownDescription: "", + Attributes: map[string]schema.Attribute{ + "async_fetch": schema.SingleNestedAttribute{ + Description: "", + MarkdownDescription: "", + Attributes: map[string]schema.Attribute{ + "fast_listener": schema.BoolAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + + "cache_duration": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "upstream_ref": schema.SingleNestedAttribute{ + Description: "", + MarkdownDescription: "", + Attributes: map[string]schema.Attribute{ + "name": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "namespace": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + + "url": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + + "keep_token": schema.BoolAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "token_source": schema.SingleNestedAttribute{ + Description: "", + MarkdownDescription: "", + Attributes: map[string]schema.Attribute{ + "headers": schema.ListNestedAttribute{ + Description: "", + MarkdownDescription: "", + NestedObject: schema.NestedAttributeObject{ + Attributes: map[string]schema.Attribute{ + "header": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "prefix": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + + "query_params": schema.ListAttribute{ + Description: "", + MarkdownDescription: "", + ElementType: types.StringType, + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + "jwt_staged": schema.SingleNestedAttribute{ Description: "", MarkdownDescription: "", diff --git a/internal/provider/grafana_integreatly_org_v1beta1/grafana_integreatly_org_grafana_dashboard_v1beta1_manifest.go b/internal/provider/grafana_integreatly_org_v1beta1/grafana_integreatly_org_grafana_dashboard_v1beta1_manifest.go index b8a43b070..183f60f36 100644 --- a/internal/provider/grafana_integreatly_org_v1beta1/grafana_integreatly_org_grafana_dashboard_v1beta1_manifest.go +++ b/internal/provider/grafana_integreatly_org_v1beta1/grafana_integreatly_org_grafana_dashboard_v1beta1_manifest.go @@ -110,8 +110,22 @@ type GrafanaIntegreatlyOrgGrafanaDashboardV1Beta1ManifestData struct { Name *string `tfsdk:"name" json:"name,omitempty"` Version *string `tfsdk:"version" json:"version,omitempty"` } `tfsdk:"plugins" json:"plugins,omitempty"` - ResyncPeriod *string `tfsdk:"resync_period" json:"resyncPeriod,omitempty"` - Url *string `tfsdk:"url" json:"url,omitempty"` + ResyncPeriod *string `tfsdk:"resync_period" json:"resyncPeriod,omitempty"` + Url *string `tfsdk:"url" json:"url,omitempty"` + UrlAuthorization *struct { + BasicAuth *struct { + Password *struct { + Key *string `tfsdk:"key" json:"key,omitempty"` + Name *string `tfsdk:"name" json:"name,omitempty"` + Optional *bool `tfsdk:"optional" json:"optional,omitempty"` + } `tfsdk:"password" json:"password,omitempty"` + Username *struct { + Key *string `tfsdk:"key" json:"key,omitempty"` + Name *string `tfsdk:"name" json:"name,omitempty"` + Optional *bool `tfsdk:"optional" json:"optional,omitempty"` + } `tfsdk:"username" json:"username,omitempty"` + } `tfsdk:"basic_auth" json:"basicAuth,omitempty"` + } `tfsdk:"url_authorization" json:"urlAuthorization,omitempty"` } `tfsdk:"spec" json:"spec,omitempty"` } @@ -659,6 +673,90 @@ func (r *GrafanaIntegreatlyOrgGrafanaDashboardV1Beta1Manifest) Schema(_ context. Optional: true, Computed: false, }, + + "url_authorization": schema.SingleNestedAttribute{ + Description: "authorization options for dashboard from url", + MarkdownDescription: "authorization options for dashboard from url", + Attributes: map[string]schema.Attribute{ + "basic_auth": schema.SingleNestedAttribute{ + Description: "", + MarkdownDescription: "", + Attributes: map[string]schema.Attribute{ + "password": schema.SingleNestedAttribute{ + Description: "SecretKeySelector selects a key of a Secret.", + MarkdownDescription: "SecretKeySelector selects a key of a Secret.", + Attributes: map[string]schema.Attribute{ + "key": schema.StringAttribute{ + Description: "The key of the secret to select from. Must be a valid secret key.", + MarkdownDescription: "The key of the secret to select from. Must be a valid secret key.", + Required: true, + Optional: false, + Computed: false, + }, + + "name": schema.StringAttribute{ + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", + Required: false, + Optional: true, + Computed: false, + }, + + "optional": schema.BoolAttribute{ + Description: "Specify whether the Secret or its key must be defined", + MarkdownDescription: "Specify whether the Secret or its key must be defined", + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + + "username": schema.SingleNestedAttribute{ + Description: "SecretKeySelector selects a key of a Secret.", + MarkdownDescription: "SecretKeySelector selects a key of a Secret.", + Attributes: map[string]schema.Attribute{ + "key": schema.StringAttribute{ + Description: "The key of the secret to select from. Must be a valid secret key.", + MarkdownDescription: "The key of the secret to select from. Must be a valid secret key.", + Required: true, + Optional: false, + Computed: false, + }, + + "name": schema.StringAttribute{ + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", + Required: false, + Optional: true, + Computed: false, + }, + + "optional": schema.BoolAttribute{ + Description: "Specify whether the Secret or its key must be defined", + MarkdownDescription: "Specify whether the Secret or its key must be defined", + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, }, Required: false, Optional: true, diff --git a/internal/provider/infinispan_org_v1/infinispan_org_infinispan_v1_manifest.go b/internal/provider/infinispan_org_v1/infinispan_org_infinispan_v1_manifest.go index 330bb6f91..c7564f175 100644 --- a/internal/provider/infinispan_org_v1/infinispan_org_infinispan_v1_manifest.go +++ b/internal/provider/infinispan_org_v1/infinispan_org_infinispan_v1_manifest.go @@ -563,8 +563,8 @@ func (r *InfinispanOrgInfinispanV1Manifest) Schema(_ context.Context, _ datasour MarkdownDescription: "Describes node affinity scheduling rules for the pod.", Attributes: map[string]schema.Attribute{ "preferred_during_scheduling_ignored_during_execution": schema.ListNestedAttribute{ - Description: "The scheduler will prefer to schedule pods to nodes that satisfy the affinity expressions specified by this field, but it may choose a node that violates one or more of the expressions. The node that is most preferred is the one with the greatest sum of weights, i.e. for each node that meets all of the scheduling requirements (resource request, requiredDuringScheduling affinity expressions, etc.), compute a sum by iterating through the elements of this field and adding 'weight' to the sum if the node matches the corresponding matchExpressions; the node(s) with the highest sum are the most preferred.", - MarkdownDescription: "The scheduler will prefer to schedule pods to nodes that satisfy the affinity expressions specified by this field, but it may choose a node that violates one or more of the expressions. The node that is most preferred is the one with the greatest sum of weights, i.e. for each node that meets all of the scheduling requirements (resource request, requiredDuringScheduling affinity expressions, etc.), compute a sum by iterating through the elements of this field and adding 'weight' to the sum if the node matches the corresponding matchExpressions; the node(s) with the highest sum are the most preferred.", + Description: "The scheduler will prefer to schedule pods to nodes that satisfythe affinity expressions specified by this field, but it may choosea node that violates one or more of the expressions. The node that ismost preferred is the one with the greatest sum of weights, i.e.for each node that meets all of the scheduling requirements (resourcerequest, requiredDuringScheduling affinity expressions, etc.),compute a sum by iterating through the elements of this field and adding'weight' to the sum if the node matches the corresponding matchExpressions; thenode(s) with the highest sum are the most preferred.", + MarkdownDescription: "The scheduler will prefer to schedule pods to nodes that satisfythe affinity expressions specified by this field, but it may choosea node that violates one or more of the expressions. The node that ismost preferred is the one with the greatest sum of weights, i.e.for each node that meets all of the scheduling requirements (resourcerequest, requiredDuringScheduling affinity expressions, etc.),compute a sum by iterating through the elements of this field and adding'weight' to the sum if the node matches the corresponding matchExpressions; thenode(s) with the highest sum are the most preferred.", NestedObject: schema.NestedAttributeObject{ Attributes: map[string]schema.Attribute{ "preference": schema.SingleNestedAttribute{ @@ -585,16 +585,16 @@ func (r *InfinispanOrgInfinispanV1Manifest) Schema(_ context.Context, _ datasour }, "operator": schema.StringAttribute{ - Description: "Represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt.", - MarkdownDescription: "Represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt.", + Description: "Represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt.", + MarkdownDescription: "Represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt.", Required: true, Optional: false, Computed: false, }, "values": schema.ListAttribute{ - Description: "An array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. If the operator is Gt or Lt, the values array must have a single element, which will be interpreted as an integer. This array is replaced during a strategic merge patch.", - MarkdownDescription: "An array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. If the operator is Gt or Lt, the values array must have a single element, which will be interpreted as an integer. This array is replaced during a strategic merge patch.", + Description: "An array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. If the operator is Gt or Lt, the valuesarray must have a single element, which will be interpreted as an integer.This array is replaced during a strategic merge patch.", + MarkdownDescription: "An array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. If the operator is Gt or Lt, the valuesarray must have a single element, which will be interpreted as an integer.This array is replaced during a strategic merge patch.", ElementType: types.StringType, Required: false, Optional: true, @@ -621,16 +621,16 @@ func (r *InfinispanOrgInfinispanV1Manifest) Schema(_ context.Context, _ datasour }, "operator": schema.StringAttribute{ - Description: "Represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt.", - MarkdownDescription: "Represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt.", + Description: "Represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt.", + MarkdownDescription: "Represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt.", Required: true, Optional: false, Computed: false, }, "values": schema.ListAttribute{ - Description: "An array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. If the operator is Gt or Lt, the values array must have a single element, which will be interpreted as an integer. This array is replaced during a strategic merge patch.", - MarkdownDescription: "An array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. If the operator is Gt or Lt, the values array must have a single element, which will be interpreted as an integer. This array is replaced during a strategic merge patch.", + Description: "An array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. If the operator is Gt or Lt, the valuesarray must have a single element, which will be interpreted as an integer.This array is replaced during a strategic merge patch.", + MarkdownDescription: "An array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. If the operator is Gt or Lt, the valuesarray must have a single element, which will be interpreted as an integer.This array is replaced during a strategic merge patch.", ElementType: types.StringType, Required: false, Optional: true, @@ -663,8 +663,8 @@ func (r *InfinispanOrgInfinispanV1Manifest) Schema(_ context.Context, _ datasour }, "required_during_scheduling_ignored_during_execution": schema.SingleNestedAttribute{ - Description: "If the affinity requirements specified by this field are not met at scheduling time, the pod will not be scheduled onto the node. If the affinity requirements specified by this field cease to be met at some point during pod execution (e.g. due to an update), the system may or may not try to eventually evict the pod from its node.", - MarkdownDescription: "If the affinity requirements specified by this field are not met at scheduling time, the pod will not be scheduled onto the node. If the affinity requirements specified by this field cease to be met at some point during pod execution (e.g. due to an update), the system may or may not try to eventually evict the pod from its node.", + Description: "If the affinity requirements specified by this field are not met atscheduling time, the pod will not be scheduled onto the node.If the affinity requirements specified by this field cease to be metat some point during pod execution (e.g. due to an update), the systemmay or may not try to eventually evict the pod from its node.", + MarkdownDescription: "If the affinity requirements specified by this field are not met atscheduling time, the pod will not be scheduled onto the node.If the affinity requirements specified by this field cease to be metat some point during pod execution (e.g. due to an update), the systemmay or may not try to eventually evict the pod from its node.", Attributes: map[string]schema.Attribute{ "node_selector_terms": schema.ListNestedAttribute{ Description: "Required. A list of node selector terms. The terms are ORed.", @@ -685,16 +685,16 @@ func (r *InfinispanOrgInfinispanV1Manifest) Schema(_ context.Context, _ datasour }, "operator": schema.StringAttribute{ - Description: "Represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt.", - MarkdownDescription: "Represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt.", + Description: "Represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt.", + MarkdownDescription: "Represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt.", Required: true, Optional: false, Computed: false, }, "values": schema.ListAttribute{ - Description: "An array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. If the operator is Gt or Lt, the values array must have a single element, which will be interpreted as an integer. This array is replaced during a strategic merge patch.", - MarkdownDescription: "An array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. If the operator is Gt or Lt, the values array must have a single element, which will be interpreted as an integer. This array is replaced during a strategic merge patch.", + Description: "An array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. If the operator is Gt or Lt, the valuesarray must have a single element, which will be interpreted as an integer.This array is replaced during a strategic merge patch.", + MarkdownDescription: "An array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. If the operator is Gt or Lt, the valuesarray must have a single element, which will be interpreted as an integer.This array is replaced during a strategic merge patch.", ElementType: types.StringType, Required: false, Optional: true, @@ -721,16 +721,16 @@ func (r *InfinispanOrgInfinispanV1Manifest) Schema(_ context.Context, _ datasour }, "operator": schema.StringAttribute{ - Description: "Represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt.", - MarkdownDescription: "Represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt.", + Description: "Represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt.", + MarkdownDescription: "Represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt.", Required: true, Optional: false, Computed: false, }, "values": schema.ListAttribute{ - Description: "An array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. If the operator is Gt or Lt, the values array must have a single element, which will be interpreted as an integer. This array is replaced during a strategic merge patch.", - MarkdownDescription: "An array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. If the operator is Gt or Lt, the values array must have a single element, which will be interpreted as an integer. This array is replaced during a strategic merge patch.", + Description: "An array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. If the operator is Gt or Lt, the valuesarray must have a single element, which will be interpreted as an integer.This array is replaced during a strategic merge patch.", + MarkdownDescription: "An array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. If the operator is Gt or Lt, the valuesarray must have a single element, which will be interpreted as an integer.This array is replaced during a strategic merge patch.", ElementType: types.StringType, Required: false, Optional: true, @@ -764,8 +764,8 @@ func (r *InfinispanOrgInfinispanV1Manifest) Schema(_ context.Context, _ datasour MarkdownDescription: "Describes pod affinity scheduling rules (e.g. co-locate this pod in the same node, zone, etc. as some other pod(s)).", Attributes: map[string]schema.Attribute{ "preferred_during_scheduling_ignored_during_execution": schema.ListNestedAttribute{ - Description: "The scheduler will prefer to schedule pods to nodes that satisfy the affinity expressions specified by this field, but it may choose a node that violates one or more of the expressions. The node that is most preferred is the one with the greatest sum of weights, i.e. for each node that meets all of the scheduling requirements (resource request, requiredDuringScheduling affinity expressions, etc.), compute a sum by iterating through the elements of this field and adding 'weight' to the sum if the node has pods which matches the corresponding podAffinityTerm; the node(s) with the highest sum are the most preferred.", - MarkdownDescription: "The scheduler will prefer to schedule pods to nodes that satisfy the affinity expressions specified by this field, but it may choose a node that violates one or more of the expressions. The node that is most preferred is the one with the greatest sum of weights, i.e. for each node that meets all of the scheduling requirements (resource request, requiredDuringScheduling affinity expressions, etc.), compute a sum by iterating through the elements of this field and adding 'weight' to the sum if the node has pods which matches the corresponding podAffinityTerm; the node(s) with the highest sum are the most preferred.", + Description: "The scheduler will prefer to schedule pods to nodes that satisfythe affinity expressions specified by this field, but it may choosea node that violates one or more of the expressions. The node that ismost preferred is the one with the greatest sum of weights, i.e.for each node that meets all of the scheduling requirements (resourcerequest, requiredDuringScheduling affinity expressions, etc.),compute a sum by iterating through the elements of this field and adding'weight' to the sum if the node has pods which matches the corresponding podAffinityTerm; thenode(s) with the highest sum are the most preferred.", + MarkdownDescription: "The scheduler will prefer to schedule pods to nodes that satisfythe affinity expressions specified by this field, but it may choosea node that violates one or more of the expressions. The node that ismost preferred is the one with the greatest sum of weights, i.e.for each node that meets all of the scheduling requirements (resourcerequest, requiredDuringScheduling affinity expressions, etc.),compute a sum by iterating through the elements of this field and adding'weight' to the sum if the node has pods which matches the corresponding podAffinityTerm; thenode(s) with the highest sum are the most preferred.", NestedObject: schema.NestedAttributeObject{ Attributes: map[string]schema.Attribute{ "pod_affinity_term": schema.SingleNestedAttribute{ @@ -790,16 +790,16 @@ func (r *InfinispanOrgInfinispanV1Manifest) Schema(_ context.Context, _ datasour }, "operator": schema.StringAttribute{ - Description: "operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist.", - MarkdownDescription: "operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist.", + Description: "operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.", + MarkdownDescription: "operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.", Required: true, Optional: false, Computed: false, }, "values": schema.ListAttribute{ - Description: "values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch.", - MarkdownDescription: "values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch.", + Description: "values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.", + MarkdownDescription: "values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.", ElementType: types.StringType, Required: false, Optional: true, @@ -813,8 +813,8 @@ func (r *InfinispanOrgInfinispanV1Manifest) Schema(_ context.Context, _ datasour }, "match_labels": schema.MapAttribute{ - Description: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is 'key', the operator is 'In', and the values array contains only 'value'. The requirements are ANDed.", - MarkdownDescription: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is 'key', the operator is 'In', and the values array contains only 'value'. The requirements are ANDed.", + Description: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.", + MarkdownDescription: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.", ElementType: types.StringType, Required: false, Optional: true, @@ -827,8 +827,8 @@ func (r *InfinispanOrgInfinispanV1Manifest) Schema(_ context.Context, _ datasour }, "namespace_selector": schema.SingleNestedAttribute{ - Description: "A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means 'this pod's namespace'. An empty selector ({}) matches all namespaces.", - MarkdownDescription: "A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means 'this pod's namespace'. An empty selector ({}) matches all namespaces.", + Description: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.", + MarkdownDescription: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.", Attributes: map[string]schema.Attribute{ "match_expressions": schema.ListNestedAttribute{ Description: "matchExpressions is a list of label selector requirements. The requirements are ANDed.", @@ -844,16 +844,16 @@ func (r *InfinispanOrgInfinispanV1Manifest) Schema(_ context.Context, _ datasour }, "operator": schema.StringAttribute{ - Description: "operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist.", - MarkdownDescription: "operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist.", + Description: "operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.", + MarkdownDescription: "operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.", Required: true, Optional: false, Computed: false, }, "values": schema.ListAttribute{ - Description: "values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch.", - MarkdownDescription: "values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch.", + Description: "values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.", + MarkdownDescription: "values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.", ElementType: types.StringType, Required: false, Optional: true, @@ -867,8 +867,8 @@ func (r *InfinispanOrgInfinispanV1Manifest) Schema(_ context.Context, _ datasour }, "match_labels": schema.MapAttribute{ - Description: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is 'key', the operator is 'In', and the values array contains only 'value'. The requirements are ANDed.", - MarkdownDescription: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is 'key', the operator is 'In', and the values array contains only 'value'. The requirements are ANDed.", + Description: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.", + MarkdownDescription: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.", ElementType: types.StringType, Required: false, Optional: true, @@ -881,8 +881,8 @@ func (r *InfinispanOrgInfinispanV1Manifest) Schema(_ context.Context, _ datasour }, "namespaces": schema.ListAttribute{ - Description: "namespaces specifies a static list of namespace names that the term applies to. The term is applied to the union of the namespaces listed in this field and the ones selected by namespaceSelector. null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.", - MarkdownDescription: "namespaces specifies a static list of namespace names that the term applies to. The term is applied to the union of the namespaces listed in this field and the ones selected by namespaceSelector. null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.", + Description: "namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.", + MarkdownDescription: "namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.", ElementType: types.StringType, Required: false, Optional: true, @@ -890,8 +890,8 @@ func (r *InfinispanOrgInfinispanV1Manifest) Schema(_ context.Context, _ datasour }, "topology_key": schema.StringAttribute{ - Description: "This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matching the labelSelector in the specified namespaces, where co-located is defined as running on a node whose value of the label with key topologyKey matches that of any node on which any of the selected pods is running. Empty topologyKey is not allowed.", - MarkdownDescription: "This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matching the labelSelector in the specified namespaces, where co-located is defined as running on a node whose value of the label with key topologyKey matches that of any node on which any of the selected pods is running. Empty topologyKey is not allowed.", + Description: "This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matchingthe labelSelector in the specified namespaces, where co-located is defined as running on a nodewhose value of the label with key topologyKey matches that of any node on which any of theselected pods is running.Empty topologyKey is not allowed.", + MarkdownDescription: "This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matchingthe labelSelector in the specified namespaces, where co-located is defined as running on a nodewhose value of the label with key topologyKey matches that of any node on which any of theselected pods is running.Empty topologyKey is not allowed.", Required: true, Optional: false, Computed: false, @@ -903,8 +903,8 @@ func (r *InfinispanOrgInfinispanV1Manifest) Schema(_ context.Context, _ datasour }, "weight": schema.Int64Attribute{ - Description: "weight associated with matching the corresponding podAffinityTerm, in the range 1-100.", - MarkdownDescription: "weight associated with matching the corresponding podAffinityTerm, in the range 1-100.", + Description: "weight associated with matching the corresponding podAffinityTerm,in the range 1-100.", + MarkdownDescription: "weight associated with matching the corresponding podAffinityTerm,in the range 1-100.", Required: true, Optional: false, Computed: false, @@ -917,8 +917,8 @@ func (r *InfinispanOrgInfinispanV1Manifest) Schema(_ context.Context, _ datasour }, "required_during_scheduling_ignored_during_execution": schema.ListNestedAttribute{ - Description: "If the affinity requirements specified by this field are not met at scheduling time, the pod will not be scheduled onto the node. If the affinity requirements specified by this field cease to be met at some point during pod execution (e.g. due to a pod label update), the system may or may not try to eventually evict the pod from its node. When there are multiple elements, the lists of nodes corresponding to each podAffinityTerm are intersected, i.e. all terms must be satisfied.", - MarkdownDescription: "If the affinity requirements specified by this field are not met at scheduling time, the pod will not be scheduled onto the node. If the affinity requirements specified by this field cease to be met at some point during pod execution (e.g. due to a pod label update), the system may or may not try to eventually evict the pod from its node. When there are multiple elements, the lists of nodes corresponding to each podAffinityTerm are intersected, i.e. all terms must be satisfied.", + Description: "If the affinity requirements specified by this field are not met atscheduling time, the pod will not be scheduled onto the node.If the affinity requirements specified by this field cease to be metat some point during pod execution (e.g. due to a pod label update), thesystem may or may not try to eventually evict the pod from its node.When there are multiple elements, the lists of nodes corresponding to eachpodAffinityTerm are intersected, i.e. all terms must be satisfied.", + MarkdownDescription: "If the affinity requirements specified by this field are not met atscheduling time, the pod will not be scheduled onto the node.If the affinity requirements specified by this field cease to be metat some point during pod execution (e.g. due to a pod label update), thesystem may or may not try to eventually evict the pod from its node.When there are multiple elements, the lists of nodes corresponding to eachpodAffinityTerm are intersected, i.e. all terms must be satisfied.", NestedObject: schema.NestedAttributeObject{ Attributes: map[string]schema.Attribute{ "label_selector": schema.SingleNestedAttribute{ @@ -939,16 +939,16 @@ func (r *InfinispanOrgInfinispanV1Manifest) Schema(_ context.Context, _ datasour }, "operator": schema.StringAttribute{ - Description: "operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist.", - MarkdownDescription: "operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist.", + Description: "operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.", + MarkdownDescription: "operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.", Required: true, Optional: false, Computed: false, }, "values": schema.ListAttribute{ - Description: "values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch.", - MarkdownDescription: "values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch.", + Description: "values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.", + MarkdownDescription: "values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.", ElementType: types.StringType, Required: false, Optional: true, @@ -962,8 +962,8 @@ func (r *InfinispanOrgInfinispanV1Manifest) Schema(_ context.Context, _ datasour }, "match_labels": schema.MapAttribute{ - Description: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is 'key', the operator is 'In', and the values array contains only 'value'. The requirements are ANDed.", - MarkdownDescription: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is 'key', the operator is 'In', and the values array contains only 'value'. The requirements are ANDed.", + Description: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.", + MarkdownDescription: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.", ElementType: types.StringType, Required: false, Optional: true, @@ -976,8 +976,8 @@ func (r *InfinispanOrgInfinispanV1Manifest) Schema(_ context.Context, _ datasour }, "namespace_selector": schema.SingleNestedAttribute{ - Description: "A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means 'this pod's namespace'. An empty selector ({}) matches all namespaces.", - MarkdownDescription: "A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means 'this pod's namespace'. An empty selector ({}) matches all namespaces.", + Description: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.", + MarkdownDescription: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.", Attributes: map[string]schema.Attribute{ "match_expressions": schema.ListNestedAttribute{ Description: "matchExpressions is a list of label selector requirements. The requirements are ANDed.", @@ -993,16 +993,16 @@ func (r *InfinispanOrgInfinispanV1Manifest) Schema(_ context.Context, _ datasour }, "operator": schema.StringAttribute{ - Description: "operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist.", - MarkdownDescription: "operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist.", + Description: "operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.", + MarkdownDescription: "operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.", Required: true, Optional: false, Computed: false, }, "values": schema.ListAttribute{ - Description: "values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch.", - MarkdownDescription: "values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch.", + Description: "values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.", + MarkdownDescription: "values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.", ElementType: types.StringType, Required: false, Optional: true, @@ -1016,8 +1016,8 @@ func (r *InfinispanOrgInfinispanV1Manifest) Schema(_ context.Context, _ datasour }, "match_labels": schema.MapAttribute{ - Description: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is 'key', the operator is 'In', and the values array contains only 'value'. The requirements are ANDed.", - MarkdownDescription: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is 'key', the operator is 'In', and the values array contains only 'value'. The requirements are ANDed.", + Description: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.", + MarkdownDescription: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.", ElementType: types.StringType, Required: false, Optional: true, @@ -1030,8 +1030,8 @@ func (r *InfinispanOrgInfinispanV1Manifest) Schema(_ context.Context, _ datasour }, "namespaces": schema.ListAttribute{ - Description: "namespaces specifies a static list of namespace names that the term applies to. The term is applied to the union of the namespaces listed in this field and the ones selected by namespaceSelector. null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.", - MarkdownDescription: "namespaces specifies a static list of namespace names that the term applies to. The term is applied to the union of the namespaces listed in this field and the ones selected by namespaceSelector. null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.", + Description: "namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.", + MarkdownDescription: "namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.", ElementType: types.StringType, Required: false, Optional: true, @@ -1039,8 +1039,8 @@ func (r *InfinispanOrgInfinispanV1Manifest) Schema(_ context.Context, _ datasour }, "topology_key": schema.StringAttribute{ - Description: "This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matching the labelSelector in the specified namespaces, where co-located is defined as running on a node whose value of the label with key topologyKey matches that of any node on which any of the selected pods is running. Empty topologyKey is not allowed.", - MarkdownDescription: "This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matching the labelSelector in the specified namespaces, where co-located is defined as running on a node whose value of the label with key topologyKey matches that of any node on which any of the selected pods is running. Empty topologyKey is not allowed.", + Description: "This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matchingthe labelSelector in the specified namespaces, where co-located is defined as running on a nodewhose value of the label with key topologyKey matches that of any node on which any of theselected pods is running.Empty topologyKey is not allowed.", + MarkdownDescription: "This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matchingthe labelSelector in the specified namespaces, where co-located is defined as running on a nodewhose value of the label with key topologyKey matches that of any node on which any of theselected pods is running.Empty topologyKey is not allowed.", Required: true, Optional: false, Computed: false, @@ -1062,8 +1062,8 @@ func (r *InfinispanOrgInfinispanV1Manifest) Schema(_ context.Context, _ datasour MarkdownDescription: "Describes pod anti-affinity scheduling rules (e.g. avoid putting this pod in the same node, zone, etc. as some other pod(s)).", Attributes: map[string]schema.Attribute{ "preferred_during_scheduling_ignored_during_execution": schema.ListNestedAttribute{ - Description: "The scheduler will prefer to schedule pods to nodes that satisfy the anti-affinity expressions specified by this field, but it may choose a node that violates one or more of the expressions. The node that is most preferred is the one with the greatest sum of weights, i.e. for each node that meets all of the scheduling requirements (resource request, requiredDuringScheduling anti-affinity expressions, etc.), compute a sum by iterating through the elements of this field and adding 'weight' to the sum if the node has pods which matches the corresponding podAffinityTerm; the node(s) with the highest sum are the most preferred.", - MarkdownDescription: "The scheduler will prefer to schedule pods to nodes that satisfy the anti-affinity expressions specified by this field, but it may choose a node that violates one or more of the expressions. The node that is most preferred is the one with the greatest sum of weights, i.e. for each node that meets all of the scheduling requirements (resource request, requiredDuringScheduling anti-affinity expressions, etc.), compute a sum by iterating through the elements of this field and adding 'weight' to the sum if the node has pods which matches the corresponding podAffinityTerm; the node(s) with the highest sum are the most preferred.", + Description: "The scheduler will prefer to schedule pods to nodes that satisfythe anti-affinity expressions specified by this field, but it may choosea node that violates one or more of the expressions. The node that ismost preferred is the one with the greatest sum of weights, i.e.for each node that meets all of the scheduling requirements (resourcerequest, requiredDuringScheduling anti-affinity expressions, etc.),compute a sum by iterating through the elements of this field and adding'weight' to the sum if the node has pods which matches the corresponding podAffinityTerm; thenode(s) with the highest sum are the most preferred.", + MarkdownDescription: "The scheduler will prefer to schedule pods to nodes that satisfythe anti-affinity expressions specified by this field, but it may choosea node that violates one or more of the expressions. The node that ismost preferred is the one with the greatest sum of weights, i.e.for each node that meets all of the scheduling requirements (resourcerequest, requiredDuringScheduling anti-affinity expressions, etc.),compute a sum by iterating through the elements of this field and adding'weight' to the sum if the node has pods which matches the corresponding podAffinityTerm; thenode(s) with the highest sum are the most preferred.", NestedObject: schema.NestedAttributeObject{ Attributes: map[string]schema.Attribute{ "pod_affinity_term": schema.SingleNestedAttribute{ @@ -1088,16 +1088,16 @@ func (r *InfinispanOrgInfinispanV1Manifest) Schema(_ context.Context, _ datasour }, "operator": schema.StringAttribute{ - Description: "operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist.", - MarkdownDescription: "operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist.", + Description: "operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.", + MarkdownDescription: "operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.", Required: true, Optional: false, Computed: false, }, "values": schema.ListAttribute{ - Description: "values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch.", - MarkdownDescription: "values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch.", + Description: "values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.", + MarkdownDescription: "values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.", ElementType: types.StringType, Required: false, Optional: true, @@ -1111,8 +1111,8 @@ func (r *InfinispanOrgInfinispanV1Manifest) Schema(_ context.Context, _ datasour }, "match_labels": schema.MapAttribute{ - Description: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is 'key', the operator is 'In', and the values array contains only 'value'. The requirements are ANDed.", - MarkdownDescription: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is 'key', the operator is 'In', and the values array contains only 'value'. The requirements are ANDed.", + Description: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.", + MarkdownDescription: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.", ElementType: types.StringType, Required: false, Optional: true, @@ -1125,8 +1125,8 @@ func (r *InfinispanOrgInfinispanV1Manifest) Schema(_ context.Context, _ datasour }, "namespace_selector": schema.SingleNestedAttribute{ - Description: "A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means 'this pod's namespace'. An empty selector ({}) matches all namespaces.", - MarkdownDescription: "A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means 'this pod's namespace'. An empty selector ({}) matches all namespaces.", + Description: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.", + MarkdownDescription: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.", Attributes: map[string]schema.Attribute{ "match_expressions": schema.ListNestedAttribute{ Description: "matchExpressions is a list of label selector requirements. The requirements are ANDed.", @@ -1142,16 +1142,16 @@ func (r *InfinispanOrgInfinispanV1Manifest) Schema(_ context.Context, _ datasour }, "operator": schema.StringAttribute{ - Description: "operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist.", - MarkdownDescription: "operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist.", + Description: "operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.", + MarkdownDescription: "operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.", Required: true, Optional: false, Computed: false, }, "values": schema.ListAttribute{ - Description: "values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch.", - MarkdownDescription: "values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch.", + Description: "values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.", + MarkdownDescription: "values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.", ElementType: types.StringType, Required: false, Optional: true, @@ -1165,8 +1165,8 @@ func (r *InfinispanOrgInfinispanV1Manifest) Schema(_ context.Context, _ datasour }, "match_labels": schema.MapAttribute{ - Description: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is 'key', the operator is 'In', and the values array contains only 'value'. The requirements are ANDed.", - MarkdownDescription: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is 'key', the operator is 'In', and the values array contains only 'value'. The requirements are ANDed.", + Description: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.", + MarkdownDescription: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.", ElementType: types.StringType, Required: false, Optional: true, @@ -1179,8 +1179,8 @@ func (r *InfinispanOrgInfinispanV1Manifest) Schema(_ context.Context, _ datasour }, "namespaces": schema.ListAttribute{ - Description: "namespaces specifies a static list of namespace names that the term applies to. The term is applied to the union of the namespaces listed in this field and the ones selected by namespaceSelector. null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.", - MarkdownDescription: "namespaces specifies a static list of namespace names that the term applies to. The term is applied to the union of the namespaces listed in this field and the ones selected by namespaceSelector. null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.", + Description: "namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.", + MarkdownDescription: "namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.", ElementType: types.StringType, Required: false, Optional: true, @@ -1188,8 +1188,8 @@ func (r *InfinispanOrgInfinispanV1Manifest) Schema(_ context.Context, _ datasour }, "topology_key": schema.StringAttribute{ - Description: "This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matching the labelSelector in the specified namespaces, where co-located is defined as running on a node whose value of the label with key topologyKey matches that of any node on which any of the selected pods is running. Empty topologyKey is not allowed.", - MarkdownDescription: "This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matching the labelSelector in the specified namespaces, where co-located is defined as running on a node whose value of the label with key topologyKey matches that of any node on which any of the selected pods is running. Empty topologyKey is not allowed.", + Description: "This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matchingthe labelSelector in the specified namespaces, where co-located is defined as running on a nodewhose value of the label with key topologyKey matches that of any node on which any of theselected pods is running.Empty topologyKey is not allowed.", + MarkdownDescription: "This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matchingthe labelSelector in the specified namespaces, where co-located is defined as running on a nodewhose value of the label with key topologyKey matches that of any node on which any of theselected pods is running.Empty topologyKey is not allowed.", Required: true, Optional: false, Computed: false, @@ -1201,8 +1201,8 @@ func (r *InfinispanOrgInfinispanV1Manifest) Schema(_ context.Context, _ datasour }, "weight": schema.Int64Attribute{ - Description: "weight associated with matching the corresponding podAffinityTerm, in the range 1-100.", - MarkdownDescription: "weight associated with matching the corresponding podAffinityTerm, in the range 1-100.", + Description: "weight associated with matching the corresponding podAffinityTerm,in the range 1-100.", + MarkdownDescription: "weight associated with matching the corresponding podAffinityTerm,in the range 1-100.", Required: true, Optional: false, Computed: false, @@ -1215,8 +1215,8 @@ func (r *InfinispanOrgInfinispanV1Manifest) Schema(_ context.Context, _ datasour }, "required_during_scheduling_ignored_during_execution": schema.ListNestedAttribute{ - Description: "If the anti-affinity requirements specified by this field are not met at scheduling time, the pod will not be scheduled onto the node. If the anti-affinity requirements specified by this field cease to be met at some point during pod execution (e.g. due to a pod label update), the system may or may not try to eventually evict the pod from its node. When there are multiple elements, the lists of nodes corresponding to each podAffinityTerm are intersected, i.e. all terms must be satisfied.", - MarkdownDescription: "If the anti-affinity requirements specified by this field are not met at scheduling time, the pod will not be scheduled onto the node. If the anti-affinity requirements specified by this field cease to be met at some point during pod execution (e.g. due to a pod label update), the system may or may not try to eventually evict the pod from its node. When there are multiple elements, the lists of nodes corresponding to each podAffinityTerm are intersected, i.e. all terms must be satisfied.", + Description: "If the anti-affinity requirements specified by this field are not met atscheduling time, the pod will not be scheduled onto the node.If the anti-affinity requirements specified by this field cease to be metat some point during pod execution (e.g. due to a pod label update), thesystem may or may not try to eventually evict the pod from its node.When there are multiple elements, the lists of nodes corresponding to eachpodAffinityTerm are intersected, i.e. all terms must be satisfied.", + MarkdownDescription: "If the anti-affinity requirements specified by this field are not met atscheduling time, the pod will not be scheduled onto the node.If the anti-affinity requirements specified by this field cease to be metat some point during pod execution (e.g. due to a pod label update), thesystem may or may not try to eventually evict the pod from its node.When there are multiple elements, the lists of nodes corresponding to eachpodAffinityTerm are intersected, i.e. all terms must be satisfied.", NestedObject: schema.NestedAttributeObject{ Attributes: map[string]schema.Attribute{ "label_selector": schema.SingleNestedAttribute{ @@ -1237,16 +1237,16 @@ func (r *InfinispanOrgInfinispanV1Manifest) Schema(_ context.Context, _ datasour }, "operator": schema.StringAttribute{ - Description: "operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist.", - MarkdownDescription: "operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist.", + Description: "operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.", + MarkdownDescription: "operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.", Required: true, Optional: false, Computed: false, }, "values": schema.ListAttribute{ - Description: "values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch.", - MarkdownDescription: "values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch.", + Description: "values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.", + MarkdownDescription: "values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.", ElementType: types.StringType, Required: false, Optional: true, @@ -1260,8 +1260,8 @@ func (r *InfinispanOrgInfinispanV1Manifest) Schema(_ context.Context, _ datasour }, "match_labels": schema.MapAttribute{ - Description: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is 'key', the operator is 'In', and the values array contains only 'value'. The requirements are ANDed.", - MarkdownDescription: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is 'key', the operator is 'In', and the values array contains only 'value'. The requirements are ANDed.", + Description: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.", + MarkdownDescription: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.", ElementType: types.StringType, Required: false, Optional: true, @@ -1274,8 +1274,8 @@ func (r *InfinispanOrgInfinispanV1Manifest) Schema(_ context.Context, _ datasour }, "namespace_selector": schema.SingleNestedAttribute{ - Description: "A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means 'this pod's namespace'. An empty selector ({}) matches all namespaces.", - MarkdownDescription: "A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means 'this pod's namespace'. An empty selector ({}) matches all namespaces.", + Description: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.", + MarkdownDescription: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.", Attributes: map[string]schema.Attribute{ "match_expressions": schema.ListNestedAttribute{ Description: "matchExpressions is a list of label selector requirements. The requirements are ANDed.", @@ -1291,16 +1291,16 @@ func (r *InfinispanOrgInfinispanV1Manifest) Schema(_ context.Context, _ datasour }, "operator": schema.StringAttribute{ - Description: "operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist.", - MarkdownDescription: "operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist.", + Description: "operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.", + MarkdownDescription: "operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.", Required: true, Optional: false, Computed: false, }, "values": schema.ListAttribute{ - Description: "values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch.", - MarkdownDescription: "values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch.", + Description: "values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.", + MarkdownDescription: "values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.", ElementType: types.StringType, Required: false, Optional: true, @@ -1314,8 +1314,8 @@ func (r *InfinispanOrgInfinispanV1Manifest) Schema(_ context.Context, _ datasour }, "match_labels": schema.MapAttribute{ - Description: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is 'key', the operator is 'In', and the values array contains only 'value'. The requirements are ANDed.", - MarkdownDescription: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is 'key', the operator is 'In', and the values array contains only 'value'. The requirements are ANDed.", + Description: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.", + MarkdownDescription: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.", ElementType: types.StringType, Required: false, Optional: true, @@ -1328,8 +1328,8 @@ func (r *InfinispanOrgInfinispanV1Manifest) Schema(_ context.Context, _ datasour }, "namespaces": schema.ListAttribute{ - Description: "namespaces specifies a static list of namespace names that the term applies to. The term is applied to the union of the namespaces listed in this field and the ones selected by namespaceSelector. null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.", - MarkdownDescription: "namespaces specifies a static list of namespace names that the term applies to. The term is applied to the union of the namespaces listed in this field and the ones selected by namespaceSelector. null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.", + Description: "namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.", + MarkdownDescription: "namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.", ElementType: types.StringType, Required: false, Optional: true, @@ -1337,8 +1337,8 @@ func (r *InfinispanOrgInfinispanV1Manifest) Schema(_ context.Context, _ datasour }, "topology_key": schema.StringAttribute{ - Description: "This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matching the labelSelector in the specified namespaces, where co-located is defined as running on a node whose value of the label with key topologyKey matches that of any node on which any of the selected pods is running. Empty topologyKey is not allowed.", - MarkdownDescription: "This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matching the labelSelector in the specified namespaces, where co-located is defined as running on a node whose value of the label with key topologyKey matches that of any node on which any of the selected pods is running. Empty topologyKey is not allowed.", + Description: "This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matchingthe labelSelector in the specified namespaces, where co-located is defined as running on a nodewhose value of the label with key topologyKey matches that of any node on which any of theselected pods is running.Empty topologyKey is not allowed.", + MarkdownDescription: "This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matchingthe labelSelector in the specified namespaces, where co-located is defined as running on a nodewhose value of the label with key topologyKey matches that of any node on which any of theselected pods is running.Empty topologyKey is not allowed.", Required: true, Optional: false, Computed: false, @@ -1774,8 +1774,8 @@ func (r *InfinispanOrgInfinispanV1Manifest) Schema(_ context.Context, _ datasour MarkdownDescription: "Describes node affinity scheduling rules for the pod.", Attributes: map[string]schema.Attribute{ "preferred_during_scheduling_ignored_during_execution": schema.ListNestedAttribute{ - Description: "The scheduler will prefer to schedule pods to nodes that satisfy the affinity expressions specified by this field, but it may choose a node that violates one or more of the expressions. The node that is most preferred is the one with the greatest sum of weights, i.e. for each node that meets all of the scheduling requirements (resource request, requiredDuringScheduling affinity expressions, etc.), compute a sum by iterating through the elements of this field and adding 'weight' to the sum if the node matches the corresponding matchExpressions; the node(s) with the highest sum are the most preferred.", - MarkdownDescription: "The scheduler will prefer to schedule pods to nodes that satisfy the affinity expressions specified by this field, but it may choose a node that violates one or more of the expressions. The node that is most preferred is the one with the greatest sum of weights, i.e. for each node that meets all of the scheduling requirements (resource request, requiredDuringScheduling affinity expressions, etc.), compute a sum by iterating through the elements of this field and adding 'weight' to the sum if the node matches the corresponding matchExpressions; the node(s) with the highest sum are the most preferred.", + Description: "The scheduler will prefer to schedule pods to nodes that satisfythe affinity expressions specified by this field, but it may choosea node that violates one or more of the expressions. The node that ismost preferred is the one with the greatest sum of weights, i.e.for each node that meets all of the scheduling requirements (resourcerequest, requiredDuringScheduling affinity expressions, etc.),compute a sum by iterating through the elements of this field and adding'weight' to the sum if the node matches the corresponding matchExpressions; thenode(s) with the highest sum are the most preferred.", + MarkdownDescription: "The scheduler will prefer to schedule pods to nodes that satisfythe affinity expressions specified by this field, but it may choosea node that violates one or more of the expressions. The node that ismost preferred is the one with the greatest sum of weights, i.e.for each node that meets all of the scheduling requirements (resourcerequest, requiredDuringScheduling affinity expressions, etc.),compute a sum by iterating through the elements of this field and adding'weight' to the sum if the node matches the corresponding matchExpressions; thenode(s) with the highest sum are the most preferred.", NestedObject: schema.NestedAttributeObject{ Attributes: map[string]schema.Attribute{ "preference": schema.SingleNestedAttribute{ @@ -1796,16 +1796,16 @@ func (r *InfinispanOrgInfinispanV1Manifest) Schema(_ context.Context, _ datasour }, "operator": schema.StringAttribute{ - Description: "Represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt.", - MarkdownDescription: "Represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt.", + Description: "Represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt.", + MarkdownDescription: "Represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt.", Required: true, Optional: false, Computed: false, }, "values": schema.ListAttribute{ - Description: "An array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. If the operator is Gt or Lt, the values array must have a single element, which will be interpreted as an integer. This array is replaced during a strategic merge patch.", - MarkdownDescription: "An array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. If the operator is Gt or Lt, the values array must have a single element, which will be interpreted as an integer. This array is replaced during a strategic merge patch.", + Description: "An array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. If the operator is Gt or Lt, the valuesarray must have a single element, which will be interpreted as an integer.This array is replaced during a strategic merge patch.", + MarkdownDescription: "An array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. If the operator is Gt or Lt, the valuesarray must have a single element, which will be interpreted as an integer.This array is replaced during a strategic merge patch.", ElementType: types.StringType, Required: false, Optional: true, @@ -1832,16 +1832,16 @@ func (r *InfinispanOrgInfinispanV1Manifest) Schema(_ context.Context, _ datasour }, "operator": schema.StringAttribute{ - Description: "Represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt.", - MarkdownDescription: "Represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt.", + Description: "Represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt.", + MarkdownDescription: "Represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt.", Required: true, Optional: false, Computed: false, }, "values": schema.ListAttribute{ - Description: "An array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. If the operator is Gt or Lt, the values array must have a single element, which will be interpreted as an integer. This array is replaced during a strategic merge patch.", - MarkdownDescription: "An array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. If the operator is Gt or Lt, the values array must have a single element, which will be interpreted as an integer. This array is replaced during a strategic merge patch.", + Description: "An array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. If the operator is Gt or Lt, the valuesarray must have a single element, which will be interpreted as an integer.This array is replaced during a strategic merge patch.", + MarkdownDescription: "An array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. If the operator is Gt or Lt, the valuesarray must have a single element, which will be interpreted as an integer.This array is replaced during a strategic merge patch.", ElementType: types.StringType, Required: false, Optional: true, @@ -1874,8 +1874,8 @@ func (r *InfinispanOrgInfinispanV1Manifest) Schema(_ context.Context, _ datasour }, "required_during_scheduling_ignored_during_execution": schema.SingleNestedAttribute{ - Description: "If the affinity requirements specified by this field are not met at scheduling time, the pod will not be scheduled onto the node. If the affinity requirements specified by this field cease to be met at some point during pod execution (e.g. due to an update), the system may or may not try to eventually evict the pod from its node.", - MarkdownDescription: "If the affinity requirements specified by this field are not met at scheduling time, the pod will not be scheduled onto the node. If the affinity requirements specified by this field cease to be met at some point during pod execution (e.g. due to an update), the system may or may not try to eventually evict the pod from its node.", + Description: "If the affinity requirements specified by this field are not met atscheduling time, the pod will not be scheduled onto the node.If the affinity requirements specified by this field cease to be metat some point during pod execution (e.g. due to an update), the systemmay or may not try to eventually evict the pod from its node.", + MarkdownDescription: "If the affinity requirements specified by this field are not met atscheduling time, the pod will not be scheduled onto the node.If the affinity requirements specified by this field cease to be metat some point during pod execution (e.g. due to an update), the systemmay or may not try to eventually evict the pod from its node.", Attributes: map[string]schema.Attribute{ "node_selector_terms": schema.ListNestedAttribute{ Description: "Required. A list of node selector terms. The terms are ORed.", @@ -1896,16 +1896,16 @@ func (r *InfinispanOrgInfinispanV1Manifest) Schema(_ context.Context, _ datasour }, "operator": schema.StringAttribute{ - Description: "Represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt.", - MarkdownDescription: "Represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt.", + Description: "Represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt.", + MarkdownDescription: "Represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt.", Required: true, Optional: false, Computed: false, }, "values": schema.ListAttribute{ - Description: "An array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. If the operator is Gt or Lt, the values array must have a single element, which will be interpreted as an integer. This array is replaced during a strategic merge patch.", - MarkdownDescription: "An array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. If the operator is Gt or Lt, the values array must have a single element, which will be interpreted as an integer. This array is replaced during a strategic merge patch.", + Description: "An array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. If the operator is Gt or Lt, the valuesarray must have a single element, which will be interpreted as an integer.This array is replaced during a strategic merge patch.", + MarkdownDescription: "An array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. If the operator is Gt or Lt, the valuesarray must have a single element, which will be interpreted as an integer.This array is replaced during a strategic merge patch.", ElementType: types.StringType, Required: false, Optional: true, @@ -1932,16 +1932,16 @@ func (r *InfinispanOrgInfinispanV1Manifest) Schema(_ context.Context, _ datasour }, "operator": schema.StringAttribute{ - Description: "Represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt.", - MarkdownDescription: "Represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt.", + Description: "Represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt.", + MarkdownDescription: "Represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt.", Required: true, Optional: false, Computed: false, }, "values": schema.ListAttribute{ - Description: "An array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. If the operator is Gt or Lt, the values array must have a single element, which will be interpreted as an integer. This array is replaced during a strategic merge patch.", - MarkdownDescription: "An array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. If the operator is Gt or Lt, the values array must have a single element, which will be interpreted as an integer. This array is replaced during a strategic merge patch.", + Description: "An array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. If the operator is Gt or Lt, the valuesarray must have a single element, which will be interpreted as an integer.This array is replaced during a strategic merge patch.", + MarkdownDescription: "An array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. If the operator is Gt or Lt, the valuesarray must have a single element, which will be interpreted as an integer.This array is replaced during a strategic merge patch.", ElementType: types.StringType, Required: false, Optional: true, @@ -1975,8 +1975,8 @@ func (r *InfinispanOrgInfinispanV1Manifest) Schema(_ context.Context, _ datasour MarkdownDescription: "Describes pod affinity scheduling rules (e.g. co-locate this pod in the same node, zone, etc. as some other pod(s)).", Attributes: map[string]schema.Attribute{ "preferred_during_scheduling_ignored_during_execution": schema.ListNestedAttribute{ - Description: "The scheduler will prefer to schedule pods to nodes that satisfy the affinity expressions specified by this field, but it may choose a node that violates one or more of the expressions. The node that is most preferred is the one with the greatest sum of weights, i.e. for each node that meets all of the scheduling requirements (resource request, requiredDuringScheduling affinity expressions, etc.), compute a sum by iterating through the elements of this field and adding 'weight' to the sum if the node has pods which matches the corresponding podAffinityTerm; the node(s) with the highest sum are the most preferred.", - MarkdownDescription: "The scheduler will prefer to schedule pods to nodes that satisfy the affinity expressions specified by this field, but it may choose a node that violates one or more of the expressions. The node that is most preferred is the one with the greatest sum of weights, i.e. for each node that meets all of the scheduling requirements (resource request, requiredDuringScheduling affinity expressions, etc.), compute a sum by iterating through the elements of this field and adding 'weight' to the sum if the node has pods which matches the corresponding podAffinityTerm; the node(s) with the highest sum are the most preferred.", + Description: "The scheduler will prefer to schedule pods to nodes that satisfythe affinity expressions specified by this field, but it may choosea node that violates one or more of the expressions. The node that ismost preferred is the one with the greatest sum of weights, i.e.for each node that meets all of the scheduling requirements (resourcerequest, requiredDuringScheduling affinity expressions, etc.),compute a sum by iterating through the elements of this field and adding'weight' to the sum if the node has pods which matches the corresponding podAffinityTerm; thenode(s) with the highest sum are the most preferred.", + MarkdownDescription: "The scheduler will prefer to schedule pods to nodes that satisfythe affinity expressions specified by this field, but it may choosea node that violates one or more of the expressions. The node that ismost preferred is the one with the greatest sum of weights, i.e.for each node that meets all of the scheduling requirements (resourcerequest, requiredDuringScheduling affinity expressions, etc.),compute a sum by iterating through the elements of this field and adding'weight' to the sum if the node has pods which matches the corresponding podAffinityTerm; thenode(s) with the highest sum are the most preferred.", NestedObject: schema.NestedAttributeObject{ Attributes: map[string]schema.Attribute{ "pod_affinity_term": schema.SingleNestedAttribute{ @@ -2001,16 +2001,16 @@ func (r *InfinispanOrgInfinispanV1Manifest) Schema(_ context.Context, _ datasour }, "operator": schema.StringAttribute{ - Description: "operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist.", - MarkdownDescription: "operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist.", + Description: "operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.", + MarkdownDescription: "operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.", Required: true, Optional: false, Computed: false, }, "values": schema.ListAttribute{ - Description: "values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch.", - MarkdownDescription: "values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch.", + Description: "values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.", + MarkdownDescription: "values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.", ElementType: types.StringType, Required: false, Optional: true, @@ -2024,8 +2024,8 @@ func (r *InfinispanOrgInfinispanV1Manifest) Schema(_ context.Context, _ datasour }, "match_labels": schema.MapAttribute{ - Description: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is 'key', the operator is 'In', and the values array contains only 'value'. The requirements are ANDed.", - MarkdownDescription: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is 'key', the operator is 'In', and the values array contains only 'value'. The requirements are ANDed.", + Description: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.", + MarkdownDescription: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.", ElementType: types.StringType, Required: false, Optional: true, @@ -2038,8 +2038,8 @@ func (r *InfinispanOrgInfinispanV1Manifest) Schema(_ context.Context, _ datasour }, "namespace_selector": schema.SingleNestedAttribute{ - Description: "A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means 'this pod's namespace'. An empty selector ({}) matches all namespaces.", - MarkdownDescription: "A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means 'this pod's namespace'. An empty selector ({}) matches all namespaces.", + Description: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.", + MarkdownDescription: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.", Attributes: map[string]schema.Attribute{ "match_expressions": schema.ListNestedAttribute{ Description: "matchExpressions is a list of label selector requirements. The requirements are ANDed.", @@ -2055,16 +2055,16 @@ func (r *InfinispanOrgInfinispanV1Manifest) Schema(_ context.Context, _ datasour }, "operator": schema.StringAttribute{ - Description: "operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist.", - MarkdownDescription: "operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist.", + Description: "operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.", + MarkdownDescription: "operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.", Required: true, Optional: false, Computed: false, }, "values": schema.ListAttribute{ - Description: "values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch.", - MarkdownDescription: "values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch.", + Description: "values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.", + MarkdownDescription: "values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.", ElementType: types.StringType, Required: false, Optional: true, @@ -2078,8 +2078,8 @@ func (r *InfinispanOrgInfinispanV1Manifest) Schema(_ context.Context, _ datasour }, "match_labels": schema.MapAttribute{ - Description: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is 'key', the operator is 'In', and the values array contains only 'value'. The requirements are ANDed.", - MarkdownDescription: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is 'key', the operator is 'In', and the values array contains only 'value'. The requirements are ANDed.", + Description: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.", + MarkdownDescription: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.", ElementType: types.StringType, Required: false, Optional: true, @@ -2092,8 +2092,8 @@ func (r *InfinispanOrgInfinispanV1Manifest) Schema(_ context.Context, _ datasour }, "namespaces": schema.ListAttribute{ - Description: "namespaces specifies a static list of namespace names that the term applies to. The term is applied to the union of the namespaces listed in this field and the ones selected by namespaceSelector. null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.", - MarkdownDescription: "namespaces specifies a static list of namespace names that the term applies to. The term is applied to the union of the namespaces listed in this field and the ones selected by namespaceSelector. null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.", + Description: "namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.", + MarkdownDescription: "namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.", ElementType: types.StringType, Required: false, Optional: true, @@ -2101,8 +2101,8 @@ func (r *InfinispanOrgInfinispanV1Manifest) Schema(_ context.Context, _ datasour }, "topology_key": schema.StringAttribute{ - Description: "This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matching the labelSelector in the specified namespaces, where co-located is defined as running on a node whose value of the label with key topologyKey matches that of any node on which any of the selected pods is running. Empty topologyKey is not allowed.", - MarkdownDescription: "This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matching the labelSelector in the specified namespaces, where co-located is defined as running on a node whose value of the label with key topologyKey matches that of any node on which any of the selected pods is running. Empty topologyKey is not allowed.", + Description: "This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matchingthe labelSelector in the specified namespaces, where co-located is defined as running on a nodewhose value of the label with key topologyKey matches that of any node on which any of theselected pods is running.Empty topologyKey is not allowed.", + MarkdownDescription: "This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matchingthe labelSelector in the specified namespaces, where co-located is defined as running on a nodewhose value of the label with key topologyKey matches that of any node on which any of theselected pods is running.Empty topologyKey is not allowed.", Required: true, Optional: false, Computed: false, @@ -2114,8 +2114,8 @@ func (r *InfinispanOrgInfinispanV1Manifest) Schema(_ context.Context, _ datasour }, "weight": schema.Int64Attribute{ - Description: "weight associated with matching the corresponding podAffinityTerm, in the range 1-100.", - MarkdownDescription: "weight associated with matching the corresponding podAffinityTerm, in the range 1-100.", + Description: "weight associated with matching the corresponding podAffinityTerm,in the range 1-100.", + MarkdownDescription: "weight associated with matching the corresponding podAffinityTerm,in the range 1-100.", Required: true, Optional: false, Computed: false, @@ -2128,8 +2128,8 @@ func (r *InfinispanOrgInfinispanV1Manifest) Schema(_ context.Context, _ datasour }, "required_during_scheduling_ignored_during_execution": schema.ListNestedAttribute{ - Description: "If the affinity requirements specified by this field are not met at scheduling time, the pod will not be scheduled onto the node. If the affinity requirements specified by this field cease to be met at some point during pod execution (e.g. due to a pod label update), the system may or may not try to eventually evict the pod from its node. When there are multiple elements, the lists of nodes corresponding to each podAffinityTerm are intersected, i.e. all terms must be satisfied.", - MarkdownDescription: "If the affinity requirements specified by this field are not met at scheduling time, the pod will not be scheduled onto the node. If the affinity requirements specified by this field cease to be met at some point during pod execution (e.g. due to a pod label update), the system may or may not try to eventually evict the pod from its node. When there are multiple elements, the lists of nodes corresponding to each podAffinityTerm are intersected, i.e. all terms must be satisfied.", + Description: "If the affinity requirements specified by this field are not met atscheduling time, the pod will not be scheduled onto the node.If the affinity requirements specified by this field cease to be metat some point during pod execution (e.g. due to a pod label update), thesystem may or may not try to eventually evict the pod from its node.When there are multiple elements, the lists of nodes corresponding to eachpodAffinityTerm are intersected, i.e. all terms must be satisfied.", + MarkdownDescription: "If the affinity requirements specified by this field are not met atscheduling time, the pod will not be scheduled onto the node.If the affinity requirements specified by this field cease to be metat some point during pod execution (e.g. due to a pod label update), thesystem may or may not try to eventually evict the pod from its node.When there are multiple elements, the lists of nodes corresponding to eachpodAffinityTerm are intersected, i.e. all terms must be satisfied.", NestedObject: schema.NestedAttributeObject{ Attributes: map[string]schema.Attribute{ "label_selector": schema.SingleNestedAttribute{ @@ -2150,16 +2150,16 @@ func (r *InfinispanOrgInfinispanV1Manifest) Schema(_ context.Context, _ datasour }, "operator": schema.StringAttribute{ - Description: "operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist.", - MarkdownDescription: "operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist.", + Description: "operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.", + MarkdownDescription: "operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.", Required: true, Optional: false, Computed: false, }, "values": schema.ListAttribute{ - Description: "values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch.", - MarkdownDescription: "values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch.", + Description: "values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.", + MarkdownDescription: "values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.", ElementType: types.StringType, Required: false, Optional: true, @@ -2173,8 +2173,8 @@ func (r *InfinispanOrgInfinispanV1Manifest) Schema(_ context.Context, _ datasour }, "match_labels": schema.MapAttribute{ - Description: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is 'key', the operator is 'In', and the values array contains only 'value'. The requirements are ANDed.", - MarkdownDescription: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is 'key', the operator is 'In', and the values array contains only 'value'. The requirements are ANDed.", + Description: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.", + MarkdownDescription: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.", ElementType: types.StringType, Required: false, Optional: true, @@ -2187,8 +2187,8 @@ func (r *InfinispanOrgInfinispanV1Manifest) Schema(_ context.Context, _ datasour }, "namespace_selector": schema.SingleNestedAttribute{ - Description: "A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means 'this pod's namespace'. An empty selector ({}) matches all namespaces.", - MarkdownDescription: "A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means 'this pod's namespace'. An empty selector ({}) matches all namespaces.", + Description: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.", + MarkdownDescription: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.", Attributes: map[string]schema.Attribute{ "match_expressions": schema.ListNestedAttribute{ Description: "matchExpressions is a list of label selector requirements. The requirements are ANDed.", @@ -2204,16 +2204,16 @@ func (r *InfinispanOrgInfinispanV1Manifest) Schema(_ context.Context, _ datasour }, "operator": schema.StringAttribute{ - Description: "operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist.", - MarkdownDescription: "operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist.", + Description: "operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.", + MarkdownDescription: "operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.", Required: true, Optional: false, Computed: false, }, "values": schema.ListAttribute{ - Description: "values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch.", - MarkdownDescription: "values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch.", + Description: "values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.", + MarkdownDescription: "values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.", ElementType: types.StringType, Required: false, Optional: true, @@ -2227,8 +2227,8 @@ func (r *InfinispanOrgInfinispanV1Manifest) Schema(_ context.Context, _ datasour }, "match_labels": schema.MapAttribute{ - Description: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is 'key', the operator is 'In', and the values array contains only 'value'. The requirements are ANDed.", - MarkdownDescription: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is 'key', the operator is 'In', and the values array contains only 'value'. The requirements are ANDed.", + Description: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.", + MarkdownDescription: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.", ElementType: types.StringType, Required: false, Optional: true, @@ -2241,8 +2241,8 @@ func (r *InfinispanOrgInfinispanV1Manifest) Schema(_ context.Context, _ datasour }, "namespaces": schema.ListAttribute{ - Description: "namespaces specifies a static list of namespace names that the term applies to. The term is applied to the union of the namespaces listed in this field and the ones selected by namespaceSelector. null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.", - MarkdownDescription: "namespaces specifies a static list of namespace names that the term applies to. The term is applied to the union of the namespaces listed in this field and the ones selected by namespaceSelector. null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.", + Description: "namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.", + MarkdownDescription: "namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.", ElementType: types.StringType, Required: false, Optional: true, @@ -2250,8 +2250,8 @@ func (r *InfinispanOrgInfinispanV1Manifest) Schema(_ context.Context, _ datasour }, "topology_key": schema.StringAttribute{ - Description: "This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matching the labelSelector in the specified namespaces, where co-located is defined as running on a node whose value of the label with key topologyKey matches that of any node on which any of the selected pods is running. Empty topologyKey is not allowed.", - MarkdownDescription: "This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matching the labelSelector in the specified namespaces, where co-located is defined as running on a node whose value of the label with key topologyKey matches that of any node on which any of the selected pods is running. Empty topologyKey is not allowed.", + Description: "This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matchingthe labelSelector in the specified namespaces, where co-located is defined as running on a nodewhose value of the label with key topologyKey matches that of any node on which any of theselected pods is running.Empty topologyKey is not allowed.", + MarkdownDescription: "This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matchingthe labelSelector in the specified namespaces, where co-located is defined as running on a nodewhose value of the label with key topologyKey matches that of any node on which any of theselected pods is running.Empty topologyKey is not allowed.", Required: true, Optional: false, Computed: false, @@ -2273,8 +2273,8 @@ func (r *InfinispanOrgInfinispanV1Manifest) Schema(_ context.Context, _ datasour MarkdownDescription: "Describes pod anti-affinity scheduling rules (e.g. avoid putting this pod in the same node, zone, etc. as some other pod(s)).", Attributes: map[string]schema.Attribute{ "preferred_during_scheduling_ignored_during_execution": schema.ListNestedAttribute{ - Description: "The scheduler will prefer to schedule pods to nodes that satisfy the anti-affinity expressions specified by this field, but it may choose a node that violates one or more of the expressions. The node that is most preferred is the one with the greatest sum of weights, i.e. for each node that meets all of the scheduling requirements (resource request, requiredDuringScheduling anti-affinity expressions, etc.), compute a sum by iterating through the elements of this field and adding 'weight' to the sum if the node has pods which matches the corresponding podAffinityTerm; the node(s) with the highest sum are the most preferred.", - MarkdownDescription: "The scheduler will prefer to schedule pods to nodes that satisfy the anti-affinity expressions specified by this field, but it may choose a node that violates one or more of the expressions. The node that is most preferred is the one with the greatest sum of weights, i.e. for each node that meets all of the scheduling requirements (resource request, requiredDuringScheduling anti-affinity expressions, etc.), compute a sum by iterating through the elements of this field and adding 'weight' to the sum if the node has pods which matches the corresponding podAffinityTerm; the node(s) with the highest sum are the most preferred.", + Description: "The scheduler will prefer to schedule pods to nodes that satisfythe anti-affinity expressions specified by this field, but it may choosea node that violates one or more of the expressions. The node that ismost preferred is the one with the greatest sum of weights, i.e.for each node that meets all of the scheduling requirements (resourcerequest, requiredDuringScheduling anti-affinity expressions, etc.),compute a sum by iterating through the elements of this field and adding'weight' to the sum if the node has pods which matches the corresponding podAffinityTerm; thenode(s) with the highest sum are the most preferred.", + MarkdownDescription: "The scheduler will prefer to schedule pods to nodes that satisfythe anti-affinity expressions specified by this field, but it may choosea node that violates one or more of the expressions. The node that ismost preferred is the one with the greatest sum of weights, i.e.for each node that meets all of the scheduling requirements (resourcerequest, requiredDuringScheduling anti-affinity expressions, etc.),compute a sum by iterating through the elements of this field and adding'weight' to the sum if the node has pods which matches the corresponding podAffinityTerm; thenode(s) with the highest sum are the most preferred.", NestedObject: schema.NestedAttributeObject{ Attributes: map[string]schema.Attribute{ "pod_affinity_term": schema.SingleNestedAttribute{ @@ -2299,16 +2299,16 @@ func (r *InfinispanOrgInfinispanV1Manifest) Schema(_ context.Context, _ datasour }, "operator": schema.StringAttribute{ - Description: "operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist.", - MarkdownDescription: "operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist.", + Description: "operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.", + MarkdownDescription: "operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.", Required: true, Optional: false, Computed: false, }, "values": schema.ListAttribute{ - Description: "values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch.", - MarkdownDescription: "values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch.", + Description: "values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.", + MarkdownDescription: "values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.", ElementType: types.StringType, Required: false, Optional: true, @@ -2322,8 +2322,8 @@ func (r *InfinispanOrgInfinispanV1Manifest) Schema(_ context.Context, _ datasour }, "match_labels": schema.MapAttribute{ - Description: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is 'key', the operator is 'In', and the values array contains only 'value'. The requirements are ANDed.", - MarkdownDescription: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is 'key', the operator is 'In', and the values array contains only 'value'. The requirements are ANDed.", + Description: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.", + MarkdownDescription: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.", ElementType: types.StringType, Required: false, Optional: true, @@ -2336,8 +2336,8 @@ func (r *InfinispanOrgInfinispanV1Manifest) Schema(_ context.Context, _ datasour }, "namespace_selector": schema.SingleNestedAttribute{ - Description: "A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means 'this pod's namespace'. An empty selector ({}) matches all namespaces.", - MarkdownDescription: "A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means 'this pod's namespace'. An empty selector ({}) matches all namespaces.", + Description: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.", + MarkdownDescription: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.", Attributes: map[string]schema.Attribute{ "match_expressions": schema.ListNestedAttribute{ Description: "matchExpressions is a list of label selector requirements. The requirements are ANDed.", @@ -2353,16 +2353,16 @@ func (r *InfinispanOrgInfinispanV1Manifest) Schema(_ context.Context, _ datasour }, "operator": schema.StringAttribute{ - Description: "operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist.", - MarkdownDescription: "operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist.", + Description: "operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.", + MarkdownDescription: "operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.", Required: true, Optional: false, Computed: false, }, "values": schema.ListAttribute{ - Description: "values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch.", - MarkdownDescription: "values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch.", + Description: "values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.", + MarkdownDescription: "values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.", ElementType: types.StringType, Required: false, Optional: true, @@ -2376,8 +2376,8 @@ func (r *InfinispanOrgInfinispanV1Manifest) Schema(_ context.Context, _ datasour }, "match_labels": schema.MapAttribute{ - Description: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is 'key', the operator is 'In', and the values array contains only 'value'. The requirements are ANDed.", - MarkdownDescription: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is 'key', the operator is 'In', and the values array contains only 'value'. The requirements are ANDed.", + Description: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.", + MarkdownDescription: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.", ElementType: types.StringType, Required: false, Optional: true, @@ -2390,8 +2390,8 @@ func (r *InfinispanOrgInfinispanV1Manifest) Schema(_ context.Context, _ datasour }, "namespaces": schema.ListAttribute{ - Description: "namespaces specifies a static list of namespace names that the term applies to. The term is applied to the union of the namespaces listed in this field and the ones selected by namespaceSelector. null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.", - MarkdownDescription: "namespaces specifies a static list of namespace names that the term applies to. The term is applied to the union of the namespaces listed in this field and the ones selected by namespaceSelector. null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.", + Description: "namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.", + MarkdownDescription: "namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.", ElementType: types.StringType, Required: false, Optional: true, @@ -2399,8 +2399,8 @@ func (r *InfinispanOrgInfinispanV1Manifest) Schema(_ context.Context, _ datasour }, "topology_key": schema.StringAttribute{ - Description: "This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matching the labelSelector in the specified namespaces, where co-located is defined as running on a node whose value of the label with key topologyKey matches that of any node on which any of the selected pods is running. Empty topologyKey is not allowed.", - MarkdownDescription: "This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matching the labelSelector in the specified namespaces, where co-located is defined as running on a node whose value of the label with key topologyKey matches that of any node on which any of the selected pods is running. Empty topologyKey is not allowed.", + Description: "This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matchingthe labelSelector in the specified namespaces, where co-located is defined as running on a nodewhose value of the label with key topologyKey matches that of any node on which any of theselected pods is running.Empty topologyKey is not allowed.", + MarkdownDescription: "This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matchingthe labelSelector in the specified namespaces, where co-located is defined as running on a nodewhose value of the label with key topologyKey matches that of any node on which any of theselected pods is running.Empty topologyKey is not allowed.", Required: true, Optional: false, Computed: false, @@ -2412,8 +2412,8 @@ func (r *InfinispanOrgInfinispanV1Manifest) Schema(_ context.Context, _ datasour }, "weight": schema.Int64Attribute{ - Description: "weight associated with matching the corresponding podAffinityTerm, in the range 1-100.", - MarkdownDescription: "weight associated with matching the corresponding podAffinityTerm, in the range 1-100.", + Description: "weight associated with matching the corresponding podAffinityTerm,in the range 1-100.", + MarkdownDescription: "weight associated with matching the corresponding podAffinityTerm,in the range 1-100.", Required: true, Optional: false, Computed: false, @@ -2426,8 +2426,8 @@ func (r *InfinispanOrgInfinispanV1Manifest) Schema(_ context.Context, _ datasour }, "required_during_scheduling_ignored_during_execution": schema.ListNestedAttribute{ - Description: "If the anti-affinity requirements specified by this field are not met at scheduling time, the pod will not be scheduled onto the node. If the anti-affinity requirements specified by this field cease to be met at some point during pod execution (e.g. due to a pod label update), the system may or may not try to eventually evict the pod from its node. When there are multiple elements, the lists of nodes corresponding to each podAffinityTerm are intersected, i.e. all terms must be satisfied.", - MarkdownDescription: "If the anti-affinity requirements specified by this field are not met at scheduling time, the pod will not be scheduled onto the node. If the anti-affinity requirements specified by this field cease to be met at some point during pod execution (e.g. due to a pod label update), the system may or may not try to eventually evict the pod from its node. When there are multiple elements, the lists of nodes corresponding to each podAffinityTerm are intersected, i.e. all terms must be satisfied.", + Description: "If the anti-affinity requirements specified by this field are not met atscheduling time, the pod will not be scheduled onto the node.If the anti-affinity requirements specified by this field cease to be metat some point during pod execution (e.g. due to a pod label update), thesystem may or may not try to eventually evict the pod from its node.When there are multiple elements, the lists of nodes corresponding to eachpodAffinityTerm are intersected, i.e. all terms must be satisfied.", + MarkdownDescription: "If the anti-affinity requirements specified by this field are not met atscheduling time, the pod will not be scheduled onto the node.If the anti-affinity requirements specified by this field cease to be metat some point during pod execution (e.g. due to a pod label update), thesystem may or may not try to eventually evict the pod from its node.When there are multiple elements, the lists of nodes corresponding to eachpodAffinityTerm are intersected, i.e. all terms must be satisfied.", NestedObject: schema.NestedAttributeObject{ Attributes: map[string]schema.Attribute{ "label_selector": schema.SingleNestedAttribute{ @@ -2448,16 +2448,16 @@ func (r *InfinispanOrgInfinispanV1Manifest) Schema(_ context.Context, _ datasour }, "operator": schema.StringAttribute{ - Description: "operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist.", - MarkdownDescription: "operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist.", + Description: "operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.", + MarkdownDescription: "operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.", Required: true, Optional: false, Computed: false, }, "values": schema.ListAttribute{ - Description: "values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch.", - MarkdownDescription: "values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch.", + Description: "values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.", + MarkdownDescription: "values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.", ElementType: types.StringType, Required: false, Optional: true, @@ -2471,8 +2471,8 @@ func (r *InfinispanOrgInfinispanV1Manifest) Schema(_ context.Context, _ datasour }, "match_labels": schema.MapAttribute{ - Description: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is 'key', the operator is 'In', and the values array contains only 'value'. The requirements are ANDed.", - MarkdownDescription: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is 'key', the operator is 'In', and the values array contains only 'value'. The requirements are ANDed.", + Description: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.", + MarkdownDescription: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.", ElementType: types.StringType, Required: false, Optional: true, @@ -2485,8 +2485,8 @@ func (r *InfinispanOrgInfinispanV1Manifest) Schema(_ context.Context, _ datasour }, "namespace_selector": schema.SingleNestedAttribute{ - Description: "A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means 'this pod's namespace'. An empty selector ({}) matches all namespaces.", - MarkdownDescription: "A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means 'this pod's namespace'. An empty selector ({}) matches all namespaces.", + Description: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.", + MarkdownDescription: "A label query over the set of namespaces that the term applies to.The term is applied to the union of the namespaces selected by this fieldand the ones listed in the namespaces field.null selector and null or empty namespaces list means 'this pod's namespace'.An empty selector ({}) matches all namespaces.", Attributes: map[string]schema.Attribute{ "match_expressions": schema.ListNestedAttribute{ Description: "matchExpressions is a list of label selector requirements. The requirements are ANDed.", @@ -2502,16 +2502,16 @@ func (r *InfinispanOrgInfinispanV1Manifest) Schema(_ context.Context, _ datasour }, "operator": schema.StringAttribute{ - Description: "operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist.", - MarkdownDescription: "operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist.", + Description: "operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.", + MarkdownDescription: "operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.", Required: true, Optional: false, Computed: false, }, "values": schema.ListAttribute{ - Description: "values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch.", - MarkdownDescription: "values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch.", + Description: "values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.", + MarkdownDescription: "values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.", ElementType: types.StringType, Required: false, Optional: true, @@ -2525,8 +2525,8 @@ func (r *InfinispanOrgInfinispanV1Manifest) Schema(_ context.Context, _ datasour }, "match_labels": schema.MapAttribute{ - Description: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is 'key', the operator is 'In', and the values array contains only 'value'. The requirements are ANDed.", - MarkdownDescription: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is 'key', the operator is 'In', and the values array contains only 'value'. The requirements are ANDed.", + Description: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.", + MarkdownDescription: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.", ElementType: types.StringType, Required: false, Optional: true, @@ -2539,8 +2539,8 @@ func (r *InfinispanOrgInfinispanV1Manifest) Schema(_ context.Context, _ datasour }, "namespaces": schema.ListAttribute{ - Description: "namespaces specifies a static list of namespace names that the term applies to. The term is applied to the union of the namespaces listed in this field and the ones selected by namespaceSelector. null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.", - MarkdownDescription: "namespaces specifies a static list of namespace names that the term applies to. The term is applied to the union of the namespaces listed in this field and the ones selected by namespaceSelector. null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.", + Description: "namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.", + MarkdownDescription: "namespaces specifies a static list of namespace names that the term applies to.The term is applied to the union of the namespaces listed in this fieldand the ones selected by namespaceSelector.null or empty namespaces list and null namespaceSelector means 'this pod's namespace'.", ElementType: types.StringType, Required: false, Optional: true, @@ -2548,8 +2548,8 @@ func (r *InfinispanOrgInfinispanV1Manifest) Schema(_ context.Context, _ datasour }, "topology_key": schema.StringAttribute{ - Description: "This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matching the labelSelector in the specified namespaces, where co-located is defined as running on a node whose value of the label with key topologyKey matches that of any node on which any of the selected pods is running. Empty topologyKey is not allowed.", - MarkdownDescription: "This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matching the labelSelector in the specified namespaces, where co-located is defined as running on a node whose value of the label with key topologyKey matches that of any node on which any of the selected pods is running. Empty topologyKey is not allowed.", + Description: "This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matchingthe labelSelector in the specified namespaces, where co-located is defined as running on a nodewhose value of the label with key topologyKey matches that of any node on which any of theselected pods is running.Empty topologyKey is not allowed.", + MarkdownDescription: "This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matchingthe labelSelector in the specified namespaces, where co-located is defined as running on a nodewhose value of the label with key topologyKey matches that of any node on which any of theselected pods is running.Empty topologyKey is not allowed.", Required: true, Optional: false, Computed: false, @@ -2577,40 +2577,40 @@ func (r *InfinispanOrgInfinispanV1Manifest) Schema(_ context.Context, _ datasour NestedObject: schema.NestedAttributeObject{ Attributes: map[string]schema.Attribute{ "effect": schema.StringAttribute{ - Description: "Effect indicates the taint effect to match. Empty means match all taint effects. When specified, allowed values are NoSchedule, PreferNoSchedule and NoExecute.", - MarkdownDescription: "Effect indicates the taint effect to match. Empty means match all taint effects. When specified, allowed values are NoSchedule, PreferNoSchedule and NoExecute.", + Description: "Effect indicates the taint effect to match. Empty means match all taint effects.When specified, allowed values are NoSchedule, PreferNoSchedule and NoExecute.", + MarkdownDescription: "Effect indicates the taint effect to match. Empty means match all taint effects.When specified, allowed values are NoSchedule, PreferNoSchedule and NoExecute.", Required: false, Optional: true, Computed: false, }, "key": schema.StringAttribute{ - Description: "Key is the taint key that the toleration applies to. Empty means match all taint keys. If the key is empty, operator must be Exists; this combination means to match all values and all keys.", - MarkdownDescription: "Key is the taint key that the toleration applies to. Empty means match all taint keys. If the key is empty, operator must be Exists; this combination means to match all values and all keys.", + Description: "Key is the taint key that the toleration applies to. Empty means match all taint keys.If the key is empty, operator must be Exists; this combination means to match all values and all keys.", + MarkdownDescription: "Key is the taint key that the toleration applies to. Empty means match all taint keys.If the key is empty, operator must be Exists; this combination means to match all values and all keys.", Required: false, Optional: true, Computed: false, }, "operator": schema.StringAttribute{ - Description: "Operator represents a key's relationship to the value. Valid operators are Exists and Equal. Defaults to Equal. Exists is equivalent to wildcard for value, so that a pod can tolerate all taints of a particular category.", - MarkdownDescription: "Operator represents a key's relationship to the value. Valid operators are Exists and Equal. Defaults to Equal. Exists is equivalent to wildcard for value, so that a pod can tolerate all taints of a particular category.", + Description: "Operator represents a key's relationship to the value.Valid operators are Exists and Equal. Defaults to Equal.Exists is equivalent to wildcard for value, so that a pod cantolerate all taints of a particular category.", + MarkdownDescription: "Operator represents a key's relationship to the value.Valid operators are Exists and Equal. Defaults to Equal.Exists is equivalent to wildcard for value, so that a pod cantolerate all taints of a particular category.", Required: false, Optional: true, Computed: false, }, "toleration_seconds": schema.Int64Attribute{ - Description: "TolerationSeconds represents the period of time the toleration (which must be of effect NoExecute, otherwise this field is ignored) tolerates the taint. By default, it is not set, which means tolerate the taint forever (do not evict). Zero and negative values will be treated as 0 (evict immediately) by the system.", - MarkdownDescription: "TolerationSeconds represents the period of time the toleration (which must be of effect NoExecute, otherwise this field is ignored) tolerates the taint. By default, it is not set, which means tolerate the taint forever (do not evict). Zero and negative values will be treated as 0 (evict immediately) by the system.", + Description: "TolerationSeconds represents the period of time the toleration (which must beof effect NoExecute, otherwise this field is ignored) tolerates the taint. By default,it is not set, which means tolerate the taint forever (do not evict). Zero andnegative values will be treated as 0 (evict immediately) by the system.", + MarkdownDescription: "TolerationSeconds represents the period of time the toleration (which must beof effect NoExecute, otherwise this field is ignored) tolerates the taint. By default,it is not set, which means tolerate the taint forever (do not evict). Zero andnegative values will be treated as 0 (evict immediately) by the system.", Required: false, Optional: true, Computed: false, }, "value": schema.StringAttribute{ - Description: "Value is the taint value the toleration matches to. If the operator is Exists, the value should be empty, otherwise just a regular string.", - MarkdownDescription: "Value is the taint value the toleration matches to. If the operator is Exists, the value should be empty, otherwise just a regular string.", + Description: "Value is the taint value the toleration matches to.If the operator is Exists, the value should be empty, otherwise just a regular string.", + MarkdownDescription: "Value is the taint value the toleration matches to.If the operator is Exists, the value should be empty, otherwise just a regular string.", Required: false, Optional: true, Computed: false, @@ -2628,8 +2628,8 @@ func (r *InfinispanOrgInfinispanV1Manifest) Schema(_ context.Context, _ datasour NestedObject: schema.NestedAttributeObject{ Attributes: map[string]schema.Attribute{ "label_selector": schema.SingleNestedAttribute{ - Description: "LabelSelector is used to find matching pods. Pods that match this label selector are counted to determine the number of pods in their corresponding topology domain.", - MarkdownDescription: "LabelSelector is used to find matching pods. Pods that match this label selector are counted to determine the number of pods in their corresponding topology domain.", + Description: "LabelSelector is used to find matching pods.Pods that match this label selector are counted to determine the number of podsin their corresponding topology domain.", + MarkdownDescription: "LabelSelector is used to find matching pods.Pods that match this label selector are counted to determine the number of podsin their corresponding topology domain.", Attributes: map[string]schema.Attribute{ "match_expressions": schema.ListNestedAttribute{ Description: "matchExpressions is a list of label selector requirements. The requirements are ANDed.", @@ -2645,16 +2645,16 @@ func (r *InfinispanOrgInfinispanV1Manifest) Schema(_ context.Context, _ datasour }, "operator": schema.StringAttribute{ - Description: "operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist.", - MarkdownDescription: "operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist.", + Description: "operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.", + MarkdownDescription: "operator represents a key's relationship to a set of values.Valid operators are In, NotIn, Exists and DoesNotExist.", Required: true, Optional: false, Computed: false, }, "values": schema.ListAttribute{ - Description: "values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch.", - MarkdownDescription: "values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch.", + Description: "values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.", + MarkdownDescription: "values is an array of string values. If the operator is In or NotIn,the values array must be non-empty. If the operator is Exists or DoesNotExist,the values array must be empty. This array is replaced during a strategicmerge patch.", ElementType: types.StringType, Required: false, Optional: true, @@ -2668,8 +2668,8 @@ func (r *InfinispanOrgInfinispanV1Manifest) Schema(_ context.Context, _ datasour }, "match_labels": schema.MapAttribute{ - Description: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is 'key', the operator is 'In', and the values array contains only 'value'. The requirements are ANDed.", - MarkdownDescription: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is 'key', the operator is 'In', and the values array contains only 'value'. The requirements are ANDed.", + Description: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.", + MarkdownDescription: "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabelsmap is equivalent to an element of matchExpressions, whose key field is 'key', theoperator is 'In', and the values array contains only 'value'. The requirements are ANDed.", ElementType: types.StringType, Required: false, Optional: true, @@ -2682,32 +2682,32 @@ func (r *InfinispanOrgInfinispanV1Manifest) Schema(_ context.Context, _ datasour }, "max_skew": schema.Int64Attribute{ - Description: "MaxSkew describes the degree to which pods may be unevenly distributed. When 'whenUnsatisfiable=DoNotSchedule', it is the maximum permitted difference between the number of matching pods in the target topology and the global minimum. The global minimum is the minimum number of matching pods in an eligible domain or zero if the number of eligible domains is less than MinDomains. For example, in a 3-zone cluster, MaxSkew is set to 1, and pods with the same labelSelector spread as 2/2/1: In this case, the global minimum is 1. | zone1 | zone2 | zone3 | | P P | P P | P | - if MaxSkew is 1, incoming pod can only be scheduled to zone3 to become 2/2/2; scheduling it onto zone1(zone2) would make the ActualSkew(3-1) on zone1(zone2) violate MaxSkew(1). - if MaxSkew is 2, incoming pod can be scheduled onto any zone. When 'whenUnsatisfiable=ScheduleAnyway', it is used to give higher precedence to topologies that satisfy it. It's a required field. Default value is 1 and 0 is not allowed.", - MarkdownDescription: "MaxSkew describes the degree to which pods may be unevenly distributed. When 'whenUnsatisfiable=DoNotSchedule', it is the maximum permitted difference between the number of matching pods in the target topology and the global minimum. The global minimum is the minimum number of matching pods in an eligible domain or zero if the number of eligible domains is less than MinDomains. For example, in a 3-zone cluster, MaxSkew is set to 1, and pods with the same labelSelector spread as 2/2/1: In this case, the global minimum is 1. | zone1 | zone2 | zone3 | | P P | P P | P | - if MaxSkew is 1, incoming pod can only be scheduled to zone3 to become 2/2/2; scheduling it onto zone1(zone2) would make the ActualSkew(3-1) on zone1(zone2) violate MaxSkew(1). - if MaxSkew is 2, incoming pod can be scheduled onto any zone. When 'whenUnsatisfiable=ScheduleAnyway', it is used to give higher precedence to topologies that satisfy it. It's a required field. Default value is 1 and 0 is not allowed.", + Description: "MaxSkew describes the degree to which pods may be unevenly distributed.When 'whenUnsatisfiable=DoNotSchedule', it is the maximum permitted differencebetween the number of matching pods in the target topology and the global minimum.The global minimum is the minimum number of matching pods in an eligible domainor zero if the number of eligible domains is less than MinDomains.For example, in a 3-zone cluster, MaxSkew is set to 1, and pods with the samelabelSelector spread as 2/2/1:In this case, the global minimum is 1.| zone1 | zone2 | zone3 || P P | P P | P |- if MaxSkew is 1, incoming pod can only be scheduled to zone3 to become 2/2/2;scheduling it onto zone1(zone2) would make the ActualSkew(3-1) on zone1(zone2)violate MaxSkew(1).- if MaxSkew is 2, incoming pod can be scheduled onto any zone.When 'whenUnsatisfiable=ScheduleAnyway', it is used to give higher precedenceto topologies that satisfy it.It's a required field. Default value is 1 and 0 is not allowed.", + MarkdownDescription: "MaxSkew describes the degree to which pods may be unevenly distributed.When 'whenUnsatisfiable=DoNotSchedule', it is the maximum permitted differencebetween the number of matching pods in the target topology and the global minimum.The global minimum is the minimum number of matching pods in an eligible domainor zero if the number of eligible domains is less than MinDomains.For example, in a 3-zone cluster, MaxSkew is set to 1, and pods with the samelabelSelector spread as 2/2/1:In this case, the global minimum is 1.| zone1 | zone2 | zone3 || P P | P P | P |- if MaxSkew is 1, incoming pod can only be scheduled to zone3 to become 2/2/2;scheduling it onto zone1(zone2) would make the ActualSkew(3-1) on zone1(zone2)violate MaxSkew(1).- if MaxSkew is 2, incoming pod can be scheduled onto any zone.When 'whenUnsatisfiable=ScheduleAnyway', it is used to give higher precedenceto topologies that satisfy it.It's a required field. Default value is 1 and 0 is not allowed.", Required: true, Optional: false, Computed: false, }, "min_domains": schema.Int64Attribute{ - Description: "MinDomains indicates a minimum number of eligible domains. When the number of eligible domains with matching topology keys is less than minDomains, Pod Topology Spread treats 'global minimum' as 0, and then the calculation of Skew is performed. And when the number of eligible domains with matching topology keys equals or greater than minDomains, this value has no effect on scheduling. As a result, when the number of eligible domains is less than minDomains, scheduler won't schedule more than maxSkew Pods to those domains. If value is nil, the constraint behaves as if MinDomains is equal to 1. Valid values are integers greater than 0. When value is not nil, WhenUnsatisfiable must be DoNotSchedule. For example, in a 3-zone cluster, MaxSkew is set to 2, MinDomains is set to 5 and pods with the same labelSelector spread as 2/2/2: | zone1 | zone2 | zone3 | | P P | P P | P P | The number of domains is less than 5(MinDomains), so 'global minimum' is treated as 0. In this situation, new pod with the same labelSelector cannot be scheduled, because computed skew will be 3(3 - 0) if new Pod is scheduled to any of the three zones, it will violate MaxSkew. This is an alpha field and requires enabling MinDomainsInPodTopologySpread feature gate.", - MarkdownDescription: "MinDomains indicates a minimum number of eligible domains. When the number of eligible domains with matching topology keys is less than minDomains, Pod Topology Spread treats 'global minimum' as 0, and then the calculation of Skew is performed. And when the number of eligible domains with matching topology keys equals or greater than minDomains, this value has no effect on scheduling. As a result, when the number of eligible domains is less than minDomains, scheduler won't schedule more than maxSkew Pods to those domains. If value is nil, the constraint behaves as if MinDomains is equal to 1. Valid values are integers greater than 0. When value is not nil, WhenUnsatisfiable must be DoNotSchedule. For example, in a 3-zone cluster, MaxSkew is set to 2, MinDomains is set to 5 and pods with the same labelSelector spread as 2/2/2: | zone1 | zone2 | zone3 | | P P | P P | P P | The number of domains is less than 5(MinDomains), so 'global minimum' is treated as 0. In this situation, new pod with the same labelSelector cannot be scheduled, because computed skew will be 3(3 - 0) if new Pod is scheduled to any of the three zones, it will violate MaxSkew. This is an alpha field and requires enabling MinDomainsInPodTopologySpread feature gate.", + Description: "MinDomains indicates a minimum number of eligible domains.When the number of eligible domains with matching topology keys is less than minDomains,Pod Topology Spread treats 'global minimum' as 0, and then the calculation of Skew is performed.And when the number of eligible domains with matching topology keys equals or greater than minDomains,this value has no effect on scheduling.As a result, when the number of eligible domains is less than minDomains,scheduler won't schedule more than maxSkew Pods to those domains.If value is nil, the constraint behaves as if MinDomains is equal to 1.Valid values are integers greater than 0.When value is not nil, WhenUnsatisfiable must be DoNotSchedule.For example, in a 3-zone cluster, MaxSkew is set to 2, MinDomains is set to 5 and pods with the samelabelSelector spread as 2/2/2:| zone1 | zone2 | zone3 || P P | P P | P P |The number of domains is less than 5(MinDomains), so 'global minimum' is treated as 0.In this situation, new pod with the same labelSelector cannot be scheduled,because computed skew will be 3(3 - 0) if new Pod is scheduled to any of the three zones,it will violate MaxSkew.This is an alpha field and requires enabling MinDomainsInPodTopologySpread feature gate.", + MarkdownDescription: "MinDomains indicates a minimum number of eligible domains.When the number of eligible domains with matching topology keys is less than minDomains,Pod Topology Spread treats 'global minimum' as 0, and then the calculation of Skew is performed.And when the number of eligible domains with matching topology keys equals or greater than minDomains,this value has no effect on scheduling.As a result, when the number of eligible domains is less than minDomains,scheduler won't schedule more than maxSkew Pods to those domains.If value is nil, the constraint behaves as if MinDomains is equal to 1.Valid values are integers greater than 0.When value is not nil, WhenUnsatisfiable must be DoNotSchedule.For example, in a 3-zone cluster, MaxSkew is set to 2, MinDomains is set to 5 and pods with the samelabelSelector spread as 2/2/2:| zone1 | zone2 | zone3 || P P | P P | P P |The number of domains is less than 5(MinDomains), so 'global minimum' is treated as 0.In this situation, new pod with the same labelSelector cannot be scheduled,because computed skew will be 3(3 - 0) if new Pod is scheduled to any of the three zones,it will violate MaxSkew.This is an alpha field and requires enabling MinDomainsInPodTopologySpread feature gate.", Required: false, Optional: true, Computed: false, }, "topology_key": schema.StringAttribute{ - Description: "TopologyKey is the key of node labels. Nodes that have a label with this key and identical values are considered to be in the same topology. We consider each as a 'bucket', and try to put balanced number of pods into each bucket. We define a domain as a particular instance of a topology. Also, we define an eligible domain as a domain whose nodes match the node selector. e.g. If TopologyKey is 'kubernetes.io/hostname', each Node is a domain of that topology. And, if TopologyKey is 'topology.kubernetes.io/zone', each zone is a domain of that topology. It's a required field.", - MarkdownDescription: "TopologyKey is the key of node labels. Nodes that have a label with this key and identical values are considered to be in the same topology. We consider each as a 'bucket', and try to put balanced number of pods into each bucket. We define a domain as a particular instance of a topology. Also, we define an eligible domain as a domain whose nodes match the node selector. e.g. If TopologyKey is 'kubernetes.io/hostname', each Node is a domain of that topology. And, if TopologyKey is 'topology.kubernetes.io/zone', each zone is a domain of that topology. It's a required field.", + Description: "TopologyKey is the key of node labels. Nodes that have a label with this keyand identical values are considered to be in the same topology.We consider each as a 'bucket', and try to put balanced numberof pods into each bucket.We define a domain as a particular instance of a topology.Also, we define an eligible domain as a domain whose nodes match the node selector.e.g. If TopologyKey is 'kubernetes.io/hostname', each Node is a domain of that topology.And, if TopologyKey is 'topology.kubernetes.io/zone', each zone is a domain of that topology.It's a required field.", + MarkdownDescription: "TopologyKey is the key of node labels. Nodes that have a label with this keyand identical values are considered to be in the same topology.We consider each as a 'bucket', and try to put balanced numberof pods into each bucket.We define a domain as a particular instance of a topology.Also, we define an eligible domain as a domain whose nodes match the node selector.e.g. If TopologyKey is 'kubernetes.io/hostname', each Node is a domain of that topology.And, if TopologyKey is 'topology.kubernetes.io/zone', each zone is a domain of that topology.It's a required field.", Required: true, Optional: false, Computed: false, }, "when_unsatisfiable": schema.StringAttribute{ - Description: "WhenUnsatisfiable indicates how to deal with a pod if it doesn't satisfy the spread constraint. - DoNotSchedule (default) tells the scheduler not to schedule it. - ScheduleAnyway tells the scheduler to schedule the pod in any location, but giving higher precedence to topologies that would help reduce the skew. A constraint is considered 'Unsatisfiable' for an incoming pod if and only if every possible node assignment for that pod would violate 'MaxSkew' on some topology. For example, in a 3-zone cluster, MaxSkew is set to 1, and pods with the same labelSelector spread as 3/1/1: | zone1 | zone2 | zone3 | | P P P | P | P | If WhenUnsatisfiable is set to DoNotSchedule, incoming pod can only be scheduled to zone2(zone3) to become 3/2/1(3/1/2) as ActualSkew(2-1) on zone2(zone3) satisfies MaxSkew(1). In other words, the cluster can still be imbalanced, but scheduler won't make it *more* imbalanced. It's a required field.", - MarkdownDescription: "WhenUnsatisfiable indicates how to deal with a pod if it doesn't satisfy the spread constraint. - DoNotSchedule (default) tells the scheduler not to schedule it. - ScheduleAnyway tells the scheduler to schedule the pod in any location, but giving higher precedence to topologies that would help reduce the skew. A constraint is considered 'Unsatisfiable' for an incoming pod if and only if every possible node assignment for that pod would violate 'MaxSkew' on some topology. For example, in a 3-zone cluster, MaxSkew is set to 1, and pods with the same labelSelector spread as 3/1/1: | zone1 | zone2 | zone3 | | P P P | P | P | If WhenUnsatisfiable is set to DoNotSchedule, incoming pod can only be scheduled to zone2(zone3) to become 3/2/1(3/1/2) as ActualSkew(2-1) on zone2(zone3) satisfies MaxSkew(1). In other words, the cluster can still be imbalanced, but scheduler won't make it *more* imbalanced. It's a required field.", + Description: "WhenUnsatisfiable indicates how to deal with a pod if it doesn't satisfythe spread constraint.- DoNotSchedule (default) tells the scheduler not to schedule it.- ScheduleAnyway tells the scheduler to schedule the pod in any location, but giving higher precedence to topologies that would help reduce the skew.A constraint is considered 'Unsatisfiable' for an incoming podif and only if every possible node assignment for that pod would violate'MaxSkew' on some topology.For example, in a 3-zone cluster, MaxSkew is set to 1, and pods with the samelabelSelector spread as 3/1/1:| zone1 | zone2 | zone3 || P P P | P | P |If WhenUnsatisfiable is set to DoNotSchedule, incoming pod can only be scheduledto zone2(zone3) to become 3/2/1(3/1/2) as ActualSkew(2-1) on zone2(zone3) satisfiesMaxSkew(1). In other words, the cluster can still be imbalanced, but schedulerwon't make it *more* imbalanced.It's a required field.", + MarkdownDescription: "WhenUnsatisfiable indicates how to deal with a pod if it doesn't satisfythe spread constraint.- DoNotSchedule (default) tells the scheduler not to schedule it.- ScheduleAnyway tells the scheduler to schedule the pod in any location, but giving higher precedence to topologies that would help reduce the skew.A constraint is considered 'Unsatisfiable' for an incoming podif and only if every possible node assignment for that pod would violate'MaxSkew' on some topology.For example, in a 3-zone cluster, MaxSkew is set to 1, and pods with the samelabelSelector spread as 3/1/1:| zone1 | zone2 | zone3 || P P P | P | P |If WhenUnsatisfiable is set to DoNotSchedule, incoming pod can only be scheduledto zone2(zone3) to become 3/2/1(3/1/2) as ActualSkew(2-1) on zone2(zone3) satisfiesMaxSkew(1). In other words, the cluster can still be imbalanced, but schedulerwon't make it *more* imbalanced.It's a required field.", Required: true, Optional: false, Computed: false, @@ -2874,8 +2874,8 @@ func (r *InfinispanOrgInfinispanV1Manifest) Schema(_ context.Context, _ datasour }, "liveness_probe": schema.SingleNestedAttribute{ - Description: "Periodic probe of container liveness. Container will be restarted if the probe fails.", - MarkdownDescription: "Periodic probe of container liveness. Container will be restarted if the probe fails.", + Description: "Periodic probe of container liveness.Container will be restarted if the probe fails.", + MarkdownDescription: "Periodic probe of container liveness.Container will be restarted if the probe fails.", Attributes: map[string]schema.Attribute{ "failure_threshold": schema.Int64Attribute{ Description: "Minimum consecutive failures for the probe to be considered failed after having succeeded.", @@ -2923,8 +2923,8 @@ func (r *InfinispanOrgInfinispanV1Manifest) Schema(_ context.Context, _ datasour }, "readiness_probe": schema.SingleNestedAttribute{ - Description: "Periodic probe of container service readiness. Container will be removed from service endpoints if the probe fails.", - MarkdownDescription: "Periodic probe of container service readiness. Container will be removed from service endpoints if the probe fails.", + Description: "Periodic probe of container service readiness.Container will be removed from service endpoints if the probe fails.", + MarkdownDescription: "Periodic probe of container service readiness.Container will be removed from service endpoints if the probe fails.", Attributes: map[string]schema.Attribute{ "failure_threshold": schema.Int64Attribute{ Description: "Minimum consecutive failures for the probe to be considered failed after having succeeded.", @@ -2972,8 +2972,8 @@ func (r *InfinispanOrgInfinispanV1Manifest) Schema(_ context.Context, _ datasour }, "startup_probe": schema.SingleNestedAttribute{ - Description: "StartupProbe indicates that the Pod has successfully initialized. If specified, no other probes are executed until this completes successfully. If this probe fails, the Pod will be restarted, just as if the livenessProbe failed. This can be used to provide different probe parameters at the beginning of a Pod's lifecycle, when it might take a long time to load data or warm a cache, than during steady-state operation.", - MarkdownDescription: "StartupProbe indicates that the Pod has successfully initialized. If specified, no other probes are executed until this completes successfully. If this probe fails, the Pod will be restarted, just as if the livenessProbe failed. This can be used to provide different probe parameters at the beginning of a Pod's lifecycle, when it might take a long time to load data or warm a cache, than during steady-state operation.", + Description: "StartupProbe indicates that the Pod has successfully initialized.If specified, no other probes are executed until this completes successfully.If this probe fails, the Pod will be restarted, just as if the livenessProbe failed.This can be used to provide different probe parameters at the beginning of a Pod's lifecycle,when it might take a long time to load data or warm a cache, than during steady-state operation.", + MarkdownDescription: "StartupProbe indicates that the Pod has successfully initialized.If specified, no other probes are executed until this completes successfully.If this probe fails, the Pod will be restarted, just as if the livenessProbe failed.This can be used to provide different probe parameters at the beginning of a Pod's lifecycle,when it might take a long time to load data or warm a cache, than during steady-state operation.", Attributes: map[string]schema.Attribute{ "failure_threshold": schema.Int64Attribute{ Description: "Minimum consecutive failures for the probe to be considered failed after having succeeded.", diff --git a/internal/provider/infinispan_org_v2alpha1/infinispan_org_cache_v2alpha1_manifest.go b/internal/provider/infinispan_org_v2alpha1/infinispan_org_cache_v2alpha1_manifest.go index 6cb43c8de..d4b44db52 100644 --- a/internal/provider/infinispan_org_v2alpha1/infinispan_org_cache_v2alpha1_manifest.go +++ b/internal/provider/infinispan_org_v2alpha1/infinispan_org_cache_v2alpha1_manifest.go @@ -160,8 +160,8 @@ func (r *InfinispanOrgCacheV2Alpha1Manifest) Schema(_ context.Context, _ datasou }, "name": schema.StringAttribute{ - Description: "Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?", - MarkdownDescription: "Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?", + Description: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?", + MarkdownDescription: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?", Required: false, Optional: true, Computed: false, @@ -201,8 +201,8 @@ func (r *InfinispanOrgCacheV2Alpha1Manifest) Schema(_ context.Context, _ datasou }, "name": schema.StringAttribute{ - Description: "Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?", - MarkdownDescription: "Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?", + Description: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?", + MarkdownDescription: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?", Required: false, Optional: true, Computed: false, diff --git a/internal/provider/jobset_x_k8s_io_v1alpha2/jobset_x_k8s_io_job_set_v1alpha2_manifest.go b/internal/provider/jobset_x_k8s_io_v1alpha2/jobset_x_k8s_io_job_set_v1alpha2_manifest.go index 433c9d9dd..597446eb1 100644 --- a/internal/provider/jobset_x_k8s_io_v1alpha2/jobset_x_k8s_io_job_set_v1alpha2_manifest.go +++ b/internal/provider/jobset_x_k8s_io_v1alpha2/jobset_x_k8s_io_job_set_v1alpha2_manifest.go @@ -416,7 +416,8 @@ type JobsetXK8SIoJobSetV1Alpha2ManifestData struct { } `tfsdk:"resize_policy" json:"resizePolicy,omitempty"` Resources *struct { Claims *[]struct { - Name *string `tfsdk:"name" json:"name,omitempty"` + Name *string `tfsdk:"name" json:"name,omitempty"` + Request *string `tfsdk:"request" json:"request,omitempty"` } `tfsdk:"claims" json:"claims,omitempty"` Limits *map[string]string `tfsdk:"limits" json:"limits,omitempty"` Requests *map[string]string `tfsdk:"requests" json:"requests,omitempty"` @@ -673,7 +674,8 @@ type JobsetXK8SIoJobSetV1Alpha2ManifestData struct { } `tfsdk:"resize_policy" json:"resizePolicy,omitempty"` Resources *struct { Claims *[]struct { - Name *string `tfsdk:"name" json:"name,omitempty"` + Name *string `tfsdk:"name" json:"name,omitempty"` + Request *string `tfsdk:"request" json:"request,omitempty"` } `tfsdk:"claims" json:"claims,omitempty"` Limits *map[string]string `tfsdk:"limits" json:"limits,omitempty"` Requests *map[string]string `tfsdk:"requests" json:"requests,omitempty"` @@ -933,7 +935,8 @@ type JobsetXK8SIoJobSetV1Alpha2ManifestData struct { } `tfsdk:"resize_policy" json:"resizePolicy,omitempty"` Resources *struct { Claims *[]struct { - Name *string `tfsdk:"name" json:"name,omitempty"` + Name *string `tfsdk:"name" json:"name,omitempty"` + Request *string `tfsdk:"request" json:"request,omitempty"` } `tfsdk:"claims" json:"claims,omitempty"` Limits *map[string]string `tfsdk:"limits" json:"limits,omitempty"` Requests *map[string]string `tfsdk:"requests" json:"requests,omitempty"` @@ -1034,11 +1037,9 @@ type JobsetXK8SIoJobSetV1Alpha2ManifestData struct { ConditionType *string `tfsdk:"condition_type" json:"conditionType,omitempty"` } `tfsdk:"readiness_gates" json:"readinessGates,omitempty"` ResourceClaims *[]struct { - Name *string `tfsdk:"name" json:"name,omitempty"` - Source *struct { - ResourceClaimName *string `tfsdk:"resource_claim_name" json:"resourceClaimName,omitempty"` - ResourceClaimTemplateName *string `tfsdk:"resource_claim_template_name" json:"resourceClaimTemplateName,omitempty"` - } `tfsdk:"source" json:"source,omitempty"` + Name *string `tfsdk:"name" json:"name,omitempty"` + ResourceClaimName *string `tfsdk:"resource_claim_name" json:"resourceClaimName,omitempty"` + ResourceClaimTemplateName *string `tfsdk:"resource_claim_template_name" json:"resourceClaimTemplateName,omitempty"` } `tfsdk:"resource_claims" json:"resourceClaims,omitempty"` RestartPolicy *string `tfsdk:"restart_policy" json:"restartPolicy,omitempty"` RuntimeClassName *string `tfsdk:"runtime_class_name" json:"runtimeClassName,omitempty"` @@ -1066,8 +1067,9 @@ type JobsetXK8SIoJobSetV1Alpha2ManifestData struct { LocalhostProfile *string `tfsdk:"localhost_profile" json:"localhostProfile,omitempty"` Type *string `tfsdk:"type" json:"type,omitempty"` } `tfsdk:"seccomp_profile" json:"seccompProfile,omitempty"` - SupplementalGroups *[]string `tfsdk:"supplemental_groups" json:"supplementalGroups,omitempty"` - Sysctls *[]struct { + SupplementalGroups *[]string `tfsdk:"supplemental_groups" json:"supplementalGroups,omitempty"` + SupplementalGroupsPolicy *string `tfsdk:"supplemental_groups_policy" json:"supplementalGroupsPolicy,omitempty"` + Sysctls *[]struct { Name *string `tfsdk:"name" json:"name,omitempty"` Value *string `tfsdk:"value" json:"value,omitempty"` } `tfsdk:"sysctls" json:"sysctls,omitempty"` @@ -1266,6 +1268,10 @@ type JobsetXK8SIoJobSetV1Alpha2ManifestData struct { Path *string `tfsdk:"path" json:"path,omitempty"` Type *string `tfsdk:"type" json:"type,omitempty"` } `tfsdk:"host_path" json:"hostPath,omitempty"` + Image *struct { + PullPolicy *string `tfsdk:"pull_policy" json:"pullPolicy,omitempty"` + Reference *string `tfsdk:"reference" json:"reference,omitempty"` + } `tfsdk:"image" json:"image,omitempty"` Iscsi *struct { ChapAuthDiscovery *bool `tfsdk:"chap_auth_discovery" json:"chapAuthDiscovery,omitempty"` ChapAuthSession *bool `tfsdk:"chap_auth_session" json:"chapAuthSession,omitempty"` @@ -1773,8 +1779,8 @@ func (r *JobsetXK8SIoJobSetV1Alpha2Manifest) Schema(_ context.Context, _ datasou }, "managed_by": schema.StringAttribute{ - Description: "ManagedBy field indicates the controller that manages a Job. The k8s Jobcontroller reconciles jobs which don't have this field at all or the fieldvalue is the reserved string 'kubernetes.io/job-controller', but skipsreconciling Jobs with a custom value for this field.The value must be a valid domain-prefixed path (e.g. acme.io/foo) -all characters before the first '/' must be a valid subdomain as definedby RFC 1123. All characters trailing the first '/' must be valid HTTP Pathcharacters as defined by RFC 3986. The value cannot exceed 64 characters.This field is alpha-level. The job controller accepts setting the fieldwhen the feature gate JobManagedBy is enabled (disabled by default).", - MarkdownDescription: "ManagedBy field indicates the controller that manages a Job. The k8s Jobcontroller reconciles jobs which don't have this field at all or the fieldvalue is the reserved string 'kubernetes.io/job-controller', but skipsreconciling Jobs with a custom value for this field.The value must be a valid domain-prefixed path (e.g. acme.io/foo) -all characters before the first '/' must be a valid subdomain as definedby RFC 1123. All characters trailing the first '/' must be valid HTTP Pathcharacters as defined by RFC 3986. The value cannot exceed 64 characters.This field is alpha-level. The job controller accepts setting the fieldwhen the feature gate JobManagedBy is enabled (disabled by default).", + Description: "ManagedBy field indicates the controller that manages a Job. The k8s Jobcontroller reconciles jobs which don't have this field at all or the fieldvalue is the reserved string 'kubernetes.io/job-controller', but skipsreconciling Jobs with a custom value for this field.The value must be a valid domain-prefixed path (e.g. acme.io/foo) -all characters before the first '/' must be a valid subdomain as definedby RFC 1123. All characters trailing the first '/' must be valid HTTP Pathcharacters as defined by RFC 3986. The value cannot exceed 63 characters.This field is immutable.This field is alpha-level. The job controller accepts setting the fieldwhen the feature gate JobManagedBy is enabled (disabled by default).", + MarkdownDescription: "ManagedBy field indicates the controller that manages a Job. The k8s Jobcontroller reconciles jobs which don't have this field at all or the fieldvalue is the reserved string 'kubernetes.io/job-controller', but skipsreconciling Jobs with a custom value for this field.The value must be a valid domain-prefixed path (e.g. acme.io/foo) -all characters before the first '/' must be a valid subdomain as definedby RFC 1123. All characters trailing the first '/' must be valid HTTP Pathcharacters as defined by RFC 3986. The value cannot exceed 63 characters.This field is immutable.This field is alpha-level. The job controller accepts setting the fieldwhen the feature gate JobManagedBy is enabled (disabled by default).", Required: false, Optional: true, Computed: false, @@ -1805,8 +1811,8 @@ func (r *JobsetXK8SIoJobSetV1Alpha2Manifest) Schema(_ context.Context, _ datasou }, "pod_failure_policy": schema.SingleNestedAttribute{ - Description: "Specifies the policy of handling failed pods. In particular, it allows tospecify the set of actions and conditions which need to besatisfied to take the associated action.If empty, the default behaviour applies - the counter of failed pods,represented by the jobs's .status.failed field, is incremented and it ischecked against the backoffLimit. This field cannot be used in combinationwith restartPolicy=OnFailure.This field is beta-level. It can be used when the 'JobPodFailurePolicy'feature gate is enabled (enabled by default).", - MarkdownDescription: "Specifies the policy of handling failed pods. In particular, it allows tospecify the set of actions and conditions which need to besatisfied to take the associated action.If empty, the default behaviour applies - the counter of failed pods,represented by the jobs's .status.failed field, is incremented and it ischecked against the backoffLimit. This field cannot be used in combinationwith restartPolicy=OnFailure.This field is beta-level. It can be used when the 'JobPodFailurePolicy'feature gate is enabled (enabled by default).", + Description: "Specifies the policy of handling failed pods. In particular, it allows tospecify the set of actions and conditions which need to besatisfied to take the associated action.If empty, the default behaviour applies - the counter of failed pods,represented by the jobs's .status.failed field, is incremented and it ischecked against the backoffLimit. This field cannot be used in combinationwith restartPolicy=OnFailure.", + MarkdownDescription: "Specifies the policy of handling failed pods. In particular, it allows tospecify the set of actions and conditions which need to besatisfied to take the associated action.If empty, the default behaviour applies - the counter of failed pods,represented by the jobs's .status.failed field, is incremented and it ischecked against the backoffLimit. This field cannot be used in combinationwith restartPolicy=OnFailure.", Attributes: map[string]schema.Attribute{ "rules": schema.ListNestedAttribute{ Description: "A list of pod failure policy rules. The rules are evaluated in order.Once a rule matches a Pod failure, the remaining of the rules are ignored.When no rule matches the Pod failure, the default handling applies - thecounter of pod failures is incremented and it is checked againstthe backoffLimit. At most 20 elements are allowed.", @@ -1956,8 +1962,8 @@ func (r *JobsetXK8SIoJobSetV1Alpha2Manifest) Schema(_ context.Context, _ datasou }, "success_policy": schema.SingleNestedAttribute{ - Description: "successPolicy specifies the policy when the Job can be declared as succeeded.If empty, the default behavior applies - the Job is declared as succeededonly when the number of succeeded pods equals to the completions.When the field is specified, it must be immutable and works only for the Indexed Jobs.Once the Job meets the SuccessPolicy, the lingering pods are terminated.This field is alpha-level. To use this field, you must enable the'JobSuccessPolicy' feature gate (disabled by default).", - MarkdownDescription: "successPolicy specifies the policy when the Job can be declared as succeeded.If empty, the default behavior applies - the Job is declared as succeededonly when the number of succeeded pods equals to the completions.When the field is specified, it must be immutable and works only for the Indexed Jobs.Once the Job meets the SuccessPolicy, the lingering pods are terminated.This field is alpha-level. To use this field, you must enable the'JobSuccessPolicy' feature gate (disabled by default).", + Description: "successPolicy specifies the policy when the Job can be declared as succeeded.If empty, the default behavior applies - the Job is declared as succeededonly when the number of succeeded pods equals to the completions.When the field is specified, it must be immutable and works only for the Indexed Jobs.Once the Job meets the SuccessPolicy, the lingering pods are terminated.This field is beta-level. To use this field, you must enable the'JobSuccessPolicy' feature gate (enabled by default).", + MarkdownDescription: "successPolicy specifies the policy when the Job can be declared as succeeded.If empty, the default behavior applies - the Job is declared as succeededonly when the number of succeeded pods equals to the completions.When the field is specified, it must be immutable and works only for the Indexed Jobs.Once the Job meets the SuccessPolicy, the lingering pods are terminated.This field is beta-level. To use this field, you must enable the'JobSuccessPolicy' feature gate (enabled by default).", Attributes: map[string]schema.Attribute{ "rules": schema.ListNestedAttribute{ Description: "rules represents the list of alternative rules for the declaring the Jobsas successful before '.status.succeeded >= .spec.completions'. Once any of the rules are met,the 'SucceededCriteriaMet' condition is added, and the lingering pods are removed.The terminal state for such a Job has the 'Complete' condition.Additionally, these rules are evaluated in order; Once the Job meets one of the rules,other rules are ignored. At most 20 elements are allowed.", @@ -2340,8 +2346,8 @@ func (r *JobsetXK8SIoJobSetV1Alpha2Manifest) Schema(_ context.Context, _ datasou }, "match_label_keys": schema.ListAttribute{ - Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", - MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", + Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", + MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", ElementType: types.StringType, Required: false, Optional: true, @@ -2349,8 +2355,8 @@ func (r *JobsetXK8SIoJobSetV1Alpha2Manifest) Schema(_ context.Context, _ datasou }, "mismatch_label_keys": schema.ListAttribute{ - Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", - MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", + Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", + MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", ElementType: types.StringType, Required: false, Optional: true, @@ -2507,8 +2513,8 @@ func (r *JobsetXK8SIoJobSetV1Alpha2Manifest) Schema(_ context.Context, _ datasou }, "match_label_keys": schema.ListAttribute{ - Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", - MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", + Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", + MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", ElementType: types.StringType, Required: false, Optional: true, @@ -2516,8 +2522,8 @@ func (r *JobsetXK8SIoJobSetV1Alpha2Manifest) Schema(_ context.Context, _ datasou }, "mismatch_label_keys": schema.ListAttribute{ - Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", - MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", + Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", + MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", ElementType: types.StringType, Required: false, Optional: true, @@ -2674,8 +2680,8 @@ func (r *JobsetXK8SIoJobSetV1Alpha2Manifest) Schema(_ context.Context, _ datasou }, "match_label_keys": schema.ListAttribute{ - Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", - MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", + Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", + MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", ElementType: types.StringType, Required: false, Optional: true, @@ -2683,8 +2689,8 @@ func (r *JobsetXK8SIoJobSetV1Alpha2Manifest) Schema(_ context.Context, _ datasou }, "mismatch_label_keys": schema.ListAttribute{ - Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", - MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", + Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", + MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", ElementType: types.StringType, Required: false, Optional: true, @@ -2841,8 +2847,8 @@ func (r *JobsetXK8SIoJobSetV1Alpha2Manifest) Schema(_ context.Context, _ datasou }, "match_label_keys": schema.ListAttribute{ - Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", - MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", + Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", + MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", ElementType: types.StringType, Required: false, Optional: true, @@ -2850,8 +2856,8 @@ func (r *JobsetXK8SIoJobSetV1Alpha2Manifest) Schema(_ context.Context, _ datasou }, "mismatch_label_keys": schema.ListAttribute{ - Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", - MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", + Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", + MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", ElementType: types.StringType, Required: false, Optional: true, @@ -3014,8 +3020,8 @@ func (r *JobsetXK8SIoJobSetV1Alpha2Manifest) Schema(_ context.Context, _ datasou }, "name": schema.StringAttribute{ - Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", - MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", Required: false, Optional: true, Computed: false, @@ -3105,8 +3111,8 @@ func (r *JobsetXK8SIoJobSetV1Alpha2Manifest) Schema(_ context.Context, _ datasou }, "name": schema.StringAttribute{ - Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", - MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", Required: false, Optional: true, Computed: false, @@ -3146,8 +3152,8 @@ func (r *JobsetXK8SIoJobSetV1Alpha2Manifest) Schema(_ context.Context, _ datasou MarkdownDescription: "The ConfigMap to select from", Attributes: map[string]schema.Attribute{ "name": schema.StringAttribute{ - Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", - MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", Required: false, Optional: true, Computed: false, @@ -3179,8 +3185,8 @@ func (r *JobsetXK8SIoJobSetV1Alpha2Manifest) Schema(_ context.Context, _ datasou MarkdownDescription: "The Secret to select from", Attributes: map[string]schema.Attribute{ "name": schema.StringAttribute{ - Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", - MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", Required: false, Optional: true, Computed: false, @@ -3992,6 +3998,14 @@ func (r *JobsetXK8SIoJobSetV1Alpha2Manifest) Schema(_ context.Context, _ datasou Optional: false, Computed: false, }, + + "request": schema.StringAttribute{ + Description: "Request is the name chosen for a request in the referenced claim.If empty, everything from the claim is made available, otherwiseonly the result of this request.", + MarkdownDescription: "Request is the name chosen for a request in the referenced claim.If empty, everything from the claim is made available, otherwiseonly the result of this request.", + Required: false, + Optional: true, + Computed: false, + }, }, }, Required: false, @@ -4103,8 +4117,8 @@ func (r *JobsetXK8SIoJobSetV1Alpha2Manifest) Schema(_ context.Context, _ datasou }, "proc_mount": schema.StringAttribute{ - Description: "procMount denotes the type of proc mount to use for the containers.The default is DefaultProcMount which uses the container runtime defaults forreadonly paths and masked paths.This requires the ProcMountType feature flag to be enabled.Note that this field cannot be set when spec.os.name is windows.", - MarkdownDescription: "procMount denotes the type of proc mount to use for the containers.The default is DefaultProcMount which uses the container runtime defaults forreadonly paths and masked paths.This requires the ProcMountType feature flag to be enabled.Note that this field cannot be set when spec.os.name is windows.", + Description: "procMount denotes the type of proc mount to use for the containers.The default value is Default which uses the container runtime defaults forreadonly paths and masked paths.This requires the ProcMountType feature flag to be enabled.Note that this field cannot be set when spec.os.name is windows.", + MarkdownDescription: "procMount denotes the type of proc mount to use for the containers.The default value is Default which uses the container runtime defaults forreadonly paths and masked paths.This requires the ProcMountType feature flag to be enabled.Note that this field cannot be set when spec.os.name is windows.", Required: false, Optional: true, Computed: false, @@ -4726,8 +4740,8 @@ func (r *JobsetXK8SIoJobSetV1Alpha2Manifest) Schema(_ context.Context, _ datasou }, "name": schema.StringAttribute{ - Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", - MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", Required: false, Optional: true, Computed: false, @@ -4817,8 +4831,8 @@ func (r *JobsetXK8SIoJobSetV1Alpha2Manifest) Schema(_ context.Context, _ datasou }, "name": schema.StringAttribute{ - Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", - MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", Required: false, Optional: true, Computed: false, @@ -4858,8 +4872,8 @@ func (r *JobsetXK8SIoJobSetV1Alpha2Manifest) Schema(_ context.Context, _ datasou MarkdownDescription: "The ConfigMap to select from", Attributes: map[string]schema.Attribute{ "name": schema.StringAttribute{ - Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", - MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", Required: false, Optional: true, Computed: false, @@ -4891,8 +4905,8 @@ func (r *JobsetXK8SIoJobSetV1Alpha2Manifest) Schema(_ context.Context, _ datasou MarkdownDescription: "The Secret to select from", Attributes: map[string]schema.Attribute{ "name": schema.StringAttribute{ - Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", - MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", Required: false, Optional: true, Computed: false, @@ -5704,6 +5718,14 @@ func (r *JobsetXK8SIoJobSetV1Alpha2Manifest) Schema(_ context.Context, _ datasou Optional: false, Computed: false, }, + + "request": schema.StringAttribute{ + Description: "Request is the name chosen for a request in the referenced claim.If empty, everything from the claim is made available, otherwiseonly the result of this request.", + MarkdownDescription: "Request is the name chosen for a request in the referenced claim.If empty, everything from the claim is made available, otherwiseonly the result of this request.", + Required: false, + Optional: true, + Computed: false, + }, }, }, Required: false, @@ -5815,8 +5837,8 @@ func (r *JobsetXK8SIoJobSetV1Alpha2Manifest) Schema(_ context.Context, _ datasou }, "proc_mount": schema.StringAttribute{ - Description: "procMount denotes the type of proc mount to use for the containers.The default is DefaultProcMount which uses the container runtime defaults forreadonly paths and masked paths.This requires the ProcMountType feature flag to be enabled.Note that this field cannot be set when spec.os.name is windows.", - MarkdownDescription: "procMount denotes the type of proc mount to use for the containers.The default is DefaultProcMount which uses the container runtime defaults forreadonly paths and masked paths.This requires the ProcMountType feature flag to be enabled.Note that this field cannot be set when spec.os.name is windows.", + Description: "procMount denotes the type of proc mount to use for the containers.The default value is Default which uses the container runtime defaults forreadonly paths and masked paths.This requires the ProcMountType feature flag to be enabled.Note that this field cannot be set when spec.os.name is windows.", + MarkdownDescription: "procMount denotes the type of proc mount to use for the containers.The default value is Default which uses the container runtime defaults forreadonly paths and masked paths.This requires the ProcMountType feature flag to be enabled.Note that this field cannot be set when spec.os.name is windows.", Required: false, Optional: true, Computed: false, @@ -6389,8 +6411,8 @@ func (r *JobsetXK8SIoJobSetV1Alpha2Manifest) Schema(_ context.Context, _ datasou NestedObject: schema.NestedAttributeObject{ Attributes: map[string]schema.Attribute{ "name": schema.StringAttribute{ - Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", - MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", Required: false, Optional: true, Computed: false, @@ -6463,8 +6485,8 @@ func (r *JobsetXK8SIoJobSetV1Alpha2Manifest) Schema(_ context.Context, _ datasou }, "name": schema.StringAttribute{ - Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", - MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", Required: false, Optional: true, Computed: false, @@ -6554,8 +6576,8 @@ func (r *JobsetXK8SIoJobSetV1Alpha2Manifest) Schema(_ context.Context, _ datasou }, "name": schema.StringAttribute{ - Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", - MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", Required: false, Optional: true, Computed: false, @@ -6595,8 +6617,8 @@ func (r *JobsetXK8SIoJobSetV1Alpha2Manifest) Schema(_ context.Context, _ datasou MarkdownDescription: "The ConfigMap to select from", Attributes: map[string]schema.Attribute{ "name": schema.StringAttribute{ - Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", - MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", Required: false, Optional: true, Computed: false, @@ -6628,8 +6650,8 @@ func (r *JobsetXK8SIoJobSetV1Alpha2Manifest) Schema(_ context.Context, _ datasou MarkdownDescription: "The Secret to select from", Attributes: map[string]schema.Attribute{ "name": schema.StringAttribute{ - Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", - MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", Required: false, Optional: true, Computed: false, @@ -7441,6 +7463,14 @@ func (r *JobsetXK8SIoJobSetV1Alpha2Manifest) Schema(_ context.Context, _ datasou Optional: false, Computed: false, }, + + "request": schema.StringAttribute{ + Description: "Request is the name chosen for a request in the referenced claim.If empty, everything from the claim is made available, otherwiseonly the result of this request.", + MarkdownDescription: "Request is the name chosen for a request in the referenced claim.If empty, everything from the claim is made available, otherwiseonly the result of this request.", + Required: false, + Optional: true, + Computed: false, + }, }, }, Required: false, @@ -7552,8 +7582,8 @@ func (r *JobsetXK8SIoJobSetV1Alpha2Manifest) Schema(_ context.Context, _ datasou }, "proc_mount": schema.StringAttribute{ - Description: "procMount denotes the type of proc mount to use for the containers.The default is DefaultProcMount which uses the container runtime defaults forreadonly paths and masked paths.This requires the ProcMountType feature flag to be enabled.Note that this field cannot be set when spec.os.name is windows.", - MarkdownDescription: "procMount denotes the type of proc mount to use for the containers.The default is DefaultProcMount which uses the container runtime defaults forreadonly paths and masked paths.This requires the ProcMountType feature flag to be enabled.Note that this field cannot be set when spec.os.name is windows.", + Description: "procMount denotes the type of proc mount to use for the containers.The default value is Default which uses the container runtime defaults forreadonly paths and masked paths.This requires the ProcMountType feature flag to be enabled.Note that this field cannot be set when spec.os.name is windows.", + MarkdownDescription: "procMount denotes the type of proc mount to use for the containers.The default value is Default which uses the container runtime defaults forreadonly paths and masked paths.This requires the ProcMountType feature flag to be enabled.Note that this field cannot be set when spec.os.name is windows.", Required: false, Optional: true, Computed: false, @@ -8045,8 +8075,8 @@ func (r *JobsetXK8SIoJobSetV1Alpha2Manifest) Schema(_ context.Context, _ datasou }, "node_name": schema.StringAttribute{ - Description: "NodeName is a request to schedule this pod onto a specific node. If it is non-empty,the scheduler simply schedules this pod onto that node, assuming that it fits resourcerequirements.", - MarkdownDescription: "NodeName is a request to schedule this pod onto a specific node. If it is non-empty,the scheduler simply schedules this pod onto that node, assuming that it fits resourcerequirements.", + Description: "NodeName indicates in which node this pod is scheduled.If empty, this pod is a candidate for scheduling by the scheduler defined in schedulerName.Once this field is set, the kubelet for this node becomes responsible for the lifecycle of this pod.This field should not be used to express a desire for the pod to be scheduled on a specific node.https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#nodename", + MarkdownDescription: "NodeName indicates in which node this pod is scheduled.If empty, this pod is a candidate for scheduling by the scheduler defined in schedulerName.Once this field is set, the kubelet for this node becomes responsible for the lifecycle of this pod.This field should not be used to express a desire for the pod to be scheduled on a specific node.https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#nodename", Required: false, Optional: true, Computed: false, @@ -8062,8 +8092,8 @@ func (r *JobsetXK8SIoJobSetV1Alpha2Manifest) Schema(_ context.Context, _ datasou }, "os": schema.SingleNestedAttribute{ - Description: "Specifies the OS of the containers in the pod.Some pod and container fields are restricted if this is set.If the OS field is set to linux, the following fields must be unset:-securityContext.windowsOptionsIf the OS field is set to windows, following fields must be unset:- spec.hostPID- spec.hostIPC- spec.hostUsers- spec.securityContext.appArmorProfile- spec.securityContext.seLinuxOptions- spec.securityContext.seccompProfile- spec.securityContext.fsGroup- spec.securityContext.fsGroupChangePolicy- spec.securityContext.sysctls- spec.shareProcessNamespace- spec.securityContext.runAsUser- spec.securityContext.runAsGroup- spec.securityContext.supplementalGroups- spec.containers[*].securityContext.appArmorProfile- spec.containers[*].securityContext.seLinuxOptions- spec.containers[*].securityContext.seccompProfile- spec.containers[*].securityContext.capabilities- spec.containers[*].securityContext.readOnlyRootFilesystem- spec.containers[*].securityContext.privileged- spec.containers[*].securityContext.allowPrivilegeEscalation- spec.containers[*].securityContext.procMount- spec.containers[*].securityContext.runAsUser- spec.containers[*].securityContext.runAsGroup", - MarkdownDescription: "Specifies the OS of the containers in the pod.Some pod and container fields are restricted if this is set.If the OS field is set to linux, the following fields must be unset:-securityContext.windowsOptionsIf the OS field is set to windows, following fields must be unset:- spec.hostPID- spec.hostIPC- spec.hostUsers- spec.securityContext.appArmorProfile- spec.securityContext.seLinuxOptions- spec.securityContext.seccompProfile- spec.securityContext.fsGroup- spec.securityContext.fsGroupChangePolicy- spec.securityContext.sysctls- spec.shareProcessNamespace- spec.securityContext.runAsUser- spec.securityContext.runAsGroup- spec.securityContext.supplementalGroups- spec.containers[*].securityContext.appArmorProfile- spec.containers[*].securityContext.seLinuxOptions- spec.containers[*].securityContext.seccompProfile- spec.containers[*].securityContext.capabilities- spec.containers[*].securityContext.readOnlyRootFilesystem- spec.containers[*].securityContext.privileged- spec.containers[*].securityContext.allowPrivilegeEscalation- spec.containers[*].securityContext.procMount- spec.containers[*].securityContext.runAsUser- spec.containers[*].securityContext.runAsGroup", + Description: "Specifies the OS of the containers in the pod.Some pod and container fields are restricted if this is set.If the OS field is set to linux, the following fields must be unset:-securityContext.windowsOptionsIf the OS field is set to windows, following fields must be unset:- spec.hostPID- spec.hostIPC- spec.hostUsers- spec.securityContext.appArmorProfile- spec.securityContext.seLinuxOptions- spec.securityContext.seccompProfile- spec.securityContext.fsGroup- spec.securityContext.fsGroupChangePolicy- spec.securityContext.sysctls- spec.shareProcessNamespace- spec.securityContext.runAsUser- spec.securityContext.runAsGroup- spec.securityContext.supplementalGroups- spec.securityContext.supplementalGroupsPolicy- spec.containers[*].securityContext.appArmorProfile- spec.containers[*].securityContext.seLinuxOptions- spec.containers[*].securityContext.seccompProfile- spec.containers[*].securityContext.capabilities- spec.containers[*].securityContext.readOnlyRootFilesystem- spec.containers[*].securityContext.privileged- spec.containers[*].securityContext.allowPrivilegeEscalation- spec.containers[*].securityContext.procMount- spec.containers[*].securityContext.runAsUser- spec.containers[*].securityContext.runAsGroup", + MarkdownDescription: "Specifies the OS of the containers in the pod.Some pod and container fields are restricted if this is set.If the OS field is set to linux, the following fields must be unset:-securityContext.windowsOptionsIf the OS field is set to windows, following fields must be unset:- spec.hostPID- spec.hostIPC- spec.hostUsers- spec.securityContext.appArmorProfile- spec.securityContext.seLinuxOptions- spec.securityContext.seccompProfile- spec.securityContext.fsGroup- spec.securityContext.fsGroupChangePolicy- spec.securityContext.sysctls- spec.shareProcessNamespace- spec.securityContext.runAsUser- spec.securityContext.runAsGroup- spec.securityContext.supplementalGroups- spec.securityContext.supplementalGroupsPolicy- spec.containers[*].securityContext.appArmorProfile- spec.containers[*].securityContext.seLinuxOptions- spec.containers[*].securityContext.seccompProfile- spec.containers[*].securityContext.capabilities- spec.containers[*].securityContext.readOnlyRootFilesystem- spec.containers[*].securityContext.privileged- spec.containers[*].securityContext.allowPrivilegeEscalation- spec.containers[*].securityContext.procMount- spec.containers[*].securityContext.runAsUser- spec.containers[*].securityContext.runAsGroup", Attributes: map[string]schema.Attribute{ "name": schema.StringAttribute{ Description: "Name is the name of the operating system. The currently supported values are linux and windows.Additional value may be defined in future and can be one of:https://github.com/opencontainers/runtime-spec/blob/master/config.md#platform-specific-configurationClients should expect to handle additional values and treat unrecognized values in this field as os: null", @@ -8143,29 +8173,20 @@ func (r *JobsetXK8SIoJobSetV1Alpha2Manifest) Schema(_ context.Context, _ datasou Computed: false, }, - "source": schema.SingleNestedAttribute{ - Description: "Source describes where to find the ResourceClaim.", - MarkdownDescription: "Source describes where to find the ResourceClaim.", - Attributes: map[string]schema.Attribute{ - "resource_claim_name": schema.StringAttribute{ - Description: "ResourceClaimName is the name of a ResourceClaim object in the samenamespace as this pod.", - MarkdownDescription: "ResourceClaimName is the name of a ResourceClaim object in the samenamespace as this pod.", - Required: false, - Optional: true, - Computed: false, - }, + "resource_claim_name": schema.StringAttribute{ + Description: "ResourceClaimName is the name of a ResourceClaim object in the samenamespace as this pod.Exactly one of ResourceClaimName and ResourceClaimTemplateName mustbe set.", + MarkdownDescription: "ResourceClaimName is the name of a ResourceClaim object in the samenamespace as this pod.Exactly one of ResourceClaimName and ResourceClaimTemplateName mustbe set.", + Required: false, + Optional: true, + Computed: false, + }, - "resource_claim_template_name": schema.StringAttribute{ - Description: "ResourceClaimTemplateName is the name of a ResourceClaimTemplateobject in the same namespace as this pod.The template will be used to create a new ResourceClaim, which willbe bound to this pod. When this pod is deleted, the ResourceClaimwill also be deleted. The pod name and resource name, along with agenerated component, will be used to form a unique name for theResourceClaim, which will be recorded in pod.status.resourceClaimStatuses.This field is immutable and no changes will be made to thecorresponding ResourceClaim by the control plane after creating theResourceClaim.", - MarkdownDescription: "ResourceClaimTemplateName is the name of a ResourceClaimTemplateobject in the same namespace as this pod.The template will be used to create a new ResourceClaim, which willbe bound to this pod. When this pod is deleted, the ResourceClaimwill also be deleted. The pod name and resource name, along with agenerated component, will be used to form a unique name for theResourceClaim, which will be recorded in pod.status.resourceClaimStatuses.This field is immutable and no changes will be made to thecorresponding ResourceClaim by the control plane after creating theResourceClaim.", - Required: false, - Optional: true, - Computed: false, - }, - }, - Required: false, - Optional: true, - Computed: false, + "resource_claim_template_name": schema.StringAttribute{ + Description: "ResourceClaimTemplateName is the name of a ResourceClaimTemplateobject in the same namespace as this pod.The template will be used to create a new ResourceClaim, which willbe bound to this pod. When this pod is deleted, the ResourceClaimwill also be deleted. The pod name and resource name, along with agenerated component, will be used to form a unique name for theResourceClaim, which will be recorded in pod.status.resourceClaimStatuses.This field is immutable and no changes will be made to thecorresponding ResourceClaim by the control plane after creating theResourceClaim.Exactly one of ResourceClaimName and ResourceClaimTemplateName mustbe set.", + MarkdownDescription: "ResourceClaimTemplateName is the name of a ResourceClaimTemplateobject in the same namespace as this pod.The template will be used to create a new ResourceClaim, which willbe bound to this pod. When this pod is deleted, the ResourceClaimwill also be deleted. The pod name and resource name, along with agenerated component, will be used to form a unique name for theResourceClaim, which will be recorded in pod.status.resourceClaimStatuses.This field is immutable and no changes will be made to thecorresponding ResourceClaim by the control plane after creating theResourceClaim.Exactly one of ResourceClaimName and ResourceClaimTemplateName mustbe set.", + Required: false, + Optional: true, + Computed: false, }, }, }, @@ -8353,14 +8374,22 @@ func (r *JobsetXK8SIoJobSetV1Alpha2Manifest) Schema(_ context.Context, _ datasou }, "supplemental_groups": schema.ListAttribute{ - Description: "A list of groups applied to the first process run in each container, in additionto the container's primary GID, the fsGroup (if specified), and group membershipsdefined in the container image for the uid of the container process. If unspecified,no additional groups are added to any container. Note that group membershipsdefined in the container image for the uid of the container process are still effective,even if they are not included in this list.Note that this field cannot be set when spec.os.name is windows.", - MarkdownDescription: "A list of groups applied to the first process run in each container, in additionto the container's primary GID, the fsGroup (if specified), and group membershipsdefined in the container image for the uid of the container process. If unspecified,no additional groups are added to any container. Note that group membershipsdefined in the container image for the uid of the container process are still effective,even if they are not included in this list.Note that this field cannot be set when spec.os.name is windows.", + Description: "A list of groups applied to the first process run in each container, inaddition to the container's primary GID and fsGroup (if specified). Ifthe SupplementalGroupsPolicy feature is enabled, thesupplementalGroupsPolicy field determines whether these are in additionto or instead of any group memberships defined in the container image.If unspecified, no additional groups are added, though group membershipsdefined in the container image may still be used, depending on thesupplementalGroupsPolicy field.Note that this field cannot be set when spec.os.name is windows.", + MarkdownDescription: "A list of groups applied to the first process run in each container, inaddition to the container's primary GID and fsGroup (if specified). Ifthe SupplementalGroupsPolicy feature is enabled, thesupplementalGroupsPolicy field determines whether these are in additionto or instead of any group memberships defined in the container image.If unspecified, no additional groups are added, though group membershipsdefined in the container image may still be used, depending on thesupplementalGroupsPolicy field.Note that this field cannot be set when spec.os.name is windows.", ElementType: types.StringType, Required: false, Optional: true, Computed: false, }, + "supplemental_groups_policy": schema.StringAttribute{ + Description: "Defines how supplemental groups of the first container processes are calculated.Valid values are 'Merge' and 'Strict'. If not specified, 'Merge' is used.(Alpha) Using the field requires the SupplementalGroupsPolicy feature gate to be enabledand the container runtime must implement support for this feature.Note that this field cannot be set when spec.os.name is windows.", + MarkdownDescription: "Defines how supplemental groups of the first container processes are calculated.Valid values are 'Merge' and 'Strict'. If not specified, 'Merge' is used.(Alpha) Using the field requires the SupplementalGroupsPolicy feature gate to be enabledand the container runtime must implement support for this feature.Note that this field cannot be set when spec.os.name is windows.", + Required: false, + Optional: true, + Computed: false, + }, + "sysctls": schema.ListNestedAttribute{ Description: "Sysctls hold a list of namespaced sysctls used for the pod. Pods with unsupportedsysctls (by the container runtime) might fail to launch.Note that this field cannot be set when spec.os.name is windows.", MarkdownDescription: "Sysctls hold a list of namespaced sysctls used for the pod. Pods with unsupportedsysctls (by the container runtime) might fail to launch.Note that this field cannot be set when spec.os.name is windows.", @@ -8665,8 +8694,8 @@ func (r *JobsetXK8SIoJobSetV1Alpha2Manifest) Schema(_ context.Context, _ datasou MarkdownDescription: "awsElasticBlockStore represents an AWS Disk resource that is attached to akubelet's host machine and then exposed to the pod.More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore", Attributes: map[string]schema.Attribute{ "fs_type": schema.StringAttribute{ - Description: "fsType is the filesystem type of the volume that you want to mount.Tip: Ensure that the filesystem type is supported by the host operating system.Examples: 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified.More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstoreTODO: how do we prevent errors in the filesystem from compromising the machine", - MarkdownDescription: "fsType is the filesystem type of the volume that you want to mount.Tip: Ensure that the filesystem type is supported by the host operating system.Examples: 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified.More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstoreTODO: how do we prevent errors in the filesystem from compromising the machine", + Description: "fsType is the filesystem type of the volume that you want to mount.Tip: Ensure that the filesystem type is supported by the host operating system.Examples: 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified.More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore", + MarkdownDescription: "fsType is the filesystem type of the volume that you want to mount.Tip: Ensure that the filesystem type is supported by the host operating system.Examples: 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified.More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore", Required: false, Optional: true, Computed: false, @@ -8833,8 +8862,8 @@ func (r *JobsetXK8SIoJobSetV1Alpha2Manifest) Schema(_ context.Context, _ datasou MarkdownDescription: "secretRef is Optional: SecretRef is reference to the authentication secret for User, default is empty.More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it", Attributes: map[string]schema.Attribute{ "name": schema.StringAttribute{ - Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", - MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", Required: false, Optional: true, Computed: false, @@ -8883,8 +8912,8 @@ func (r *JobsetXK8SIoJobSetV1Alpha2Manifest) Schema(_ context.Context, _ datasou MarkdownDescription: "secretRef is optional: points to a secret object containing parameters used to connectto OpenStack.", Attributes: map[string]schema.Attribute{ "name": schema.StringAttribute{ - Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", - MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", Required: false, Optional: true, Computed: false, @@ -8956,8 +8985,8 @@ func (r *JobsetXK8SIoJobSetV1Alpha2Manifest) Schema(_ context.Context, _ datasou }, "name": schema.StringAttribute{ - Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", - MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", Required: false, Optional: true, Computed: false, @@ -9001,8 +9030,8 @@ func (r *JobsetXK8SIoJobSetV1Alpha2Manifest) Schema(_ context.Context, _ datasou MarkdownDescription: "nodePublishSecretRef is a reference to the secret object containingsensitive information to pass to the CSI driver to complete the CSINodePublishVolume and NodeUnpublishVolume calls.This field is optional, and may be empty if no secret is required. If thesecret object contains more than one secret, all secret references are passed.", Attributes: map[string]schema.Attribute{ "name": schema.StringAttribute{ - Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", - MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", Required: false, Optional: true, Computed: false, @@ -9399,8 +9428,8 @@ func (r *JobsetXK8SIoJobSetV1Alpha2Manifest) Schema(_ context.Context, _ datasou }, "volume_attributes_class_name": schema.StringAttribute{ - Description: "volumeAttributesClassName may be used to set the VolumeAttributesClass used by this claim.If specified, the CSI driver will create or update the volume with the attributes definedin the corresponding VolumeAttributesClass. This has a different purpose than storageClassName,it can be changed after the claim is created. An empty string value means that no VolumeAttributesClasswill be applied to the claim but it's not allowed to reset this field to empty string once it is set.If unspecified and the PersistentVolumeClaim is unbound, the default VolumeAttributesClasswill be set by the persistentvolume controller if it exists.If the resource referred to by volumeAttributesClass does not exist, this PersistentVolumeClaim will beset to a Pending state, as reflected by the modifyVolumeStatus field, until such as a resourceexists.More info: https://kubernetes.io/docs/concepts/storage/volume-attributes-classes/(Alpha) Using this field requires the VolumeAttributesClass feature gate to be enabled.", - MarkdownDescription: "volumeAttributesClassName may be used to set the VolumeAttributesClass used by this claim.If specified, the CSI driver will create or update the volume with the attributes definedin the corresponding VolumeAttributesClass. This has a different purpose than storageClassName,it can be changed after the claim is created. An empty string value means that no VolumeAttributesClasswill be applied to the claim but it's not allowed to reset this field to empty string once it is set.If unspecified and the PersistentVolumeClaim is unbound, the default VolumeAttributesClasswill be set by the persistentvolume controller if it exists.If the resource referred to by volumeAttributesClass does not exist, this PersistentVolumeClaim will beset to a Pending state, as reflected by the modifyVolumeStatus field, until such as a resourceexists.More info: https://kubernetes.io/docs/concepts/storage/volume-attributes-classes/(Alpha) Using this field requires the VolumeAttributesClass feature gate to be enabled.", + Description: "volumeAttributesClassName may be used to set the VolumeAttributesClass used by this claim.If specified, the CSI driver will create or update the volume with the attributes definedin the corresponding VolumeAttributesClass. This has a different purpose than storageClassName,it can be changed after the claim is created. An empty string value means that no VolumeAttributesClasswill be applied to the claim but it's not allowed to reset this field to empty string once it is set.If unspecified and the PersistentVolumeClaim is unbound, the default VolumeAttributesClasswill be set by the persistentvolume controller if it exists.If the resource referred to by volumeAttributesClass does not exist, this PersistentVolumeClaim will beset to a Pending state, as reflected by the modifyVolumeStatus field, until such as a resourceexists.More info: https://kubernetes.io/docs/concepts/storage/volume-attributes-classes/(Beta) Using this field requires the VolumeAttributesClass feature gate to be enabled (off by default).", + MarkdownDescription: "volumeAttributesClassName may be used to set the VolumeAttributesClass used by this claim.If specified, the CSI driver will create or update the volume with the attributes definedin the corresponding VolumeAttributesClass. This has a different purpose than storageClassName,it can be changed after the claim is created. An empty string value means that no VolumeAttributesClasswill be applied to the claim but it's not allowed to reset this field to empty string once it is set.If unspecified and the PersistentVolumeClaim is unbound, the default VolumeAttributesClasswill be set by the persistentvolume controller if it exists.If the resource referred to by volumeAttributesClass does not exist, this PersistentVolumeClaim will beset to a Pending state, as reflected by the modifyVolumeStatus field, until such as a resourceexists.More info: https://kubernetes.io/docs/concepts/storage/volume-attributes-classes/(Beta) Using this field requires the VolumeAttributesClass feature gate to be enabled (off by default).", Required: false, Optional: true, Computed: false, @@ -9442,8 +9471,8 @@ func (r *JobsetXK8SIoJobSetV1Alpha2Manifest) Schema(_ context.Context, _ datasou MarkdownDescription: "fc represents a Fibre Channel resource that is attached to a kubelet's host machine and then exposed to the pod.", Attributes: map[string]schema.Attribute{ "fs_type": schema.StringAttribute{ - Description: "fsType is the filesystem type to mount.Must be a filesystem type supported by the host operating system.Ex. 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified.TODO: how do we prevent errors in the filesystem from compromising the machine", - MarkdownDescription: "fsType is the filesystem type to mount.Must be a filesystem type supported by the host operating system.Ex. 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified.TODO: how do we prevent errors in the filesystem from compromising the machine", + Description: "fsType is the filesystem type to mount.Must be a filesystem type supported by the host operating system.Ex. 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified.", + MarkdownDescription: "fsType is the filesystem type to mount.Must be a filesystem type supported by the host operating system.Ex. 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified.", Required: false, Optional: true, Computed: false, @@ -9530,8 +9559,8 @@ func (r *JobsetXK8SIoJobSetV1Alpha2Manifest) Schema(_ context.Context, _ datasou MarkdownDescription: "secretRef is Optional: secretRef is reference to the secret object containingsensitive information to pass to the plugin scripts. This may beempty if no secret object is specified. If the secret objectcontains more than one secret, all secrets are passed to the pluginscripts.", Attributes: map[string]schema.Attribute{ "name": schema.StringAttribute{ - Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", - MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", Required: false, Optional: true, Computed: false, @@ -9577,8 +9606,8 @@ func (r *JobsetXK8SIoJobSetV1Alpha2Manifest) Schema(_ context.Context, _ datasou MarkdownDescription: "gcePersistentDisk represents a GCE Disk resource that is attached to akubelet's host machine and then exposed to the pod.More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk", Attributes: map[string]schema.Attribute{ "fs_type": schema.StringAttribute{ - Description: "fsType is filesystem type of the volume that you want to mount.Tip: Ensure that the filesystem type is supported by the host operating system.Examples: 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified.More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdiskTODO: how do we prevent errors in the filesystem from compromising the machine", - MarkdownDescription: "fsType is filesystem type of the volume that you want to mount.Tip: Ensure that the filesystem type is supported by the host operating system.Examples: 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified.More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdiskTODO: how do we prevent errors in the filesystem from compromising the machine", + Description: "fsType is filesystem type of the volume that you want to mount.Tip: Ensure that the filesystem type is supported by the host operating system.Examples: 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified.More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk", + MarkdownDescription: "fsType is filesystem type of the volume that you want to mount.Tip: Ensure that the filesystem type is supported by the host operating system.Examples: 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified.More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk", Required: false, Optional: true, Computed: false, @@ -9680,8 +9709,8 @@ func (r *JobsetXK8SIoJobSetV1Alpha2Manifest) Schema(_ context.Context, _ datasou }, "host_path": schema.SingleNestedAttribute{ - Description: "hostPath represents a pre-existing file or directory on the hostmachine that is directly exposed to the container. This is generallyused for system agents or other privileged things that are allowedto see the host machine. Most containers will NOT need this.More info: https://kubernetes.io/docs/concepts/storage/volumes#hostpath---TODO(jonesdl) We need to restrict who can use host directory mounts and who can/can notmount host directories as read/write.", - MarkdownDescription: "hostPath represents a pre-existing file or directory on the hostmachine that is directly exposed to the container. This is generallyused for system agents or other privileged things that are allowedto see the host machine. Most containers will NOT need this.More info: https://kubernetes.io/docs/concepts/storage/volumes#hostpath---TODO(jonesdl) We need to restrict who can use host directory mounts and who can/can notmount host directories as read/write.", + Description: "hostPath represents a pre-existing file or directory on the hostmachine that is directly exposed to the container. This is generallyused for system agents or other privileged things that are allowedto see the host machine. Most containers will NOT need this.More info: https://kubernetes.io/docs/concepts/storage/volumes#hostpath", + MarkdownDescription: "hostPath represents a pre-existing file or directory on the hostmachine that is directly exposed to the container. This is generallyused for system agents or other privileged things that are allowedto see the host machine. Most containers will NOT need this.More info: https://kubernetes.io/docs/concepts/storage/volumes#hostpath", Attributes: map[string]schema.Attribute{ "path": schema.StringAttribute{ Description: "path of the directory on the host.If the path is a symlink, it will follow the link to the real path.More info: https://kubernetes.io/docs/concepts/storage/volumes#hostpath", @@ -9704,6 +9733,31 @@ func (r *JobsetXK8SIoJobSetV1Alpha2Manifest) Schema(_ context.Context, _ datasou Computed: false, }, + "image": schema.SingleNestedAttribute{ + Description: "image represents an OCI object (a container image or artifact) pulled and mounted on the kubelet's host machine.The volume is resolved at pod startup depending on which PullPolicy value is provided:- Always: the kubelet always attempts to pull the reference. Container creation will fail If the pull fails.- Never: the kubelet never pulls the reference and only uses a local image or artifact. Container creation will fail if the reference isn't present.- IfNotPresent: the kubelet pulls if the reference isn't already present on disk. Container creation will fail if the reference isn't present and the pull fails.The volume gets re-resolved if the pod gets deleted and recreated, which means that new remote content will become available on pod recreation.A failure to resolve or pull the image during pod startup will block containers from starting and may add significant latency. Failures will be retried using normal volume backoff and will be reported on the pod reason and message.The types of objects that may be mounted by this volume are defined by the container runtime implementation on a host machine and at minimum must include all valid types supported by the container image field.The OCI object gets mounted in a single directory (spec.containers[*].volumeMounts.mountPath) by merging the manifest layers in the same way as for container images.The volume will be mounted read-only (ro) and non-executable files (noexec).Sub path mounts for containers are not supported (spec.containers[*].volumeMounts.subpath).The field spec.securityContext.fsGroupChangePolicy has no effect on this volume type.", + MarkdownDescription: "image represents an OCI object (a container image or artifact) pulled and mounted on the kubelet's host machine.The volume is resolved at pod startup depending on which PullPolicy value is provided:- Always: the kubelet always attempts to pull the reference. Container creation will fail If the pull fails.- Never: the kubelet never pulls the reference and only uses a local image or artifact. Container creation will fail if the reference isn't present.- IfNotPresent: the kubelet pulls if the reference isn't already present on disk. Container creation will fail if the reference isn't present and the pull fails.The volume gets re-resolved if the pod gets deleted and recreated, which means that new remote content will become available on pod recreation.A failure to resolve or pull the image during pod startup will block containers from starting and may add significant latency. Failures will be retried using normal volume backoff and will be reported on the pod reason and message.The types of objects that may be mounted by this volume are defined by the container runtime implementation on a host machine and at minimum must include all valid types supported by the container image field.The OCI object gets mounted in a single directory (spec.containers[*].volumeMounts.mountPath) by merging the manifest layers in the same way as for container images.The volume will be mounted read-only (ro) and non-executable files (noexec).Sub path mounts for containers are not supported (spec.containers[*].volumeMounts.subpath).The field spec.securityContext.fsGroupChangePolicy has no effect on this volume type.", + Attributes: map[string]schema.Attribute{ + "pull_policy": schema.StringAttribute{ + Description: "Policy for pulling OCI objects. Possible values are:Always: the kubelet always attempts to pull the reference. Container creation will fail If the pull fails.Never: the kubelet never pulls the reference and only uses a local image or artifact. Container creation will fail if the reference isn't present.IfNotPresent: the kubelet pulls if the reference isn't already present on disk. Container creation will fail if the reference isn't present and the pull fails.Defaults to Always if :latest tag is specified, or IfNotPresent otherwise.", + MarkdownDescription: "Policy for pulling OCI objects. Possible values are:Always: the kubelet always attempts to pull the reference. Container creation will fail If the pull fails.Never: the kubelet never pulls the reference and only uses a local image or artifact. Container creation will fail if the reference isn't present.IfNotPresent: the kubelet pulls if the reference isn't already present on disk. Container creation will fail if the reference isn't present and the pull fails.Defaults to Always if :latest tag is specified, or IfNotPresent otherwise.", + Required: false, + Optional: true, + Computed: false, + }, + + "reference": schema.StringAttribute{ + Description: "Required: Image or artifact reference to be used.Behaves in the same way as pod.spec.containers[*].image.Pull secrets will be assembled in the same way as for the container image by looking up node credentials, SA image pull secrets, and pod spec image pull secrets.More info: https://kubernetes.io/docs/concepts/containers/imagesThis field is optional to allow higher level config management to default or overridecontainer images in workload controllers like Deployments and StatefulSets.", + MarkdownDescription: "Required: Image or artifact reference to be used.Behaves in the same way as pod.spec.containers[*].image.Pull secrets will be assembled in the same way as for the container image by looking up node credentials, SA image pull secrets, and pod spec image pull secrets.More info: https://kubernetes.io/docs/concepts/containers/imagesThis field is optional to allow higher level config management to default or overridecontainer images in workload controllers like Deployments and StatefulSets.", + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + "iscsi": schema.SingleNestedAttribute{ Description: "iscsi represents an ISCSI Disk resource that is attached to akubelet's host machine and then exposed to the pod.More info: https://examples.k8s.io/volumes/iscsi/README.md", MarkdownDescription: "iscsi represents an ISCSI Disk resource that is attached to akubelet's host machine and then exposed to the pod.More info: https://examples.k8s.io/volumes/iscsi/README.md", @@ -9725,8 +9779,8 @@ func (r *JobsetXK8SIoJobSetV1Alpha2Manifest) Schema(_ context.Context, _ datasou }, "fs_type": schema.StringAttribute{ - Description: "fsType is the filesystem type of the volume that you want to mount.Tip: Ensure that the filesystem type is supported by the host operating system.Examples: 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified.More info: https://kubernetes.io/docs/concepts/storage/volumes#iscsiTODO: how do we prevent errors in the filesystem from compromising the machine", - MarkdownDescription: "fsType is the filesystem type of the volume that you want to mount.Tip: Ensure that the filesystem type is supported by the host operating system.Examples: 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified.More info: https://kubernetes.io/docs/concepts/storage/volumes#iscsiTODO: how do we prevent errors in the filesystem from compromising the machine", + Description: "fsType is the filesystem type of the volume that you want to mount.Tip: Ensure that the filesystem type is supported by the host operating system.Examples: 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified.More info: https://kubernetes.io/docs/concepts/storage/volumes#iscsi", + MarkdownDescription: "fsType is the filesystem type of the volume that you want to mount.Tip: Ensure that the filesystem type is supported by the host operating system.Examples: 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified.More info: https://kubernetes.io/docs/concepts/storage/volumes#iscsi", Required: false, Optional: true, Computed: false, @@ -9786,8 +9840,8 @@ func (r *JobsetXK8SIoJobSetV1Alpha2Manifest) Schema(_ context.Context, _ datasou MarkdownDescription: "secretRef is the CHAP Secret for iSCSI target and initiator authentication", Attributes: map[string]schema.Attribute{ "name": schema.StringAttribute{ - Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", - MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", Required: false, Optional: true, Computed: false, @@ -9948,8 +10002,8 @@ func (r *JobsetXK8SIoJobSetV1Alpha2Manifest) Schema(_ context.Context, _ datasou }, "sources": schema.ListNestedAttribute{ - Description: "sources is the list of volume projections", - MarkdownDescription: "sources is the list of volume projections", + Description: "sources is the list of volume projections. Each entry in this listhandles one source.", + MarkdownDescription: "sources is the list of volume projections. Each entry in this listhandles one source.", NestedObject: schema.NestedAttributeObject{ Attributes: map[string]schema.Attribute{ "cluster_trust_bundle": schema.SingleNestedAttribute{ @@ -10087,8 +10141,8 @@ func (r *JobsetXK8SIoJobSetV1Alpha2Manifest) Schema(_ context.Context, _ datasou }, "name": schema.StringAttribute{ - Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", - MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", Required: false, Optional: true, Computed: false, @@ -10241,8 +10295,8 @@ func (r *JobsetXK8SIoJobSetV1Alpha2Manifest) Schema(_ context.Context, _ datasou }, "name": schema.StringAttribute{ - Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", - MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", Required: false, Optional: true, Computed: false, @@ -10367,8 +10421,8 @@ func (r *JobsetXK8SIoJobSetV1Alpha2Manifest) Schema(_ context.Context, _ datasou MarkdownDescription: "rbd represents a Rados Block Device mount on the host that shares a pod's lifetime.More info: https://examples.k8s.io/volumes/rbd/README.md", Attributes: map[string]schema.Attribute{ "fs_type": schema.StringAttribute{ - Description: "fsType is the filesystem type of the volume that you want to mount.Tip: Ensure that the filesystem type is supported by the host operating system.Examples: 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified.More info: https://kubernetes.io/docs/concepts/storage/volumes#rbdTODO: how do we prevent errors in the filesystem from compromising the machine", - MarkdownDescription: "fsType is the filesystem type of the volume that you want to mount.Tip: Ensure that the filesystem type is supported by the host operating system.Examples: 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified.More info: https://kubernetes.io/docs/concepts/storage/volumes#rbdTODO: how do we prevent errors in the filesystem from compromising the machine", + Description: "fsType is the filesystem type of the volume that you want to mount.Tip: Ensure that the filesystem type is supported by the host operating system.Examples: 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified.More info: https://kubernetes.io/docs/concepts/storage/volumes#rbd", + MarkdownDescription: "fsType is the filesystem type of the volume that you want to mount.Tip: Ensure that the filesystem type is supported by the host operating system.Examples: 'ext4', 'xfs', 'ntfs'. Implicitly inferred to be 'ext4' if unspecified.More info: https://kubernetes.io/docs/concepts/storage/volumes#rbd", Required: false, Optional: true, Computed: false, @@ -10420,8 +10474,8 @@ func (r *JobsetXK8SIoJobSetV1Alpha2Manifest) Schema(_ context.Context, _ datasou MarkdownDescription: "secretRef is name of the authentication secret for RBDUser. If providedoverrides keyring.Default is nil.More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it", Attributes: map[string]schema.Attribute{ "name": schema.StringAttribute{ - Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", - MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", Required: false, Optional: true, Computed: false, @@ -10486,8 +10540,8 @@ func (r *JobsetXK8SIoJobSetV1Alpha2Manifest) Schema(_ context.Context, _ datasou MarkdownDescription: "secretRef references to the secret for ScaleIO user and othersensitive information. If this is not provided, Login operation will fail.", Attributes: map[string]schema.Attribute{ "name": schema.StringAttribute{ - Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", - MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", Required: false, Optional: true, Computed: false, @@ -10636,8 +10690,8 @@ func (r *JobsetXK8SIoJobSetV1Alpha2Manifest) Schema(_ context.Context, _ datasou MarkdownDescription: "secretRef specifies the secret to use for obtaining the StorageOS APIcredentials. If not specified, default values will be attempted.", Attributes: map[string]schema.Attribute{ "name": schema.StringAttribute{ - Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", - MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", Required: false, Optional: true, Computed: false, diff --git a/internal/provider/k8s_nginx_org_v1/k8s_nginx_org_global_configuration_v1_manifest.go b/internal/provider/k8s_nginx_org_v1/k8s_nginx_org_global_configuration_v1_manifest.go index 3a958e1d3..89791e59c 100644 --- a/internal/provider/k8s_nginx_org_v1/k8s_nginx_org_global_configuration_v1_manifest.go +++ b/internal/provider/k8s_nginx_org_v1/k8s_nginx_org_global_configuration_v1_manifest.go @@ -44,6 +44,8 @@ type K8SNginxOrgGlobalConfigurationV1ManifestData struct { Spec *struct { Listeners *[]struct { + Ipv4 *string `tfsdk:"ipv4" json:"ipv4,omitempty"` + Ipv6 *string `tfsdk:"ipv6" json:"ipv6,omitempty"` Name *string `tfsdk:"name" json:"name,omitempty"` Port *int64 `tfsdk:"port" json:"port,omitempty"` Protocol *string `tfsdk:"protocol" json:"protocol,omitempty"` @@ -134,6 +136,22 @@ func (r *K8SNginxOrgGlobalConfigurationV1Manifest) Schema(_ context.Context, _ d MarkdownDescription: "", NestedObject: schema.NestedAttributeObject{ Attributes: map[string]schema.Attribute{ + "ipv4": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + + "ipv6": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + "name": schema.StringAttribute{ Description: "", MarkdownDescription: "", diff --git a/internal/provider/kiali_io_v1alpha1/kiali_io_kiali_v1alpha1_manifest.go b/internal/provider/kiali_io_v1alpha1/kiali_io_kiali_v1alpha1_manifest.go index 6d2f9d47c..4cda107d4 100644 --- a/internal/provider/kiali_io_v1alpha1/kiali_io_kiali_v1alpha1_manifest.go +++ b/internal/provider/kiali_io_v1alpha1/kiali_io_kiali_v1alpha1_manifest.go @@ -49,14 +49,6 @@ type KialiIoKialiV1Alpha1ManifestData struct { Icon_annotation *string `tfsdk:"icon_annotation" json:"icon_annotation,omitempty"` Title *string `tfsdk:"title" json:"title,omitempty"` } `tfsdk:"additional_display_details" json:"additional_display_details,omitempty"` - Api *struct { - Namespaces *struct { - Exclude *[]string `tfsdk:"exclude" json:"exclude,omitempty"` - Include *[]string `tfsdk:"include" json:"include,omitempty"` - Label_selector_exclude *string `tfsdk:"label_selector_exclude" json:"label_selector_exclude,omitempty"` - Label_selector_include *string `tfsdk:"label_selector_include" json:"label_selector_include,omitempty"` - } `tfsdk:"namespaces" json:"namespaces,omitempty"` - } `tfsdk:"api" json:"api,omitempty"` Auth *struct { Openid *struct { Additional_request_params *map[string]string `tfsdk:"additional_request_params" json:"additional_request_params,omitempty"` @@ -99,7 +91,6 @@ type KialiIoKialiV1Alpha1ManifestData struct { } `tfsdk:"clustering" json:"clustering,omitempty"` Custom_dashboards *[]map[string]string `tfsdk:"custom_dashboards" json:"custom_dashboards,omitempty"` Deployment *struct { - Accessible_namespaces *[]string `tfsdk:"accessible_namespaces" json:"accessible_namespaces,omitempty"` Additional_service_yaml *map[string]string `tfsdk:"additional_service_yaml" json:"additional_service_yaml,omitempty"` Affinity *struct { Node *map[string]string `tfsdk:"node" json:"node,omitempty"` @@ -114,6 +105,17 @@ type KialiIoKialiV1Alpha1ManifestData struct { Name *string `tfsdk:"name" json:"name,omitempty"` Optional *bool `tfsdk:"optional" json:"optional,omitempty"` } `tfsdk:"custom_secrets" json:"custom_secrets,omitempty"` + Discovery_selectors *struct { + Default *[]struct { + MatchExpressions *[]struct { + Key *string `tfsdk:"key" json:"key,omitempty"` + Operator *string `tfsdk:"operator" json:"operator,omitempty"` + Values *[]string `tfsdk:"values" json:"values,omitempty"` + } `tfsdk:"match_expressions" json:"matchExpressions,omitempty"` + MatchLabels *map[string]string `tfsdk:"match_labels" json:"matchLabels,omitempty"` + } `tfsdk:"default" json:"default,omitempty"` + Overrides *map[string]string `tfsdk:"overrides" json:"overrides,omitempty"` + } `tfsdk:"discovery_selectors" json:"discovery_selectors,omitempty"` Dns *struct { Config *map[string]string `tfsdk:"config" json:"config,omitempty"` Policy *string `tfsdk:"policy" json:"policy,omitempty"` @@ -554,58 +556,6 @@ func (r *KialiIoKialiV1Alpha1Manifest) Schema(_ context.Context, _ datasource.Sc Computed: false, }, - "api": schema.SingleNestedAttribute{ - Description: "", - MarkdownDescription: "", - Attributes: map[string]schema.Attribute{ - "namespaces": schema.SingleNestedAttribute{ - Description: "Settings that control what namespaces are returned by Kiali.", - MarkdownDescription: "Settings that control what namespaces are returned by Kiali.", - Attributes: map[string]schema.Attribute{ - "exclude": schema.ListAttribute{ - Description: "A list of namespaces to be excluded from the list of namespaces provided by the Kiali API and Kiali UI. Regex is supported. This does not affect explicit namespace access.", - MarkdownDescription: "A list of namespaces to be excluded from the list of namespaces provided by the Kiali API and Kiali UI. Regex is supported. This does not affect explicit namespace access.", - ElementType: types.StringType, - Required: false, - Optional: true, - Computed: false, - }, - - "include": schema.ListAttribute{ - Description: "A list of namespaces to be included in the list of namespaces provided by the Kiali API and Kiali UI (if those namespaces exist). Regex is supported. An undefined or empty list is ignored. This does not affect explicit namespace access.", - MarkdownDescription: "A list of namespaces to be included in the list of namespaces provided by the Kiali API and Kiali UI (if those namespaces exist). Regex is supported. An undefined or empty list is ignored. This does not affect explicit namespace access.", - ElementType: types.StringType, - Required: false, - Optional: true, - Computed: false, - }, - - "label_selector_exclude": schema.StringAttribute{ - Description: "A Kubernetes label selector (e.g. 'myLabel=myValue') which is used for filtering out namespaceswhen fetching the list of available namespaces. This does not affect explicit namespace access.", - MarkdownDescription: "A Kubernetes label selector (e.g. 'myLabel=myValue') which is used for filtering out namespaceswhen fetching the list of available namespaces. This does not affect explicit namespace access.", - Required: false, - Optional: true, - Computed: false, - }, - - "label_selector_include": schema.StringAttribute{ - Description: "A Kubernetes label selector (e.g. 'myLabel=myValue') which is used when fetching the list ofavailable namespaces. This does not affect explicit namespace access.If 'deployment.accessible_namespaces' does not have the special value of ''**''then the Kiali operator will add a new label to all accessible namespaces - that newlabel will be this 'label_selector_include' (this label is added regardless if the namespace matches the label_selector_exclude also).Note that if you do not set this 'label_selector_include' setting but 'deployment.accessible_namespaces'does not have the special 'all namespaces' entry of ''**'' then this 'label_selector_include' will be setto a default value of 'kiali.io/[.]member-of='where '[.]' is the instance name assigned to the Kiali installationif it is not the default 'kiali' (otherwise, this is omitted) and ''is the namespace where Kiali is to be installed.", - MarkdownDescription: "A Kubernetes label selector (e.g. 'myLabel=myValue') which is used when fetching the list ofavailable namespaces. This does not affect explicit namespace access.If 'deployment.accessible_namespaces' does not have the special value of ''**''then the Kiali operator will add a new label to all accessible namespaces - that newlabel will be this 'label_selector_include' (this label is added regardless if the namespace matches the label_selector_exclude also).Note that if you do not set this 'label_selector_include' setting but 'deployment.accessible_namespaces'does not have the special 'all namespaces' entry of ''**'' then this 'label_selector_include' will be setto a default value of 'kiali.io/[.]member-of='where '[.]' is the instance name assigned to the Kiali installationif it is not the default 'kiali' (otherwise, this is omitted) and ''is the namespace where Kiali is to be installed.", - Required: false, - Optional: true, - Computed: false, - }, - }, - Required: false, - Optional: true, - Computed: false, - }, - }, - Required: false, - Optional: true, - Computed: false, - }, - "auth": schema.SingleNestedAttribute{ Description: "", MarkdownDescription: "", @@ -900,15 +850,6 @@ func (r *KialiIoKialiV1Alpha1Manifest) Schema(_ context.Context, _ datasource.Sc Description: "", MarkdownDescription: "", Attributes: map[string]schema.Attribute{ - "accessible_namespaces": schema.ListAttribute{ - Description: "When 'cluster_wide_access=false' this must be set to the list of namespaces to which Kiali is to be given permissions. You can provide names using regex expressions matched against all namespaces the operator can see. If left unset it is required that 'cluster_wide_access' be 'true', and Kiali will have permissions to all namespaces. The list of namespaces that a user can access is a subset of these namespaces, given that user's RBAC settings.", - MarkdownDescription: "When 'cluster_wide_access=false' this must be set to the list of namespaces to which Kiali is to be given permissions. You can provide names using regex expressions matched against all namespaces the operator can see. If left unset it is required that 'cluster_wide_access' be 'true', and Kiali will have permissions to all namespaces. The list of namespaces that a user can access is a subset of these namespaces, given that user's RBAC settings.", - ElementType: types.StringType, - Required: false, - Optional: true, - Computed: false, - }, - "additional_service_yaml": schema.MapAttribute{ Description: "Additional custom yaml to add to the service definition. This is used mainly to customize the service type. For example, if the 'deployment.service_type' is set to 'LoadBalancer' and you want to set the loadBalancerIP, you can do so here with: 'additional_service_yaml: { 'loadBalancerIP': '78.11.24.19' }'. Another example would be if the 'deployment.service_type' is set to 'ExternalName' you will need to configure the name via: 'additional_service_yaml: { 'externalName': 'my.kiali.example.com' }'. A final example would be if external IPs need to be set: 'additional_service_yaml: { 'externalIPs': ['80.11.12.10'] }'", MarkdownDescription: "Additional custom yaml to add to the service definition. This is used mainly to customize the service type. For example, if the 'deployment.service_type' is set to 'LoadBalancer' and you want to set the loadBalancerIP, you can do so here with: 'additional_service_yaml: { 'loadBalancerIP': '78.11.24.19' }'. Another example would be if the 'deployment.service_type' is set to 'ExternalName' you will need to configure the name via: 'additional_service_yaml: { 'externalName': 'my.kiali.example.com' }'. A final example would be if external IPs need to be set: 'additional_service_yaml: { 'externalIPs': ['80.11.12.10'] }'", @@ -955,8 +896,8 @@ func (r *KialiIoKialiV1Alpha1Manifest) Schema(_ context.Context, _ datasource.Sc }, "cluster_wide_access": schema.BoolAttribute{ - Description: "Determines if the Kiali server will be granted cluster-wide permissions to see all namespaces. When true, this provides more efficient caching within the Kiali server. It must be 'true' if 'deployment.accessible_namespaces' is left unset. To limit the namespaces for which Kiali has permissions, set to 'false' and list the desired namespaces in 'deployment.accessible_namespaces'. When not set, this value will default to 'false' if 'deployment.accessible_namespaces' is set to a list of namespaces; otherwise this will be 'true'.", - MarkdownDescription: "Determines if the Kiali server will be granted cluster-wide permissions to see all namespaces. When true, this provides more efficient caching within the Kiali server. It must be 'true' if 'deployment.accessible_namespaces' is left unset. To limit the namespaces for which Kiali has permissions, set to 'false' and list the desired namespaces in 'deployment.accessible_namespaces'. When not set, this value will default to 'false' if 'deployment.accessible_namespaces' is set to a list of namespaces; otherwise this will be 'true'.", + Description: "Determines if the Kiali server will be granted cluster-wide permissions to see all namespaces. When true, this provides more efficient caching within the Kiali server. It must be 'true' if 'deployment.discovery_selectors.default' is left unset. To limit the namespaces for which Kiali has permissions, set to 'false' and define the desired selectors in 'deployment.discovery_selectors.default'. When not set, this value will default to 'true'.", + MarkdownDescription: "Determines if the Kiali server will be granted cluster-wide permissions to see all namespaces. When true, this provides more efficient caching within the Kiali server. It must be 'true' if 'deployment.discovery_selectors.default' is left unset. To limit the namespaces for which Kiali has permissions, set to 'false' and define the desired selectors in 'deployment.discovery_selectors.default'. When not set, this value will default to 'true'.", Required: false, Optional: true, Computed: false, @@ -1015,6 +956,83 @@ func (r *KialiIoKialiV1Alpha1Manifest) Schema(_ context.Context, _ datasource.Sc Computed: false, }, + "discovery_selectors": schema.SingleNestedAttribute{ + Description: "Discovery selectors used to determine which namespaces are accessible to Kiali and which namespaces are visible to Kiali users.You can define discovery selectors to match namespaces on the local cluster as well as remote clusters.The list of namespaces that a user can access is a subset of these namespaces, given that user's RBAC permissions.These selectors will have similar semantics as defined by Istio ( https://istio.io/latest/docs/reference/config/istio.mesh.v1alpha1/#MeshConfig )and the syntax of the equality-based and set-based label selectors are documented by Kubernetes here( https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#resources-that-support-set-based-requirements )", + MarkdownDescription: "Discovery selectors used to determine which namespaces are accessible to Kiali and which namespaces are visible to Kiali users.You can define discovery selectors to match namespaces on the local cluster as well as remote clusters.The list of namespaces that a user can access is a subset of these namespaces, given that user's RBAC permissions.These selectors will have similar semantics as defined by Istio ( https://istio.io/latest/docs/reference/config/istio.mesh.v1alpha1/#MeshConfig )and the syntax of the equality-based and set-based label selectors are documented by Kubernetes here( https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#resources-that-support-set-based-requirements )", + Attributes: map[string]schema.Attribute{ + "default": schema.ListNestedAttribute{ + Description: "These are label selectors for the Kiali local cluster and for all remote clusters that do not have overrides.Namespaces that match these selectors are visible to Kiali users.When 'cluster_wide_access=false' these 'default' selectors are used to restrict which namespaces Kiali will have access to.If there are no default discovery selectors, then 'cluster_wide_access' should be 'true' in which case Kiali will havepermissions to access all namespaces.", + MarkdownDescription: "These are label selectors for the Kiali local cluster and for all remote clusters that do not have overrides.Namespaces that match these selectors are visible to Kiali users.When 'cluster_wide_access=false' these 'default' selectors are used to restrict which namespaces Kiali will have access to.If there are no default discovery selectors, then 'cluster_wide_access' should be 'true' in which case Kiali will havepermissions to access all namespaces.", + NestedObject: schema.NestedAttributeObject{ + Attributes: map[string]schema.Attribute{ + "match_expressions": schema.ListNestedAttribute{ + Description: "", + MarkdownDescription: "", + NestedObject: schema.NestedAttributeObject{ + Attributes: map[string]schema.Attribute{ + "key": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: true, + Optional: false, + Computed: false, + }, + + "operator": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: true, + Optional: false, + Computed: false, + Validators: []validator.String{ + stringvalidator.OneOf("In", "NotIn", "Exists", "DoesNotExist"), + }, + }, + + "values": schema.ListAttribute{ + Description: "", + MarkdownDescription: "", + ElementType: types.StringType, + Required: false, + Optional: true, + Computed: false, + }, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + + "match_labels": schema.MapAttribute{ + Description: "", + MarkdownDescription: "", + ElementType: types.StringType, + Required: false, + Optional: true, + Computed: false, + }, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + + "overrides": schema.MapAttribute{ + Description: "If a remote cluster has different namespaces than the local cluster, these overrides provide a way for you to match those remote namespaces. Kiali will make these remote namespaces visible to users. The name of the overrides section is the name of the remote cluster. Note that the 'default' selectors are ignored when matching namespaces on a remote cluster if that remote cluster has overrides defined.", + MarkdownDescription: "If a remote cluster has different namespaces than the local cluster, these overrides provide a way for you to match those remote namespaces. Kiali will make these remote namespaces visible to users. The name of the overrides section is the name of the remote cluster. Note that the 'default' selectors are ignored when matching namespaces on a remote cluster if that remote cluster has overrides defined.", + ElementType: types.StringType, + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + "dns": schema.SingleNestedAttribute{ Description: "The Kiali server pod's DNS configuration. Kubernetes supports different DNS policies and configurations.For further details, consult the Kubernetes documentation - https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/", MarkdownDescription: "The Kiali server pod's DNS configuration. Kubernetes supports different DNS policies and configurations.For further details, consult the Kubernetes documentation - https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/", diff --git a/internal/provider/kmm_sigs_x_k8s_io_v1beta1/kmm_sigs_x_k8s_io_node_modules_config_v1beta1_manifest.go b/internal/provider/kmm_sigs_x_k8s_io_v1beta1/kmm_sigs_x_k8s_io_node_modules_config_v1beta1_manifest.go index ee6762ff4..908015733 100644 --- a/internal/provider/kmm_sigs_x_k8s_io_v1beta1/kmm_sigs_x_k8s_io_node_modules_config_v1beta1_manifest.go +++ b/internal/provider/kmm_sigs_x_k8s_io_v1beta1/kmm_sigs_x_k8s_io_node_modules_config_v1beta1_manifest.go @@ -45,6 +45,7 @@ type KmmSigsXK8SIoNodeModulesConfigV1Beta1ManifestData struct { Modules *[]struct { Config *struct { ContainerImage *string `tfsdk:"container_image" json:"containerImage,omitempty"` + ImagePullPolicy *string `tfsdk:"image_pull_policy" json:"imagePullPolicy,omitempty"` InTreeModuleToRemove *string `tfsdk:"in_tree_module_to_remove" json:"inTreeModuleToRemove,omitempty"` InTreeModulesToRemove *[]string `tfsdk:"in_tree_modules_to_remove" json:"inTreeModulesToRemove,omitempty"` InsecurePull *bool `tfsdk:"insecure_pull" json:"insecurePull,omitempty"` @@ -157,6 +158,14 @@ func (r *KmmSigsXK8SIoNodeModulesConfigV1Beta1Manifest) Schema(_ context.Context Computed: false, }, + "image_pull_policy": schema.StringAttribute{ + Description: "PullPolicy describes a policy for if/when to pull a container image", + MarkdownDescription: "PullPolicy describes a policy for if/when to pull a container image", + Required: true, + Optional: false, + Computed: false, + }, + "in_tree_module_to_remove": schema.StringAttribute{ Description: "", MarkdownDescription: "", diff --git a/internal/provider/kuma_io_v1alpha1/kuma_io_mesh_access_log_v1alpha1_manifest.go b/internal/provider/kuma_io_v1alpha1/kuma_io_mesh_access_log_v1alpha1_manifest.go index d03150833..aea9f758c 100644 --- a/internal/provider/kuma_io_v1alpha1/kuma_io_mesh_access_log_v1alpha1_manifest.go +++ b/internal/provider/kuma_io_v1alpha1/kuma_io_mesh_access_log_v1alpha1_manifest.go @@ -648,8 +648,8 @@ func (r *KumaIoMeshAccessLogV1Alpha1Manifest) Schema(_ context.Context, _ dataso Computed: false, }, }, - Required: true, - Optional: false, + Required: false, + Optional: true, Computed: false, }, diff --git a/internal/provider/kuma_io_v1alpha1/kuma_io_mesh_circuit_breaker_v1alpha1_manifest.go b/internal/provider/kuma_io_v1alpha1/kuma_io_mesh_circuit_breaker_v1alpha1_manifest.go index 1e72033a0..b81ee75ad 100644 --- a/internal/provider/kuma_io_v1alpha1/kuma_io_mesh_circuit_breaker_v1alpha1_manifest.go +++ b/internal/provider/kuma_io_v1alpha1/kuma_io_mesh_circuit_breaker_v1alpha1_manifest.go @@ -628,8 +628,8 @@ func (r *KumaIoMeshCircuitBreakerV1Alpha1Manifest) Schema(_ context.Context, _ d Computed: false, }, }, - Required: true, - Optional: false, + Required: false, + Optional: true, Computed: false, }, diff --git a/internal/provider/kuma_io_v1alpha1/kuma_io_mesh_fault_injection_v1alpha1_manifest.go b/internal/provider/kuma_io_v1alpha1/kuma_io_mesh_fault_injection_v1alpha1_manifest.go index 31716905e..02aebac0b 100644 --- a/internal/provider/kuma_io_v1alpha1/kuma_io_mesh_fault_injection_v1alpha1_manifest.go +++ b/internal/provider/kuma_io_v1alpha1/kuma_io_mesh_fault_injection_v1alpha1_manifest.go @@ -448,8 +448,8 @@ func (r *KumaIoMeshFaultInjectionV1Alpha1Manifest) Schema(_ context.Context, _ d Computed: false, }, }, - Required: true, - Optional: false, + Required: false, + Optional: true, Computed: false, }, diff --git a/internal/provider/kuma_io_v1alpha1/kuma_io_mesh_health_check_v1alpha1_manifest.go b/internal/provider/kuma_io_v1alpha1/kuma_io_mesh_health_check_v1alpha1_manifest.go index 6abae7219..51129103d 100644 --- a/internal/provider/kuma_io_v1alpha1/kuma_io_mesh_health_check_v1alpha1_manifest.go +++ b/internal/provider/kuma_io_v1alpha1/kuma_io_mesh_health_check_v1alpha1_manifest.go @@ -260,8 +260,8 @@ func (r *KumaIoMeshHealthCheckV1Alpha1Manifest) Schema(_ context.Context, _ data Computed: false, }, }, - Required: true, - Optional: false, + Required: false, + Optional: true, Computed: false, }, diff --git a/internal/provider/kuma_io_v1alpha1/kuma_io_mesh_load_balancing_strategy_v1alpha1_manifest.go b/internal/provider/kuma_io_v1alpha1/kuma_io_mesh_load_balancing_strategy_v1alpha1_manifest.go index bcfc57abd..d79e260fc 100644 --- a/internal/provider/kuma_io_v1alpha1/kuma_io_mesh_load_balancing_strategy_v1alpha1_manifest.go +++ b/internal/provider/kuma_io_v1alpha1/kuma_io_mesh_load_balancing_strategy_v1alpha1_manifest.go @@ -304,8 +304,8 @@ func (r *KumaIoMeshLoadBalancingStrategyV1Alpha1Manifest) Schema(_ context.Conte Computed: false, }, }, - Required: true, - Optional: false, + Required: false, + Optional: true, Computed: false, }, diff --git a/internal/provider/kuma_io_v1alpha1/kuma_io_mesh_proxy_patch_v1alpha1_manifest.go b/internal/provider/kuma_io_v1alpha1/kuma_io_mesh_proxy_patch_v1alpha1_manifest.go index 2ddfca588..b41057a57 100644 --- a/internal/provider/kuma_io_v1alpha1/kuma_io_mesh_proxy_patch_v1alpha1_manifest.go +++ b/internal/provider/kuma_io_v1alpha1/kuma_io_mesh_proxy_patch_v1alpha1_manifest.go @@ -858,8 +858,8 @@ func (r *KumaIoMeshProxyPatchV1Alpha1Manifest) Schema(_ context.Context, _ datas Computed: false, }, }, - Required: true, - Optional: false, + Required: false, + Optional: true, Computed: false, }, }, diff --git a/internal/provider/kuma_io_v1alpha1/kuma_io_mesh_rate_limit_v1alpha1_manifest.go b/internal/provider/kuma_io_v1alpha1/kuma_io_mesh_rate_limit_v1alpha1_manifest.go index 9b4d3e660..a62b4a3f9 100644 --- a/internal/provider/kuma_io_v1alpha1/kuma_io_mesh_rate_limit_v1alpha1_manifest.go +++ b/internal/provider/kuma_io_v1alpha1/kuma_io_mesh_rate_limit_v1alpha1_manifest.go @@ -576,8 +576,8 @@ func (r *KumaIoMeshRateLimitV1Alpha1Manifest) Schema(_ context.Context, _ dataso Computed: false, }, }, - Required: true, - Optional: false, + Required: false, + Optional: true, Computed: false, }, diff --git a/internal/provider/kuma_io_v1alpha1/kuma_io_mesh_retry_v1alpha1_manifest.go b/internal/provider/kuma_io_v1alpha1/kuma_io_mesh_retry_v1alpha1_manifest.go index 0d2bb991f..15a2aeb59 100644 --- a/internal/provider/kuma_io_v1alpha1/kuma_io_mesh_retry_v1alpha1_manifest.go +++ b/internal/provider/kuma_io_v1alpha1/kuma_io_mesh_retry_v1alpha1_manifest.go @@ -273,8 +273,8 @@ func (r *KumaIoMeshRetryV1Alpha1Manifest) Schema(_ context.Context, _ datasource Computed: false, }, }, - Required: true, - Optional: false, + Required: false, + Optional: true, Computed: false, }, diff --git a/internal/provider/kuma_io_v1alpha1/kuma_io_mesh_tcp_route_v1alpha1_manifest.go b/internal/provider/kuma_io_v1alpha1/kuma_io_mesh_tcp_route_v1alpha1_manifest.go index 35a8c24b2..6ef3ba94b 100644 --- a/internal/provider/kuma_io_v1alpha1/kuma_io_mesh_tcp_route_v1alpha1_manifest.go +++ b/internal/provider/kuma_io_v1alpha1/kuma_io_mesh_tcp_route_v1alpha1_manifest.go @@ -236,8 +236,8 @@ func (r *KumaIoMeshTcprouteV1Alpha1Manifest) Schema(_ context.Context, _ datasou Computed: false, }, }, - Required: true, - Optional: false, + Required: false, + Optional: true, Computed: false, }, diff --git a/internal/provider/kuma_io_v1alpha1/kuma_io_mesh_timeout_v1alpha1_manifest.go b/internal/provider/kuma_io_v1alpha1/kuma_io_mesh_timeout_v1alpha1_manifest.go index 9b05e7e59..4a6ba2551 100644 --- a/internal/provider/kuma_io_v1alpha1/kuma_io_mesh_timeout_v1alpha1_manifest.go +++ b/internal/provider/kuma_io_v1alpha1/kuma_io_mesh_timeout_v1alpha1_manifest.go @@ -417,8 +417,8 @@ func (r *KumaIoMeshTimeoutV1Alpha1Manifest) Schema(_ context.Context, _ datasour Computed: false, }, }, - Required: true, - Optional: false, + Required: false, + Optional: true, Computed: false, }, diff --git a/internal/provider/kuma_io_v1alpha1/kuma_io_mesh_trace_v1alpha1_manifest.go b/internal/provider/kuma_io_v1alpha1/kuma_io_mesh_trace_v1alpha1_manifest.go index 11d35023d..e4e804fd7 100644 --- a/internal/provider/kuma_io_v1alpha1/kuma_io_mesh_trace_v1alpha1_manifest.go +++ b/internal/provider/kuma_io_v1alpha1/kuma_io_mesh_trace_v1alpha1_manifest.go @@ -443,8 +443,8 @@ func (r *KumaIoMeshTraceV1Alpha1Manifest) Schema(_ context.Context, _ datasource Computed: false, }, }, - Required: true, - Optional: false, + Required: false, + Optional: true, Computed: false, }, }, diff --git a/internal/provider/kuma_io_v1alpha1/kuma_io_mesh_traffic_permission_v1alpha1_manifest.go b/internal/provider/kuma_io_v1alpha1/kuma_io_mesh_traffic_permission_v1alpha1_manifest.go index 1b59dfd6c..7bbc9788d 100644 --- a/internal/provider/kuma_io_v1alpha1/kuma_io_mesh_traffic_permission_v1alpha1_manifest.go +++ b/internal/provider/kuma_io_v1alpha1/kuma_io_mesh_traffic_permission_v1alpha1_manifest.go @@ -332,8 +332,8 @@ func (r *KumaIoMeshTrafficPermissionV1Alpha1Manifest) Schema(_ context.Context, Computed: false, }, }, - Required: true, - Optional: false, + Required: false, + Optional: true, Computed: false, }, }, diff --git a/internal/provider/kyverno_io_v1/kyverno_io_cluster_policy_v1_manifest.go b/internal/provider/kyverno_io_v1/kyverno_io_cluster_policy_v1_manifest.go index 62809ab02..d464fa306 100644 --- a/internal/provider/kyverno_io_v1/kyverno_io_cluster_policy_v1_manifest.go +++ b/internal/provider/kyverno_io_v1/kyverno_io_cluster_policy_v1_manifest.go @@ -46,6 +46,7 @@ type KyvernoIoClusterPolicyV1ManifestData struct { Admission *bool `tfsdk:"admission" json:"admission,omitempty"` ApplyRules *string `tfsdk:"apply_rules" json:"applyRules,omitempty"` Background *bool `tfsdk:"background" json:"background,omitempty"` + EmitWarning *bool `tfsdk:"emit_warning" json:"emitWarning,omitempty"` FailurePolicy *string `tfsdk:"failure_policy" json:"failurePolicy,omitempty"` GenerateExisting *bool `tfsdk:"generate_existing" json:"generateExisting,omitempty"` GenerateExistingOnPolicyUpdate *bool `tfsdk:"generate_existing_on_policy_update" json:"generateExistingOnPolicyUpdate,omitempty"` @@ -61,8 +62,9 @@ type KyvernoIoClusterPolicyV1ManifestData struct { Key *string `tfsdk:"key" json:"key,omitempty"` Value *map[string]string `tfsdk:"value" json:"value,omitempty"` } `tfsdk:"data" json:"data,omitempty"` - JmesPath *string `tfsdk:"jmes_path" json:"jmesPath,omitempty"` - Method *string `tfsdk:"method" json:"method,omitempty"` + Default *map[string]string `tfsdk:"default" json:"default,omitempty"` + JmesPath *string `tfsdk:"jmes_path" json:"jmesPath,omitempty"` + Method *string `tfsdk:"method" json:"method,omitempty"` Service *struct { CaBundle *string `tfsdk:"ca_bundle" json:"caBundle,omitempty"` Url *string `tfsdk:"url" json:"url,omitempty"` @@ -238,8 +240,9 @@ type KyvernoIoClusterPolicyV1ManifestData struct { Key *string `tfsdk:"key" json:"key,omitempty"` Value *map[string]string `tfsdk:"value" json:"value,omitempty"` } `tfsdk:"data" json:"data,omitempty"` - JmesPath *string `tfsdk:"jmes_path" json:"jmesPath,omitempty"` - Method *string `tfsdk:"method" json:"method,omitempty"` + Default *map[string]string `tfsdk:"default" json:"default,omitempty"` + JmesPath *string `tfsdk:"jmes_path" json:"jmesPath,omitempty"` + Method *string `tfsdk:"method" json:"method,omitempty"` Service *struct { CaBundle *string `tfsdk:"ca_bundle" json:"caBundle,omitempty"` Url *string `tfsdk:"url" json:"url,omitempty"` @@ -410,8 +413,9 @@ type KyvernoIoClusterPolicyV1ManifestData struct { Key *string `tfsdk:"key" json:"key,omitempty"` Value *map[string]string `tfsdk:"value" json:"value,omitempty"` } `tfsdk:"data" json:"data,omitempty"` - JmesPath *string `tfsdk:"jmes_path" json:"jmesPath,omitempty"` - Method *string `tfsdk:"method" json:"method,omitempty"` + Default *map[string]string `tfsdk:"default" json:"default,omitempty"` + JmesPath *string `tfsdk:"jmes_path" json:"jmesPath,omitempty"` + Method *string `tfsdk:"method" json:"method,omitempty"` Service *struct { CaBundle *string `tfsdk:"ca_bundle" json:"caBundle,omitempty"` Url *string `tfsdk:"url" json:"url,omitempty"` @@ -473,8 +477,9 @@ type KyvernoIoClusterPolicyV1ManifestData struct { Key *string `tfsdk:"key" json:"key,omitempty"` Value *map[string]string `tfsdk:"value" json:"value,omitempty"` } `tfsdk:"data" json:"data,omitempty"` - JmesPath *string `tfsdk:"jmes_path" json:"jmesPath,omitempty"` - Method *string `tfsdk:"method" json:"method,omitempty"` + Default *map[string]string `tfsdk:"default" json:"default,omitempty"` + JmesPath *string `tfsdk:"jmes_path" json:"jmesPath,omitempty"` + Method *string `tfsdk:"method" json:"method,omitempty"` Service *struct { CaBundle *string `tfsdk:"ca_bundle" json:"caBundle,omitempty"` Url *string `tfsdk:"url" json:"url,omitempty"` @@ -514,11 +519,13 @@ type KyvernoIoClusterPolicyV1ManifestData struct { } `tfsdk:"mutate" json:"mutate,omitempty"` Name *string `tfsdk:"name" json:"name,omitempty"` Preconditions *map[string]string `tfsdk:"preconditions" json:"preconditions,omitempty"` + ReportProperties *map[string]string `tfsdk:"report_properties" json:"reportProperties,omitempty"` SkipBackgroundRequests *bool `tfsdk:"skip_background_requests" json:"skipBackgroundRequests,omitempty"` Validate *struct { - AnyPattern *map[string]string `tfsdk:"any_pattern" json:"anyPattern,omitempty"` - Assert *map[string]string `tfsdk:"assert" json:"assert,omitempty"` - Cel *struct { + AllowExistingViolations *bool `tfsdk:"allow_existing_violations" json:"allowExistingViolations,omitempty"` + AnyPattern *map[string]string `tfsdk:"any_pattern" json:"anyPattern,omitempty"` + Assert *map[string]string `tfsdk:"assert" json:"assert,omitempty"` + Cel *struct { AuditAnnotations *[]struct { Key *string `tfsdk:"key" json:"key,omitempty"` ValueExpression *string `tfsdk:"value_expression" json:"valueExpression,omitempty"` @@ -575,8 +582,9 @@ type KyvernoIoClusterPolicyV1ManifestData struct { Key *string `tfsdk:"key" json:"key,omitempty"` Value *map[string]string `tfsdk:"value" json:"value,omitempty"` } `tfsdk:"data" json:"data,omitempty"` - JmesPath *string `tfsdk:"jmes_path" json:"jmesPath,omitempty"` - Method *string `tfsdk:"method" json:"method,omitempty"` + Default *map[string]string `tfsdk:"default" json:"default,omitempty"` + JmesPath *string `tfsdk:"jmes_path" json:"jmesPath,omitempty"` + Method *string `tfsdk:"method" json:"method,omitempty"` Service *struct { CaBundle *string `tfsdk:"ca_bundle" json:"caBundle,omitempty"` Url *string `tfsdk:"url" json:"url,omitempty"` @@ -687,7 +695,8 @@ type KyvernoIoClusterPolicyV1ManifestData struct { } `tfsdk:"secret" json:"secret,omitempty"` SignatureAlgorithm *string `tfsdk:"signature_algorithm" json:"signatureAlgorithm,omitempty"` } `tfsdk:"keys" json:"keys,omitempty"` - Repository *string `tfsdk:"repository" json:"repository,omitempty"` + Repository *string `tfsdk:"repository" json:"repository,omitempty"` + SignatureAlgorithm *string `tfsdk:"signature_algorithm" json:"signatureAlgorithm,omitempty"` } `tfsdk:"entries" json:"entries,omitempty"` } `tfsdk:"attestors" json:"attestors,omitempty"` DryRun *struct { @@ -779,7 +788,8 @@ type KyvernoIoClusterPolicyV1ManifestData struct { } `tfsdk:"secret" json:"secret,omitempty"` SignatureAlgorithm *string `tfsdk:"signature_algorithm" json:"signatureAlgorithm,omitempty"` } `tfsdk:"keys" json:"keys,omitempty"` - Repository *string `tfsdk:"repository" json:"repository,omitempty"` + Repository *string `tfsdk:"repository" json:"repository,omitempty"` + SignatureAlgorithm *string `tfsdk:"signature_algorithm" json:"signatureAlgorithm,omitempty"` } `tfsdk:"entries" json:"entries,omitempty"` } `tfsdk:"attestors" json:"attestors,omitempty"` Conditions *[]struct { @@ -796,6 +806,7 @@ type KyvernoIoClusterPolicyV1ManifestData struct { Value *map[string]string `tfsdk:"value" json:"value,omitempty"` } `tfsdk:"any" json:"any,omitempty"` } `tfsdk:"conditions" json:"conditions,omitempty"` + Name *string `tfsdk:"name" json:"name,omitempty"` PredicateType *string `tfsdk:"predicate_type" json:"predicateType,omitempty"` Type *string `tfsdk:"type" json:"type,omitempty"` } `tfsdk:"attestations" json:"attestations,omitempty"` @@ -855,7 +866,8 @@ type KyvernoIoClusterPolicyV1ManifestData struct { } `tfsdk:"secret" json:"secret,omitempty"` SignatureAlgorithm *string `tfsdk:"signature_algorithm" json:"signatureAlgorithm,omitempty"` } `tfsdk:"keys" json:"keys,omitempty"` - Repository *string `tfsdk:"repository" json:"repository,omitempty"` + Repository *string `tfsdk:"repository" json:"repository,omitempty"` + SignatureAlgorithm *string `tfsdk:"signature_algorithm" json:"signatureAlgorithm,omitempty"` } `tfsdk:"entries" json:"entries,omitempty"` } `tfsdk:"attestors" json:"attestors,omitempty"` CosignOCI11 *bool `tfsdk:"cosign_oci11" json:"cosignOCI11,omitempty"` @@ -877,7 +889,13 @@ type KyvernoIoClusterPolicyV1ManifestData struct { Subject *string `tfsdk:"subject" json:"subject,omitempty"` Type *string `tfsdk:"type" json:"type,omitempty"` UseCache *bool `tfsdk:"use_cache" json:"useCache,omitempty"` - VerifyDigest *bool `tfsdk:"verify_digest" json:"verifyDigest,omitempty"` + Validate *struct { + Deny *struct { + Conditions *map[string]string `tfsdk:"conditions" json:"conditions,omitempty"` + } `tfsdk:"deny" json:"deny,omitempty"` + Message *string `tfsdk:"message" json:"message,omitempty"` + } `tfsdk:"validate" json:"validate,omitempty"` + VerifyDigest *bool `tfsdk:"verify_digest" json:"verifyDigest,omitempty"` } `tfsdk:"verify_images" json:"verifyImages,omitempty"` } `tfsdk:"rules" json:"rules,omitempty"` SchemaValidation *bool `tfsdk:"schema_validation" json:"schemaValidation,omitempty"` @@ -999,6 +1017,14 @@ func (r *KyvernoIoClusterPolicyV1Manifest) Schema(_ context.Context, _ datasourc Computed: false, }, + "emit_warning": schema.BoolAttribute{ + Description: "EmitWarning enables API response warnings for mutate policy rules or validate policy rules with validationFailureAction set to Audit.Enabling this option will extend admission request processing times. The default value is 'false'.", + MarkdownDescription: "EmitWarning enables API response warnings for mutate policy rules or validate policy rules with validationFailureAction set to Audit.Enabling this option will extend admission request processing times. The default value is 'false'.", + Required: false, + Optional: true, + Computed: false, + }, + "failure_policy": schema.StringAttribute{ Description: "Deprecated, use failurePolicy under the webhookConfiguration instead.", MarkdownDescription: "Deprecated, use failurePolicy under the webhookConfiguration instead.", @@ -1103,6 +1129,15 @@ func (r *KyvernoIoClusterPolicyV1Manifest) Schema(_ context.Context, _ datasourc Computed: false, }, + "default": schema.MapAttribute{ + Description: "Default is an optional arbitrary JSON object that the context may take if the apiCallreturns error", + MarkdownDescription: "Default is an optional arbitrary JSON object that the context may take if the apiCallreturns error", + ElementType: types.StringType, + Required: false, + Optional: true, + Computed: false, + }, + "jmes_path": schema.StringAttribute{ Description: "JMESPath is an optional JSON Match Expression that can be used totransform the JSON response returned from the server. For examplea JMESPath of 'items | length(@)' applied to the API server responsefor the URLPath '/apis/apps/v1/deployments' will return the total countof deployments across all namespaces.", MarkdownDescription: "JMESPath is an optional JSON Match Expression that can be used totransform the JSON response returned from the server. For examplea JMESPath of 'items | length(@)' applied to the API server responsefor the URLPath '/apis/apps/v1/deployments' will return the total countof deployments across all namespaces.", @@ -1273,8 +1308,8 @@ func (r *KyvernoIoClusterPolicyV1Manifest) Schema(_ context.Context, _ datasourc "name": schema.StringAttribute{ Description: "Name is the variable name.", MarkdownDescription: "Name is the variable name.", - Required: false, - Optional: true, + Required: true, + Optional: false, Computed: false, }, @@ -2324,6 +2359,15 @@ func (r *KyvernoIoClusterPolicyV1Manifest) Schema(_ context.Context, _ datasourc Computed: false, }, + "default": schema.MapAttribute{ + Description: "Default is an optional arbitrary JSON object that the context may take if the apiCallreturns error", + MarkdownDescription: "Default is an optional arbitrary JSON object that the context may take if the apiCallreturns error", + ElementType: types.StringType, + Required: false, + Optional: true, + Computed: false, + }, + "jmes_path": schema.StringAttribute{ Description: "JMESPath is an optional JSON Match Expression that can be used totransform the JSON response returned from the server. For examplea JMESPath of 'items | length(@)' applied to the API server responsefor the URLPath '/apis/apps/v1/deployments' will return the total countof deployments across all namespaces.", MarkdownDescription: "JMESPath is an optional JSON Match Expression that can be used totransform the JSON response returned from the server. For examplea JMESPath of 'items | length(@)' applied to the API server responsefor the URLPath '/apis/apps/v1/deployments' will return the total countof deployments across all namespaces.", @@ -2494,8 +2538,8 @@ func (r *KyvernoIoClusterPolicyV1Manifest) Schema(_ context.Context, _ datasourc "name": schema.StringAttribute{ Description: "Name is the variable name.", MarkdownDescription: "Name is the variable name.", - Required: false, - Optional: true, + Required: true, + Optional: false, Computed: false, }, @@ -3540,6 +3584,15 @@ func (r *KyvernoIoClusterPolicyV1Manifest) Schema(_ context.Context, _ datasourc Computed: false, }, + "default": schema.MapAttribute{ + Description: "Default is an optional arbitrary JSON object that the context may take if the apiCallreturns error", + MarkdownDescription: "Default is an optional arbitrary JSON object that the context may take if the apiCallreturns error", + ElementType: types.StringType, + Required: false, + Optional: true, + Computed: false, + }, + "jmes_path": schema.StringAttribute{ Description: "JMESPath is an optional JSON Match Expression that can be used totransform the JSON response returned from the server. For examplea JMESPath of 'items | length(@)' applied to the API server responsefor the URLPath '/apis/apps/v1/deployments' will return the total countof deployments across all namespaces.", MarkdownDescription: "JMESPath is an optional JSON Match Expression that can be used totransform the JSON response returned from the server. For examplea JMESPath of 'items | length(@)' applied to the API server responsefor the URLPath '/apis/apps/v1/deployments' will return the total countof deployments across all namespaces.", @@ -3710,8 +3763,8 @@ func (r *KyvernoIoClusterPolicyV1Manifest) Schema(_ context.Context, _ datasourc "name": schema.StringAttribute{ Description: "Name is the variable name.", MarkdownDescription: "Name is the variable name.", - Required: false, - Optional: true, + Required: true, + Optional: false, Computed: false, }, @@ -3987,6 +4040,15 @@ func (r *KyvernoIoClusterPolicyV1Manifest) Schema(_ context.Context, _ datasourc Computed: false, }, + "default": schema.MapAttribute{ + Description: "Default is an optional arbitrary JSON object that the context may take if the apiCallreturns error", + MarkdownDescription: "Default is an optional arbitrary JSON object that the context may take if the apiCallreturns error", + ElementType: types.StringType, + Required: false, + Optional: true, + Computed: false, + }, + "jmes_path": schema.StringAttribute{ Description: "JMESPath is an optional JSON Match Expression that can be used totransform the JSON response returned from the server. For examplea JMESPath of 'items | length(@)' applied to the API server responsefor the URLPath '/apis/apps/v1/deployments' will return the total countof deployments across all namespaces.", MarkdownDescription: "JMESPath is an optional JSON Match Expression that can be used totransform the JSON response returned from the server. For examplea JMESPath of 'items | length(@)' applied to the API server responsefor the URLPath '/apis/apps/v1/deployments' will return the total countof deployments across all namespaces.", @@ -4157,8 +4219,8 @@ func (r *KyvernoIoClusterPolicyV1Manifest) Schema(_ context.Context, _ datasourc "name": schema.StringAttribute{ Description: "Name is the variable name.", MarkdownDescription: "Name is the variable name.", - Required: false, - Optional: true, + Required: true, + Optional: false, Computed: false, }, @@ -4275,6 +4337,15 @@ func (r *KyvernoIoClusterPolicyV1Manifest) Schema(_ context.Context, _ datasourc Computed: false, }, + "report_properties": schema.MapAttribute{ + Description: "ReportProperties are the additional properties from the rule that will be added to the policy report result", + MarkdownDescription: "ReportProperties are the additional properties from the rule that will be added to the policy report result", + ElementType: types.StringType, + Required: false, + Optional: true, + Computed: false, + }, + "skip_background_requests": schema.BoolAttribute{ Description: "SkipBackgroundRequests bypasses admission requests that are sent by the background controller.The default value is set to 'true', it must be set to 'false' to applygenerate and mutateExisting rules to those requests.", MarkdownDescription: "SkipBackgroundRequests bypasses admission requests that are sent by the background controller.The default value is set to 'true', it must be set to 'false' to applygenerate and mutateExisting rules to those requests.", @@ -4287,6 +4358,14 @@ func (r *KyvernoIoClusterPolicyV1Manifest) Schema(_ context.Context, _ datasourc Description: "Validation is used to validate matching resources.", MarkdownDescription: "Validation is used to validate matching resources.", Attributes: map[string]schema.Attribute{ + "allow_existing_violations": schema.BoolAttribute{ + Description: "AllowExistingViolations allows prexisting violating resources to continue violating a policy.", + MarkdownDescription: "AllowExistingViolations allows prexisting violating resources to continue violating a policy.", + Required: false, + Optional: true, + Computed: false, + }, + "any_pattern": schema.MapAttribute{ Description: "AnyPattern specifies list of validation patterns. At least one of the patternsmust be satisfied for the validation rule to succeed.", MarkdownDescription: "AnyPattern specifies list of validation patterns. At least one of the patternsmust be satisfied for the validation rule to succeed.", @@ -4688,6 +4767,15 @@ func (r *KyvernoIoClusterPolicyV1Manifest) Schema(_ context.Context, _ datasourc Computed: false, }, + "default": schema.MapAttribute{ + Description: "Default is an optional arbitrary JSON object that the context may take if the apiCallreturns error", + MarkdownDescription: "Default is an optional arbitrary JSON object that the context may take if the apiCallreturns error", + ElementType: types.StringType, + Required: false, + Optional: true, + Computed: false, + }, + "jmes_path": schema.StringAttribute{ Description: "JMESPath is an optional JSON Match Expression that can be used totransform the JSON response returned from the server. For examplea JMESPath of 'items | length(@)' applied to the API server responsefor the URLPath '/apis/apps/v1/deployments' will return the total countof deployments across all namespaces.", MarkdownDescription: "JMESPath is an optional JSON Match Expression that can be used totransform the JSON response returned from the server. For examplea JMESPath of 'items | length(@)' applied to the API server responsefor the URLPath '/apis/apps/v1/deployments' will return the total countof deployments across all namespaces.", @@ -4858,8 +4946,8 @@ func (r *KyvernoIoClusterPolicyV1Manifest) Schema(_ context.Context, _ datasourc "name": schema.StringAttribute{ Description: "Name is the variable name.", MarkdownDescription: "Name is the variable name.", - Required: false, - Optional: true, + Required: true, + Optional: false, Computed: false, }, @@ -5445,8 +5533,8 @@ func (r *KyvernoIoClusterPolicyV1Manifest) Schema(_ context.Context, _ datasourc }, "signature_algorithm": schema.StringAttribute{ - Description: "Specify signature algorithm for public keys. Supported values are sha224, sha256, sha384 and sha512.", - MarkdownDescription: "Specify signature algorithm for public keys. Supported values are sha224, sha256, sha384 and sha512.", + Description: "Deprecated. Use attestor.signatureAlgorithm instead.", + MarkdownDescription: "Deprecated. Use attestor.signatureAlgorithm instead.", Required: false, Optional: true, Computed: false, @@ -5464,6 +5552,14 @@ func (r *KyvernoIoClusterPolicyV1Manifest) Schema(_ context.Context, _ datasourc Optional: true, Computed: false, }, + + "signature_algorithm": schema.StringAttribute{ + Description: "Specify signature algorithm for public keys. Supported values are sha224, sha256, sha384 and sha512.", + MarkdownDescription: "Specify signature algorithm for public keys. Supported values are sha224, sha256, sha384 and sha512.", + Required: false, + Optional: true, + Computed: false, + }, }, }, Required: false, @@ -6081,8 +6177,8 @@ func (r *KyvernoIoClusterPolicyV1Manifest) Schema(_ context.Context, _ datasourc }, "signature_algorithm": schema.StringAttribute{ - Description: "Specify signature algorithm for public keys. Supported values are sha224, sha256, sha384 and sha512.", - MarkdownDescription: "Specify signature algorithm for public keys. Supported values are sha224, sha256, sha384 and sha512.", + Description: "Deprecated. Use attestor.signatureAlgorithm instead.", + MarkdownDescription: "Deprecated. Use attestor.signatureAlgorithm instead.", Required: false, Optional: true, Computed: false, @@ -6100,6 +6196,14 @@ func (r *KyvernoIoClusterPolicyV1Manifest) Schema(_ context.Context, _ datasourc Optional: true, Computed: false, }, + + "signature_algorithm": schema.StringAttribute{ + Description: "Specify signature algorithm for public keys. Supported values are sha224, sha256, sha384 and sha512.", + MarkdownDescription: "Specify signature algorithm for public keys. Supported values are sha224, sha256, sha384 and sha512.", + Required: false, + Optional: true, + Computed: false, + }, }, }, Required: false, @@ -6220,6 +6324,14 @@ func (r *KyvernoIoClusterPolicyV1Manifest) Schema(_ context.Context, _ datasourc Computed: false, }, + "name": schema.StringAttribute{ + Description: "Name is the variable name.", + MarkdownDescription: "Name is the variable name.", + Required: false, + Optional: true, + Computed: false, + }, + "predicate_type": schema.StringAttribute{ Description: "Deprecated in favour of 'Type', to be removed soon", MarkdownDescription: "Deprecated in favour of 'Type', to be removed soon", @@ -6608,8 +6720,8 @@ func (r *KyvernoIoClusterPolicyV1Manifest) Schema(_ context.Context, _ datasourc }, "signature_algorithm": schema.StringAttribute{ - Description: "Specify signature algorithm for public keys. Supported values are sha224, sha256, sha384 and sha512.", - MarkdownDescription: "Specify signature algorithm for public keys. Supported values are sha224, sha256, sha384 and sha512.", + Description: "Deprecated. Use attestor.signatureAlgorithm instead.", + MarkdownDescription: "Deprecated. Use attestor.signatureAlgorithm instead.", Required: false, Optional: true, Computed: false, @@ -6627,6 +6739,14 @@ func (r *KyvernoIoClusterPolicyV1Manifest) Schema(_ context.Context, _ datasourc Optional: true, Computed: false, }, + + "signature_algorithm": schema.StringAttribute{ + Description: "Specify signature algorithm for public keys. Supported values are sha224, sha256, sha384 and sha512.", + MarkdownDescription: "Specify signature algorithm for public keys. Supported values are sha224, sha256, sha384 and sha512.", + Required: false, + Optional: true, + Computed: false, + }, }, }, Required: false, @@ -6795,6 +6915,41 @@ func (r *KyvernoIoClusterPolicyV1Manifest) Schema(_ context.Context, _ datasourc Computed: false, }, + "validate": schema.SingleNestedAttribute{ + Description: "Validation checks conditions across multiple imageverification attestations or context entries", + MarkdownDescription: "Validation checks conditions across multiple imageverification attestations or context entries", + Attributes: map[string]schema.Attribute{ + "deny": schema.SingleNestedAttribute{ + Description: "Deny defines conditions used to pass or fail a validation rule.", + MarkdownDescription: "Deny defines conditions used to pass or fail a validation rule.", + Attributes: map[string]schema.Attribute{ + "conditions": schema.MapAttribute{ + Description: "Multiple conditions can be declared under an 'any' or 'all' statement. A direct listof conditions (without 'any' or 'all' statements) is also supported for backwards compatibilitybut will be deprecated in the next major release.See: https://kyverno.io/docs/writing-policies/validate/#deny-rules", + MarkdownDescription: "Multiple conditions can be declared under an 'any' or 'all' statement. A direct listof conditions (without 'any' or 'all' statements) is also supported for backwards compatibilitybut will be deprecated in the next major release.See: https://kyverno.io/docs/writing-policies/validate/#deny-rules", + ElementType: types.StringType, + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + + "message": schema.StringAttribute{ + Description: "Message specifies a custom message to be displayed on failure.", + MarkdownDescription: "Message specifies a custom message to be displayed on failure.", + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + "verify_digest": schema.BoolAttribute{ Description: "VerifyDigest validates that images have a digest.", MarkdownDescription: "VerifyDigest validates that images have a digest.", diff --git a/internal/provider/kyverno_io_v1/kyverno_io_policy_v1_manifest.go b/internal/provider/kyverno_io_v1/kyverno_io_policy_v1_manifest.go index 067a3c952..3a3a3250c 100644 --- a/internal/provider/kyverno_io_v1/kyverno_io_policy_v1_manifest.go +++ b/internal/provider/kyverno_io_v1/kyverno_io_policy_v1_manifest.go @@ -47,6 +47,7 @@ type KyvernoIoPolicyV1ManifestData struct { Admission *bool `tfsdk:"admission" json:"admission,omitempty"` ApplyRules *string `tfsdk:"apply_rules" json:"applyRules,omitempty"` Background *bool `tfsdk:"background" json:"background,omitempty"` + EmitWarning *bool `tfsdk:"emit_warning" json:"emitWarning,omitempty"` FailurePolicy *string `tfsdk:"failure_policy" json:"failurePolicy,omitempty"` GenerateExisting *bool `tfsdk:"generate_existing" json:"generateExisting,omitempty"` GenerateExistingOnPolicyUpdate *bool `tfsdk:"generate_existing_on_policy_update" json:"generateExistingOnPolicyUpdate,omitempty"` @@ -62,8 +63,9 @@ type KyvernoIoPolicyV1ManifestData struct { Key *string `tfsdk:"key" json:"key,omitempty"` Value *map[string]string `tfsdk:"value" json:"value,omitempty"` } `tfsdk:"data" json:"data,omitempty"` - JmesPath *string `tfsdk:"jmes_path" json:"jmesPath,omitempty"` - Method *string `tfsdk:"method" json:"method,omitempty"` + Default *map[string]string `tfsdk:"default" json:"default,omitempty"` + JmesPath *string `tfsdk:"jmes_path" json:"jmesPath,omitempty"` + Method *string `tfsdk:"method" json:"method,omitempty"` Service *struct { CaBundle *string `tfsdk:"ca_bundle" json:"caBundle,omitempty"` Url *string `tfsdk:"url" json:"url,omitempty"` @@ -239,8 +241,9 @@ type KyvernoIoPolicyV1ManifestData struct { Key *string `tfsdk:"key" json:"key,omitempty"` Value *map[string]string `tfsdk:"value" json:"value,omitempty"` } `tfsdk:"data" json:"data,omitempty"` - JmesPath *string `tfsdk:"jmes_path" json:"jmesPath,omitempty"` - Method *string `tfsdk:"method" json:"method,omitempty"` + Default *map[string]string `tfsdk:"default" json:"default,omitempty"` + JmesPath *string `tfsdk:"jmes_path" json:"jmesPath,omitempty"` + Method *string `tfsdk:"method" json:"method,omitempty"` Service *struct { CaBundle *string `tfsdk:"ca_bundle" json:"caBundle,omitempty"` Url *string `tfsdk:"url" json:"url,omitempty"` @@ -411,8 +414,9 @@ type KyvernoIoPolicyV1ManifestData struct { Key *string `tfsdk:"key" json:"key,omitempty"` Value *map[string]string `tfsdk:"value" json:"value,omitempty"` } `tfsdk:"data" json:"data,omitempty"` - JmesPath *string `tfsdk:"jmes_path" json:"jmesPath,omitempty"` - Method *string `tfsdk:"method" json:"method,omitempty"` + Default *map[string]string `tfsdk:"default" json:"default,omitempty"` + JmesPath *string `tfsdk:"jmes_path" json:"jmesPath,omitempty"` + Method *string `tfsdk:"method" json:"method,omitempty"` Service *struct { CaBundle *string `tfsdk:"ca_bundle" json:"caBundle,omitempty"` Url *string `tfsdk:"url" json:"url,omitempty"` @@ -474,8 +478,9 @@ type KyvernoIoPolicyV1ManifestData struct { Key *string `tfsdk:"key" json:"key,omitempty"` Value *map[string]string `tfsdk:"value" json:"value,omitempty"` } `tfsdk:"data" json:"data,omitempty"` - JmesPath *string `tfsdk:"jmes_path" json:"jmesPath,omitempty"` - Method *string `tfsdk:"method" json:"method,omitempty"` + Default *map[string]string `tfsdk:"default" json:"default,omitempty"` + JmesPath *string `tfsdk:"jmes_path" json:"jmesPath,omitempty"` + Method *string `tfsdk:"method" json:"method,omitempty"` Service *struct { CaBundle *string `tfsdk:"ca_bundle" json:"caBundle,omitempty"` Url *string `tfsdk:"url" json:"url,omitempty"` @@ -515,11 +520,13 @@ type KyvernoIoPolicyV1ManifestData struct { } `tfsdk:"mutate" json:"mutate,omitempty"` Name *string `tfsdk:"name" json:"name,omitempty"` Preconditions *map[string]string `tfsdk:"preconditions" json:"preconditions,omitempty"` + ReportProperties *map[string]string `tfsdk:"report_properties" json:"reportProperties,omitempty"` SkipBackgroundRequests *bool `tfsdk:"skip_background_requests" json:"skipBackgroundRequests,omitempty"` Validate *struct { - AnyPattern *map[string]string `tfsdk:"any_pattern" json:"anyPattern,omitempty"` - Assert *map[string]string `tfsdk:"assert" json:"assert,omitempty"` - Cel *struct { + AllowExistingViolations *bool `tfsdk:"allow_existing_violations" json:"allowExistingViolations,omitempty"` + AnyPattern *map[string]string `tfsdk:"any_pattern" json:"anyPattern,omitempty"` + Assert *map[string]string `tfsdk:"assert" json:"assert,omitempty"` + Cel *struct { AuditAnnotations *[]struct { Key *string `tfsdk:"key" json:"key,omitempty"` ValueExpression *string `tfsdk:"value_expression" json:"valueExpression,omitempty"` @@ -576,8 +583,9 @@ type KyvernoIoPolicyV1ManifestData struct { Key *string `tfsdk:"key" json:"key,omitempty"` Value *map[string]string `tfsdk:"value" json:"value,omitempty"` } `tfsdk:"data" json:"data,omitempty"` - JmesPath *string `tfsdk:"jmes_path" json:"jmesPath,omitempty"` - Method *string `tfsdk:"method" json:"method,omitempty"` + Default *map[string]string `tfsdk:"default" json:"default,omitempty"` + JmesPath *string `tfsdk:"jmes_path" json:"jmesPath,omitempty"` + Method *string `tfsdk:"method" json:"method,omitempty"` Service *struct { CaBundle *string `tfsdk:"ca_bundle" json:"caBundle,omitempty"` Url *string `tfsdk:"url" json:"url,omitempty"` @@ -688,7 +696,8 @@ type KyvernoIoPolicyV1ManifestData struct { } `tfsdk:"secret" json:"secret,omitempty"` SignatureAlgorithm *string `tfsdk:"signature_algorithm" json:"signatureAlgorithm,omitempty"` } `tfsdk:"keys" json:"keys,omitempty"` - Repository *string `tfsdk:"repository" json:"repository,omitempty"` + Repository *string `tfsdk:"repository" json:"repository,omitempty"` + SignatureAlgorithm *string `tfsdk:"signature_algorithm" json:"signatureAlgorithm,omitempty"` } `tfsdk:"entries" json:"entries,omitempty"` } `tfsdk:"attestors" json:"attestors,omitempty"` DryRun *struct { @@ -780,7 +789,8 @@ type KyvernoIoPolicyV1ManifestData struct { } `tfsdk:"secret" json:"secret,omitempty"` SignatureAlgorithm *string `tfsdk:"signature_algorithm" json:"signatureAlgorithm,omitempty"` } `tfsdk:"keys" json:"keys,omitempty"` - Repository *string `tfsdk:"repository" json:"repository,omitempty"` + Repository *string `tfsdk:"repository" json:"repository,omitempty"` + SignatureAlgorithm *string `tfsdk:"signature_algorithm" json:"signatureAlgorithm,omitempty"` } `tfsdk:"entries" json:"entries,omitempty"` } `tfsdk:"attestors" json:"attestors,omitempty"` Conditions *[]struct { @@ -797,6 +807,7 @@ type KyvernoIoPolicyV1ManifestData struct { Value *map[string]string `tfsdk:"value" json:"value,omitempty"` } `tfsdk:"any" json:"any,omitempty"` } `tfsdk:"conditions" json:"conditions,omitempty"` + Name *string `tfsdk:"name" json:"name,omitempty"` PredicateType *string `tfsdk:"predicate_type" json:"predicateType,omitempty"` Type *string `tfsdk:"type" json:"type,omitempty"` } `tfsdk:"attestations" json:"attestations,omitempty"` @@ -856,7 +867,8 @@ type KyvernoIoPolicyV1ManifestData struct { } `tfsdk:"secret" json:"secret,omitempty"` SignatureAlgorithm *string `tfsdk:"signature_algorithm" json:"signatureAlgorithm,omitempty"` } `tfsdk:"keys" json:"keys,omitempty"` - Repository *string `tfsdk:"repository" json:"repository,omitempty"` + Repository *string `tfsdk:"repository" json:"repository,omitempty"` + SignatureAlgorithm *string `tfsdk:"signature_algorithm" json:"signatureAlgorithm,omitempty"` } `tfsdk:"entries" json:"entries,omitempty"` } `tfsdk:"attestors" json:"attestors,omitempty"` CosignOCI11 *bool `tfsdk:"cosign_oci11" json:"cosignOCI11,omitempty"` @@ -878,7 +890,13 @@ type KyvernoIoPolicyV1ManifestData struct { Subject *string `tfsdk:"subject" json:"subject,omitempty"` Type *string `tfsdk:"type" json:"type,omitempty"` UseCache *bool `tfsdk:"use_cache" json:"useCache,omitempty"` - VerifyDigest *bool `tfsdk:"verify_digest" json:"verifyDigest,omitempty"` + Validate *struct { + Deny *struct { + Conditions *map[string]string `tfsdk:"conditions" json:"conditions,omitempty"` + } `tfsdk:"deny" json:"deny,omitempty"` + Message *string `tfsdk:"message" json:"message,omitempty"` + } `tfsdk:"validate" json:"validate,omitempty"` + VerifyDigest *bool `tfsdk:"verify_digest" json:"verifyDigest,omitempty"` } `tfsdk:"verify_images" json:"verifyImages,omitempty"` } `tfsdk:"rules" json:"rules,omitempty"` SchemaValidation *bool `tfsdk:"schema_validation" json:"schemaValidation,omitempty"` @@ -1012,6 +1030,14 @@ func (r *KyvernoIoPolicyV1Manifest) Schema(_ context.Context, _ datasource.Schem Computed: false, }, + "emit_warning": schema.BoolAttribute{ + Description: "EmitWarning enables API response warnings for mutate policy rules or validate policy rules with validationFailureAction set to Audit.Enabling this option will extend admission request processing times. The default value is 'false'.", + MarkdownDescription: "EmitWarning enables API response warnings for mutate policy rules or validate policy rules with validationFailureAction set to Audit.Enabling this option will extend admission request processing times. The default value is 'false'.", + Required: false, + Optional: true, + Computed: false, + }, + "failure_policy": schema.StringAttribute{ Description: "Deprecated, use failurePolicy under the webhookConfiguration instead.", MarkdownDescription: "Deprecated, use failurePolicy under the webhookConfiguration instead.", @@ -1116,6 +1142,15 @@ func (r *KyvernoIoPolicyV1Manifest) Schema(_ context.Context, _ datasource.Schem Computed: false, }, + "default": schema.MapAttribute{ + Description: "Default is an optional arbitrary JSON object that the context may take if the apiCallreturns error", + MarkdownDescription: "Default is an optional arbitrary JSON object that the context may take if the apiCallreturns error", + ElementType: types.StringType, + Required: false, + Optional: true, + Computed: false, + }, + "jmes_path": schema.StringAttribute{ Description: "JMESPath is an optional JSON Match Expression that can be used totransform the JSON response returned from the server. For examplea JMESPath of 'items | length(@)' applied to the API server responsefor the URLPath '/apis/apps/v1/deployments' will return the total countof deployments across all namespaces.", MarkdownDescription: "JMESPath is an optional JSON Match Expression that can be used totransform the JSON response returned from the server. For examplea JMESPath of 'items | length(@)' applied to the API server responsefor the URLPath '/apis/apps/v1/deployments' will return the total countof deployments across all namespaces.", @@ -1286,8 +1321,8 @@ func (r *KyvernoIoPolicyV1Manifest) Schema(_ context.Context, _ datasource.Schem "name": schema.StringAttribute{ Description: "Name is the variable name.", MarkdownDescription: "Name is the variable name.", - Required: false, - Optional: true, + Required: true, + Optional: false, Computed: false, }, @@ -2337,6 +2372,15 @@ func (r *KyvernoIoPolicyV1Manifest) Schema(_ context.Context, _ datasource.Schem Computed: false, }, + "default": schema.MapAttribute{ + Description: "Default is an optional arbitrary JSON object that the context may take if the apiCallreturns error", + MarkdownDescription: "Default is an optional arbitrary JSON object that the context may take if the apiCallreturns error", + ElementType: types.StringType, + Required: false, + Optional: true, + Computed: false, + }, + "jmes_path": schema.StringAttribute{ Description: "JMESPath is an optional JSON Match Expression that can be used totransform the JSON response returned from the server. For examplea JMESPath of 'items | length(@)' applied to the API server responsefor the URLPath '/apis/apps/v1/deployments' will return the total countof deployments across all namespaces.", MarkdownDescription: "JMESPath is an optional JSON Match Expression that can be used totransform the JSON response returned from the server. For examplea JMESPath of 'items | length(@)' applied to the API server responsefor the URLPath '/apis/apps/v1/deployments' will return the total countof deployments across all namespaces.", @@ -2507,8 +2551,8 @@ func (r *KyvernoIoPolicyV1Manifest) Schema(_ context.Context, _ datasource.Schem "name": schema.StringAttribute{ Description: "Name is the variable name.", MarkdownDescription: "Name is the variable name.", - Required: false, - Optional: true, + Required: true, + Optional: false, Computed: false, }, @@ -3553,6 +3597,15 @@ func (r *KyvernoIoPolicyV1Manifest) Schema(_ context.Context, _ datasource.Schem Computed: false, }, + "default": schema.MapAttribute{ + Description: "Default is an optional arbitrary JSON object that the context may take if the apiCallreturns error", + MarkdownDescription: "Default is an optional arbitrary JSON object that the context may take if the apiCallreturns error", + ElementType: types.StringType, + Required: false, + Optional: true, + Computed: false, + }, + "jmes_path": schema.StringAttribute{ Description: "JMESPath is an optional JSON Match Expression that can be used totransform the JSON response returned from the server. For examplea JMESPath of 'items | length(@)' applied to the API server responsefor the URLPath '/apis/apps/v1/deployments' will return the total countof deployments across all namespaces.", MarkdownDescription: "JMESPath is an optional JSON Match Expression that can be used totransform the JSON response returned from the server. For examplea JMESPath of 'items | length(@)' applied to the API server responsefor the URLPath '/apis/apps/v1/deployments' will return the total countof deployments across all namespaces.", @@ -3723,8 +3776,8 @@ func (r *KyvernoIoPolicyV1Manifest) Schema(_ context.Context, _ datasource.Schem "name": schema.StringAttribute{ Description: "Name is the variable name.", MarkdownDescription: "Name is the variable name.", - Required: false, - Optional: true, + Required: true, + Optional: false, Computed: false, }, @@ -4000,6 +4053,15 @@ func (r *KyvernoIoPolicyV1Manifest) Schema(_ context.Context, _ datasource.Schem Computed: false, }, + "default": schema.MapAttribute{ + Description: "Default is an optional arbitrary JSON object that the context may take if the apiCallreturns error", + MarkdownDescription: "Default is an optional arbitrary JSON object that the context may take if the apiCallreturns error", + ElementType: types.StringType, + Required: false, + Optional: true, + Computed: false, + }, + "jmes_path": schema.StringAttribute{ Description: "JMESPath is an optional JSON Match Expression that can be used totransform the JSON response returned from the server. For examplea JMESPath of 'items | length(@)' applied to the API server responsefor the URLPath '/apis/apps/v1/deployments' will return the total countof deployments across all namespaces.", MarkdownDescription: "JMESPath is an optional JSON Match Expression that can be used totransform the JSON response returned from the server. For examplea JMESPath of 'items | length(@)' applied to the API server responsefor the URLPath '/apis/apps/v1/deployments' will return the total countof deployments across all namespaces.", @@ -4170,8 +4232,8 @@ func (r *KyvernoIoPolicyV1Manifest) Schema(_ context.Context, _ datasource.Schem "name": schema.StringAttribute{ Description: "Name is the variable name.", MarkdownDescription: "Name is the variable name.", - Required: false, - Optional: true, + Required: true, + Optional: false, Computed: false, }, @@ -4288,6 +4350,15 @@ func (r *KyvernoIoPolicyV1Manifest) Schema(_ context.Context, _ datasource.Schem Computed: false, }, + "report_properties": schema.MapAttribute{ + Description: "ReportProperties are the additional properties from the rule that will be added to the policy report result", + MarkdownDescription: "ReportProperties are the additional properties from the rule that will be added to the policy report result", + ElementType: types.StringType, + Required: false, + Optional: true, + Computed: false, + }, + "skip_background_requests": schema.BoolAttribute{ Description: "SkipBackgroundRequests bypasses admission requests that are sent by the background controller.The default value is set to 'true', it must be set to 'false' to applygenerate and mutateExisting rules to those requests.", MarkdownDescription: "SkipBackgroundRequests bypasses admission requests that are sent by the background controller.The default value is set to 'true', it must be set to 'false' to applygenerate and mutateExisting rules to those requests.", @@ -4300,6 +4371,14 @@ func (r *KyvernoIoPolicyV1Manifest) Schema(_ context.Context, _ datasource.Schem Description: "Validation is used to validate matching resources.", MarkdownDescription: "Validation is used to validate matching resources.", Attributes: map[string]schema.Attribute{ + "allow_existing_violations": schema.BoolAttribute{ + Description: "AllowExistingViolations allows prexisting violating resources to continue violating a policy.", + MarkdownDescription: "AllowExistingViolations allows prexisting violating resources to continue violating a policy.", + Required: false, + Optional: true, + Computed: false, + }, + "any_pattern": schema.MapAttribute{ Description: "AnyPattern specifies list of validation patterns. At least one of the patternsmust be satisfied for the validation rule to succeed.", MarkdownDescription: "AnyPattern specifies list of validation patterns. At least one of the patternsmust be satisfied for the validation rule to succeed.", @@ -4701,6 +4780,15 @@ func (r *KyvernoIoPolicyV1Manifest) Schema(_ context.Context, _ datasource.Schem Computed: false, }, + "default": schema.MapAttribute{ + Description: "Default is an optional arbitrary JSON object that the context may take if the apiCallreturns error", + MarkdownDescription: "Default is an optional arbitrary JSON object that the context may take if the apiCallreturns error", + ElementType: types.StringType, + Required: false, + Optional: true, + Computed: false, + }, + "jmes_path": schema.StringAttribute{ Description: "JMESPath is an optional JSON Match Expression that can be used totransform the JSON response returned from the server. For examplea JMESPath of 'items | length(@)' applied to the API server responsefor the URLPath '/apis/apps/v1/deployments' will return the total countof deployments across all namespaces.", MarkdownDescription: "JMESPath is an optional JSON Match Expression that can be used totransform the JSON response returned from the server. For examplea JMESPath of 'items | length(@)' applied to the API server responsefor the URLPath '/apis/apps/v1/deployments' will return the total countof deployments across all namespaces.", @@ -4871,8 +4959,8 @@ func (r *KyvernoIoPolicyV1Manifest) Schema(_ context.Context, _ datasource.Schem "name": schema.StringAttribute{ Description: "Name is the variable name.", MarkdownDescription: "Name is the variable name.", - Required: false, - Optional: true, + Required: true, + Optional: false, Computed: false, }, @@ -5458,8 +5546,8 @@ func (r *KyvernoIoPolicyV1Manifest) Schema(_ context.Context, _ datasource.Schem }, "signature_algorithm": schema.StringAttribute{ - Description: "Specify signature algorithm for public keys. Supported values are sha224, sha256, sha384 and sha512.", - MarkdownDescription: "Specify signature algorithm for public keys. Supported values are sha224, sha256, sha384 and sha512.", + Description: "Deprecated. Use attestor.signatureAlgorithm instead.", + MarkdownDescription: "Deprecated. Use attestor.signatureAlgorithm instead.", Required: false, Optional: true, Computed: false, @@ -5477,6 +5565,14 @@ func (r *KyvernoIoPolicyV1Manifest) Schema(_ context.Context, _ datasource.Schem Optional: true, Computed: false, }, + + "signature_algorithm": schema.StringAttribute{ + Description: "Specify signature algorithm for public keys. Supported values are sha224, sha256, sha384 and sha512.", + MarkdownDescription: "Specify signature algorithm for public keys. Supported values are sha224, sha256, sha384 and sha512.", + Required: false, + Optional: true, + Computed: false, + }, }, }, Required: false, @@ -6094,8 +6190,8 @@ func (r *KyvernoIoPolicyV1Manifest) Schema(_ context.Context, _ datasource.Schem }, "signature_algorithm": schema.StringAttribute{ - Description: "Specify signature algorithm for public keys. Supported values are sha224, sha256, sha384 and sha512.", - MarkdownDescription: "Specify signature algorithm for public keys. Supported values are sha224, sha256, sha384 and sha512.", + Description: "Deprecated. Use attestor.signatureAlgorithm instead.", + MarkdownDescription: "Deprecated. Use attestor.signatureAlgorithm instead.", Required: false, Optional: true, Computed: false, @@ -6113,6 +6209,14 @@ func (r *KyvernoIoPolicyV1Manifest) Schema(_ context.Context, _ datasource.Schem Optional: true, Computed: false, }, + + "signature_algorithm": schema.StringAttribute{ + Description: "Specify signature algorithm for public keys. Supported values are sha224, sha256, sha384 and sha512.", + MarkdownDescription: "Specify signature algorithm for public keys. Supported values are sha224, sha256, sha384 and sha512.", + Required: false, + Optional: true, + Computed: false, + }, }, }, Required: false, @@ -6233,6 +6337,14 @@ func (r *KyvernoIoPolicyV1Manifest) Schema(_ context.Context, _ datasource.Schem Computed: false, }, + "name": schema.StringAttribute{ + Description: "Name is the variable name.", + MarkdownDescription: "Name is the variable name.", + Required: false, + Optional: true, + Computed: false, + }, + "predicate_type": schema.StringAttribute{ Description: "Deprecated in favour of 'Type', to be removed soon", MarkdownDescription: "Deprecated in favour of 'Type', to be removed soon", @@ -6621,8 +6733,8 @@ func (r *KyvernoIoPolicyV1Manifest) Schema(_ context.Context, _ datasource.Schem }, "signature_algorithm": schema.StringAttribute{ - Description: "Specify signature algorithm for public keys. Supported values are sha224, sha256, sha384 and sha512.", - MarkdownDescription: "Specify signature algorithm for public keys. Supported values are sha224, sha256, sha384 and sha512.", + Description: "Deprecated. Use attestor.signatureAlgorithm instead.", + MarkdownDescription: "Deprecated. Use attestor.signatureAlgorithm instead.", Required: false, Optional: true, Computed: false, @@ -6640,6 +6752,14 @@ func (r *KyvernoIoPolicyV1Manifest) Schema(_ context.Context, _ datasource.Schem Optional: true, Computed: false, }, + + "signature_algorithm": schema.StringAttribute{ + Description: "Specify signature algorithm for public keys. Supported values are sha224, sha256, sha384 and sha512.", + MarkdownDescription: "Specify signature algorithm for public keys. Supported values are sha224, sha256, sha384 and sha512.", + Required: false, + Optional: true, + Computed: false, + }, }, }, Required: false, @@ -6808,6 +6928,41 @@ func (r *KyvernoIoPolicyV1Manifest) Schema(_ context.Context, _ datasource.Schem Computed: false, }, + "validate": schema.SingleNestedAttribute{ + Description: "Validation checks conditions across multiple imageverification attestations or context entries", + MarkdownDescription: "Validation checks conditions across multiple imageverification attestations or context entries", + Attributes: map[string]schema.Attribute{ + "deny": schema.SingleNestedAttribute{ + Description: "Deny defines conditions used to pass or fail a validation rule.", + MarkdownDescription: "Deny defines conditions used to pass or fail a validation rule.", + Attributes: map[string]schema.Attribute{ + "conditions": schema.MapAttribute{ + Description: "Multiple conditions can be declared under an 'any' or 'all' statement. A direct listof conditions (without 'any' or 'all' statements) is also supported for backwards compatibilitybut will be deprecated in the next major release.See: https://kyverno.io/docs/writing-policies/validate/#deny-rules", + MarkdownDescription: "Multiple conditions can be declared under an 'any' or 'all' statement. A direct listof conditions (without 'any' or 'all' statements) is also supported for backwards compatibilitybut will be deprecated in the next major release.See: https://kyverno.io/docs/writing-policies/validate/#deny-rules", + ElementType: types.StringType, + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + + "message": schema.StringAttribute{ + Description: "Message specifies a custom message to be displayed on failure.", + MarkdownDescription: "Message specifies a custom message to be displayed on failure.", + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + "verify_digest": schema.BoolAttribute{ Description: "VerifyDigest validates that images have a digest.", MarkdownDescription: "VerifyDigest validates that images have a digest.", diff --git a/internal/provider/kyverno_io_v2/kyverno_io_cleanup_policy_v2_manifest.go b/internal/provider/kyverno_io_v2/kyverno_io_cleanup_policy_v2_manifest.go index 3b7a42f30..90d95ba01 100644 --- a/internal/provider/kyverno_io_v2/kyverno_io_cleanup_policy_v2_manifest.go +++ b/internal/provider/kyverno_io_v2/kyverno_io_cleanup_policy_v2_manifest.go @@ -63,8 +63,9 @@ type KyvernoIoCleanupPolicyV2ManifestData struct { Key *string `tfsdk:"key" json:"key,omitempty"` Value *map[string]string `tfsdk:"value" json:"value,omitempty"` } `tfsdk:"data" json:"data,omitempty"` - JmesPath *string `tfsdk:"jmes_path" json:"jmesPath,omitempty"` - Method *string `tfsdk:"method" json:"method,omitempty"` + Default *map[string]string `tfsdk:"default" json:"default,omitempty"` + JmesPath *string `tfsdk:"jmes_path" json:"jmesPath,omitempty"` + Method *string `tfsdk:"method" json:"method,omitempty"` Service *struct { CaBundle *string `tfsdk:"ca_bundle" json:"caBundle,omitempty"` Url *string `tfsdk:"url" json:"url,omitempty"` @@ -458,6 +459,15 @@ func (r *KyvernoIoCleanupPolicyV2Manifest) Schema(_ context.Context, _ datasourc Computed: false, }, + "default": schema.MapAttribute{ + Description: "Default is an optional arbitrary JSON object that the context may take if the apiCallreturns error", + MarkdownDescription: "Default is an optional arbitrary JSON object that the context may take if the apiCallreturns error", + ElementType: types.StringType, + Required: false, + Optional: true, + Computed: false, + }, + "jmes_path": schema.StringAttribute{ Description: "JMESPath is an optional JSON Match Expression that can be used totransform the JSON response returned from the server. For examplea JMESPath of 'items | length(@)' applied to the API server responsefor the URLPath '/apis/apps/v1/deployments' will return the total countof deployments across all namespaces.", MarkdownDescription: "JMESPath is an optional JSON Match Expression that can be used totransform the JSON response returned from the server. For examplea JMESPath of 'items | length(@)' applied to the API server responsefor the URLPath '/apis/apps/v1/deployments' will return the total countof deployments across all namespaces.", @@ -628,8 +638,8 @@ func (r *KyvernoIoCleanupPolicyV2Manifest) Schema(_ context.Context, _ datasourc "name": schema.StringAttribute{ Description: "Name is the variable name.", MarkdownDescription: "Name is the variable name.", - Required: false, - Optional: true, + Required: true, + Optional: false, Computed: false, }, diff --git a/internal/provider/kyverno_io_v2/kyverno_io_cluster_cleanup_policy_v2_manifest.go b/internal/provider/kyverno_io_v2/kyverno_io_cluster_cleanup_policy_v2_manifest.go index 710f39489..ad3158183 100644 --- a/internal/provider/kyverno_io_v2/kyverno_io_cluster_cleanup_policy_v2_manifest.go +++ b/internal/provider/kyverno_io_v2/kyverno_io_cluster_cleanup_policy_v2_manifest.go @@ -62,8 +62,9 @@ type KyvernoIoClusterCleanupPolicyV2ManifestData struct { Key *string `tfsdk:"key" json:"key,omitempty"` Value *map[string]string `tfsdk:"value" json:"value,omitempty"` } `tfsdk:"data" json:"data,omitempty"` - JmesPath *string `tfsdk:"jmes_path" json:"jmesPath,omitempty"` - Method *string `tfsdk:"method" json:"method,omitempty"` + Default *map[string]string `tfsdk:"default" json:"default,omitempty"` + JmesPath *string `tfsdk:"jmes_path" json:"jmesPath,omitempty"` + Method *string `tfsdk:"method" json:"method,omitempty"` Service *struct { CaBundle *string `tfsdk:"ca_bundle" json:"caBundle,omitempty"` Url *string `tfsdk:"url" json:"url,omitempty"` @@ -445,6 +446,15 @@ func (r *KyvernoIoClusterCleanupPolicyV2Manifest) Schema(_ context.Context, _ da Computed: false, }, + "default": schema.MapAttribute{ + Description: "Default is an optional arbitrary JSON object that the context may take if the apiCallreturns error", + MarkdownDescription: "Default is an optional arbitrary JSON object that the context may take if the apiCallreturns error", + ElementType: types.StringType, + Required: false, + Optional: true, + Computed: false, + }, + "jmes_path": schema.StringAttribute{ Description: "JMESPath is an optional JSON Match Expression that can be used totransform the JSON response returned from the server. For examplea JMESPath of 'items | length(@)' applied to the API server responsefor the URLPath '/apis/apps/v1/deployments' will return the total countof deployments across all namespaces.", MarkdownDescription: "JMESPath is an optional JSON Match Expression that can be used totransform the JSON response returned from the server. For examplea JMESPath of 'items | length(@)' applied to the API server responsefor the URLPath '/apis/apps/v1/deployments' will return the total countof deployments across all namespaces.", @@ -615,8 +625,8 @@ func (r *KyvernoIoClusterCleanupPolicyV2Manifest) Schema(_ context.Context, _ da "name": schema.StringAttribute{ Description: "Name is the variable name.", MarkdownDescription: "Name is the variable name.", - Required: false, - Optional: true, + Required: true, + Optional: false, Computed: false, }, diff --git a/internal/provider/kyverno_io_v2beta1/kyverno_io_cleanup_policy_v2beta1_manifest.go b/internal/provider/kyverno_io_v2beta1/kyverno_io_cleanup_policy_v2beta1_manifest.go index e2fd24cdc..87cdfb67a 100644 --- a/internal/provider/kyverno_io_v2beta1/kyverno_io_cleanup_policy_v2beta1_manifest.go +++ b/internal/provider/kyverno_io_v2beta1/kyverno_io_cleanup_policy_v2beta1_manifest.go @@ -63,8 +63,9 @@ type KyvernoIoCleanupPolicyV2Beta1ManifestData struct { Key *string `tfsdk:"key" json:"key,omitempty"` Value *map[string]string `tfsdk:"value" json:"value,omitempty"` } `tfsdk:"data" json:"data,omitempty"` - JmesPath *string `tfsdk:"jmes_path" json:"jmesPath,omitempty"` - Method *string `tfsdk:"method" json:"method,omitempty"` + Default *map[string]string `tfsdk:"default" json:"default,omitempty"` + JmesPath *string `tfsdk:"jmes_path" json:"jmesPath,omitempty"` + Method *string `tfsdk:"method" json:"method,omitempty"` Service *struct { CaBundle *string `tfsdk:"ca_bundle" json:"caBundle,omitempty"` Url *string `tfsdk:"url" json:"url,omitempty"` @@ -458,6 +459,15 @@ func (r *KyvernoIoCleanupPolicyV2Beta1Manifest) Schema(_ context.Context, _ data Computed: false, }, + "default": schema.MapAttribute{ + Description: "Default is an optional arbitrary JSON object that the context may take if the apiCallreturns error", + MarkdownDescription: "Default is an optional arbitrary JSON object that the context may take if the apiCallreturns error", + ElementType: types.StringType, + Required: false, + Optional: true, + Computed: false, + }, + "jmes_path": schema.StringAttribute{ Description: "JMESPath is an optional JSON Match Expression that can be used totransform the JSON response returned from the server. For examplea JMESPath of 'items | length(@)' applied to the API server responsefor the URLPath '/apis/apps/v1/deployments' will return the total countof deployments across all namespaces.", MarkdownDescription: "JMESPath is an optional JSON Match Expression that can be used totransform the JSON response returned from the server. For examplea JMESPath of 'items | length(@)' applied to the API server responsefor the URLPath '/apis/apps/v1/deployments' will return the total countof deployments across all namespaces.", @@ -628,8 +638,8 @@ func (r *KyvernoIoCleanupPolicyV2Beta1Manifest) Schema(_ context.Context, _ data "name": schema.StringAttribute{ Description: "Name is the variable name.", MarkdownDescription: "Name is the variable name.", - Required: false, - Optional: true, + Required: true, + Optional: false, Computed: false, }, diff --git a/internal/provider/kyverno_io_v2beta1/kyverno_io_cluster_cleanup_policy_v2beta1_manifest.go b/internal/provider/kyverno_io_v2beta1/kyverno_io_cluster_cleanup_policy_v2beta1_manifest.go index db350d222..8d3d252af 100644 --- a/internal/provider/kyverno_io_v2beta1/kyverno_io_cluster_cleanup_policy_v2beta1_manifest.go +++ b/internal/provider/kyverno_io_v2beta1/kyverno_io_cluster_cleanup_policy_v2beta1_manifest.go @@ -62,8 +62,9 @@ type KyvernoIoClusterCleanupPolicyV2Beta1ManifestData struct { Key *string `tfsdk:"key" json:"key,omitempty"` Value *map[string]string `tfsdk:"value" json:"value,omitempty"` } `tfsdk:"data" json:"data,omitempty"` - JmesPath *string `tfsdk:"jmes_path" json:"jmesPath,omitempty"` - Method *string `tfsdk:"method" json:"method,omitempty"` + Default *map[string]string `tfsdk:"default" json:"default,omitempty"` + JmesPath *string `tfsdk:"jmes_path" json:"jmesPath,omitempty"` + Method *string `tfsdk:"method" json:"method,omitempty"` Service *struct { CaBundle *string `tfsdk:"ca_bundle" json:"caBundle,omitempty"` Url *string `tfsdk:"url" json:"url,omitempty"` @@ -445,6 +446,15 @@ func (r *KyvernoIoClusterCleanupPolicyV2Beta1Manifest) Schema(_ context.Context, Computed: false, }, + "default": schema.MapAttribute{ + Description: "Default is an optional arbitrary JSON object that the context may take if the apiCallreturns error", + MarkdownDescription: "Default is an optional arbitrary JSON object that the context may take if the apiCallreturns error", + ElementType: types.StringType, + Required: false, + Optional: true, + Computed: false, + }, + "jmes_path": schema.StringAttribute{ Description: "JMESPath is an optional JSON Match Expression that can be used totransform the JSON response returned from the server. For examplea JMESPath of 'items | length(@)' applied to the API server responsefor the URLPath '/apis/apps/v1/deployments' will return the total countof deployments across all namespaces.", MarkdownDescription: "JMESPath is an optional JSON Match Expression that can be used totransform the JSON response returned from the server. For examplea JMESPath of 'items | length(@)' applied to the API server responsefor the URLPath '/apis/apps/v1/deployments' will return the total countof deployments across all namespaces.", @@ -615,8 +625,8 @@ func (r *KyvernoIoClusterCleanupPolicyV2Beta1Manifest) Schema(_ context.Context, "name": schema.StringAttribute{ Description: "Name is the variable name.", MarkdownDescription: "Name is the variable name.", - Required: false, - Optional: true, + Required: true, + Optional: false, Computed: false, }, diff --git a/internal/provider/kyverno_io_v2beta1/kyverno_io_cluster_policy_v2beta1_manifest.go b/internal/provider/kyverno_io_v2beta1/kyverno_io_cluster_policy_v2beta1_manifest.go index 842a2c613..17f92365e 100644 --- a/internal/provider/kyverno_io_v2beta1/kyverno_io_cluster_policy_v2beta1_manifest.go +++ b/internal/provider/kyverno_io_v2beta1/kyverno_io_cluster_policy_v2beta1_manifest.go @@ -61,8 +61,9 @@ type KyvernoIoClusterPolicyV2Beta1ManifestData struct { Key *string `tfsdk:"key" json:"key,omitempty"` Value *map[string]string `tfsdk:"value" json:"value,omitempty"` } `tfsdk:"data" json:"data,omitempty"` - JmesPath *string `tfsdk:"jmes_path" json:"jmesPath,omitempty"` - Method *string `tfsdk:"method" json:"method,omitempty"` + Default *map[string]string `tfsdk:"default" json:"default,omitempty"` + JmesPath *string `tfsdk:"jmes_path" json:"jmesPath,omitempty"` + Method *string `tfsdk:"method" json:"method,omitempty"` Service *struct { CaBundle *string `tfsdk:"ca_bundle" json:"caBundle,omitempty"` Url *string `tfsdk:"url" json:"url,omitempty"` @@ -206,8 +207,9 @@ type KyvernoIoClusterPolicyV2Beta1ManifestData struct { Key *string `tfsdk:"key" json:"key,omitempty"` Value *map[string]string `tfsdk:"value" json:"value,omitempty"` } `tfsdk:"data" json:"data,omitempty"` - JmesPath *string `tfsdk:"jmes_path" json:"jmesPath,omitempty"` - Method *string `tfsdk:"method" json:"method,omitempty"` + Default *map[string]string `tfsdk:"default" json:"default,omitempty"` + JmesPath *string `tfsdk:"jmes_path" json:"jmesPath,omitempty"` + Method *string `tfsdk:"method" json:"method,omitempty"` Service *struct { CaBundle *string `tfsdk:"ca_bundle" json:"caBundle,omitempty"` Url *string `tfsdk:"url" json:"url,omitempty"` @@ -346,8 +348,9 @@ type KyvernoIoClusterPolicyV2Beta1ManifestData struct { Key *string `tfsdk:"key" json:"key,omitempty"` Value *map[string]string `tfsdk:"value" json:"value,omitempty"` } `tfsdk:"data" json:"data,omitempty"` - JmesPath *string `tfsdk:"jmes_path" json:"jmesPath,omitempty"` - Method *string `tfsdk:"method" json:"method,omitempty"` + Default *map[string]string `tfsdk:"default" json:"default,omitempty"` + JmesPath *string `tfsdk:"jmes_path" json:"jmesPath,omitempty"` + Method *string `tfsdk:"method" json:"method,omitempty"` Service *struct { CaBundle *string `tfsdk:"ca_bundle" json:"caBundle,omitempty"` Url *string `tfsdk:"url" json:"url,omitempty"` @@ -409,8 +412,9 @@ type KyvernoIoClusterPolicyV2Beta1ManifestData struct { Key *string `tfsdk:"key" json:"key,omitempty"` Value *map[string]string `tfsdk:"value" json:"value,omitempty"` } `tfsdk:"data" json:"data,omitempty"` - JmesPath *string `tfsdk:"jmes_path" json:"jmesPath,omitempty"` - Method *string `tfsdk:"method" json:"method,omitempty"` + Default *map[string]string `tfsdk:"default" json:"default,omitempty"` + JmesPath *string `tfsdk:"jmes_path" json:"jmesPath,omitempty"` + Method *string `tfsdk:"method" json:"method,omitempty"` Service *struct { CaBundle *string `tfsdk:"ca_bundle" json:"caBundle,omitempty"` Url *string `tfsdk:"url" json:"url,omitempty"` @@ -537,8 +541,9 @@ type KyvernoIoClusterPolicyV2Beta1ManifestData struct { Key *string `tfsdk:"key" json:"key,omitempty"` Value *map[string]string `tfsdk:"value" json:"value,omitempty"` } `tfsdk:"data" json:"data,omitempty"` - JmesPath *string `tfsdk:"jmes_path" json:"jmesPath,omitempty"` - Method *string `tfsdk:"method" json:"method,omitempty"` + Default *map[string]string `tfsdk:"default" json:"default,omitempty"` + JmesPath *string `tfsdk:"jmes_path" json:"jmesPath,omitempty"` + Method *string `tfsdk:"method" json:"method,omitempty"` Service *struct { CaBundle *string `tfsdk:"ca_bundle" json:"caBundle,omitempty"` Url *string `tfsdk:"url" json:"url,omitempty"` @@ -649,7 +654,8 @@ type KyvernoIoClusterPolicyV2Beta1ManifestData struct { } `tfsdk:"secret" json:"secret,omitempty"` SignatureAlgorithm *string `tfsdk:"signature_algorithm" json:"signatureAlgorithm,omitempty"` } `tfsdk:"keys" json:"keys,omitempty"` - Repository *string `tfsdk:"repository" json:"repository,omitempty"` + Repository *string `tfsdk:"repository" json:"repository,omitempty"` + SignatureAlgorithm *string `tfsdk:"signature_algorithm" json:"signatureAlgorithm,omitempty"` } `tfsdk:"entries" json:"entries,omitempty"` } `tfsdk:"attestors" json:"attestors,omitempty"` DryRun *struct { @@ -739,7 +745,8 @@ type KyvernoIoClusterPolicyV2Beta1ManifestData struct { } `tfsdk:"secret" json:"secret,omitempty"` SignatureAlgorithm *string `tfsdk:"signature_algorithm" json:"signatureAlgorithm,omitempty"` } `tfsdk:"keys" json:"keys,omitempty"` - Repository *string `tfsdk:"repository" json:"repository,omitempty"` + Repository *string `tfsdk:"repository" json:"repository,omitempty"` + SignatureAlgorithm *string `tfsdk:"signature_algorithm" json:"signatureAlgorithm,omitempty"` } `tfsdk:"entries" json:"entries,omitempty"` } `tfsdk:"attestors" json:"attestors,omitempty"` Conditions *[]struct { @@ -756,6 +763,7 @@ type KyvernoIoClusterPolicyV2Beta1ManifestData struct { Value *map[string]string `tfsdk:"value" json:"value,omitempty"` } `tfsdk:"any" json:"any,omitempty"` } `tfsdk:"conditions" json:"conditions,omitempty"` + Name *string `tfsdk:"name" json:"name,omitempty"` PredicateType *string `tfsdk:"predicate_type" json:"predicateType,omitempty"` Type *string `tfsdk:"type" json:"type,omitempty"` } `tfsdk:"attestations" json:"attestations,omitempty"` @@ -815,7 +823,8 @@ type KyvernoIoClusterPolicyV2Beta1ManifestData struct { } `tfsdk:"secret" json:"secret,omitempty"` SignatureAlgorithm *string `tfsdk:"signature_algorithm" json:"signatureAlgorithm,omitempty"` } `tfsdk:"keys" json:"keys,omitempty"` - Repository *string `tfsdk:"repository" json:"repository,omitempty"` + Repository *string `tfsdk:"repository" json:"repository,omitempty"` + SignatureAlgorithm *string `tfsdk:"signature_algorithm" json:"signatureAlgorithm,omitempty"` } `tfsdk:"entries" json:"entries,omitempty"` } `tfsdk:"attestors" json:"attestors,omitempty"` FailureAction *string `tfsdk:"failure_action" json:"failureAction,omitempty"` @@ -831,7 +840,13 @@ type KyvernoIoClusterPolicyV2Beta1ManifestData struct { SkipImageReferences *[]string `tfsdk:"skip_image_references" json:"skipImageReferences,omitempty"` Type *string `tfsdk:"type" json:"type,omitempty"` UseCache *bool `tfsdk:"use_cache" json:"useCache,omitempty"` - VerifyDigest *bool `tfsdk:"verify_digest" json:"verifyDigest,omitempty"` + Validate *struct { + Deny *struct { + Conditions *map[string]string `tfsdk:"conditions" json:"conditions,omitempty"` + } `tfsdk:"deny" json:"deny,omitempty"` + Message *string `tfsdk:"message" json:"message,omitempty"` + } `tfsdk:"validate" json:"validate,omitempty"` + VerifyDigest *bool `tfsdk:"verify_digest" json:"verifyDigest,omitempty"` } `tfsdk:"verify_images" json:"verifyImages,omitempty"` } `tfsdk:"rules" json:"rules,omitempty"` SchemaValidation *bool `tfsdk:"schema_validation" json:"schemaValidation,omitempty"` @@ -1057,6 +1072,15 @@ func (r *KyvernoIoClusterPolicyV2Beta1Manifest) Schema(_ context.Context, _ data Computed: false, }, + "default": schema.MapAttribute{ + Description: "Default is an optional arbitrary JSON object that the context may take if the apiCallreturns error", + MarkdownDescription: "Default is an optional arbitrary JSON object that the context may take if the apiCallreturns error", + ElementType: types.StringType, + Required: false, + Optional: true, + Computed: false, + }, + "jmes_path": schema.StringAttribute{ Description: "JMESPath is an optional JSON Match Expression that can be used totransform the JSON response returned from the server. For examplea JMESPath of 'items | length(@)' applied to the API server responsefor the URLPath '/apis/apps/v1/deployments' will return the total countof deployments across all namespaces.", MarkdownDescription: "JMESPath is an optional JSON Match Expression that can be used totransform the JSON response returned from the server. For examplea JMESPath of 'items | length(@)' applied to the API server responsefor the URLPath '/apis/apps/v1/deployments' will return the total countof deployments across all namespaces.", @@ -1227,8 +1251,8 @@ func (r *KyvernoIoClusterPolicyV2Beta1Manifest) Schema(_ context.Context, _ data "name": schema.StringAttribute{ Description: "Name is the variable name.", MarkdownDescription: "Name is the variable name.", - Required: false, - Optional: true, + Required: true, + Optional: false, Computed: false, }, @@ -2047,6 +2071,15 @@ func (r *KyvernoIoClusterPolicyV2Beta1Manifest) Schema(_ context.Context, _ data Computed: false, }, + "default": schema.MapAttribute{ + Description: "Default is an optional arbitrary JSON object that the context may take if the apiCallreturns error", + MarkdownDescription: "Default is an optional arbitrary JSON object that the context may take if the apiCallreturns error", + ElementType: types.StringType, + Required: false, + Optional: true, + Computed: false, + }, + "jmes_path": schema.StringAttribute{ Description: "JMESPath is an optional JSON Match Expression that can be used totransform the JSON response returned from the server. For examplea JMESPath of 'items | length(@)' applied to the API server responsefor the URLPath '/apis/apps/v1/deployments' will return the total countof deployments across all namespaces.", MarkdownDescription: "JMESPath is an optional JSON Match Expression that can be used totransform the JSON response returned from the server. For examplea JMESPath of 'items | length(@)' applied to the API server responsefor the URLPath '/apis/apps/v1/deployments' will return the total countof deployments across all namespaces.", @@ -2217,8 +2250,8 @@ func (r *KyvernoIoClusterPolicyV2Beta1Manifest) Schema(_ context.Context, _ data "name": schema.StringAttribute{ Description: "Name is the variable name.", MarkdownDescription: "Name is the variable name.", - Required: false, - Optional: true, + Required: true, + Optional: false, Computed: false, }, @@ -3032,6 +3065,15 @@ func (r *KyvernoIoClusterPolicyV2Beta1Manifest) Schema(_ context.Context, _ data Computed: false, }, + "default": schema.MapAttribute{ + Description: "Default is an optional arbitrary JSON object that the context may take if the apiCallreturns error", + MarkdownDescription: "Default is an optional arbitrary JSON object that the context may take if the apiCallreturns error", + ElementType: types.StringType, + Required: false, + Optional: true, + Computed: false, + }, + "jmes_path": schema.StringAttribute{ Description: "JMESPath is an optional JSON Match Expression that can be used totransform the JSON response returned from the server. For examplea JMESPath of 'items | length(@)' applied to the API server responsefor the URLPath '/apis/apps/v1/deployments' will return the total countof deployments across all namespaces.", MarkdownDescription: "JMESPath is an optional JSON Match Expression that can be used totransform the JSON response returned from the server. For examplea JMESPath of 'items | length(@)' applied to the API server responsefor the URLPath '/apis/apps/v1/deployments' will return the total countof deployments across all namespaces.", @@ -3202,8 +3244,8 @@ func (r *KyvernoIoClusterPolicyV2Beta1Manifest) Schema(_ context.Context, _ data "name": schema.StringAttribute{ Description: "Name is the variable name.", MarkdownDescription: "Name is the variable name.", - Required: false, - Optional: true, + Required: true, + Optional: false, Computed: false, }, @@ -3479,6 +3521,15 @@ func (r *KyvernoIoClusterPolicyV2Beta1Manifest) Schema(_ context.Context, _ data Computed: false, }, + "default": schema.MapAttribute{ + Description: "Default is an optional arbitrary JSON object that the context may take if the apiCallreturns error", + MarkdownDescription: "Default is an optional arbitrary JSON object that the context may take if the apiCallreturns error", + ElementType: types.StringType, + Required: false, + Optional: true, + Computed: false, + }, + "jmes_path": schema.StringAttribute{ Description: "JMESPath is an optional JSON Match Expression that can be used totransform the JSON response returned from the server. For examplea JMESPath of 'items | length(@)' applied to the API server responsefor the URLPath '/apis/apps/v1/deployments' will return the total countof deployments across all namespaces.", MarkdownDescription: "JMESPath is an optional JSON Match Expression that can be used totransform the JSON response returned from the server. For examplea JMESPath of 'items | length(@)' applied to the API server responsefor the URLPath '/apis/apps/v1/deployments' will return the total countof deployments across all namespaces.", @@ -3649,8 +3700,8 @@ func (r *KyvernoIoClusterPolicyV2Beta1Manifest) Schema(_ context.Context, _ data "name": schema.StringAttribute{ Description: "Name is the variable name.", MarkdownDescription: "Name is the variable name.", - Required: false, - Optional: true, + Required: true, + Optional: false, Computed: false, }, @@ -4372,6 +4423,15 @@ func (r *KyvernoIoClusterPolicyV2Beta1Manifest) Schema(_ context.Context, _ data Computed: false, }, + "default": schema.MapAttribute{ + Description: "Default is an optional arbitrary JSON object that the context may take if the apiCallreturns error", + MarkdownDescription: "Default is an optional arbitrary JSON object that the context may take if the apiCallreturns error", + ElementType: types.StringType, + Required: false, + Optional: true, + Computed: false, + }, + "jmes_path": schema.StringAttribute{ Description: "JMESPath is an optional JSON Match Expression that can be used totransform the JSON response returned from the server. For examplea JMESPath of 'items | length(@)' applied to the API server responsefor the URLPath '/apis/apps/v1/deployments' will return the total countof deployments across all namespaces.", MarkdownDescription: "JMESPath is an optional JSON Match Expression that can be used totransform the JSON response returned from the server. For examplea JMESPath of 'items | length(@)' applied to the API server responsefor the URLPath '/apis/apps/v1/deployments' will return the total countof deployments across all namespaces.", @@ -4542,8 +4602,8 @@ func (r *KyvernoIoClusterPolicyV2Beta1Manifest) Schema(_ context.Context, _ data "name": schema.StringAttribute{ Description: "Name is the variable name.", MarkdownDescription: "Name is the variable name.", - Required: false, - Optional: true, + Required: true, + Optional: false, Computed: false, }, @@ -5129,8 +5189,8 @@ func (r *KyvernoIoClusterPolicyV2Beta1Manifest) Schema(_ context.Context, _ data }, "signature_algorithm": schema.StringAttribute{ - Description: "Specify signature algorithm for public keys. Supported values are sha224, sha256, sha384 and sha512.", - MarkdownDescription: "Specify signature algorithm for public keys. Supported values are sha224, sha256, sha384 and sha512.", + Description: "Deprecated. Use attestor.signatureAlgorithm instead.", + MarkdownDescription: "Deprecated. Use attestor.signatureAlgorithm instead.", Required: false, Optional: true, Computed: false, @@ -5148,6 +5208,14 @@ func (r *KyvernoIoClusterPolicyV2Beta1Manifest) Schema(_ context.Context, _ data Optional: true, Computed: false, }, + + "signature_algorithm": schema.StringAttribute{ + Description: "Specify signature algorithm for public keys. Supported values are sha224, sha256, sha384 and sha512.", + MarkdownDescription: "Specify signature algorithm for public keys. Supported values are sha224, sha256, sha384 and sha512.", + Required: false, + Optional: true, + Computed: false, + }, }, }, Required: false, @@ -5747,8 +5815,8 @@ func (r *KyvernoIoClusterPolicyV2Beta1Manifest) Schema(_ context.Context, _ data }, "signature_algorithm": schema.StringAttribute{ - Description: "Specify signature algorithm for public keys. Supported values are sha224, sha256, sha384 and sha512.", - MarkdownDescription: "Specify signature algorithm for public keys. Supported values are sha224, sha256, sha384 and sha512.", + Description: "Deprecated. Use attestor.signatureAlgorithm instead.", + MarkdownDescription: "Deprecated. Use attestor.signatureAlgorithm instead.", Required: false, Optional: true, Computed: false, @@ -5766,6 +5834,14 @@ func (r *KyvernoIoClusterPolicyV2Beta1Manifest) Schema(_ context.Context, _ data Optional: true, Computed: false, }, + + "signature_algorithm": schema.StringAttribute{ + Description: "Specify signature algorithm for public keys. Supported values are sha224, sha256, sha384 and sha512.", + MarkdownDescription: "Specify signature algorithm for public keys. Supported values are sha224, sha256, sha384 and sha512.", + Required: false, + Optional: true, + Computed: false, + }, }, }, Required: false, @@ -5886,6 +5962,14 @@ func (r *KyvernoIoClusterPolicyV2Beta1Manifest) Schema(_ context.Context, _ data Computed: false, }, + "name": schema.StringAttribute{ + Description: "Name is the variable name.", + MarkdownDescription: "Name is the variable name.", + Required: false, + Optional: true, + Computed: false, + }, + "predicate_type": schema.StringAttribute{ Description: "Deprecated in favour of 'Type', to be removed soon", MarkdownDescription: "Deprecated in favour of 'Type', to be removed soon", @@ -6274,8 +6358,8 @@ func (r *KyvernoIoClusterPolicyV2Beta1Manifest) Schema(_ context.Context, _ data }, "signature_algorithm": schema.StringAttribute{ - Description: "Specify signature algorithm for public keys. Supported values are sha224, sha256, sha384 and sha512.", - MarkdownDescription: "Specify signature algorithm for public keys. Supported values are sha224, sha256, sha384 and sha512.", + Description: "Deprecated. Use attestor.signatureAlgorithm instead.", + MarkdownDescription: "Deprecated. Use attestor.signatureAlgorithm instead.", Required: false, Optional: true, Computed: false, @@ -6293,6 +6377,14 @@ func (r *KyvernoIoClusterPolicyV2Beta1Manifest) Schema(_ context.Context, _ data Optional: true, Computed: false, }, + + "signature_algorithm": schema.StringAttribute{ + Description: "Specify signature algorithm for public keys. Supported values are sha224, sha256, sha384 and sha512.", + MarkdownDescription: "Specify signature algorithm for public keys. Supported values are sha224, sha256, sha384 and sha512.", + Required: false, + Optional: true, + Computed: false, + }, }, }, Required: false, @@ -6413,6 +6505,41 @@ func (r *KyvernoIoClusterPolicyV2Beta1Manifest) Schema(_ context.Context, _ data Computed: false, }, + "validate": schema.SingleNestedAttribute{ + Description: "Validation checks conditions across multiple imageverification attestations or context entries", + MarkdownDescription: "Validation checks conditions across multiple imageverification attestations or context entries", + Attributes: map[string]schema.Attribute{ + "deny": schema.SingleNestedAttribute{ + Description: "Deny defines conditions used to pass or fail a validation rule.", + MarkdownDescription: "Deny defines conditions used to pass or fail a validation rule.", + Attributes: map[string]schema.Attribute{ + "conditions": schema.MapAttribute{ + Description: "Multiple conditions can be declared under an 'any' or 'all' statement. A direct listof conditions (without 'any' or 'all' statements) is also supported for backwards compatibilitybut will be deprecated in the next major release.See: https://kyverno.io/docs/writing-policies/validate/#deny-rules", + MarkdownDescription: "Multiple conditions can be declared under an 'any' or 'all' statement. A direct listof conditions (without 'any' or 'all' statements) is also supported for backwards compatibilitybut will be deprecated in the next major release.See: https://kyverno.io/docs/writing-policies/validate/#deny-rules", + ElementType: types.StringType, + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + + "message": schema.StringAttribute{ + Description: "Message specifies a custom message to be displayed on failure.", + MarkdownDescription: "Message specifies a custom message to be displayed on failure.", + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + "verify_digest": schema.BoolAttribute{ Description: "VerifyDigest validates that images have a digest.", MarkdownDescription: "VerifyDigest validates that images have a digest.", diff --git a/internal/provider/kyverno_io_v2beta1/kyverno_io_policy_v2beta1_manifest.go b/internal/provider/kyverno_io_v2beta1/kyverno_io_policy_v2beta1_manifest.go index 3a0ac78ac..6bda871d0 100644 --- a/internal/provider/kyverno_io_v2beta1/kyverno_io_policy_v2beta1_manifest.go +++ b/internal/provider/kyverno_io_v2beta1/kyverno_io_policy_v2beta1_manifest.go @@ -62,8 +62,9 @@ type KyvernoIoPolicyV2Beta1ManifestData struct { Key *string `tfsdk:"key" json:"key,omitempty"` Value *map[string]string `tfsdk:"value" json:"value,omitempty"` } `tfsdk:"data" json:"data,omitempty"` - JmesPath *string `tfsdk:"jmes_path" json:"jmesPath,omitempty"` - Method *string `tfsdk:"method" json:"method,omitempty"` + Default *map[string]string `tfsdk:"default" json:"default,omitempty"` + JmesPath *string `tfsdk:"jmes_path" json:"jmesPath,omitempty"` + Method *string `tfsdk:"method" json:"method,omitempty"` Service *struct { CaBundle *string `tfsdk:"ca_bundle" json:"caBundle,omitempty"` Url *string `tfsdk:"url" json:"url,omitempty"` @@ -207,8 +208,9 @@ type KyvernoIoPolicyV2Beta1ManifestData struct { Key *string `tfsdk:"key" json:"key,omitempty"` Value *map[string]string `tfsdk:"value" json:"value,omitempty"` } `tfsdk:"data" json:"data,omitempty"` - JmesPath *string `tfsdk:"jmes_path" json:"jmesPath,omitempty"` - Method *string `tfsdk:"method" json:"method,omitempty"` + Default *map[string]string `tfsdk:"default" json:"default,omitempty"` + JmesPath *string `tfsdk:"jmes_path" json:"jmesPath,omitempty"` + Method *string `tfsdk:"method" json:"method,omitempty"` Service *struct { CaBundle *string `tfsdk:"ca_bundle" json:"caBundle,omitempty"` Url *string `tfsdk:"url" json:"url,omitempty"` @@ -347,8 +349,9 @@ type KyvernoIoPolicyV2Beta1ManifestData struct { Key *string `tfsdk:"key" json:"key,omitempty"` Value *map[string]string `tfsdk:"value" json:"value,omitempty"` } `tfsdk:"data" json:"data,omitempty"` - JmesPath *string `tfsdk:"jmes_path" json:"jmesPath,omitempty"` - Method *string `tfsdk:"method" json:"method,omitempty"` + Default *map[string]string `tfsdk:"default" json:"default,omitempty"` + JmesPath *string `tfsdk:"jmes_path" json:"jmesPath,omitempty"` + Method *string `tfsdk:"method" json:"method,omitempty"` Service *struct { CaBundle *string `tfsdk:"ca_bundle" json:"caBundle,omitempty"` Url *string `tfsdk:"url" json:"url,omitempty"` @@ -410,8 +413,9 @@ type KyvernoIoPolicyV2Beta1ManifestData struct { Key *string `tfsdk:"key" json:"key,omitempty"` Value *map[string]string `tfsdk:"value" json:"value,omitempty"` } `tfsdk:"data" json:"data,omitempty"` - JmesPath *string `tfsdk:"jmes_path" json:"jmesPath,omitempty"` - Method *string `tfsdk:"method" json:"method,omitempty"` + Default *map[string]string `tfsdk:"default" json:"default,omitempty"` + JmesPath *string `tfsdk:"jmes_path" json:"jmesPath,omitempty"` + Method *string `tfsdk:"method" json:"method,omitempty"` Service *struct { CaBundle *string `tfsdk:"ca_bundle" json:"caBundle,omitempty"` Url *string `tfsdk:"url" json:"url,omitempty"` @@ -538,8 +542,9 @@ type KyvernoIoPolicyV2Beta1ManifestData struct { Key *string `tfsdk:"key" json:"key,omitempty"` Value *map[string]string `tfsdk:"value" json:"value,omitempty"` } `tfsdk:"data" json:"data,omitempty"` - JmesPath *string `tfsdk:"jmes_path" json:"jmesPath,omitempty"` - Method *string `tfsdk:"method" json:"method,omitempty"` + Default *map[string]string `tfsdk:"default" json:"default,omitempty"` + JmesPath *string `tfsdk:"jmes_path" json:"jmesPath,omitempty"` + Method *string `tfsdk:"method" json:"method,omitempty"` Service *struct { CaBundle *string `tfsdk:"ca_bundle" json:"caBundle,omitempty"` Url *string `tfsdk:"url" json:"url,omitempty"` @@ -650,7 +655,8 @@ type KyvernoIoPolicyV2Beta1ManifestData struct { } `tfsdk:"secret" json:"secret,omitempty"` SignatureAlgorithm *string `tfsdk:"signature_algorithm" json:"signatureAlgorithm,omitempty"` } `tfsdk:"keys" json:"keys,omitempty"` - Repository *string `tfsdk:"repository" json:"repository,omitempty"` + Repository *string `tfsdk:"repository" json:"repository,omitempty"` + SignatureAlgorithm *string `tfsdk:"signature_algorithm" json:"signatureAlgorithm,omitempty"` } `tfsdk:"entries" json:"entries,omitempty"` } `tfsdk:"attestors" json:"attestors,omitempty"` DryRun *struct { @@ -740,7 +746,8 @@ type KyvernoIoPolicyV2Beta1ManifestData struct { } `tfsdk:"secret" json:"secret,omitempty"` SignatureAlgorithm *string `tfsdk:"signature_algorithm" json:"signatureAlgorithm,omitempty"` } `tfsdk:"keys" json:"keys,omitempty"` - Repository *string `tfsdk:"repository" json:"repository,omitempty"` + Repository *string `tfsdk:"repository" json:"repository,omitempty"` + SignatureAlgorithm *string `tfsdk:"signature_algorithm" json:"signatureAlgorithm,omitempty"` } `tfsdk:"entries" json:"entries,omitempty"` } `tfsdk:"attestors" json:"attestors,omitempty"` Conditions *[]struct { @@ -757,6 +764,7 @@ type KyvernoIoPolicyV2Beta1ManifestData struct { Value *map[string]string `tfsdk:"value" json:"value,omitempty"` } `tfsdk:"any" json:"any,omitempty"` } `tfsdk:"conditions" json:"conditions,omitempty"` + Name *string `tfsdk:"name" json:"name,omitempty"` PredicateType *string `tfsdk:"predicate_type" json:"predicateType,omitempty"` Type *string `tfsdk:"type" json:"type,omitempty"` } `tfsdk:"attestations" json:"attestations,omitempty"` @@ -816,7 +824,8 @@ type KyvernoIoPolicyV2Beta1ManifestData struct { } `tfsdk:"secret" json:"secret,omitempty"` SignatureAlgorithm *string `tfsdk:"signature_algorithm" json:"signatureAlgorithm,omitempty"` } `tfsdk:"keys" json:"keys,omitempty"` - Repository *string `tfsdk:"repository" json:"repository,omitempty"` + Repository *string `tfsdk:"repository" json:"repository,omitempty"` + SignatureAlgorithm *string `tfsdk:"signature_algorithm" json:"signatureAlgorithm,omitempty"` } `tfsdk:"entries" json:"entries,omitempty"` } `tfsdk:"attestors" json:"attestors,omitempty"` FailureAction *string `tfsdk:"failure_action" json:"failureAction,omitempty"` @@ -832,7 +841,13 @@ type KyvernoIoPolicyV2Beta1ManifestData struct { SkipImageReferences *[]string `tfsdk:"skip_image_references" json:"skipImageReferences,omitempty"` Type *string `tfsdk:"type" json:"type,omitempty"` UseCache *bool `tfsdk:"use_cache" json:"useCache,omitempty"` - VerifyDigest *bool `tfsdk:"verify_digest" json:"verifyDigest,omitempty"` + Validate *struct { + Deny *struct { + Conditions *map[string]string `tfsdk:"conditions" json:"conditions,omitempty"` + } `tfsdk:"deny" json:"deny,omitempty"` + Message *string `tfsdk:"message" json:"message,omitempty"` + } `tfsdk:"validate" json:"validate,omitempty"` + VerifyDigest *bool `tfsdk:"verify_digest" json:"verifyDigest,omitempty"` } `tfsdk:"verify_images" json:"verifyImages,omitempty"` } `tfsdk:"rules" json:"rules,omitempty"` SchemaValidation *bool `tfsdk:"schema_validation" json:"schemaValidation,omitempty"` @@ -1070,6 +1085,15 @@ func (r *KyvernoIoPolicyV2Beta1Manifest) Schema(_ context.Context, _ datasource. Computed: false, }, + "default": schema.MapAttribute{ + Description: "Default is an optional arbitrary JSON object that the context may take if the apiCallreturns error", + MarkdownDescription: "Default is an optional arbitrary JSON object that the context may take if the apiCallreturns error", + ElementType: types.StringType, + Required: false, + Optional: true, + Computed: false, + }, + "jmes_path": schema.StringAttribute{ Description: "JMESPath is an optional JSON Match Expression that can be used totransform the JSON response returned from the server. For examplea JMESPath of 'items | length(@)' applied to the API server responsefor the URLPath '/apis/apps/v1/deployments' will return the total countof deployments across all namespaces.", MarkdownDescription: "JMESPath is an optional JSON Match Expression that can be used totransform the JSON response returned from the server. For examplea JMESPath of 'items | length(@)' applied to the API server responsefor the URLPath '/apis/apps/v1/deployments' will return the total countof deployments across all namespaces.", @@ -1240,8 +1264,8 @@ func (r *KyvernoIoPolicyV2Beta1Manifest) Schema(_ context.Context, _ datasource. "name": schema.StringAttribute{ Description: "Name is the variable name.", MarkdownDescription: "Name is the variable name.", - Required: false, - Optional: true, + Required: true, + Optional: false, Computed: false, }, @@ -2060,6 +2084,15 @@ func (r *KyvernoIoPolicyV2Beta1Manifest) Schema(_ context.Context, _ datasource. Computed: false, }, + "default": schema.MapAttribute{ + Description: "Default is an optional arbitrary JSON object that the context may take if the apiCallreturns error", + MarkdownDescription: "Default is an optional arbitrary JSON object that the context may take if the apiCallreturns error", + ElementType: types.StringType, + Required: false, + Optional: true, + Computed: false, + }, + "jmes_path": schema.StringAttribute{ Description: "JMESPath is an optional JSON Match Expression that can be used totransform the JSON response returned from the server. For examplea JMESPath of 'items | length(@)' applied to the API server responsefor the URLPath '/apis/apps/v1/deployments' will return the total countof deployments across all namespaces.", MarkdownDescription: "JMESPath is an optional JSON Match Expression that can be used totransform the JSON response returned from the server. For examplea JMESPath of 'items | length(@)' applied to the API server responsefor the URLPath '/apis/apps/v1/deployments' will return the total countof deployments across all namespaces.", @@ -2230,8 +2263,8 @@ func (r *KyvernoIoPolicyV2Beta1Manifest) Schema(_ context.Context, _ datasource. "name": schema.StringAttribute{ Description: "Name is the variable name.", MarkdownDescription: "Name is the variable name.", - Required: false, - Optional: true, + Required: true, + Optional: false, Computed: false, }, @@ -3045,6 +3078,15 @@ func (r *KyvernoIoPolicyV2Beta1Manifest) Schema(_ context.Context, _ datasource. Computed: false, }, + "default": schema.MapAttribute{ + Description: "Default is an optional arbitrary JSON object that the context may take if the apiCallreturns error", + MarkdownDescription: "Default is an optional arbitrary JSON object that the context may take if the apiCallreturns error", + ElementType: types.StringType, + Required: false, + Optional: true, + Computed: false, + }, + "jmes_path": schema.StringAttribute{ Description: "JMESPath is an optional JSON Match Expression that can be used totransform the JSON response returned from the server. For examplea JMESPath of 'items | length(@)' applied to the API server responsefor the URLPath '/apis/apps/v1/deployments' will return the total countof deployments across all namespaces.", MarkdownDescription: "JMESPath is an optional JSON Match Expression that can be used totransform the JSON response returned from the server. For examplea JMESPath of 'items | length(@)' applied to the API server responsefor the URLPath '/apis/apps/v1/deployments' will return the total countof deployments across all namespaces.", @@ -3215,8 +3257,8 @@ func (r *KyvernoIoPolicyV2Beta1Manifest) Schema(_ context.Context, _ datasource. "name": schema.StringAttribute{ Description: "Name is the variable name.", MarkdownDescription: "Name is the variable name.", - Required: false, - Optional: true, + Required: true, + Optional: false, Computed: false, }, @@ -3492,6 +3534,15 @@ func (r *KyvernoIoPolicyV2Beta1Manifest) Schema(_ context.Context, _ datasource. Computed: false, }, + "default": schema.MapAttribute{ + Description: "Default is an optional arbitrary JSON object that the context may take if the apiCallreturns error", + MarkdownDescription: "Default is an optional arbitrary JSON object that the context may take if the apiCallreturns error", + ElementType: types.StringType, + Required: false, + Optional: true, + Computed: false, + }, + "jmes_path": schema.StringAttribute{ Description: "JMESPath is an optional JSON Match Expression that can be used totransform the JSON response returned from the server. For examplea JMESPath of 'items | length(@)' applied to the API server responsefor the URLPath '/apis/apps/v1/deployments' will return the total countof deployments across all namespaces.", MarkdownDescription: "JMESPath is an optional JSON Match Expression that can be used totransform the JSON response returned from the server. For examplea JMESPath of 'items | length(@)' applied to the API server responsefor the URLPath '/apis/apps/v1/deployments' will return the total countof deployments across all namespaces.", @@ -3662,8 +3713,8 @@ func (r *KyvernoIoPolicyV2Beta1Manifest) Schema(_ context.Context, _ datasource. "name": schema.StringAttribute{ Description: "Name is the variable name.", MarkdownDescription: "Name is the variable name.", - Required: false, - Optional: true, + Required: true, + Optional: false, Computed: false, }, @@ -4385,6 +4436,15 @@ func (r *KyvernoIoPolicyV2Beta1Manifest) Schema(_ context.Context, _ datasource. Computed: false, }, + "default": schema.MapAttribute{ + Description: "Default is an optional arbitrary JSON object that the context may take if the apiCallreturns error", + MarkdownDescription: "Default is an optional arbitrary JSON object that the context may take if the apiCallreturns error", + ElementType: types.StringType, + Required: false, + Optional: true, + Computed: false, + }, + "jmes_path": schema.StringAttribute{ Description: "JMESPath is an optional JSON Match Expression that can be used totransform the JSON response returned from the server. For examplea JMESPath of 'items | length(@)' applied to the API server responsefor the URLPath '/apis/apps/v1/deployments' will return the total countof deployments across all namespaces.", MarkdownDescription: "JMESPath is an optional JSON Match Expression that can be used totransform the JSON response returned from the server. For examplea JMESPath of 'items | length(@)' applied to the API server responsefor the URLPath '/apis/apps/v1/deployments' will return the total countof deployments across all namespaces.", @@ -4555,8 +4615,8 @@ func (r *KyvernoIoPolicyV2Beta1Manifest) Schema(_ context.Context, _ datasource. "name": schema.StringAttribute{ Description: "Name is the variable name.", MarkdownDescription: "Name is the variable name.", - Required: false, - Optional: true, + Required: true, + Optional: false, Computed: false, }, @@ -5142,8 +5202,8 @@ func (r *KyvernoIoPolicyV2Beta1Manifest) Schema(_ context.Context, _ datasource. }, "signature_algorithm": schema.StringAttribute{ - Description: "Specify signature algorithm for public keys. Supported values are sha224, sha256, sha384 and sha512.", - MarkdownDescription: "Specify signature algorithm for public keys. Supported values are sha224, sha256, sha384 and sha512.", + Description: "Deprecated. Use attestor.signatureAlgorithm instead.", + MarkdownDescription: "Deprecated. Use attestor.signatureAlgorithm instead.", Required: false, Optional: true, Computed: false, @@ -5161,6 +5221,14 @@ func (r *KyvernoIoPolicyV2Beta1Manifest) Schema(_ context.Context, _ datasource. Optional: true, Computed: false, }, + + "signature_algorithm": schema.StringAttribute{ + Description: "Specify signature algorithm for public keys. Supported values are sha224, sha256, sha384 and sha512.", + MarkdownDescription: "Specify signature algorithm for public keys. Supported values are sha224, sha256, sha384 and sha512.", + Required: false, + Optional: true, + Computed: false, + }, }, }, Required: false, @@ -5760,8 +5828,8 @@ func (r *KyvernoIoPolicyV2Beta1Manifest) Schema(_ context.Context, _ datasource. }, "signature_algorithm": schema.StringAttribute{ - Description: "Specify signature algorithm for public keys. Supported values are sha224, sha256, sha384 and sha512.", - MarkdownDescription: "Specify signature algorithm for public keys. Supported values are sha224, sha256, sha384 and sha512.", + Description: "Deprecated. Use attestor.signatureAlgorithm instead.", + MarkdownDescription: "Deprecated. Use attestor.signatureAlgorithm instead.", Required: false, Optional: true, Computed: false, @@ -5779,6 +5847,14 @@ func (r *KyvernoIoPolicyV2Beta1Manifest) Schema(_ context.Context, _ datasource. Optional: true, Computed: false, }, + + "signature_algorithm": schema.StringAttribute{ + Description: "Specify signature algorithm for public keys. Supported values are sha224, sha256, sha384 and sha512.", + MarkdownDescription: "Specify signature algorithm for public keys. Supported values are sha224, sha256, sha384 and sha512.", + Required: false, + Optional: true, + Computed: false, + }, }, }, Required: false, @@ -5899,6 +5975,14 @@ func (r *KyvernoIoPolicyV2Beta1Manifest) Schema(_ context.Context, _ datasource. Computed: false, }, + "name": schema.StringAttribute{ + Description: "Name is the variable name.", + MarkdownDescription: "Name is the variable name.", + Required: false, + Optional: true, + Computed: false, + }, + "predicate_type": schema.StringAttribute{ Description: "Deprecated in favour of 'Type', to be removed soon", MarkdownDescription: "Deprecated in favour of 'Type', to be removed soon", @@ -6287,8 +6371,8 @@ func (r *KyvernoIoPolicyV2Beta1Manifest) Schema(_ context.Context, _ datasource. }, "signature_algorithm": schema.StringAttribute{ - Description: "Specify signature algorithm for public keys. Supported values are sha224, sha256, sha384 and sha512.", - MarkdownDescription: "Specify signature algorithm for public keys. Supported values are sha224, sha256, sha384 and sha512.", + Description: "Deprecated. Use attestor.signatureAlgorithm instead.", + MarkdownDescription: "Deprecated. Use attestor.signatureAlgorithm instead.", Required: false, Optional: true, Computed: false, @@ -6306,6 +6390,14 @@ func (r *KyvernoIoPolicyV2Beta1Manifest) Schema(_ context.Context, _ datasource. Optional: true, Computed: false, }, + + "signature_algorithm": schema.StringAttribute{ + Description: "Specify signature algorithm for public keys. Supported values are sha224, sha256, sha384 and sha512.", + MarkdownDescription: "Specify signature algorithm for public keys. Supported values are sha224, sha256, sha384 and sha512.", + Required: false, + Optional: true, + Computed: false, + }, }, }, Required: false, @@ -6426,6 +6518,41 @@ func (r *KyvernoIoPolicyV2Beta1Manifest) Schema(_ context.Context, _ datasource. Computed: false, }, + "validate": schema.SingleNestedAttribute{ + Description: "Validation checks conditions across multiple imageverification attestations or context entries", + MarkdownDescription: "Validation checks conditions across multiple imageverification attestations or context entries", + Attributes: map[string]schema.Attribute{ + "deny": schema.SingleNestedAttribute{ + Description: "Deny defines conditions used to pass or fail a validation rule.", + MarkdownDescription: "Deny defines conditions used to pass or fail a validation rule.", + Attributes: map[string]schema.Attribute{ + "conditions": schema.MapAttribute{ + Description: "Multiple conditions can be declared under an 'any' or 'all' statement. A direct listof conditions (without 'any' or 'all' statements) is also supported for backwards compatibilitybut will be deprecated in the next major release.See: https://kyverno.io/docs/writing-policies/validate/#deny-rules", + MarkdownDescription: "Multiple conditions can be declared under an 'any' or 'all' statement. A direct listof conditions (without 'any' or 'all' statements) is also supported for backwards compatibilitybut will be deprecated in the next major release.See: https://kyverno.io/docs/writing-policies/validate/#deny-rules", + ElementType: types.StringType, + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + + "message": schema.StringAttribute{ + Description: "Message specifies a custom message to be displayed on failure.", + MarkdownDescription: "Message specifies a custom message to be displayed on failure.", + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + "verify_digest": schema.BoolAttribute{ Description: "VerifyDigest validates that images have a digest.", MarkdownDescription: "VerifyDigest validates that images have a digest.", diff --git a/internal/provider/longhorn_io_v1beta2/longhorn_io_instance_manager_v1beta2_manifest.go b/internal/provider/longhorn_io_v1beta2/longhorn_io_instance_manager_v1beta2_manifest.go index 7a44306fd..4348b67ef 100644 --- a/internal/provider/longhorn_io_v1beta2/longhorn_io_instance_manager_v1beta2_manifest.go +++ b/internal/provider/longhorn_io_v1beta2/longhorn_io_instance_manager_v1beta2_manifest.go @@ -43,10 +43,15 @@ type LonghornIoInstanceManagerV1Beta2ManifestData struct { } `tfsdk:"metadata" json:"metadata"` Spec *struct { - DataEngine *string `tfsdk:"data_engine" json:"dataEngine,omitempty"` - Image *string `tfsdk:"image" json:"image,omitempty"` - NodeID *string `tfsdk:"node_id" json:"nodeID,omitempty"` - Type *string `tfsdk:"type" json:"type,omitempty"` + DataEngine *string `tfsdk:"data_engine" json:"dataEngine,omitempty"` + DataEngineSpec *struct { + V2 *struct { + CpuMask *string `tfsdk:"cpu_mask" json:"cpuMask,omitempty"` + } `tfsdk:"v2" json:"v2,omitempty"` + } `tfsdk:"data_engine_spec" json:"dataEngineSpec,omitempty"` + Image *string `tfsdk:"image" json:"image,omitempty"` + NodeID *string `tfsdk:"node_id" json:"nodeID,omitempty"` + Type *string `tfsdk:"type" json:"type,omitempty"` } `tfsdk:"spec" json:"spec,omitempty"` } @@ -135,6 +140,32 @@ func (r *LonghornIoInstanceManagerV1Beta2Manifest) Schema(_ context.Context, _ d Computed: false, }, + "data_engine_spec": schema.SingleNestedAttribute{ + Description: "", + MarkdownDescription: "", + Attributes: map[string]schema.Attribute{ + "v2": schema.SingleNestedAttribute{ + Description: "", + MarkdownDescription: "", + Attributes: map[string]schema.Attribute{ + "cpu_mask": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + "image": schema.StringAttribute{ Description: "", MarkdownDescription: "", diff --git a/internal/provider/metal3_io_v1alpha1/metal3_io_bare_metal_host_v1alpha1_manifest.go b/internal/provider/metal3_io_v1alpha1/metal3_io_bare_metal_host_v1alpha1_manifest.go index e7a4b2425..20c0627ff 100644 --- a/internal/provider/metal3_io_v1alpha1/metal3_io_bare_metal_host_v1alpha1_manifest.go +++ b/internal/provider/metal3_io_v1alpha1/metal3_io_bare_metal_host_v1alpha1_manifest.go @@ -228,8 +228,8 @@ func (r *Metal3IoBareMetalHostV1Alpha1Manifest) Schema(_ context.Context, _ data }, "automated_cleaning_mode": schema.StringAttribute{ - Description: "When set to disabled, automated cleaning will be avoided during provisioning and deprovisioning.", - MarkdownDescription: "When set to disabled, automated cleaning will be avoided during provisioning and deprovisioning.", + Description: "When set to disabled, automated cleaning will be skipped during provisioning and deprovisioning.", + MarkdownDescription: "When set to disabled, automated cleaning will be skipped during provisioning and deprovisioning.", Required: false, Optional: true, Computed: false, @@ -239,12 +239,12 @@ func (r *Metal3IoBareMetalHostV1Alpha1Manifest) Schema(_ context.Context, _ data }, "bmc": schema.SingleNestedAttribute{ - Description: "How do we connect to the BMC?", - MarkdownDescription: "How do we connect to the BMC?", + Description: "How do we connect to the BMC (Baseboard Management Controller) on the host?", + MarkdownDescription: "How do we connect to the BMC (Baseboard Management Controller) on the host?", Attributes: map[string]schema.Attribute{ "address": schema.StringAttribute{ - Description: "Address holds the URL for accessing the controller on the network.", - MarkdownDescription: "Address holds the URL for accessing the controller on the network.", + Description: "Address holds the URL for accessing the controller on the network. The scheme part designates the driver to use with the host.", + MarkdownDescription: "Address holds the URL for accessing the controller on the network. The scheme part designates the driver to use with the host.", Required: true, Optional: false, Computed: false, @@ -272,8 +272,8 @@ func (r *Metal3IoBareMetalHostV1Alpha1Manifest) Schema(_ context.Context, _ data }, "boot_mac_address": schema.StringAttribute{ - Description: "Which MAC address will PXE boot? This is optional for some types, but required for libvirt VMs driven by vbmc.", - MarkdownDescription: "Which MAC address will PXE boot? This is optional for some types, but required for libvirt VMs driven by vbmc.", + Description: "The MAC address of the NIC used for provisioning the host. In case of network boot, this is the MAC address of the PXE booting interface. The MAC address of the BMC must never be used here!", + MarkdownDescription: "The MAC address of the NIC used for provisioning the host. In case of network boot, this is the MAC address of the PXE booting interface. The MAC address of the BMC must never be used here!", Required: false, Optional: true, Computed: false, @@ -283,8 +283,8 @@ func (r *Metal3IoBareMetalHostV1Alpha1Manifest) Schema(_ context.Context, _ data }, "boot_mode": schema.StringAttribute{ - Description: "Select the method of initializing the hardware during boot. Defaults to UEFI.", - MarkdownDescription: "Select the method of initializing the hardware during boot. Defaults to UEFI.", + Description: "Select the method of initializing the hardware during boot. Defaults to UEFI. Legacy boot should only be used for hardware that does not support UEFI correctly. Set to UEFISecureBoot to turn secure boot on automatically after provisioning.", + MarkdownDescription: "Select the method of initializing the hardware during boot. Defaults to UEFI. Legacy boot should only be used for hardware that does not support UEFI correctly. Set to UEFISecureBoot to turn secure boot on automatically after provisioning.", Required: false, Optional: true, Computed: false, @@ -294,8 +294,8 @@ func (r *Metal3IoBareMetalHostV1Alpha1Manifest) Schema(_ context.Context, _ data }, "consumer_ref": schema.SingleNestedAttribute{ - Description: "ConsumerRef can be used to store information about something that is using a host. When it is not empty, the host is considered 'in use'.", - MarkdownDescription: "ConsumerRef can be used to store information about something that is using a host. When it is not empty, the host is considered 'in use'.", + Description: "ConsumerRef can be used to store information about something that is using a host. When it is not empty, the host is considered 'in use'. The common use case is a link to a Machine resource when the host is used by Cluster API.", + MarkdownDescription: "ConsumerRef can be used to store information about something that is using a host. When it is not empty, the host is considered 'in use'. The common use case is a link to a Machine resource when the host is used by Cluster API.", Attributes: map[string]schema.Attribute{ "api_version": schema.StringAttribute{ Description: "API version of the referent.", @@ -359,8 +359,8 @@ func (r *Metal3IoBareMetalHostV1Alpha1Manifest) Schema(_ context.Context, _ data }, "custom_deploy": schema.SingleNestedAttribute{ - Description: "A custom deploy procedure.", - MarkdownDescription: "A custom deploy procedure.", + Description: "A custom deploy procedure. This is an advanced feature that allows using a custom deploy step provided by a site-specific deployment ramdisk. Most users will want to use 'image' instead. Settings this field triggers provisioning.", + MarkdownDescription: "A custom deploy procedure. This is an advanced feature that allows using a custom deploy step provided by a site-specific deployment ramdisk. Most users will want to use 'image' instead. Settings this field triggers provisioning.", Attributes: map[string]schema.Attribute{ "method": schema.StringAttribute{ Description: "Custom deploy method name. This name is specific to the deploy ramdisk used. If you don't have a custom deploy ramdisk, you shouldn't use CustomDeploy.", @@ -376,44 +376,44 @@ func (r *Metal3IoBareMetalHostV1Alpha1Manifest) Schema(_ context.Context, _ data }, "description": schema.StringAttribute{ - Description: "Description is a human-entered text used to help identify the host", - MarkdownDescription: "Description is a human-entered text used to help identify the host", + Description: "Description is a human-entered text used to help identify the host.", + MarkdownDescription: "Description is a human-entered text used to help identify the host.", Required: false, Optional: true, Computed: false, }, "externally_provisioned": schema.BoolAttribute{ - Description: "ExternallyProvisioned means something else is managing the image running on the host and the operator should only manage the power status and hardware inventory inspection. If the Image field is filled in, this field is ignored.", - MarkdownDescription: "ExternallyProvisioned means something else is managing the image running on the host and the operator should only manage the power status and hardware inventory inspection. If the Image field is filled in, this field is ignored.", + Description: "ExternallyProvisioned means something else has provisioned the image running on the host, and the operator should only manage the power status. This field is used for integration with already provisioned hosts and when pivoting hosts between clusters. If unsure, leave this field as false.", + MarkdownDescription: "ExternallyProvisioned means something else has provisioned the image running on the host, and the operator should only manage the power status. This field is used for integration with already provisioned hosts and when pivoting hosts between clusters. If unsure, leave this field as false.", Required: false, Optional: true, Computed: false, }, "firmware": schema.SingleNestedAttribute{ - Description: "BIOS configuration for bare metal server", - MarkdownDescription: "BIOS configuration for bare metal server", + Description: "Firmware (BIOS) configuration for bare metal server. If set, the requested settings will be applied before the host is provisioned. Only some vendor drivers support this field. An alternative is to use HostFirmwareSettings resources that allow changing arbitrary values and support the generic Redfish-based drivers.", + MarkdownDescription: "Firmware (BIOS) configuration for bare metal server. If set, the requested settings will be applied before the host is provisioned. Only some vendor drivers support this field. An alternative is to use HostFirmwareSettings resources that allow changing arbitrary values and support the generic Redfish-based drivers.", Attributes: map[string]schema.Attribute{ "simultaneous_multithreading_enabled": schema.BoolAttribute{ - Description: "Allows a single physical processor core to appear as several logical processors. This supports following options: true, false.", - MarkdownDescription: "Allows a single physical processor core to appear as several logical processors. This supports following options: true, false.", + Description: "Allows a single physical processor core to appear as several logical processors.", + MarkdownDescription: "Allows a single physical processor core to appear as several logical processors.", Required: false, Optional: true, Computed: false, }, "sriov_enabled": schema.BoolAttribute{ - Description: "SR-IOV support enables a hypervisor to create virtual instances of a PCI-express device, potentially increasing performance. This supports following options: true, false.", - MarkdownDescription: "SR-IOV support enables a hypervisor to create virtual instances of a PCI-express device, potentially increasing performance. This supports following options: true, false.", + Description: "SR-IOV support enables a hypervisor to create virtual instances of a PCI-express device, potentially increasing performance.", + MarkdownDescription: "SR-IOV support enables a hypervisor to create virtual instances of a PCI-express device, potentially increasing performance.", Required: false, Optional: true, Computed: false, }, "virtualization_enabled": schema.BoolAttribute{ - Description: "Supports the virtualization of platform hardware. This supports following options: true, false.", - MarkdownDescription: "Supports the virtualization of platform hardware. This supports following options: true, false.", + Description: "Supports the virtualization of platform hardware.", + MarkdownDescription: "Supports the virtualization of platform hardware.", Required: false, Optional: true, Computed: false, @@ -433,12 +433,12 @@ func (r *Metal3IoBareMetalHostV1Alpha1Manifest) Schema(_ context.Context, _ data }, "image": schema.SingleNestedAttribute{ - Description: "Image holds the details of the image to be provisioned.", - MarkdownDescription: "Image holds the details of the image to be provisioned.", + Description: "Image holds the details of the image to be provisioned. Populating the image will cause the host to start provisioning.", + MarkdownDescription: "Image holds the details of the image to be provisioned. Populating the image will cause the host to start provisioning.", Attributes: map[string]schema.Attribute{ "checksum": schema.StringAttribute{ - Description: "Checksum is the checksum for the image.", - MarkdownDescription: "Checksum is the checksum for the image.", + Description: "Checksum is the checksum for the image. Required for all formats except for 'live-iso'.", + MarkdownDescription: "Checksum is the checksum for the image. Required for all formats except for 'live-iso'.", Required: false, Optional: true, Computed: false, @@ -456,8 +456,8 @@ func (r *Metal3IoBareMetalHostV1Alpha1Manifest) Schema(_ context.Context, _ data }, "format": schema.StringAttribute{ - Description: "DiskFormat contains the format of the image (raw, qcow2, ...). Needs to be set to raw for raw images streaming. Note live-iso means an iso referenced by the url will be live-booted and not deployed to disk, and in this case the checksum options are not required and if specified will be ignored.", - MarkdownDescription: "DiskFormat contains the format of the image (raw, qcow2, ...). Needs to be set to raw for raw images streaming. Note live-iso means an iso referenced by the url will be live-booted and not deployed to disk, and in this case the checksum options are not required and if specified will be ignored.", + Description: "Format contains the format of the image (raw, qcow2, ...). When set to 'live-iso', an ISO 9660 image referenced by the url will be live-booted and not deployed to disk.", + MarkdownDescription: "Format contains the format of the image (raw, qcow2, ...). When set to 'live-iso', an ISO 9660 image referenced by the url will be live-booted and not deployed to disk.", Required: false, Optional: true, Computed: false, @@ -480,8 +480,8 @@ func (r *Metal3IoBareMetalHostV1Alpha1Manifest) Schema(_ context.Context, _ data }, "meta_data": schema.SingleNestedAttribute{ - Description: "MetaData holds the reference to the Secret containing host metadata (e.g. meta_data.json) which is passed to the Config Drive.", - MarkdownDescription: "MetaData holds the reference to the Secret containing host metadata (e.g. meta_data.json) which is passed to the Config Drive.", + Description: "MetaData holds the reference to the Secret containing host metadata which is passed to the Config Drive. By default, the operater will generate metadata for the host, so most users do not need to set this field.", + MarkdownDescription: "MetaData holds the reference to the Secret containing host metadata which is passed to the Config Drive. By default, the operater will generate metadata for the host, so most users do not need to set this field.", Attributes: map[string]schema.Attribute{ "name": schema.StringAttribute{ Description: "name is unique within a namespace to reference a secret resource.", @@ -505,8 +505,8 @@ func (r *Metal3IoBareMetalHostV1Alpha1Manifest) Schema(_ context.Context, _ data }, "network_data": schema.SingleNestedAttribute{ - Description: "NetworkData holds the reference to the Secret containing network configuration (e.g content of network_data.json) which is passed to the Config Drive.", - MarkdownDescription: "NetworkData holds the reference to the Secret containing network configuration (e.g content of network_data.json) which is passed to the Config Drive.", + Description: "NetworkData holds the reference to the Secret containing network configuration which is passed to the Config Drive and interpreted by the first boot software such as cloud-init.", + MarkdownDescription: "NetworkData holds the reference to the Secret containing network configuration which is passed to the Config Drive and interpreted by the first boot software such as cloud-init.", Attributes: map[string]schema.Attribute{ "name": schema.StringAttribute{ Description: "name is unique within a namespace to reference a secret resource.", @@ -530,24 +530,24 @@ func (r *Metal3IoBareMetalHostV1Alpha1Manifest) Schema(_ context.Context, _ data }, "online": schema.BoolAttribute{ - Description: "Should the server be online?", - MarkdownDescription: "Should the server be online?", + Description: "Should the host be powered on? Changing this value will trigger a change in power state of the host.", + MarkdownDescription: "Should the host be powered on? Changing this value will trigger a change in power state of the host.", Required: true, Optional: false, Computed: false, }, "preprovisioning_network_data_name": schema.StringAttribute{ - Description: "PreprovisioningNetworkDataName is the name of the Secret in the local namespace containing network configuration (e.g content of network_data.json) which is passed to the preprovisioning image, and to the Config Drive if not overridden by specifying NetworkData.", - MarkdownDescription: "PreprovisioningNetworkDataName is the name of the Secret in the local namespace containing network configuration (e.g content of network_data.json) which is passed to the preprovisioning image, and to the Config Drive if not overridden by specifying NetworkData.", + Description: "PreprovisioningNetworkDataName is the name of the Secret in the local namespace containing network configuration which is passed to the preprovisioning image, and to the Config Drive if not overridden by specifying NetworkData.", + MarkdownDescription: "PreprovisioningNetworkDataName is the name of the Secret in the local namespace containing network configuration which is passed to the preprovisioning image, and to the Config Drive if not overridden by specifying NetworkData.", Required: false, Optional: true, Computed: false, }, "raid": schema.SingleNestedAttribute{ - Description: "RAID configuration for bare metal server", - MarkdownDescription: "RAID configuration for bare metal server", + Description: "RAID configuration for bare metal server. If set, the RAID settings will be applied before the host is provisioned. If not, the current settings will not be modified. Only one of the sub-fields hardwareRAIDVolumes and softwareRAIDVolumes can be set at the same time.", + MarkdownDescription: "RAID configuration for bare metal server. If set, the RAID settings will be applied before the host is provisioned. If not, the current settings will not be modified. Only one of the sub-fields hardwareRAIDVolumes and softwareRAIDVolumes can be set at the same time.", Attributes: map[string]schema.Attribute{ "hardware_raid_volumes": schema.ListNestedAttribute{ Description: "The list of logical disks for hardware RAID, if rootDeviceHints isn't used, first volume is root volume. You can set the value of this field to '[]' to clear all the hardware RAID configurations.", @@ -555,16 +555,16 @@ func (r *Metal3IoBareMetalHostV1Alpha1Manifest) Schema(_ context.Context, _ data NestedObject: schema.NestedAttributeObject{ Attributes: map[string]schema.Attribute{ "controller": schema.StringAttribute{ - Description: "The name of the RAID controller to use", - MarkdownDescription: "The name of the RAID controller to use", + Description: "The name of the RAID controller to use.", + MarkdownDescription: "The name of the RAID controller to use.", Required: false, Optional: true, Computed: false, }, "level": schema.StringAttribute{ - Description: "RAID level for the logical disk. The following levels are supported: 0;1;2;5;6;1+0;5+0;6+0.", - MarkdownDescription: "RAID level for the logical disk. The following levels are supported: 0;1;2;5;6;1+0;5+0;6+0.", + Description: "RAID level for the logical disk. The following levels are supported: 0, 1, 2, 5, 6, 1+0, 5+0, 6+0 (drivers may support only some of them).", + MarkdownDescription: "RAID level for the logical disk. The following levels are supported: 0, 1, 2, 5, 6, 1+0, 5+0, 6+0 (drivers may support only some of them).", Required: true, Optional: false, Computed: false, @@ -574,8 +574,8 @@ func (r *Metal3IoBareMetalHostV1Alpha1Manifest) Schema(_ context.Context, _ data }, "name": schema.StringAttribute{ - Description: "Name of the volume. Should be unique within the Node. If not specified, volume name will be auto-generated.", - MarkdownDescription: "Name of the volume. Should be unique within the Node. If not specified, volume name will be auto-generated.", + Description: "Name of the volume. Should be unique within the Node. If not specified, the name will be auto-generated.", + MarkdownDescription: "Name of the volume. Should be unique within the Node. If not specified, the name will be auto-generated.", Required: false, Optional: true, Computed: false, @@ -596,8 +596,8 @@ func (r *Metal3IoBareMetalHostV1Alpha1Manifest) Schema(_ context.Context, _ data }, "physical_disks": schema.ListAttribute{ - Description: "Optional list of physical disk names to be used for the Hardware RAID volumes. The disk names are interpreted by the Hardware RAID controller, and the format is hardware specific.", - MarkdownDescription: "Optional list of physical disk names to be used for the Hardware RAID volumes. The disk names are interpreted by the Hardware RAID controller, and the format is hardware specific.", + Description: "Optional list of physical disk names to be used for the hardware RAID volumes. The disk names are interpreted by the hardware RAID controller, and the format is hardware specific.", + MarkdownDescription: "Optional list of physical disk names to be used for the hardware RAID volumes. The disk names are interpreted by the hardware RAID controller, and the format is hardware specific.", ElementType: types.StringType, Required: false, Optional: true, @@ -605,16 +605,16 @@ func (r *Metal3IoBareMetalHostV1Alpha1Manifest) Schema(_ context.Context, _ data }, "rotational": schema.BoolAttribute{ - Description: "Select disks with only rotational or solid-state storage", - MarkdownDescription: "Select disks with only rotational or solid-state storage", + Description: "Select disks with only rotational (if set to true) or solid-state (if set to false) storage. By default, any disks can be picked.", + MarkdownDescription: "Select disks with only rotational (if set to true) or solid-state (if set to false) storage. By default, any disks can be picked.", Required: false, Optional: true, Computed: false, }, "size_gibibytes": schema.Int64Attribute{ - Description: "Size (Integer) of the logical disk to be created in GiB. If unspecified or set be 0, the maximum capacity of disk will be used for logical disk.", - MarkdownDescription: "Size (Integer) of the logical disk to be created in GiB. If unspecified or set be 0, the maximum capacity of disk will be used for logical disk.", + Description: "Size of the logical disk to be created in GiB. If unspecified or set be 0, the maximum capacity of disk will be used for logical disk.", + MarkdownDescription: "Size of the logical disk to be created in GiB. If unspecified or set be 0, the maximum capacity of disk will be used for logical disk.", Required: false, Optional: true, Computed: false, @@ -635,8 +635,8 @@ func (r *Metal3IoBareMetalHostV1Alpha1Manifest) Schema(_ context.Context, _ data NestedObject: schema.NestedAttributeObject{ Attributes: map[string]schema.Attribute{ "level": schema.StringAttribute{ - Description: "RAID level for the logical disk. The following levels are supported: 0;1;1+0.", - MarkdownDescription: "RAID level for the logical disk. The following levels are supported: 0;1;1+0.", + Description: "RAID level for the logical disk. The following levels are supported: 0, 1 and 1+0.", + MarkdownDescription: "RAID level for the logical disk. The following levels are supported: 0, 1 and 1+0.", Required: true, Optional: false, Computed: false, @@ -740,8 +740,8 @@ func (r *Metal3IoBareMetalHostV1Alpha1Manifest) Schema(_ context.Context, _ data }, "size_gibibytes": schema.Int64Attribute{ - Description: "Size (Integer) of the logical disk to be created in GiB. If unspecified or set be 0, the maximum capacity of disk will be used for logical disk.", - MarkdownDescription: "Size (Integer) of the logical disk to be created in GiB. If unspecified or set be 0, the maximum capacity of disk will be used for logical disk.", + Description: "Size of the logical disk to be created in GiB. If unspecified or set be 0, the maximum capacity of disk will be used for logical disk.", + MarkdownDescription: "Size of the logical disk to be created in GiB. If unspecified or set be 0, the maximum capacity of disk will be used for logical disk.", Required: false, Optional: true, Computed: false, @@ -762,8 +762,8 @@ func (r *Metal3IoBareMetalHostV1Alpha1Manifest) Schema(_ context.Context, _ data }, "root_device_hints": schema.SingleNestedAttribute{ - Description: "Provide guidance about how to choose the device for the image being provisioned.", - MarkdownDescription: "Provide guidance about how to choose the device for the image being provisioned.", + Description: "Provide guidance about how to choose the device for the image being provisioned. The default is currently to use /dev/sda as the root device.", + MarkdownDescription: "Provide guidance about how to choose the device for the image being provisioned. The default is currently to use /dev/sda as the root device.", Attributes: map[string]schema.Attribute{ "device_name": schema.StringAttribute{ Description: "A Linux device name like '/dev/vda', or a by-path link to it like '/dev/disk/by-path/pci-0000:01:00.0-scsi-0:2:0:0'. The hint must match the actual value exactly.", @@ -900,8 +900,8 @@ func (r *Metal3IoBareMetalHostV1Alpha1Manifest) Schema(_ context.Context, _ data }, "user_data": schema.SingleNestedAttribute{ - Description: "UserData holds the reference to the Secret containing the user data to be passed to the host before it boots.", - MarkdownDescription: "UserData holds the reference to the Secret containing the user data to be passed to the host before it boots.", + Description: "UserData holds the reference to the Secret containing the user data which is passed to the Config Drive and interpreted by the first-boot software such as cloud-init. The format of user data is specific to the first-boot software.", + MarkdownDescription: "UserData holds the reference to the Secret containing the user data which is passed to the Config Drive and interpreted by the first-boot software such as cloud-init. The format of user data is specific to the first-boot software.", Attributes: map[string]schema.Attribute{ "name": schema.StringAttribute{ Description: "name is unique within a namespace to reference a secret resource.", diff --git a/internal/provider/metal3_io_v1alpha1/metal3_io_hardware_data_v1alpha1_manifest.go b/internal/provider/metal3_io_v1alpha1/metal3_io_hardware_data_v1alpha1_manifest.go index dc4cdb551..19c1887c0 100644 --- a/internal/provider/metal3_io_v1alpha1/metal3_io_hardware_data_v1alpha1_manifest.go +++ b/internal/provider/metal3_io_v1alpha1/metal3_io_hardware_data_v1alpha1_manifest.go @@ -180,8 +180,8 @@ func (r *Metal3IoHardwareDataV1Alpha1Manifest) Schema(_ context.Context, _ datas MarkdownDescription: "The hardware discovered on the host during its inspection.", Attributes: map[string]schema.Attribute{ "cpu": schema.SingleNestedAttribute{ - Description: "CPU describes one processor on the host.", - MarkdownDescription: "CPU describes one processor on the host.", + Description: "Details of the CPU(s) in the system.", + MarkdownDescription: "Details of the CPU(s) in the system.", Attributes: map[string]schema.Attribute{ "arch": schema.StringAttribute{ Description: "", @@ -230,8 +230,8 @@ func (r *Metal3IoHardwareDataV1Alpha1Manifest) Schema(_ context.Context, _ datas }, "firmware": schema.SingleNestedAttribute{ - Description: "Firmware describes the firmware on the host.", - MarkdownDescription: "Firmware describes the firmware on the host.", + Description: "System firmware information.", + MarkdownDescription: "System firmware information.", Attributes: map[string]schema.Attribute{ "bios": schema.SingleNestedAttribute{ Description: "The BIOS for this firmware", @@ -280,8 +280,8 @@ func (r *Metal3IoHardwareDataV1Alpha1Manifest) Schema(_ context.Context, _ datas }, "nics": schema.ListNestedAttribute{ - Description: "", - MarkdownDescription: "", + Description: "List of network interfaces for the host.", + MarkdownDescription: "List of network interfaces for the host.", NestedObject: schema.NestedAttributeObject{ Attributes: map[string]schema.Attribute{ "ip": schema.StringAttribute{ @@ -385,16 +385,16 @@ func (r *Metal3IoHardwareDataV1Alpha1Manifest) Schema(_ context.Context, _ datas }, "ram_mebibytes": schema.Int64Attribute{ - Description: "", - MarkdownDescription: "", + Description: "The host's amount of memory in Mebibytes.", + MarkdownDescription: "The host's amount of memory in Mebibytes.", Required: false, Optional: true, Computed: false, }, "storage": schema.ListNestedAttribute{ - Description: "", - MarkdownDescription: "", + Description: "List of storage (disk, SSD, etc.) available to the host.", + MarkdownDescription: "List of storage (disk, SSD, etc.) available to the host.", NestedObject: schema.NestedAttributeObject{ Attributes: map[string]schema.Attribute{ "alternate_names": schema.ListAttribute{ @@ -504,8 +504,8 @@ func (r *Metal3IoHardwareDataV1Alpha1Manifest) Schema(_ context.Context, _ datas }, "system_vendor": schema.SingleNestedAttribute{ - Description: "HardwareSystemVendor stores details about the whole hardware system.", - MarkdownDescription: "HardwareSystemVendor stores details about the whole hardware system.", + Description: "System vendor information.", + MarkdownDescription: "System vendor information.", Attributes: map[string]schema.Attribute{ "manufacturer": schema.StringAttribute{ Description: "", diff --git a/internal/provider/monitoring_coreos_com_v1alpha1/monitoring_coreos_com_scrape_config_v1alpha1_manifest.go b/internal/provider/monitoring_coreos_com_v1alpha1/monitoring_coreos_com_scrape_config_v1alpha1_manifest.go index c876b9a2a..65596511e 100644 --- a/internal/provider/monitoring_coreos_com_v1alpha1/monitoring_coreos_com_scrape_config_v1alpha1_manifest.go +++ b/internal/provider/monitoring_coreos_com_v1alpha1/monitoring_coreos_com_scrape_config_v1alpha1_manifest.go @@ -45,136 +45,6 @@ type MonitoringCoreosComScrapeConfigV1Alpha1ManifestData struct { } `tfsdk:"metadata" json:"metadata"` Spec *struct { - NomadSDConfigs *[]struct { - AllowStale *bool `tfsdk:"allow_stale" json:"allowStale,omitempty"` - Authorization *struct { - Credentials *struct { - Key *string `tfsdk:"key" json:"key,omitempty"` - Name *string `tfsdk:"name" json:"name,omitempty"` - Optional *bool `tfsdk:"optional" json:"optional,omitempty"` - } `tfsdk:"credentials" json:"credentials,omitempty"` - Type *string `tfsdk:"type" json:"type,omitempty"` - } `tfsdk:"authorization" json:"authorization,omitempty"` - BasicAuth *struct { - Password *struct { - Key *string `tfsdk:"key" json:"key,omitempty"` - Name *string `tfsdk:"name" json:"name,omitempty"` - Optional *bool `tfsdk:"optional" json:"optional,omitempty"` - } `tfsdk:"password" json:"password,omitempty"` - Username *struct { - Key *string `tfsdk:"key" json:"key,omitempty"` - Name *string `tfsdk:"name" json:"name,omitempty"` - Optional *bool `tfsdk:"optional" json:"optional,omitempty"` - } `tfsdk:"username" json:"username,omitempty"` - } `tfsdk:"basic_auth" json:"basicAuth,omitempty"` - EnableHTTP2 *bool `tfsdk:"enable_http2" json:"enableHTTP2,omitempty"` - FollowRedirects *bool `tfsdk:"follow_redirects" json:"followRedirects,omitempty"` - Namespace *string `tfsdk:"namespace" json:"namespace,omitempty"` - NoProxy *string `tfsdk:"no_proxy" json:"noProxy,omitempty"` - Oauth2 *struct { - ClientId *struct { - ConfigMap *struct { - Key *string `tfsdk:"key" json:"key,omitempty"` - Name *string `tfsdk:"name" json:"name,omitempty"` - Optional *bool `tfsdk:"optional" json:"optional,omitempty"` - } `tfsdk:"config_map" json:"configMap,omitempty"` - Secret *struct { - Key *string `tfsdk:"key" json:"key,omitempty"` - Name *string `tfsdk:"name" json:"name,omitempty"` - Optional *bool `tfsdk:"optional" json:"optional,omitempty"` - } `tfsdk:"secret" json:"secret,omitempty"` - } `tfsdk:"client_id" json:"clientId,omitempty"` - ClientSecret *struct { - Key *string `tfsdk:"key" json:"key,omitempty"` - Name *string `tfsdk:"name" json:"name,omitempty"` - Optional *bool `tfsdk:"optional" json:"optional,omitempty"` - } `tfsdk:"client_secret" json:"clientSecret,omitempty"` - EndpointParams *map[string]string `tfsdk:"endpoint_params" json:"endpointParams,omitempty"` - NoProxy *string `tfsdk:"no_proxy" json:"noProxy,omitempty"` - ProxyConnectHeader *map[string]string `tfsdk:"proxy_connect_header" json:"proxyConnectHeader,omitempty"` - ProxyFromEnvironment *bool `tfsdk:"proxy_from_environment" json:"proxyFromEnvironment,omitempty"` - ProxyUrl *string `tfsdk:"proxy_url" json:"proxyUrl,omitempty"` - Scopes *[]string `tfsdk:"scopes" json:"scopes,omitempty"` - TlsConfig *struct { - Ca *struct { - ConfigMap *struct { - Key *string `tfsdk:"key" json:"key,omitempty"` - Name *string `tfsdk:"name" json:"name,omitempty"` - Optional *bool `tfsdk:"optional" json:"optional,omitempty"` - } `tfsdk:"config_map" json:"configMap,omitempty"` - Secret *struct { - Key *string `tfsdk:"key" json:"key,omitempty"` - Name *string `tfsdk:"name" json:"name,omitempty"` - Optional *bool `tfsdk:"optional" json:"optional,omitempty"` - } `tfsdk:"secret" json:"secret,omitempty"` - } `tfsdk:"ca" json:"ca,omitempty"` - Cert *struct { - ConfigMap *struct { - Key *string `tfsdk:"key" json:"key,omitempty"` - Name *string `tfsdk:"name" json:"name,omitempty"` - Optional *bool `tfsdk:"optional" json:"optional,omitempty"` - } `tfsdk:"config_map" json:"configMap,omitempty"` - Secret *struct { - Key *string `tfsdk:"key" json:"key,omitempty"` - Name *string `tfsdk:"name" json:"name,omitempty"` - Optional *bool `tfsdk:"optional" json:"optional,omitempty"` - } `tfsdk:"secret" json:"secret,omitempty"` - } `tfsdk:"cert" json:"cert,omitempty"` - InsecureSkipVerify *bool `tfsdk:"insecure_skip_verify" json:"insecureSkipVerify,omitempty"` - KeySecret *struct { - Key *string `tfsdk:"key" json:"key,omitempty"` - Name *string `tfsdk:"name" json:"name,omitempty"` - Optional *bool `tfsdk:"optional" json:"optional,omitempty"` - } `tfsdk:"key_secret" json:"keySecret,omitempty"` - MaxVersion *string `tfsdk:"max_version" json:"maxVersion,omitempty"` - MinVersion *string `tfsdk:"min_version" json:"minVersion,omitempty"` - ServerName *string `tfsdk:"server_name" json:"serverName,omitempty"` - } `tfsdk:"tls_config" json:"tlsConfig,omitempty"` - TokenUrl *string `tfsdk:"token_url" json:"tokenUrl,omitempty"` - } `tfsdk:"oauth2" json:"oauth2,omitempty"` - ProxyConnectHeader *map[string]string `tfsdk:"proxy_connect_header" json:"proxyConnectHeader,omitempty"` - ProxyFromEnvironment *bool `tfsdk:"proxy_from_environment" json:"proxyFromEnvironment,omitempty"` - ProxyUrl *string `tfsdk:"proxy_url" json:"proxyUrl,omitempty"` - RefreshInterval *string `tfsdk:"refresh_interval" json:"refreshInterval,omitempty"` - Region *string `tfsdk:"region" json:"region,omitempty"` - Server *string `tfsdk:"server" json:"server,omitempty"` - TagSeparator *string `tfsdk:"tag_separator" json:"tagSeparator,omitempty"` - TlsConfig *struct { - Ca *struct { - ConfigMap *struct { - Key *string `tfsdk:"key" json:"key,omitempty"` - Name *string `tfsdk:"name" json:"name,omitempty"` - Optional *bool `tfsdk:"optional" json:"optional,omitempty"` - } `tfsdk:"config_map" json:"configMap,omitempty"` - Secret *struct { - Key *string `tfsdk:"key" json:"key,omitempty"` - Name *string `tfsdk:"name" json:"name,omitempty"` - Optional *bool `tfsdk:"optional" json:"optional,omitempty"` - } `tfsdk:"secret" json:"secret,omitempty"` - } `tfsdk:"ca" json:"ca,omitempty"` - Cert *struct { - ConfigMap *struct { - Key *string `tfsdk:"key" json:"key,omitempty"` - Name *string `tfsdk:"name" json:"name,omitempty"` - Optional *bool `tfsdk:"optional" json:"optional,omitempty"` - } `tfsdk:"config_map" json:"configMap,omitempty"` - Secret *struct { - Key *string `tfsdk:"key" json:"key,omitempty"` - Name *string `tfsdk:"name" json:"name,omitempty"` - Optional *bool `tfsdk:"optional" json:"optional,omitempty"` - } `tfsdk:"secret" json:"secret,omitempty"` - } `tfsdk:"cert" json:"cert,omitempty"` - InsecureSkipVerify *bool `tfsdk:"insecure_skip_verify" json:"insecureSkipVerify,omitempty"` - KeySecret *struct { - Key *string `tfsdk:"key" json:"key,omitempty"` - Name *string `tfsdk:"name" json:"name,omitempty"` - Optional *bool `tfsdk:"optional" json:"optional,omitempty"` - } `tfsdk:"key_secret" json:"keySecret,omitempty"` - MaxVersion *string `tfsdk:"max_version" json:"maxVersion,omitempty"` - MinVersion *string `tfsdk:"min_version" json:"minVersion,omitempty"` - ServerName *string `tfsdk:"server_name" json:"serverName,omitempty"` - } `tfsdk:"tls_config" json:"tlsConfig,omitempty"` - } `tfsdk:"nomad_sd_configs" json:"NomadSDConfigs,omitempty"` Authorization *struct { Credentials *struct { Key *string `tfsdk:"key" json:"key,omitempty"` @@ -1190,6 +1060,60 @@ type MonitoringCoreosComScrapeConfigV1Alpha1ManifestData struct { } `tfsdk:"tls_config" json:"tlsConfig,omitempty"` Url *string `tfsdk:"url" json:"url,omitempty"` } `tfsdk:"http_sd_configs" json:"httpSDConfigs,omitempty"` + IonosSDConfigs *[]struct { + Authorization *struct { + Credentials *struct { + Key *string `tfsdk:"key" json:"key,omitempty"` + Name *string `tfsdk:"name" json:"name,omitempty"` + Optional *bool `tfsdk:"optional" json:"optional,omitempty"` + } `tfsdk:"credentials" json:"credentials,omitempty"` + Type *string `tfsdk:"type" json:"type,omitempty"` + } `tfsdk:"authorization" json:"authorization,omitempty"` + DatacenterID *string `tfsdk:"datacenter_id" json:"datacenterID,omitempty"` + EnableHTTP2 *bool `tfsdk:"enable_http2" json:"enableHTTP2,omitempty"` + FollowRedirects *bool `tfsdk:"follow_redirects" json:"followRedirects,omitempty"` + NoProxy *string `tfsdk:"no_proxy" json:"noProxy,omitempty"` + Port *int64 `tfsdk:"port" json:"port,omitempty"` + ProxyConnectHeader *map[string]string `tfsdk:"proxy_connect_header" json:"proxyConnectHeader,omitempty"` + ProxyFromEnvironment *bool `tfsdk:"proxy_from_environment" json:"proxyFromEnvironment,omitempty"` + ProxyUrl *string `tfsdk:"proxy_url" json:"proxyUrl,omitempty"` + RefreshInterval *string `tfsdk:"refresh_interval" json:"refreshInterval,omitempty"` + TlsConfig *struct { + Ca *struct { + ConfigMap *struct { + Key *string `tfsdk:"key" json:"key,omitempty"` + Name *string `tfsdk:"name" json:"name,omitempty"` + Optional *bool `tfsdk:"optional" json:"optional,omitempty"` + } `tfsdk:"config_map" json:"configMap,omitempty"` + Secret *struct { + Key *string `tfsdk:"key" json:"key,omitempty"` + Name *string `tfsdk:"name" json:"name,omitempty"` + Optional *bool `tfsdk:"optional" json:"optional,omitempty"` + } `tfsdk:"secret" json:"secret,omitempty"` + } `tfsdk:"ca" json:"ca,omitempty"` + Cert *struct { + ConfigMap *struct { + Key *string `tfsdk:"key" json:"key,omitempty"` + Name *string `tfsdk:"name" json:"name,omitempty"` + Optional *bool `tfsdk:"optional" json:"optional,omitempty"` + } `tfsdk:"config_map" json:"configMap,omitempty"` + Secret *struct { + Key *string `tfsdk:"key" json:"key,omitempty"` + Name *string `tfsdk:"name" json:"name,omitempty"` + Optional *bool `tfsdk:"optional" json:"optional,omitempty"` + } `tfsdk:"secret" json:"secret,omitempty"` + } `tfsdk:"cert" json:"cert,omitempty"` + InsecureSkipVerify *bool `tfsdk:"insecure_skip_verify" json:"insecureSkipVerify,omitempty"` + KeySecret *struct { + Key *string `tfsdk:"key" json:"key,omitempty"` + Name *string `tfsdk:"name" json:"name,omitempty"` + Optional *bool `tfsdk:"optional" json:"optional,omitempty"` + } `tfsdk:"key_secret" json:"keySecret,omitempty"` + MaxVersion *string `tfsdk:"max_version" json:"maxVersion,omitempty"` + MinVersion *string `tfsdk:"min_version" json:"minVersion,omitempty"` + ServerName *string `tfsdk:"server_name" json:"serverName,omitempty"` + } `tfsdk:"tls_config" json:"tlsConfig,omitempty"` + } `tfsdk:"ionos_sd_configs" json:"ionosSDConfigs,omitempty"` JobName *string `tfsdk:"job_name" json:"jobName,omitempty"` KeepDroppedTargets *int64 `tfsdk:"keep_dropped_targets" json:"keepDroppedTargets,omitempty"` KubernetesSDConfigs *[]struct { @@ -1725,46 +1649,36 @@ type MonitoringCoreosComScrapeConfigV1Alpha1ManifestData struct { SourceLabels *[]string `tfsdk:"source_labels" json:"sourceLabels,omitempty"` TargetLabel *string `tfsdk:"target_label" json:"targetLabel,omitempty"` } `tfsdk:"metric_relabelings" json:"metricRelabelings,omitempty"` - MetricsPath *string `tfsdk:"metrics_path" json:"metricsPath,omitempty"` - NoProxy *string `tfsdk:"no_proxy" json:"noProxy,omitempty"` - Oauth2 *struct { - ClientId *struct { - ConfigMap *struct { + MetricsPath *string `tfsdk:"metrics_path" json:"metricsPath,omitempty"` + NoProxy *string `tfsdk:"no_proxy" json:"noProxy,omitempty"` + NomadSDConfigs *[]struct { + AllowStale *bool `tfsdk:"allow_stale" json:"allowStale,omitempty"` + Authorization *struct { + Credentials *struct { Key *string `tfsdk:"key" json:"key,omitempty"` Name *string `tfsdk:"name" json:"name,omitempty"` Optional *bool `tfsdk:"optional" json:"optional,omitempty"` - } `tfsdk:"config_map" json:"configMap,omitempty"` - Secret *struct { + } `tfsdk:"credentials" json:"credentials,omitempty"` + Type *string `tfsdk:"type" json:"type,omitempty"` + } `tfsdk:"authorization" json:"authorization,omitempty"` + BasicAuth *struct { + Password *struct { Key *string `tfsdk:"key" json:"key,omitempty"` Name *string `tfsdk:"name" json:"name,omitempty"` Optional *bool `tfsdk:"optional" json:"optional,omitempty"` - } `tfsdk:"secret" json:"secret,omitempty"` - } `tfsdk:"client_id" json:"clientId,omitempty"` - ClientSecret *struct { - Key *string `tfsdk:"key" json:"key,omitempty"` - Name *string `tfsdk:"name" json:"name,omitempty"` - Optional *bool `tfsdk:"optional" json:"optional,omitempty"` - } `tfsdk:"client_secret" json:"clientSecret,omitempty"` - EndpointParams *map[string]string `tfsdk:"endpoint_params" json:"endpointParams,omitempty"` - NoProxy *string `tfsdk:"no_proxy" json:"noProxy,omitempty"` - ProxyConnectHeader *map[string]string `tfsdk:"proxy_connect_header" json:"proxyConnectHeader,omitempty"` - ProxyFromEnvironment *bool `tfsdk:"proxy_from_environment" json:"proxyFromEnvironment,omitempty"` - ProxyUrl *string `tfsdk:"proxy_url" json:"proxyUrl,omitempty"` - Scopes *[]string `tfsdk:"scopes" json:"scopes,omitempty"` - TlsConfig *struct { - Ca *struct { - ConfigMap *struct { - Key *string `tfsdk:"key" json:"key,omitempty"` - Name *string `tfsdk:"name" json:"name,omitempty"` - Optional *bool `tfsdk:"optional" json:"optional,omitempty"` - } `tfsdk:"config_map" json:"configMap,omitempty"` - Secret *struct { - Key *string `tfsdk:"key" json:"key,omitempty"` - Name *string `tfsdk:"name" json:"name,omitempty"` - Optional *bool `tfsdk:"optional" json:"optional,omitempty"` - } `tfsdk:"secret" json:"secret,omitempty"` - } `tfsdk:"ca" json:"ca,omitempty"` - Cert *struct { + } `tfsdk:"password" json:"password,omitempty"` + Username *struct { + Key *string `tfsdk:"key" json:"key,omitempty"` + Name *string `tfsdk:"name" json:"name,omitempty"` + Optional *bool `tfsdk:"optional" json:"optional,omitempty"` + } `tfsdk:"username" json:"username,omitempty"` + } `tfsdk:"basic_auth" json:"basicAuth,omitempty"` + EnableHTTP2 *bool `tfsdk:"enable_http2" json:"enableHTTP2,omitempty"` + FollowRedirects *bool `tfsdk:"follow_redirects" json:"followRedirects,omitempty"` + Namespace *string `tfsdk:"namespace" json:"namespace,omitempty"` + NoProxy *string `tfsdk:"no_proxy" json:"noProxy,omitempty"` + Oauth2 *struct { + ClientId *struct { ConfigMap *struct { Key *string `tfsdk:"key" json:"key,omitempty"` Name *string `tfsdk:"name" json:"name,omitempty"` @@ -1775,30 +1689,170 @@ type MonitoringCoreosComScrapeConfigV1Alpha1ManifestData struct { Name *string `tfsdk:"name" json:"name,omitempty"` Optional *bool `tfsdk:"optional" json:"optional,omitempty"` } `tfsdk:"secret" json:"secret,omitempty"` - } `tfsdk:"cert" json:"cert,omitempty"` - InsecureSkipVerify *bool `tfsdk:"insecure_skip_verify" json:"insecureSkipVerify,omitempty"` - KeySecret *struct { + } `tfsdk:"client_id" json:"clientId,omitempty"` + ClientSecret *struct { Key *string `tfsdk:"key" json:"key,omitempty"` Name *string `tfsdk:"name" json:"name,omitempty"` Optional *bool `tfsdk:"optional" json:"optional,omitempty"` - } `tfsdk:"key_secret" json:"keySecret,omitempty"` - MaxVersion *string `tfsdk:"max_version" json:"maxVersion,omitempty"` - MinVersion *string `tfsdk:"min_version" json:"minVersion,omitempty"` - ServerName *string `tfsdk:"server_name" json:"serverName,omitempty"` - } `tfsdk:"tls_config" json:"tlsConfig,omitempty"` - TokenUrl *string `tfsdk:"token_url" json:"tokenUrl,omitempty"` - } `tfsdk:"oauth2" json:"oauth2,omitempty"` - OpenstackSDConfigs *[]struct { - AllTenants *bool `tfsdk:"all_tenants" json:"allTenants,omitempty"` - ApplicationCredentialId *string `tfsdk:"application_credential_id" json:"applicationCredentialId,omitempty"` - ApplicationCredentialName *string `tfsdk:"application_credential_name" json:"applicationCredentialName,omitempty"` - ApplicationCredentialSecret *struct { - Key *string `tfsdk:"key" json:"key,omitempty"` - Name *string `tfsdk:"name" json:"name,omitempty"` - Optional *bool `tfsdk:"optional" json:"optional,omitempty"` - } `tfsdk:"application_credential_secret" json:"applicationCredentialSecret,omitempty"` - Availability *string `tfsdk:"availability" json:"availability,omitempty"` - DomainID *string `tfsdk:"domain_id" json:"domainID,omitempty"` + } `tfsdk:"client_secret" json:"clientSecret,omitempty"` + EndpointParams *map[string]string `tfsdk:"endpoint_params" json:"endpointParams,omitempty"` + NoProxy *string `tfsdk:"no_proxy" json:"noProxy,omitempty"` + ProxyConnectHeader *map[string]string `tfsdk:"proxy_connect_header" json:"proxyConnectHeader,omitempty"` + ProxyFromEnvironment *bool `tfsdk:"proxy_from_environment" json:"proxyFromEnvironment,omitempty"` + ProxyUrl *string `tfsdk:"proxy_url" json:"proxyUrl,omitempty"` + Scopes *[]string `tfsdk:"scopes" json:"scopes,omitempty"` + TlsConfig *struct { + Ca *struct { + ConfigMap *struct { + Key *string `tfsdk:"key" json:"key,omitempty"` + Name *string `tfsdk:"name" json:"name,omitempty"` + Optional *bool `tfsdk:"optional" json:"optional,omitempty"` + } `tfsdk:"config_map" json:"configMap,omitempty"` + Secret *struct { + Key *string `tfsdk:"key" json:"key,omitempty"` + Name *string `tfsdk:"name" json:"name,omitempty"` + Optional *bool `tfsdk:"optional" json:"optional,omitempty"` + } `tfsdk:"secret" json:"secret,omitempty"` + } `tfsdk:"ca" json:"ca,omitempty"` + Cert *struct { + ConfigMap *struct { + Key *string `tfsdk:"key" json:"key,omitempty"` + Name *string `tfsdk:"name" json:"name,omitempty"` + Optional *bool `tfsdk:"optional" json:"optional,omitempty"` + } `tfsdk:"config_map" json:"configMap,omitempty"` + Secret *struct { + Key *string `tfsdk:"key" json:"key,omitempty"` + Name *string `tfsdk:"name" json:"name,omitempty"` + Optional *bool `tfsdk:"optional" json:"optional,omitempty"` + } `tfsdk:"secret" json:"secret,omitempty"` + } `tfsdk:"cert" json:"cert,omitempty"` + InsecureSkipVerify *bool `tfsdk:"insecure_skip_verify" json:"insecureSkipVerify,omitempty"` + KeySecret *struct { + Key *string `tfsdk:"key" json:"key,omitempty"` + Name *string `tfsdk:"name" json:"name,omitempty"` + Optional *bool `tfsdk:"optional" json:"optional,omitempty"` + } `tfsdk:"key_secret" json:"keySecret,omitempty"` + MaxVersion *string `tfsdk:"max_version" json:"maxVersion,omitempty"` + MinVersion *string `tfsdk:"min_version" json:"minVersion,omitempty"` + ServerName *string `tfsdk:"server_name" json:"serverName,omitempty"` + } `tfsdk:"tls_config" json:"tlsConfig,omitempty"` + TokenUrl *string `tfsdk:"token_url" json:"tokenUrl,omitempty"` + } `tfsdk:"oauth2" json:"oauth2,omitempty"` + ProxyConnectHeader *map[string]string `tfsdk:"proxy_connect_header" json:"proxyConnectHeader,omitempty"` + ProxyFromEnvironment *bool `tfsdk:"proxy_from_environment" json:"proxyFromEnvironment,omitempty"` + ProxyUrl *string `tfsdk:"proxy_url" json:"proxyUrl,omitempty"` + RefreshInterval *string `tfsdk:"refresh_interval" json:"refreshInterval,omitempty"` + Region *string `tfsdk:"region" json:"region,omitempty"` + Server *string `tfsdk:"server" json:"server,omitempty"` + TagSeparator *string `tfsdk:"tag_separator" json:"tagSeparator,omitempty"` + TlsConfig *struct { + Ca *struct { + ConfigMap *struct { + Key *string `tfsdk:"key" json:"key,omitempty"` + Name *string `tfsdk:"name" json:"name,omitempty"` + Optional *bool `tfsdk:"optional" json:"optional,omitempty"` + } `tfsdk:"config_map" json:"configMap,omitempty"` + Secret *struct { + Key *string `tfsdk:"key" json:"key,omitempty"` + Name *string `tfsdk:"name" json:"name,omitempty"` + Optional *bool `tfsdk:"optional" json:"optional,omitempty"` + } `tfsdk:"secret" json:"secret,omitempty"` + } `tfsdk:"ca" json:"ca,omitempty"` + Cert *struct { + ConfigMap *struct { + Key *string `tfsdk:"key" json:"key,omitempty"` + Name *string `tfsdk:"name" json:"name,omitempty"` + Optional *bool `tfsdk:"optional" json:"optional,omitempty"` + } `tfsdk:"config_map" json:"configMap,omitempty"` + Secret *struct { + Key *string `tfsdk:"key" json:"key,omitempty"` + Name *string `tfsdk:"name" json:"name,omitempty"` + Optional *bool `tfsdk:"optional" json:"optional,omitempty"` + } `tfsdk:"secret" json:"secret,omitempty"` + } `tfsdk:"cert" json:"cert,omitempty"` + InsecureSkipVerify *bool `tfsdk:"insecure_skip_verify" json:"insecureSkipVerify,omitempty"` + KeySecret *struct { + Key *string `tfsdk:"key" json:"key,omitempty"` + Name *string `tfsdk:"name" json:"name,omitempty"` + Optional *bool `tfsdk:"optional" json:"optional,omitempty"` + } `tfsdk:"key_secret" json:"keySecret,omitempty"` + MaxVersion *string `tfsdk:"max_version" json:"maxVersion,omitempty"` + MinVersion *string `tfsdk:"min_version" json:"minVersion,omitempty"` + ServerName *string `tfsdk:"server_name" json:"serverName,omitempty"` + } `tfsdk:"tls_config" json:"tlsConfig,omitempty"` + } `tfsdk:"nomad_sd_configs" json:"nomadSDConfigs,omitempty"` + Oauth2 *struct { + ClientId *struct { + ConfigMap *struct { + Key *string `tfsdk:"key" json:"key,omitempty"` + Name *string `tfsdk:"name" json:"name,omitempty"` + Optional *bool `tfsdk:"optional" json:"optional,omitempty"` + } `tfsdk:"config_map" json:"configMap,omitempty"` + Secret *struct { + Key *string `tfsdk:"key" json:"key,omitempty"` + Name *string `tfsdk:"name" json:"name,omitempty"` + Optional *bool `tfsdk:"optional" json:"optional,omitempty"` + } `tfsdk:"secret" json:"secret,omitempty"` + } `tfsdk:"client_id" json:"clientId,omitempty"` + ClientSecret *struct { + Key *string `tfsdk:"key" json:"key,omitempty"` + Name *string `tfsdk:"name" json:"name,omitempty"` + Optional *bool `tfsdk:"optional" json:"optional,omitempty"` + } `tfsdk:"client_secret" json:"clientSecret,omitempty"` + EndpointParams *map[string]string `tfsdk:"endpoint_params" json:"endpointParams,omitempty"` + NoProxy *string `tfsdk:"no_proxy" json:"noProxy,omitempty"` + ProxyConnectHeader *map[string]string `tfsdk:"proxy_connect_header" json:"proxyConnectHeader,omitempty"` + ProxyFromEnvironment *bool `tfsdk:"proxy_from_environment" json:"proxyFromEnvironment,omitempty"` + ProxyUrl *string `tfsdk:"proxy_url" json:"proxyUrl,omitempty"` + Scopes *[]string `tfsdk:"scopes" json:"scopes,omitempty"` + TlsConfig *struct { + Ca *struct { + ConfigMap *struct { + Key *string `tfsdk:"key" json:"key,omitempty"` + Name *string `tfsdk:"name" json:"name,omitempty"` + Optional *bool `tfsdk:"optional" json:"optional,omitempty"` + } `tfsdk:"config_map" json:"configMap,omitempty"` + Secret *struct { + Key *string `tfsdk:"key" json:"key,omitempty"` + Name *string `tfsdk:"name" json:"name,omitempty"` + Optional *bool `tfsdk:"optional" json:"optional,omitempty"` + } `tfsdk:"secret" json:"secret,omitempty"` + } `tfsdk:"ca" json:"ca,omitempty"` + Cert *struct { + ConfigMap *struct { + Key *string `tfsdk:"key" json:"key,omitempty"` + Name *string `tfsdk:"name" json:"name,omitempty"` + Optional *bool `tfsdk:"optional" json:"optional,omitempty"` + } `tfsdk:"config_map" json:"configMap,omitempty"` + Secret *struct { + Key *string `tfsdk:"key" json:"key,omitempty"` + Name *string `tfsdk:"name" json:"name,omitempty"` + Optional *bool `tfsdk:"optional" json:"optional,omitempty"` + } `tfsdk:"secret" json:"secret,omitempty"` + } `tfsdk:"cert" json:"cert,omitempty"` + InsecureSkipVerify *bool `tfsdk:"insecure_skip_verify" json:"insecureSkipVerify,omitempty"` + KeySecret *struct { + Key *string `tfsdk:"key" json:"key,omitempty"` + Name *string `tfsdk:"name" json:"name,omitempty"` + Optional *bool `tfsdk:"optional" json:"optional,omitempty"` + } `tfsdk:"key_secret" json:"keySecret,omitempty"` + MaxVersion *string `tfsdk:"max_version" json:"maxVersion,omitempty"` + MinVersion *string `tfsdk:"min_version" json:"minVersion,omitempty"` + ServerName *string `tfsdk:"server_name" json:"serverName,omitempty"` + } `tfsdk:"tls_config" json:"tlsConfig,omitempty"` + TokenUrl *string `tfsdk:"token_url" json:"tokenUrl,omitempty"` + } `tfsdk:"oauth2" json:"oauth2,omitempty"` + OpenstackSDConfigs *[]struct { + AllTenants *bool `tfsdk:"all_tenants" json:"allTenants,omitempty"` + ApplicationCredentialId *string `tfsdk:"application_credential_id" json:"applicationCredentialId,omitempty"` + ApplicationCredentialName *string `tfsdk:"application_credential_name" json:"applicationCredentialName,omitempty"` + ApplicationCredentialSecret *struct { + Key *string `tfsdk:"key" json:"key,omitempty"` + Name *string `tfsdk:"name" json:"name,omitempty"` + Optional *bool `tfsdk:"optional" json:"optional,omitempty"` + } `tfsdk:"application_credential_secret" json:"applicationCredentialSecret,omitempty"` + Availability *string `tfsdk:"availability" json:"availability,omitempty"` + DomainID *string `tfsdk:"domain_id" json:"domainID,omitempty"` DomainName *string `tfsdk:"domain_name" json:"domainName,omitempty"` IdentityEndpoint *string `tfsdk:"identity_endpoint" json:"identityEndpoint,omitempty"` Password *struct { @@ -2192,37 +2246,279 @@ func (r *MonitoringCoreosComScrapeConfigV1Alpha1Manifest) Schema(_ context.Conte Description: "ScrapeConfigSpec is a specification of the desired configuration for a scrape configuration.", MarkdownDescription: "ScrapeConfigSpec is a specification of the desired configuration for a scrape configuration.", Attributes: map[string]schema.Attribute{ - "nomad_sd_configs": schema.ListNestedAttribute{ - Description: "NomadSDConfigs defines a list of Nomad service discovery configurations.", - MarkdownDescription: "NomadSDConfigs defines a list of Nomad service discovery configurations.", + "authorization": schema.SingleNestedAttribute{ + Description: "Authorization header to use on every scrape request.", + MarkdownDescription: "Authorization header to use on every scrape request.", + Attributes: map[string]schema.Attribute{ + "credentials": schema.SingleNestedAttribute{ + Description: "Selects a key of a Secret in the namespace that contains the credentials for authentication.", + MarkdownDescription: "Selects a key of a Secret in the namespace that contains the credentials for authentication.", + Attributes: map[string]schema.Attribute{ + "key": schema.StringAttribute{ + Description: "The key of the secret to select from. Must be a valid secret key.", + MarkdownDescription: "The key of the secret to select from. Must be a valid secret key.", + Required: true, + Optional: false, + Computed: false, + }, + + "name": schema.StringAttribute{ + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + Required: false, + Optional: true, + Computed: false, + }, + + "optional": schema.BoolAttribute{ + Description: "Specify whether the Secret or its key must be defined", + MarkdownDescription: "Specify whether the Secret or its key must be defined", + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + + "type": schema.StringAttribute{ + Description: "Defines the authentication type. The value is case-insensitive.'Basic' is not a supported value.Default: 'Bearer'", + MarkdownDescription: "Defines the authentication type. The value is case-insensitive.'Basic' is not a supported value.Default: 'Bearer'", + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + + "azure_sd_configs": schema.ListNestedAttribute{ + Description: "AzureSDConfigs defines a list of Azure service discovery configurations.", + MarkdownDescription: "AzureSDConfigs defines a list of Azure service discovery configurations.", NestedObject: schema.NestedAttributeObject{ Attributes: map[string]schema.Attribute{ - "allow_stale": schema.BoolAttribute{ - Description: "The information to access the Nomad API. It is to be definedas the Nomad documentation requires.", - MarkdownDescription: "The information to access the Nomad API. It is to be definedas the Nomad documentation requires.", + "authentication_method": schema.StringAttribute{ + Description: "# The authentication method, either 'OAuth' or 'ManagedIdentity' or 'SDK'.See https://docs.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/overviewSDK authentication method uses environment variables by default.See https://learn.microsoft.com/en-us/azure/developer/go/azure-sdk-authentication", + MarkdownDescription: "# The authentication method, either 'OAuth' or 'ManagedIdentity' or 'SDK'.See https://docs.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/overviewSDK authentication method uses environment variables by default.See https://learn.microsoft.com/en-us/azure/developer/go/azure-sdk-authentication", Required: false, Optional: true, Computed: false, + Validators: []validator.String{ + stringvalidator.OneOf("OAuth", "ManagedIdentity", "SDK"), + }, }, - "authorization": schema.SingleNestedAttribute{ - Description: "Authorization header to use on every scrape request.", - MarkdownDescription: "Authorization header to use on every scrape request.", + "client_id": schema.StringAttribute{ + Description: "Optional client ID. Only required with the OAuth authentication method.", + MarkdownDescription: "Optional client ID. Only required with the OAuth authentication method.", + Required: false, + Optional: true, + Computed: false, + }, + + "client_secret": schema.SingleNestedAttribute{ + Description: "Optional client secret. Only required with the OAuth authentication method.", + MarkdownDescription: "Optional client secret. Only required with the OAuth authentication method.", Attributes: map[string]schema.Attribute{ - "credentials": schema.SingleNestedAttribute{ - Description: "Selects a key of a Secret in the namespace that contains the credentials for authentication.", - MarkdownDescription: "Selects a key of a Secret in the namespace that contains the credentials for authentication.", - Attributes: map[string]schema.Attribute{ - "key": schema.StringAttribute{ - Description: "The key of the secret to select from. Must be a valid secret key.", - MarkdownDescription: "The key of the secret to select from. Must be a valid secret key.", - Required: true, - Optional: false, - Computed: false, - }, + "key": schema.StringAttribute{ + Description: "The key of the secret to select from. Must be a valid secret key.", + MarkdownDescription: "The key of the secret to select from. Must be a valid secret key.", + Required: true, + Optional: false, + Computed: false, + }, - "name": schema.StringAttribute{ - Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + "name": schema.StringAttribute{ + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + Required: false, + Optional: true, + Computed: false, + }, + + "optional": schema.BoolAttribute{ + Description: "Specify whether the Secret or its key must be defined", + MarkdownDescription: "Specify whether the Secret or its key must be defined", + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + + "environment": schema.StringAttribute{ + Description: "The Azure environment.", + MarkdownDescription: "The Azure environment.", + Required: false, + Optional: true, + Computed: false, + }, + + "port": schema.Int64Attribute{ + Description: "The port to scrape metrics from. If using the public IP address, this mustinstead be specified in the relabeling rule.", + MarkdownDescription: "The port to scrape metrics from. If using the public IP address, this mustinstead be specified in the relabeling rule.", + Required: false, + Optional: true, + Computed: false, + }, + + "refresh_interval": schema.StringAttribute{ + Description: "RefreshInterval configures the refresh interval at which Prometheus will re-read the instance list.", + MarkdownDescription: "RefreshInterval configures the refresh interval at which Prometheus will re-read the instance list.", + Required: false, + Optional: true, + Computed: false, + Validators: []validator.String{ + stringvalidator.RegexMatches(regexp.MustCompile(`^(0|(([0-9]+)y)?(([0-9]+)w)?(([0-9]+)d)?(([0-9]+)h)?(([0-9]+)m)?(([0-9]+)s)?(([0-9]+)ms)?)$`), ""), + }, + }, + + "resource_group": schema.StringAttribute{ + Description: "Optional resource group name. Limits discovery to this resource group.", + MarkdownDescription: "Optional resource group name. Limits discovery to this resource group.", + Required: false, + Optional: true, + Computed: false, + }, + + "subscription_id": schema.StringAttribute{ + Description: "The subscription ID. Always required.", + MarkdownDescription: "The subscription ID. Always required.", + Required: true, + Optional: false, + Computed: false, + Validators: []validator.String{ + stringvalidator.LengthAtLeast(1), + }, + }, + + "tenant_id": schema.StringAttribute{ + Description: "Optional tenant ID. Only required with the OAuth authentication method.", + MarkdownDescription: "Optional tenant ID. Only required with the OAuth authentication method.", + Required: false, + Optional: true, + Computed: false, + }, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + + "basic_auth": schema.SingleNestedAttribute{ + Description: "BasicAuth information to use on every scrape request.", + MarkdownDescription: "BasicAuth information to use on every scrape request.", + Attributes: map[string]schema.Attribute{ + "password": schema.SingleNestedAttribute{ + Description: "'password' specifies a key of a Secret containing the password forauthentication.", + MarkdownDescription: "'password' specifies a key of a Secret containing the password forauthentication.", + Attributes: map[string]schema.Attribute{ + "key": schema.StringAttribute{ + Description: "The key of the secret to select from. Must be a valid secret key.", + MarkdownDescription: "The key of the secret to select from. Must be a valid secret key.", + Required: true, + Optional: false, + Computed: false, + }, + + "name": schema.StringAttribute{ + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + Required: false, + Optional: true, + Computed: false, + }, + + "optional": schema.BoolAttribute{ + Description: "Specify whether the Secret or its key must be defined", + MarkdownDescription: "Specify whether the Secret or its key must be defined", + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + + "username": schema.SingleNestedAttribute{ + Description: "'username' specifies a key of a Secret containing the username forauthentication.", + MarkdownDescription: "'username' specifies a key of a Secret containing the username forauthentication.", + Attributes: map[string]schema.Attribute{ + "key": schema.StringAttribute{ + Description: "The key of the secret to select from. Must be a valid secret key.", + MarkdownDescription: "The key of the secret to select from. Must be a valid secret key.", + Required: true, + Optional: false, + Computed: false, + }, + + "name": schema.StringAttribute{ + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + Required: false, + Optional: true, + Computed: false, + }, + + "optional": schema.BoolAttribute{ + Description: "Specify whether the Secret or its key must be defined", + MarkdownDescription: "Specify whether the Secret or its key must be defined", + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + + "consul_sd_configs": schema.ListNestedAttribute{ + Description: "ConsulSDConfigs defines a list of Consul service discovery configurations.", + MarkdownDescription: "ConsulSDConfigs defines a list of Consul service discovery configurations.", + NestedObject: schema.NestedAttributeObject{ + Attributes: map[string]schema.Attribute{ + "allow_stale": schema.BoolAttribute{ + Description: "Allow stale Consul results (see https://www.consul.io/api/features/consistency.html). Will reduce load on Consul.If unset, Prometheus uses its default value.", + MarkdownDescription: "Allow stale Consul results (see https://www.consul.io/api/features/consistency.html). Will reduce load on Consul.If unset, Prometheus uses its default value.", + Required: false, + Optional: true, + Computed: false, + }, + + "authorization": schema.SingleNestedAttribute{ + Description: "Authorization header configuration to authenticate against the Consul Server.", + MarkdownDescription: "Authorization header configuration to authenticate against the Consul Server.", + Attributes: map[string]schema.Attribute{ + "credentials": schema.SingleNestedAttribute{ + Description: "Selects a key of a Secret in the namespace that contains the credentials for authentication.", + MarkdownDescription: "Selects a key of a Secret in the namespace that contains the credentials for authentication.", + Attributes: map[string]schema.Attribute{ + "key": schema.StringAttribute{ + Description: "The key of the secret to select from. Must be a valid secret key.", + MarkdownDescription: "The key of the secret to select from. Must be a valid secret key.", + Required: true, + Optional: false, + Computed: false, + }, + + "name": schema.StringAttribute{ + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", Required: false, Optional: true, @@ -2256,8 +2552,8 @@ func (r *MonitoringCoreosComScrapeConfigV1Alpha1Manifest) Schema(_ context.Conte }, "basic_auth": schema.SingleNestedAttribute{ - Description: "BasicAuth information to use on every scrape request.", - MarkdownDescription: "BasicAuth information to use on every scrape request.", + Description: "BasicAuth information to authenticate against the Consul Server.More info: https://prometheus.io/docs/operating/configuration/#endpoints", + MarkdownDescription: "BasicAuth information to authenticate against the Consul Server.More info: https://prometheus.io/docs/operating/configuration/#endpoints", Attributes: map[string]schema.Attribute{ "password": schema.SingleNestedAttribute{ Description: "'password' specifies a key of a Secret containing the password forauthentication.", @@ -2330,25 +2626,33 @@ func (r *MonitoringCoreosComScrapeConfigV1Alpha1Manifest) Schema(_ context.Conte Computed: false, }, + "datacenter": schema.StringAttribute{ + Description: "Consul Datacenter name, if not provided it will use the local Consul Agent Datacenter.", + MarkdownDescription: "Consul Datacenter name, if not provided it will use the local Consul Agent Datacenter.", + Required: false, + Optional: true, + Computed: false, + }, + "enable_http2": schema.BoolAttribute{ - Description: "Whether to enable HTTP2.", - MarkdownDescription: "Whether to enable HTTP2.", + Description: "Whether to enable HTTP2.If unset, Prometheus uses its default value.", + MarkdownDescription: "Whether to enable HTTP2.If unset, Prometheus uses its default value.", Required: false, Optional: true, Computed: false, }, "follow_redirects": schema.BoolAttribute{ - Description: "Configure whether HTTP requests follow HTTP 3xx redirects.", - MarkdownDescription: "Configure whether HTTP requests follow HTTP 3xx redirects.", + Description: "Configure whether HTTP requests follow HTTP 3xx redirects.If unset, Prometheus uses its default value.", + MarkdownDescription: "Configure whether HTTP requests follow HTTP 3xx redirects.If unset, Prometheus uses its default value.", Required: false, Optional: true, Computed: false, }, "namespace": schema.StringAttribute{ - Description: "", - MarkdownDescription: "", + Description: "Namespaces are only supported in Consul Enterprise.", + MarkdownDescription: "Namespaces are only supported in Consul Enterprise.", Required: false, Optional: true, Computed: false, @@ -2362,9 +2666,18 @@ func (r *MonitoringCoreosComScrapeConfigV1Alpha1Manifest) Schema(_ context.Conte Computed: false, }, + "node_meta": schema.MapAttribute{ + Description: "Node metadata key/value pairs to filter nodes for a given service.", + MarkdownDescription: "Node metadata key/value pairs to filter nodes for a given service.", + ElementType: types.StringType, + Required: false, + Optional: true, + Computed: false, + }, + "oauth2": schema.SingleNestedAttribute{ - Description: "Optional OAuth 2.0 configuration.Cannot be set at the same time as 'authorization' or 'basic_auth'.", - MarkdownDescription: "Optional OAuth 2.0 configuration.Cannot be set at the same time as 'authorization' or 'basic_auth'.", + Description: "Optional OAuth 2.0 configuration.", + MarkdownDescription: "Optional OAuth 2.0 configuration.", Attributes: map[string]schema.Attribute{ "client_id": schema.SingleNestedAttribute{ Description: "'clientId' specifies a key of a Secret or ConfigMap containing theOAuth2 client's ID.", @@ -2774,6 +3087,14 @@ func (r *MonitoringCoreosComScrapeConfigV1Alpha1Manifest) Schema(_ context.Conte Computed: false, }, + "partition": schema.StringAttribute{ + Description: "Admin Partitions are only supported in Consul Enterprise.", + MarkdownDescription: "Admin Partitions are only supported in Consul Enterprise.", + Required: false, + Optional: true, + Computed: false, + }, + "proxy_connect_header": schema.MapAttribute{ Description: "ProxyConnectHeader optionally specifies headers to send toproxies during CONNECT requests.It requires Prometheus >= v2.43.0.", MarkdownDescription: "ProxyConnectHeader optionally specifies headers to send toproxies during CONNECT requests.It requires Prometheus >= v2.43.0.", @@ -2803,8 +3124,8 @@ func (r *MonitoringCoreosComScrapeConfigV1Alpha1Manifest) Schema(_ context.Conte }, "refresh_interval": schema.StringAttribute{ - Description: "Duration is a valid time duration that can be parsed by Prometheus model.ParseDuration() function.Supported units: y, w, d, h, m, s, msExamples: '30s', '1m', '1h20m15s', '15d'", - MarkdownDescription: "Duration is a valid time duration that can be parsed by Prometheus model.ParseDuration() function.Supported units: y, w, d, h, m, s, msExamples: '30s', '1m', '1h20m15s', '15d'", + Description: "The time after which the provided names are refreshed.On large setup it might be a good idea to increase this value because the catalog will change all the time.If unset, Prometheus uses its default value.", + MarkdownDescription: "The time after which the provided names are refreshed.On large setup it might be a good idea to increase this value because the catalog will change all the time.If unset, Prometheus uses its default value.", Required: false, Optional: true, Computed: false, @@ -2813,17 +3134,20 @@ func (r *MonitoringCoreosComScrapeConfigV1Alpha1Manifest) Schema(_ context.Conte }, }, - "region": schema.StringAttribute{ - Description: "", - MarkdownDescription: "", + "scheme": schema.StringAttribute{ + Description: "HTTP Scheme default 'http'", + MarkdownDescription: "HTTP Scheme default 'http'", Required: false, Optional: true, Computed: false, + Validators: []validator.String{ + stringvalidator.OneOf("HTTP", "HTTPS"), + }, }, "server": schema.StringAttribute{ - Description: "", - MarkdownDescription: "", + Description: "A valid string consisting of a hostname or IP followed by an optional port number.", + MarkdownDescription: "A valid string consisting of a hostname or IP followed by an optional port number.", Required: true, Optional: false, Computed: false, @@ -2832,17 +3156,35 @@ func (r *MonitoringCoreosComScrapeConfigV1Alpha1Manifest) Schema(_ context.Conte }, }, - "tag_separator": schema.StringAttribute{ - Description: "", - MarkdownDescription: "", + "services": schema.ListAttribute{ + Description: "A list of services for which targets are retrieved. If omitted, all services are scraped.", + MarkdownDescription: "A list of services for which targets are retrieved. If omitted, all services are scraped.", + ElementType: types.StringType, + Required: false, + Optional: true, + Computed: false, + }, + + "tag_separator": schema.StringAttribute{ + Description: "The string by which Consul tags are joined into the tag label.If unset, Prometheus uses its default value.", + MarkdownDescription: "The string by which Consul tags are joined into the tag label.If unset, Prometheus uses its default value.", + Required: false, + Optional: true, + Computed: false, + }, + + "tags": schema.ListAttribute{ + Description: "An optional list of tags used to filter nodes for a given service. Services must contain all tags in the list.", + MarkdownDescription: "An optional list of tags used to filter nodes for a given service. Services must contain all tags in the list.", + ElementType: types.StringType, Required: false, Optional: true, Computed: false, }, "tls_config": schema.SingleNestedAttribute{ - Description: "TLS configuration applying to the target HTTP endpoint.", - MarkdownDescription: "TLS configuration applying to the target HTTP endpoint.", + Description: "TLS Config", + MarkdownDescription: "TLS Config", Attributes: map[string]schema.Attribute{ "ca": schema.SingleNestedAttribute{ Description: "Certificate authority used when verifying server certificates.", @@ -3069,90 +3411,10 @@ func (r *MonitoringCoreosComScrapeConfigV1Alpha1Manifest) Schema(_ context.Conte Optional: true, Computed: false, }, - }, - }, - Required: false, - Optional: true, - Computed: false, - }, - - "authorization": schema.SingleNestedAttribute{ - Description: "Authorization header to use on every scrape request.", - MarkdownDescription: "Authorization header to use on every scrape request.", - Attributes: map[string]schema.Attribute{ - "credentials": schema.SingleNestedAttribute{ - Description: "Selects a key of a Secret in the namespace that contains the credentials for authentication.", - MarkdownDescription: "Selects a key of a Secret in the namespace that contains the credentials for authentication.", - Attributes: map[string]schema.Attribute{ - "key": schema.StringAttribute{ - Description: "The key of the secret to select from. Must be a valid secret key.", - MarkdownDescription: "The key of the secret to select from. Must be a valid secret key.", - Required: true, - Optional: false, - Computed: false, - }, - - "name": schema.StringAttribute{ - Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", - MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", - Required: false, - Optional: true, - Computed: false, - }, - - "optional": schema.BoolAttribute{ - Description: "Specify whether the Secret or its key must be defined", - MarkdownDescription: "Specify whether the Secret or its key must be defined", - Required: false, - Optional: true, - Computed: false, - }, - }, - Required: false, - Optional: true, - Computed: false, - }, - - "type": schema.StringAttribute{ - Description: "Defines the authentication type. The value is case-insensitive.'Basic' is not a supported value.Default: 'Bearer'", - MarkdownDescription: "Defines the authentication type. The value is case-insensitive.'Basic' is not a supported value.Default: 'Bearer'", - Required: false, - Optional: true, - Computed: false, - }, - }, - Required: false, - Optional: true, - Computed: false, - }, - - "azure_sd_configs": schema.ListNestedAttribute{ - Description: "AzureSDConfigs defines a list of Azure service discovery configurations.", - MarkdownDescription: "AzureSDConfigs defines a list of Azure service discovery configurations.", - NestedObject: schema.NestedAttributeObject{ - Attributes: map[string]schema.Attribute{ - "authentication_method": schema.StringAttribute{ - Description: "# The authentication method, either 'OAuth' or 'ManagedIdentity' or 'SDK'.See https://docs.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/overviewSDK authentication method uses environment variables by default.See https://learn.microsoft.com/en-us/azure/developer/go/azure-sdk-authentication", - MarkdownDescription: "# The authentication method, either 'OAuth' or 'ManagedIdentity' or 'SDK'.See https://docs.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/overviewSDK authentication method uses environment variables by default.See https://learn.microsoft.com/en-us/azure/developer/go/azure-sdk-authentication", - Required: false, - Optional: true, - Computed: false, - Validators: []validator.String{ - stringvalidator.OneOf("OAuth", "ManagedIdentity", "SDK"), - }, - }, - - "client_id": schema.StringAttribute{ - Description: "Optional client ID. Only required with the OAuth authentication method.", - MarkdownDescription: "Optional client ID. Only required with the OAuth authentication method.", - Required: false, - Optional: true, - Computed: false, - }, - "client_secret": schema.SingleNestedAttribute{ - Description: "Optional client secret. Only required with the OAuth authentication method.", - MarkdownDescription: "Optional client secret. Only required with the OAuth authentication method.", + "token_ref": schema.SingleNestedAttribute{ + Description: "Consul ACL TokenRef, if not provided it will use the ACL from the local Consul Agent.", + MarkdownDescription: "Consul ACL TokenRef, if not provided it will use the ACL from the local Consul Agent.", Attributes: map[string]schema.Attribute{ "key": schema.StringAttribute{ Description: "The key of the secret to select from. Must be a valid secret key.", @@ -3182,135 +3444,6 @@ func (r *MonitoringCoreosComScrapeConfigV1Alpha1Manifest) Schema(_ context.Conte Optional: true, Computed: false, }, - - "environment": schema.StringAttribute{ - Description: "The Azure environment.", - MarkdownDescription: "The Azure environment.", - Required: false, - Optional: true, - Computed: false, - }, - - "port": schema.Int64Attribute{ - Description: "The port to scrape metrics from. If using the public IP address, this mustinstead be specified in the relabeling rule.", - MarkdownDescription: "The port to scrape metrics from. If using the public IP address, this mustinstead be specified in the relabeling rule.", - Required: false, - Optional: true, - Computed: false, - }, - - "refresh_interval": schema.StringAttribute{ - Description: "RefreshInterval configures the refresh interval at which Prometheus will re-read the instance list.", - MarkdownDescription: "RefreshInterval configures the refresh interval at which Prometheus will re-read the instance list.", - Required: false, - Optional: true, - Computed: false, - Validators: []validator.String{ - stringvalidator.RegexMatches(regexp.MustCompile(`^(0|(([0-9]+)y)?(([0-9]+)w)?(([0-9]+)d)?(([0-9]+)h)?(([0-9]+)m)?(([0-9]+)s)?(([0-9]+)ms)?)$`), ""), - }, - }, - - "resource_group": schema.StringAttribute{ - Description: "Optional resource group name. Limits discovery to this resource group.", - MarkdownDescription: "Optional resource group name. Limits discovery to this resource group.", - Required: false, - Optional: true, - Computed: false, - }, - - "subscription_id": schema.StringAttribute{ - Description: "The subscription ID. Always required.", - MarkdownDescription: "The subscription ID. Always required.", - Required: true, - Optional: false, - Computed: false, - Validators: []validator.String{ - stringvalidator.LengthAtLeast(1), - }, - }, - - "tenant_id": schema.StringAttribute{ - Description: "Optional tenant ID. Only required with the OAuth authentication method.", - MarkdownDescription: "Optional tenant ID. Only required with the OAuth authentication method.", - Required: false, - Optional: true, - Computed: false, - }, - }, - }, - Required: false, - Optional: true, - Computed: false, - }, - - "basic_auth": schema.SingleNestedAttribute{ - Description: "BasicAuth information to use on every scrape request.", - MarkdownDescription: "BasicAuth information to use on every scrape request.", - Attributes: map[string]schema.Attribute{ - "password": schema.SingleNestedAttribute{ - Description: "'password' specifies a key of a Secret containing the password forauthentication.", - MarkdownDescription: "'password' specifies a key of a Secret containing the password forauthentication.", - Attributes: map[string]schema.Attribute{ - "key": schema.StringAttribute{ - Description: "The key of the secret to select from. Must be a valid secret key.", - MarkdownDescription: "The key of the secret to select from. Must be a valid secret key.", - Required: true, - Optional: false, - Computed: false, - }, - - "name": schema.StringAttribute{ - Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", - MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", - Required: false, - Optional: true, - Computed: false, - }, - - "optional": schema.BoolAttribute{ - Description: "Specify whether the Secret or its key must be defined", - MarkdownDescription: "Specify whether the Secret or its key must be defined", - Required: false, - Optional: true, - Computed: false, - }, - }, - Required: false, - Optional: true, - Computed: false, - }, - - "username": schema.SingleNestedAttribute{ - Description: "'username' specifies a key of a Secret containing the username forauthentication.", - MarkdownDescription: "'username' specifies a key of a Secret containing the username forauthentication.", - Attributes: map[string]schema.Attribute{ - "key": schema.StringAttribute{ - Description: "The key of the secret to select from. Must be a valid secret key.", - MarkdownDescription: "The key of the secret to select from. Must be a valid secret key.", - Required: true, - Optional: false, - Computed: false, - }, - - "name": schema.StringAttribute{ - Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", - MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", - Required: false, - Optional: true, - Computed: false, - }, - - "optional": schema.BoolAttribute{ - Description: "Specify whether the Secret or its key must be defined", - MarkdownDescription: "Specify whether the Secret or its key must be defined", - Required: false, - Optional: true, - Computed: false, - }, - }, - Required: false, - Optional: true, - Computed: false, }, }, Required: false, @@ -3318,22 +3451,14 @@ func (r *MonitoringCoreosComScrapeConfigV1Alpha1Manifest) Schema(_ context.Conte Computed: false, }, - "consul_sd_configs": schema.ListNestedAttribute{ - Description: "ConsulSDConfigs defines a list of Consul service discovery configurations.", - MarkdownDescription: "ConsulSDConfigs defines a list of Consul service discovery configurations.", + "digital_ocean_sd_configs": schema.ListNestedAttribute{ + Description: "DigitalOceanSDConfigs defines a list of DigitalOcean service discovery configurations.", + MarkdownDescription: "DigitalOceanSDConfigs defines a list of DigitalOcean service discovery configurations.", NestedObject: schema.NestedAttributeObject{ Attributes: map[string]schema.Attribute{ - "allow_stale": schema.BoolAttribute{ - Description: "Allow stale Consul results (see https://www.consul.io/api/features/consistency.html). Will reduce load on Consul.If unset, Prometheus uses its default value.", - MarkdownDescription: "Allow stale Consul results (see https://www.consul.io/api/features/consistency.html). Will reduce load on Consul.If unset, Prometheus uses its default value.", - Required: false, - Optional: true, - Computed: false, - }, - "authorization": schema.SingleNestedAttribute{ - Description: "Authorization header configuration to authenticate against the Consul Server.", - MarkdownDescription: "Authorization header configuration to authenticate against the Consul Server.", + Description: "Authorization header configuration to authenticate against the DigitalOcean API.Cannot be set at the same time as 'oauth2'.", + MarkdownDescription: "Authorization header configuration to authenticate against the DigitalOcean API.Cannot be set at the same time as 'oauth2'.", Attributes: map[string]schema.Attribute{ "credentials": schema.SingleNestedAttribute{ Description: "Selects a key of a Secret in the namespace that contains the credentials for authentication.", @@ -3381,108 +3506,17 @@ func (r *MonitoringCoreosComScrapeConfigV1Alpha1Manifest) Schema(_ context.Conte Computed: false, }, - "basic_auth": schema.SingleNestedAttribute{ - Description: "BasicAuth information to authenticate against the Consul Server.More info: https://prometheus.io/docs/operating/configuration/#endpoints", - MarkdownDescription: "BasicAuth information to authenticate against the Consul Server.More info: https://prometheus.io/docs/operating/configuration/#endpoints", - Attributes: map[string]schema.Attribute{ - "password": schema.SingleNestedAttribute{ - Description: "'password' specifies a key of a Secret containing the password forauthentication.", - MarkdownDescription: "'password' specifies a key of a Secret containing the password forauthentication.", - Attributes: map[string]schema.Attribute{ - "key": schema.StringAttribute{ - Description: "The key of the secret to select from. Must be a valid secret key.", - MarkdownDescription: "The key of the secret to select from. Must be a valid secret key.", - Required: true, - Optional: false, - Computed: false, - }, - - "name": schema.StringAttribute{ - Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", - MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", - Required: false, - Optional: true, - Computed: false, - }, - - "optional": schema.BoolAttribute{ - Description: "Specify whether the Secret or its key must be defined", - MarkdownDescription: "Specify whether the Secret or its key must be defined", - Required: false, - Optional: true, - Computed: false, - }, - }, - Required: false, - Optional: true, - Computed: false, - }, - - "username": schema.SingleNestedAttribute{ - Description: "'username' specifies a key of a Secret containing the username forauthentication.", - MarkdownDescription: "'username' specifies a key of a Secret containing the username forauthentication.", - Attributes: map[string]schema.Attribute{ - "key": schema.StringAttribute{ - Description: "The key of the secret to select from. Must be a valid secret key.", - MarkdownDescription: "The key of the secret to select from. Must be a valid secret key.", - Required: true, - Optional: false, - Computed: false, - }, - - "name": schema.StringAttribute{ - Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", - MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", - Required: false, - Optional: true, - Computed: false, - }, - - "optional": schema.BoolAttribute{ - Description: "Specify whether the Secret or its key must be defined", - MarkdownDescription: "Specify whether the Secret or its key must be defined", - Required: false, - Optional: true, - Computed: false, - }, - }, - Required: false, - Optional: true, - Computed: false, - }, - }, - Required: false, - Optional: true, - Computed: false, - }, - - "datacenter": schema.StringAttribute{ - Description: "Consul Datacenter name, if not provided it will use the local Consul Agent Datacenter.", - MarkdownDescription: "Consul Datacenter name, if not provided it will use the local Consul Agent Datacenter.", - Required: false, - Optional: true, - Computed: false, - }, - "enable_http2": schema.BoolAttribute{ - Description: "Whether to enable HTTP2.If unset, Prometheus uses its default value.", - MarkdownDescription: "Whether to enable HTTP2.If unset, Prometheus uses its default value.", + Description: "Whether to enable HTTP2.", + MarkdownDescription: "Whether to enable HTTP2.", Required: false, Optional: true, Computed: false, }, "follow_redirects": schema.BoolAttribute{ - Description: "Configure whether HTTP requests follow HTTP 3xx redirects.If unset, Prometheus uses its default value.", - MarkdownDescription: "Configure whether HTTP requests follow HTTP 3xx redirects.If unset, Prometheus uses its default value.", - Required: false, - Optional: true, - Computed: false, - }, - - "namespace": schema.StringAttribute{ - Description: "Namespaces are only supported in Consul Enterprise.", - MarkdownDescription: "Namespaces are only supported in Consul Enterprise.", + Description: "Configure whether HTTP requests follow HTTP 3xx redirects.", + MarkdownDescription: "Configure whether HTTP requests follow HTTP 3xx redirects.", Required: false, Optional: true, Computed: false, @@ -3496,18 +3530,9 @@ func (r *MonitoringCoreosComScrapeConfigV1Alpha1Manifest) Schema(_ context.Conte Computed: false, }, - "node_meta": schema.MapAttribute{ - Description: "Node metadata key/value pairs to filter nodes for a given service.", - MarkdownDescription: "Node metadata key/value pairs to filter nodes for a given service.", - ElementType: types.StringType, - Required: false, - Optional: true, - Computed: false, - }, - "oauth2": schema.SingleNestedAttribute{ - Description: "Optional OAuth 2.0 configuration.", - MarkdownDescription: "Optional OAuth 2.0 configuration.", + Description: "Optional OAuth 2.0 configuration.Cannot be set at the same time as 'authorization'.", + MarkdownDescription: "Optional OAuth 2.0 configuration.Cannot be set at the same time as 'authorization'.", Attributes: map[string]schema.Attribute{ "client_id": schema.SingleNestedAttribute{ Description: "'clientId' specifies a key of a Secret or ConfigMap containing theOAuth2 client's ID.", @@ -3917,9 +3942,9 @@ func (r *MonitoringCoreosComScrapeConfigV1Alpha1Manifest) Schema(_ context.Conte Computed: false, }, - "partition": schema.StringAttribute{ - Description: "Admin Partitions are only supported in Consul Enterprise.", - MarkdownDescription: "Admin Partitions are only supported in Consul Enterprise.", + "port": schema.Int64Attribute{ + Description: "The port to scrape metrics from.", + MarkdownDescription: "The port to scrape metrics from.", Required: false, Optional: true, Computed: false, @@ -3954,8 +3979,8 @@ func (r *MonitoringCoreosComScrapeConfigV1Alpha1Manifest) Schema(_ context.Conte }, "refresh_interval": schema.StringAttribute{ - Description: "The time after which the provided names are refreshed.On large setup it might be a good idea to increase this value because the catalog will change all the time.If unset, Prometheus uses its default value.", - MarkdownDescription: "The time after which the provided names are refreshed.On large setup it might be a good idea to increase this value because the catalog will change all the time.If unset, Prometheus uses its default value.", + Description: "Refresh interval to re-read the instance list.", + MarkdownDescription: "Refresh interval to re-read the instance list.", Required: false, Optional: true, Computed: false, @@ -3964,57 +3989,9 @@ func (r *MonitoringCoreosComScrapeConfigV1Alpha1Manifest) Schema(_ context.Conte }, }, - "scheme": schema.StringAttribute{ - Description: "HTTP Scheme default 'http'", - MarkdownDescription: "HTTP Scheme default 'http'", - Required: false, - Optional: true, - Computed: false, - Validators: []validator.String{ - stringvalidator.OneOf("HTTP", "HTTPS"), - }, - }, - - "server": schema.StringAttribute{ - Description: "A valid string consisting of a hostname or IP followed by an optional port number.", - MarkdownDescription: "A valid string consisting of a hostname or IP followed by an optional port number.", - Required: true, - Optional: false, - Computed: false, - Validators: []validator.String{ - stringvalidator.LengthAtLeast(1), - }, - }, - - "services": schema.ListAttribute{ - Description: "A list of services for which targets are retrieved. If omitted, all services are scraped.", - MarkdownDescription: "A list of services for which targets are retrieved. If omitted, all services are scraped.", - ElementType: types.StringType, - Required: false, - Optional: true, - Computed: false, - }, - - "tag_separator": schema.StringAttribute{ - Description: "The string by which Consul tags are joined into the tag label.If unset, Prometheus uses its default value.", - MarkdownDescription: "The string by which Consul tags are joined into the tag label.If unset, Prometheus uses its default value.", - Required: false, - Optional: true, - Computed: false, - }, - - "tags": schema.ListAttribute{ - Description: "An optional list of tags used to filter nodes for a given service. Services must contain all tags in the list.", - MarkdownDescription: "An optional list of tags used to filter nodes for a given service. Services must contain all tags in the list.", - ElementType: types.StringType, - Required: false, - Optional: true, - Computed: false, - }, - "tls_config": schema.SingleNestedAttribute{ - Description: "TLS Config", - MarkdownDescription: "TLS Config", + Description: "TLS configuration applying to the target HTTP endpoint.", + MarkdownDescription: "TLS configuration applying to the target HTTP endpoint.", Attributes: map[string]schema.Attribute{ "ca": schema.SingleNestedAttribute{ Description: "Certificate authority used when verifying server certificates.", @@ -4241,38 +4218,59 @@ func (r *MonitoringCoreosComScrapeConfigV1Alpha1Manifest) Schema(_ context.Conte Optional: true, Computed: false, }, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, - "token_ref": schema.SingleNestedAttribute{ - Description: "Consul ACL TokenRef, if not provided it will use the ACL from the local Consul Agent.", - MarkdownDescription: "Consul ACL TokenRef, if not provided it will use the ACL from the local Consul Agent.", - Attributes: map[string]schema.Attribute{ - "key": schema.StringAttribute{ - Description: "The key of the secret to select from. Must be a valid secret key.", - MarkdownDescription: "The key of the secret to select from. Must be a valid secret key.", - Required: true, - Optional: false, - Computed: false, - }, + "dns_sd_configs": schema.ListNestedAttribute{ + Description: "DNSSDConfigs defines a list of DNS service discovery configurations.", + MarkdownDescription: "DNSSDConfigs defines a list of DNS service discovery configurations.", + NestedObject: schema.NestedAttributeObject{ + Attributes: map[string]schema.Attribute{ + "names": schema.ListAttribute{ + Description: "A list of DNS domain names to be queried.", + MarkdownDescription: "A list of DNS domain names to be queried.", + ElementType: types.StringType, + Required: true, + Optional: false, + Computed: false, + }, - "name": schema.StringAttribute{ - Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", - MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", - Required: false, - Optional: true, - Computed: false, - }, + "port": schema.Int64Attribute{ + Description: "The port number used if the query type is not SRVIgnored for SRV records", + MarkdownDescription: "The port number used if the query type is not SRVIgnored for SRV records", + Required: false, + Optional: true, + Computed: false, + Validators: []validator.Int64{ + int64validator.AtLeast(0), + int64validator.AtMost(65535), + }, + }, - "optional": schema.BoolAttribute{ - Description: "Specify whether the Secret or its key must be defined", - MarkdownDescription: "Specify whether the Secret or its key must be defined", - Required: false, - Optional: true, - Computed: false, - }, + "refresh_interval": schema.StringAttribute{ + Description: "RefreshInterval configures the time after which the provided names are refreshed.If not set, Prometheus uses its default value.", + MarkdownDescription: "RefreshInterval configures the time after which the provided names are refreshed.If not set, Prometheus uses its default value.", + Required: false, + Optional: true, + Computed: false, + Validators: []validator.String{ + stringvalidator.RegexMatches(regexp.MustCompile(`^(0|(([0-9]+)y)?(([0-9]+)w)?(([0-9]+)d)?(([0-9]+)h)?(([0-9]+)m)?(([0-9]+)s)?(([0-9]+)ms)?)$`), ""), + }, + }, + + "type": schema.StringAttribute{ + Description: "The type of DNS query to perform. One of SRV, A, AAAA, MX or NS.If not set, Prometheus uses its default value.When set to NS, it requires Prometheus >= v2.49.0.When set to MX, it requires Prometheus >= v2.38.0", + MarkdownDescription: "The type of DNS query to perform. One of SRV, A, AAAA, MX or NS.If not set, Prometheus uses its default value.When set to NS, it requires Prometheus >= v2.49.0.When set to MX, it requires Prometheus >= v2.38.0", + Required: false, + Optional: true, + Computed: false, + Validators: []validator.String{ + stringvalidator.OneOf("A", "AAAA", "MX", "NS", "SRV"), }, - Required: false, - Optional: true, - Computed: false, }, }, }, @@ -4281,14 +4279,14 @@ func (r *MonitoringCoreosComScrapeConfigV1Alpha1Manifest) Schema(_ context.Conte Computed: false, }, - "digital_ocean_sd_configs": schema.ListNestedAttribute{ - Description: "DigitalOceanSDConfigs defines a list of DigitalOcean service discovery configurations.", - MarkdownDescription: "DigitalOceanSDConfigs defines a list of DigitalOcean service discovery configurations.", + "docker_sd_configs": schema.ListNestedAttribute{ + Description: "DockerSDConfigs defines a list of Docker service discovery configurations.", + MarkdownDescription: "DockerSDConfigs defines a list of Docker service discovery configurations.", NestedObject: schema.NestedAttributeObject{ Attributes: map[string]schema.Attribute{ "authorization": schema.SingleNestedAttribute{ - Description: "Authorization header configuration to authenticate against the DigitalOcean API.Cannot be set at the same time as 'oauth2'.", - MarkdownDescription: "Authorization header configuration to authenticate against the DigitalOcean API.Cannot be set at the same time as 'oauth2'.", + Description: "Authorization header configuration to authenticate against the Docker API.Cannot be set at the same time as 'oauth2'.", + MarkdownDescription: "Authorization header configuration to authenticate against the Docker API.Cannot be set at the same time as 'oauth2'.", Attributes: map[string]schema.Attribute{ "credentials": schema.SingleNestedAttribute{ Description: "Selects a key of a Secret in the namespace that contains the credentials for authentication.", @@ -4336,6 +4334,81 @@ func (r *MonitoringCoreosComScrapeConfigV1Alpha1Manifest) Schema(_ context.Conte Computed: false, }, + "basic_auth": schema.SingleNestedAttribute{ + Description: "BasicAuth information to use on every scrape request.", + MarkdownDescription: "BasicAuth information to use on every scrape request.", + Attributes: map[string]schema.Attribute{ + "password": schema.SingleNestedAttribute{ + Description: "'password' specifies a key of a Secret containing the password forauthentication.", + MarkdownDescription: "'password' specifies a key of a Secret containing the password forauthentication.", + Attributes: map[string]schema.Attribute{ + "key": schema.StringAttribute{ + Description: "The key of the secret to select from. Must be a valid secret key.", + MarkdownDescription: "The key of the secret to select from. Must be a valid secret key.", + Required: true, + Optional: false, + Computed: false, + }, + + "name": schema.StringAttribute{ + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + Required: false, + Optional: true, + Computed: false, + }, + + "optional": schema.BoolAttribute{ + Description: "Specify whether the Secret or its key must be defined", + MarkdownDescription: "Specify whether the Secret or its key must be defined", + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + + "username": schema.SingleNestedAttribute{ + Description: "'username' specifies a key of a Secret containing the username forauthentication.", + MarkdownDescription: "'username' specifies a key of a Secret containing the username forauthentication.", + Attributes: map[string]schema.Attribute{ + "key": schema.StringAttribute{ + Description: "The key of the secret to select from. Must be a valid secret key.", + MarkdownDescription: "The key of the secret to select from. Must be a valid secret key.", + Required: true, + Optional: false, + Computed: false, + }, + + "name": schema.StringAttribute{ + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + Required: false, + Optional: true, + Computed: false, + }, + + "optional": schema.BoolAttribute{ + Description: "Specify whether the Secret or its key must be defined", + MarkdownDescription: "Specify whether the Secret or its key must be defined", + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + "enable_http2": schema.BoolAttribute{ Description: "Whether to enable HTTP2.", MarkdownDescription: "Whether to enable HTTP2.", @@ -4344,6 +4417,34 @@ func (r *MonitoringCoreosComScrapeConfigV1Alpha1Manifest) Schema(_ context.Conte Computed: false, }, + "filters": schema.ListNestedAttribute{ + Description: "Optional filters to limit the discovery process to a subset of the available resources.", + MarkdownDescription: "Optional filters to limit the discovery process to a subset of the available resources.", + NestedObject: schema.NestedAttributeObject{ + Attributes: map[string]schema.Attribute{ + "name": schema.StringAttribute{ + Description: "Name of the Filter.", + MarkdownDescription: "Name of the Filter.", + Required: true, + Optional: false, + Computed: false, + }, + + "values": schema.ListAttribute{ + Description: "Value to filter on.", + MarkdownDescription: "Value to filter on.", + ElementType: types.StringType, + Required: true, + Optional: false, + Computed: false, + }, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + "follow_redirects": schema.BoolAttribute{ Description: "Configure whether HTTP requests follow HTTP 3xx redirects.", MarkdownDescription: "Configure whether HTTP requests follow HTTP 3xx redirects.", @@ -4352,6 +4453,33 @@ func (r *MonitoringCoreosComScrapeConfigV1Alpha1Manifest) Schema(_ context.Conte Computed: false, }, + "host": schema.StringAttribute{ + Description: "Address of the docker daemon", + MarkdownDescription: "Address of the docker daemon", + Required: true, + Optional: false, + Computed: false, + Validators: []validator.String{ + stringvalidator.LengthAtLeast(1), + }, + }, + + "host_networking_host": schema.StringAttribute{ + Description: "The host to use if the container is in host networking mode.", + MarkdownDescription: "The host to use if the container is in host networking mode.", + Required: false, + Optional: true, + Computed: false, + }, + + "match_first_network": schema.BoolAttribute{ + Description: "Configure whether to match the first network if the container has multiple networks defined.If unset, Prometheus uses true by default.It requires Prometheus >= v2.54.1.", + MarkdownDescription: "Configure whether to match the first network if the container has multiple networks defined.If unset, Prometheus uses true by default.It requires Prometheus >= v2.54.1.", + Required: false, + Optional: true, + Computed: false, + }, + "no_proxy": schema.StringAttribute{ Description: "'noProxy' is a comma-separated string that can contain IPs, CIDR notation, domain namesthat should be excluded from proxying. IP and domain names cancontain port numbers.It requires Prometheus >= v2.43.0.", MarkdownDescription: "'noProxy' is a comma-separated string that can contain IPs, CIDR notation, domain namesthat should be excluded from proxying. IP and domain names cancontain port numbers.It requires Prometheus >= v2.43.0.", @@ -4809,8 +4937,8 @@ func (r *MonitoringCoreosComScrapeConfigV1Alpha1Manifest) Schema(_ context.Conte }, "refresh_interval": schema.StringAttribute{ - Description: "Refresh interval to re-read the instance list.", - MarkdownDescription: "Refresh interval to re-read the instance list.", + Description: "Time after which the container is refreshed.", + MarkdownDescription: "Time after which the container is refreshed.", Required: false, Optional: true, Computed: false, @@ -5055,68 +5183,14 @@ func (r *MonitoringCoreosComScrapeConfigV1Alpha1Manifest) Schema(_ context.Conte Computed: false, }, - "dns_sd_configs": schema.ListNestedAttribute{ - Description: "DNSSDConfigs defines a list of DNS service discovery configurations.", - MarkdownDescription: "DNSSDConfigs defines a list of DNS service discovery configurations.", - NestedObject: schema.NestedAttributeObject{ - Attributes: map[string]schema.Attribute{ - "names": schema.ListAttribute{ - Description: "A list of DNS domain names to be queried.", - MarkdownDescription: "A list of DNS domain names to be queried.", - ElementType: types.StringType, - Required: true, - Optional: false, - Computed: false, - }, - - "port": schema.Int64Attribute{ - Description: "The port number used if the query type is not SRVIgnored for SRV records", - MarkdownDescription: "The port number used if the query type is not SRVIgnored for SRV records", - Required: false, - Optional: true, - Computed: false, - Validators: []validator.Int64{ - int64validator.AtLeast(0), - int64validator.AtMost(65535), - }, - }, - - "refresh_interval": schema.StringAttribute{ - Description: "RefreshInterval configures the time after which the provided names are refreshed.If not set, Prometheus uses its default value.", - MarkdownDescription: "RefreshInterval configures the time after which the provided names are refreshed.If not set, Prometheus uses its default value.", - Required: false, - Optional: true, - Computed: false, - Validators: []validator.String{ - stringvalidator.RegexMatches(regexp.MustCompile(`^(0|(([0-9]+)y)?(([0-9]+)w)?(([0-9]+)d)?(([0-9]+)h)?(([0-9]+)m)?(([0-9]+)s)?(([0-9]+)ms)?)$`), ""), - }, - }, - - "type": schema.StringAttribute{ - Description: "The type of DNS query to perform. One of SRV, A, AAAA, MX or NS.If not set, Prometheus uses its default value.When set to NS, it requires Prometheus >= v2.49.0.When set to MX, it requires Prometheus >= v2.38.0", - MarkdownDescription: "The type of DNS query to perform. One of SRV, A, AAAA, MX or NS.If not set, Prometheus uses its default value.When set to NS, it requires Prometheus >= v2.49.0.When set to MX, it requires Prometheus >= v2.38.0", - Required: false, - Optional: true, - Computed: false, - Validators: []validator.String{ - stringvalidator.OneOf("A", "AAAA", "MX", "NS", "SRV"), - }, - }, - }, - }, - Required: false, - Optional: true, - Computed: false, - }, - - "docker_sd_configs": schema.ListNestedAttribute{ - Description: "DockerSDConfigs defines a list of Docker service discovery configurations.", - MarkdownDescription: "DockerSDConfigs defines a list of Docker service discovery configurations.", + "docker_swarm_sd_configs": schema.ListNestedAttribute{ + Description: "DockerswarmSDConfigs defines a list of Dockerswarm service discovery configurations.", + MarkdownDescription: "DockerswarmSDConfigs defines a list of Dockerswarm service discovery configurations.", NestedObject: schema.NestedAttributeObject{ Attributes: map[string]schema.Attribute{ "authorization": schema.SingleNestedAttribute{ - Description: "Authorization header configuration to authenticate against the Docker API.Cannot be set at the same time as 'oauth2'.", - MarkdownDescription: "Authorization header configuration to authenticate against the Docker API.Cannot be set at the same time as 'oauth2'.", + Description: "Authorization header configuration to authenticate against the target HTTP endpoint.", + MarkdownDescription: "Authorization header configuration to authenticate against the target HTTP endpoint.", Attributes: map[string]schema.Attribute{ "credentials": schema.SingleNestedAttribute{ Description: "Selects a key of a Secret in the namespace that contains the credentials for authentication.", @@ -5165,8 +5239,8 @@ func (r *MonitoringCoreosComScrapeConfigV1Alpha1Manifest) Schema(_ context.Conte }, "basic_auth": schema.SingleNestedAttribute{ - Description: "BasicAuth information to use on every scrape request.", - MarkdownDescription: "BasicAuth information to use on every scrape request.", + Description: "Optional HTTP basic authentication information.", + MarkdownDescription: "Optional HTTP basic authentication information.", Attributes: map[string]schema.Attribute{ "password": schema.SingleNestedAttribute{ Description: "'password' specifies a key of a Secret containing the password forauthentication.", @@ -5248,8 +5322,8 @@ func (r *MonitoringCoreosComScrapeConfigV1Alpha1Manifest) Schema(_ context.Conte }, "filters": schema.ListNestedAttribute{ - Description: "Optional filters to limit the discovery process to a subset of the available resources.", - MarkdownDescription: "Optional filters to limit the discovery process to a subset of the available resources.", + Description: "Optional filters to limit the discovery process to a subset of availableresources.The available filters are listed in the upstream documentation:Services: https://docs.docker.com/engine/api/v1.40/#operation/ServiceListTasks: https://docs.docker.com/engine/api/v1.40/#operation/TaskListNodes: https://docs.docker.com/engine/api/v1.40/#operation/NodeList", + MarkdownDescription: "Optional filters to limit the discovery process to a subset of availableresources.The available filters are listed in the upstream documentation:Services: https://docs.docker.com/engine/api/v1.40/#operation/ServiceListTasks: https://docs.docker.com/engine/api/v1.40/#operation/TaskListNodes: https://docs.docker.com/engine/api/v1.40/#operation/NodeList", NestedObject: schema.NestedAttributeObject{ Attributes: map[string]schema.Attribute{ "name": schema.StringAttribute{ @@ -5284,32 +5358,16 @@ func (r *MonitoringCoreosComScrapeConfigV1Alpha1Manifest) Schema(_ context.Conte }, "host": schema.StringAttribute{ - Description: "Address of the docker daemon", - MarkdownDescription: "Address of the docker daemon", + Description: "Address of the Docker daemon", + MarkdownDescription: "Address of the Docker daemon", Required: true, Optional: false, Computed: false, Validators: []validator.String{ - stringvalidator.LengthAtLeast(1), + stringvalidator.RegexMatches(regexp.MustCompile(`^[a-zA-Z][a-zA-Z0-9+.-]*://.+$`), ""), }, }, - "host_networking_host": schema.StringAttribute{ - Description: "The host to use if the container is in host networking mode.", - MarkdownDescription: "The host to use if the container is in host networking mode.", - Required: false, - Optional: true, - Computed: false, - }, - - "match_first_network": schema.BoolAttribute{ - Description: "Configure whether to match the first network if the container has multiple networks defined.If unset, Prometheus uses true by default.It requires Prometheus >= v2.54.0.", - MarkdownDescription: "Configure whether to match the first network if the container has multiple networks defined.If unset, Prometheus uses true by default.It requires Prometheus >= v2.54.0.", - Required: false, - Optional: true, - Computed: false, - }, - "no_proxy": schema.StringAttribute{ Description: "'noProxy' is a comma-separated string that can contain IPs, CIDR notation, domain namesthat should be excluded from proxying. IP and domain names cancontain port numbers.It requires Prometheus >= v2.43.0.", MarkdownDescription: "'noProxy' is a comma-separated string that can contain IPs, CIDR notation, domain namesthat should be excluded from proxying. IP and domain names cancontain port numbers.It requires Prometheus >= v2.43.0.", @@ -5319,8 +5377,8 @@ func (r *MonitoringCoreosComScrapeConfigV1Alpha1Manifest) Schema(_ context.Conte }, "oauth2": schema.SingleNestedAttribute{ - Description: "Optional OAuth 2.0 configuration.Cannot be set at the same time as 'authorization'.", - MarkdownDescription: "Optional OAuth 2.0 configuration.Cannot be set at the same time as 'authorization'.", + Description: "Optional OAuth 2.0 configuration.Cannot be set at the same time as 'authorization', or 'basicAuth'.", + MarkdownDescription: "Optional OAuth 2.0 configuration.Cannot be set at the same time as 'authorization', or 'basicAuth'.", Attributes: map[string]schema.Attribute{ "client_id": schema.SingleNestedAttribute{ Description: "'clientId' specifies a key of a Secret or ConfigMap containing theOAuth2 client's ID.", @@ -5731,11 +5789,15 @@ func (r *MonitoringCoreosComScrapeConfigV1Alpha1Manifest) Schema(_ context.Conte }, "port": schema.Int64Attribute{ - Description: "The port to scrape metrics from.", - MarkdownDescription: "The port to scrape metrics from.", + Description: "The port to scrape metrics from, when 'role' is nodes, and for discoveredtasks and services that don't have published ports.", + MarkdownDescription: "The port to scrape metrics from, when 'role' is nodes, and for discoveredtasks and services that don't have published ports.", Required: false, Optional: true, Computed: false, + Validators: []validator.Int64{ + int64validator.AtLeast(0), + int64validator.AtMost(65535), + }, }, "proxy_connect_header": schema.MapAttribute{ @@ -5767,8 +5829,8 @@ func (r *MonitoringCoreosComScrapeConfigV1Alpha1Manifest) Schema(_ context.Conte }, "refresh_interval": schema.StringAttribute{ - Description: "Time after which the container is refreshed.", - MarkdownDescription: "Time after which the container is refreshed.", + Description: "The time after which the service discovery data is refreshed.", + MarkdownDescription: "The time after which the service discovery data is refreshed.", Required: false, Optional: true, Computed: false, @@ -5777,9 +5839,20 @@ func (r *MonitoringCoreosComScrapeConfigV1Alpha1Manifest) Schema(_ context.Conte }, }, + "role": schema.StringAttribute{ + Description: "Role of the targets to retrieve. Must be 'Services', 'Tasks', or 'Nodes'.", + MarkdownDescription: "Role of the targets to retrieve. Must be 'Services', 'Tasks', or 'Nodes'.", + Required: true, + Optional: false, + Computed: false, + Validators: []validator.String{ + stringvalidator.OneOf("Services", "Tasks", "Nodes"), + }, + }, + "tls_config": schema.SingleNestedAttribute{ - Description: "TLS configuration applying to the target HTTP endpoint.", - MarkdownDescription: "TLS configuration applying to the target HTTP endpoint.", + Description: "TLS configuration to use on every scrape request", + MarkdownDescription: "TLS configuration to use on every scrape request", Attributes: map[string]schema.Attribute{ "ca": schema.SingleNestedAttribute{ Description: "Certificate authority used when verifying server certificates.", @@ -6013,129 +6086,37 @@ func (r *MonitoringCoreosComScrapeConfigV1Alpha1Manifest) Schema(_ context.Conte Computed: false, }, - "docker_swarm_sd_configs": schema.ListNestedAttribute{ - Description: "DockerswarmSDConfigs defines a list of Dockerswarm service discovery configurations.", - MarkdownDescription: "DockerswarmSDConfigs defines a list of Dockerswarm service discovery configurations.", + "ec2_sd_configs": schema.ListNestedAttribute{ + Description: "EC2SDConfigs defines a list of EC2 service discovery configurations.", + MarkdownDescription: "EC2SDConfigs defines a list of EC2 service discovery configurations.", NestedObject: schema.NestedAttributeObject{ Attributes: map[string]schema.Attribute{ - "authorization": schema.SingleNestedAttribute{ - Description: "Authorization header configuration to authenticate against the target HTTP endpoint.", - MarkdownDescription: "Authorization header configuration to authenticate against the target HTTP endpoint.", + "access_key": schema.SingleNestedAttribute{ + Description: "AccessKey is the AWS API key.", + MarkdownDescription: "AccessKey is the AWS API key.", Attributes: map[string]schema.Attribute{ - "credentials": schema.SingleNestedAttribute{ - Description: "Selects a key of a Secret in the namespace that contains the credentials for authentication.", - MarkdownDescription: "Selects a key of a Secret in the namespace that contains the credentials for authentication.", - Attributes: map[string]schema.Attribute{ - "key": schema.StringAttribute{ - Description: "The key of the secret to select from. Must be a valid secret key.", - MarkdownDescription: "The key of the secret to select from. Must be a valid secret key.", - Required: true, - Optional: false, - Computed: false, - }, - - "name": schema.StringAttribute{ - Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", - MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", - Required: false, - Optional: true, - Computed: false, - }, - - "optional": schema.BoolAttribute{ - Description: "Specify whether the Secret or its key must be defined", - MarkdownDescription: "Specify whether the Secret or its key must be defined", - Required: false, - Optional: true, - Computed: false, - }, - }, - Required: false, - Optional: true, - Computed: false, + "key": schema.StringAttribute{ + Description: "The key of the secret to select from. Must be a valid secret key.", + MarkdownDescription: "The key of the secret to select from. Must be a valid secret key.", + Required: true, + Optional: false, + Computed: false, }, - "type": schema.StringAttribute{ - Description: "Defines the authentication type. The value is case-insensitive.'Basic' is not a supported value.Default: 'Bearer'", - MarkdownDescription: "Defines the authentication type. The value is case-insensitive.'Basic' is not a supported value.Default: 'Bearer'", + "name": schema.StringAttribute{ + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", Required: false, Optional: true, Computed: false, }, - }, - Required: false, - Optional: true, - Computed: false, - }, - - "basic_auth": schema.SingleNestedAttribute{ - Description: "Optional HTTP basic authentication information.", - MarkdownDescription: "Optional HTTP basic authentication information.", - Attributes: map[string]schema.Attribute{ - "password": schema.SingleNestedAttribute{ - Description: "'password' specifies a key of a Secret containing the password forauthentication.", - MarkdownDescription: "'password' specifies a key of a Secret containing the password forauthentication.", - Attributes: map[string]schema.Attribute{ - "key": schema.StringAttribute{ - Description: "The key of the secret to select from. Must be a valid secret key.", - MarkdownDescription: "The key of the secret to select from. Must be a valid secret key.", - Required: true, - Optional: false, - Computed: false, - }, - - "name": schema.StringAttribute{ - Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", - MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", - Required: false, - Optional: true, - Computed: false, - }, - - "optional": schema.BoolAttribute{ - Description: "Specify whether the Secret or its key must be defined", - MarkdownDescription: "Specify whether the Secret or its key must be defined", - Required: false, - Optional: true, - Computed: false, - }, - }, - Required: false, - Optional: true, - Computed: false, - }, - - "username": schema.SingleNestedAttribute{ - Description: "'username' specifies a key of a Secret containing the username forauthentication.", - MarkdownDescription: "'username' specifies a key of a Secret containing the username forauthentication.", - Attributes: map[string]schema.Attribute{ - "key": schema.StringAttribute{ - Description: "The key of the secret to select from. Must be a valid secret key.", - MarkdownDescription: "The key of the secret to select from. Must be a valid secret key.", - Required: true, - Optional: false, - Computed: false, - }, - - "name": schema.StringAttribute{ - Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", - MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", - Required: false, - Optional: true, - Computed: false, - }, - "optional": schema.BoolAttribute{ - Description: "Specify whether the Secret or its key must be defined", - MarkdownDescription: "Specify whether the Secret or its key must be defined", - Required: false, - Optional: true, - Computed: false, - }, - }, - Required: false, - Optional: true, - Computed: false, + "optional": schema.BoolAttribute{ + Description: "Specify whether the Secret or its key must be defined", + MarkdownDescription: "Specify whether the Secret or its key must be defined", + Required: false, + Optional: true, + Computed: false, }, }, Required: false, @@ -6144,16 +6125,16 @@ func (r *MonitoringCoreosComScrapeConfigV1Alpha1Manifest) Schema(_ context.Conte }, "enable_http2": schema.BoolAttribute{ - Description: "Whether to enable HTTP2.", - MarkdownDescription: "Whether to enable HTTP2.", + Description: "Whether to enable HTTP2.It requires Prometheus >= v2.41.0", + MarkdownDescription: "Whether to enable HTTP2.It requires Prometheus >= v2.41.0", Required: false, Optional: true, Computed: false, }, "filters": schema.ListNestedAttribute{ - Description: "Optional filters to limit the discovery process to a subset of availableresources.The available filters are listed in the upstream documentation:Services: https://docs.docker.com/engine/api/v1.40/#operation/ServiceListTasks: https://docs.docker.com/engine/api/v1.40/#operation/TaskListNodes: https://docs.docker.com/engine/api/v1.40/#operation/NodeList", - MarkdownDescription: "Optional filters to limit the discovery process to a subset of availableresources.The available filters are listed in the upstream documentation:Services: https://docs.docker.com/engine/api/v1.40/#operation/ServiceListTasks: https://docs.docker.com/engine/api/v1.40/#operation/TaskListNodes: https://docs.docker.com/engine/api/v1.40/#operation/NodeList", + Description: "Filters can be used optionally to filter the instance list by other criteria.Available filter criteria can be found here:https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeInstances.htmlFilter API documentation: https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_Filter.htmlIt requires Prometheus >= v2.3.0", + MarkdownDescription: "Filters can be used optionally to filter the instance list by other criteria.Available filter criteria can be found here:https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeInstances.htmlFilter API documentation: https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_Filter.htmlIt requires Prometheus >= v2.3.0", NestedObject: schema.NestedAttributeObject{ Attributes: map[string]schema.Attribute{ "name": schema.StringAttribute{ @@ -6180,24 +6161,13 @@ func (r *MonitoringCoreosComScrapeConfigV1Alpha1Manifest) Schema(_ context.Conte }, "follow_redirects": schema.BoolAttribute{ - Description: "Configure whether HTTP requests follow HTTP 3xx redirects.", - MarkdownDescription: "Configure whether HTTP requests follow HTTP 3xx redirects.", + Description: "Configure whether HTTP requests follow HTTP 3xx redirects.It requires Prometheus >= v2.41.0", + MarkdownDescription: "Configure whether HTTP requests follow HTTP 3xx redirects.It requires Prometheus >= v2.41.0", Required: false, Optional: true, Computed: false, }, - "host": schema.StringAttribute{ - Description: "Address of the Docker daemon", - MarkdownDescription: "Address of the Docker daemon", - Required: true, - Optional: false, - Computed: false, - Validators: []validator.String{ - stringvalidator.RegexMatches(regexp.MustCompile(`^[a-zA-Z][a-zA-Z0-9+.-]*://.+$`), ""), - }, - }, - "no_proxy": schema.StringAttribute{ Description: "'noProxy' is a comma-separated string that can contain IPs, CIDR notation, domain namesthat should be excluded from proxying. IP and domain names cancontain port numbers.It requires Prometheus >= v2.43.0.", MarkdownDescription: "'noProxy' is a comma-separated string that can contain IPs, CIDR notation, domain namesthat should be excluded from proxying. IP and domain names cancontain port numbers.It requires Prometheus >= v2.43.0.", @@ -6206,71 +6176,177 @@ func (r *MonitoringCoreosComScrapeConfigV1Alpha1Manifest) Schema(_ context.Conte Computed: false, }, - "oauth2": schema.SingleNestedAttribute{ - Description: "Optional OAuth 2.0 configuration.Cannot be set at the same time as 'authorization', or 'basicAuth'.", - MarkdownDescription: "Optional OAuth 2.0 configuration.Cannot be set at the same time as 'authorization', or 'basicAuth'.", - Attributes: map[string]schema.Attribute{ - "client_id": schema.SingleNestedAttribute{ - Description: "'clientId' specifies a key of a Secret or ConfigMap containing theOAuth2 client's ID.", - MarkdownDescription: "'clientId' specifies a key of a Secret or ConfigMap containing theOAuth2 client's ID.", - Attributes: map[string]schema.Attribute{ - "config_map": schema.SingleNestedAttribute{ - Description: "ConfigMap containing data to use for the targets.", - MarkdownDescription: "ConfigMap containing data to use for the targets.", - Attributes: map[string]schema.Attribute{ - "key": schema.StringAttribute{ - Description: "The key to select.", - MarkdownDescription: "The key to select.", - Required: true, - Optional: false, - Computed: false, - }, - - "name": schema.StringAttribute{ - Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", - MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", - Required: false, - Optional: true, - Computed: false, - }, + "port": schema.Int64Attribute{ + Description: "The port to scrape metrics from. If using the public IP address, this mustinstead be specified in the relabeling rule.", + MarkdownDescription: "The port to scrape metrics from. If using the public IP address, this mustinstead be specified in the relabeling rule.", + Required: false, + Optional: true, + Computed: false, + Validators: []validator.Int64{ + int64validator.AtLeast(0), + int64validator.AtMost(65535), + }, + }, - "optional": schema.BoolAttribute{ - Description: "Specify whether the ConfigMap or its key must be defined", - MarkdownDescription: "Specify whether the ConfigMap or its key must be defined", - Required: false, - Optional: true, - Computed: false, - }, - }, - Required: false, - Optional: true, - Computed: false, - }, + "proxy_connect_header": schema.MapAttribute{ + Description: "ProxyConnectHeader optionally specifies headers to send toproxies during CONNECT requests.It requires Prometheus >= v2.43.0.", + MarkdownDescription: "ProxyConnectHeader optionally specifies headers to send toproxies during CONNECT requests.It requires Prometheus >= v2.43.0.", + ElementType: types.StringType, + Required: false, + Optional: true, + Computed: false, + }, - "secret": schema.SingleNestedAttribute{ - Description: "Secret containing data to use for the targets.", - MarkdownDescription: "Secret containing data to use for the targets.", - Attributes: map[string]schema.Attribute{ - "key": schema.StringAttribute{ - Description: "The key of the secret to select from. Must be a valid secret key.", - MarkdownDescription: "The key of the secret to select from. Must be a valid secret key.", - Required: true, - Optional: false, - Computed: false, - }, + "proxy_from_environment": schema.BoolAttribute{ + Description: "Whether to use the proxy configuration defined by environment variables (HTTP_PROXY, HTTPS_PROXY, and NO_PROXY).If unset, Prometheus uses its default value.It requires Prometheus >= v2.43.0.", + MarkdownDescription: "Whether to use the proxy configuration defined by environment variables (HTTP_PROXY, HTTPS_PROXY, and NO_PROXY).If unset, Prometheus uses its default value.It requires Prometheus >= v2.43.0.", + Required: false, + Optional: true, + Computed: false, + }, - "name": schema.StringAttribute{ - Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", - MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", - Required: false, - Optional: true, - Computed: false, - }, + "proxy_url": schema.StringAttribute{ + Description: "'proxyURL' defines the HTTP proxy server to use.", + MarkdownDescription: "'proxyURL' defines the HTTP proxy server to use.", + Required: false, + Optional: true, + Computed: false, + Validators: []validator.String{ + stringvalidator.RegexMatches(regexp.MustCompile(`^http(s)?://.+$`), ""), + }, + }, - "optional": schema.BoolAttribute{ - Description: "Specify whether the Secret or its key must be defined", - MarkdownDescription: "Specify whether the Secret or its key must be defined", - Required: false, + "refresh_interval": schema.StringAttribute{ + Description: "RefreshInterval configures the refresh interval at which Prometheus will re-read the instance list.", + MarkdownDescription: "RefreshInterval configures the refresh interval at which Prometheus will re-read the instance list.", + Required: false, + Optional: true, + Computed: false, + Validators: []validator.String{ + stringvalidator.RegexMatches(regexp.MustCompile(`^(0|(([0-9]+)y)?(([0-9]+)w)?(([0-9]+)d)?(([0-9]+)h)?(([0-9]+)m)?(([0-9]+)s)?(([0-9]+)ms)?)$`), ""), + }, + }, + + "region": schema.StringAttribute{ + Description: "The AWS region.", + MarkdownDescription: "The AWS region.", + Required: false, + Optional: true, + Computed: false, + Validators: []validator.String{ + stringvalidator.LengthAtLeast(1), + }, + }, + + "role_arn": schema.StringAttribute{ + Description: "AWS Role ARN, an alternative to using AWS API keys.", + MarkdownDescription: "AWS Role ARN, an alternative to using AWS API keys.", + Required: false, + Optional: true, + Computed: false, + Validators: []validator.String{ + stringvalidator.LengthAtLeast(1), + }, + }, + + "secret_key": schema.SingleNestedAttribute{ + Description: "SecretKey is the AWS API secret.", + MarkdownDescription: "SecretKey is the AWS API secret.", + Attributes: map[string]schema.Attribute{ + "key": schema.StringAttribute{ + Description: "The key of the secret to select from. Must be a valid secret key.", + MarkdownDescription: "The key of the secret to select from. Must be a valid secret key.", + Required: true, + Optional: false, + Computed: false, + }, + + "name": schema.StringAttribute{ + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + Required: false, + Optional: true, + Computed: false, + }, + + "optional": schema.BoolAttribute{ + Description: "Specify whether the Secret or its key must be defined", + MarkdownDescription: "Specify whether the Secret or its key must be defined", + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + + "tls_config": schema.SingleNestedAttribute{ + Description: "TLS configuration to connect to the AWS EC2 API.It requires Prometheus >= v2.41.0", + MarkdownDescription: "TLS configuration to connect to the AWS EC2 API.It requires Prometheus >= v2.41.0", + Attributes: map[string]schema.Attribute{ + "ca": schema.SingleNestedAttribute{ + Description: "Certificate authority used when verifying server certificates.", + MarkdownDescription: "Certificate authority used when verifying server certificates.", + Attributes: map[string]schema.Attribute{ + "config_map": schema.SingleNestedAttribute{ + Description: "ConfigMap containing data to use for the targets.", + MarkdownDescription: "ConfigMap containing data to use for the targets.", + Attributes: map[string]schema.Attribute{ + "key": schema.StringAttribute{ + Description: "The key to select.", + MarkdownDescription: "The key to select.", + Required: true, + Optional: false, + Computed: false, + }, + + "name": schema.StringAttribute{ + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + Required: false, + Optional: true, + Computed: false, + }, + + "optional": schema.BoolAttribute{ + Description: "Specify whether the ConfigMap or its key must be defined", + MarkdownDescription: "Specify whether the ConfigMap or its key must be defined", + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + + "secret": schema.SingleNestedAttribute{ + Description: "Secret containing data to use for the targets.", + MarkdownDescription: "Secret containing data to use for the targets.", + Attributes: map[string]schema.Attribute{ + "key": schema.StringAttribute{ + Description: "The key of the secret to select from. Must be a valid secret key.", + MarkdownDescription: "The key of the secret to select from. Must be a valid secret key.", + Required: true, + Optional: false, + Computed: false, + }, + + "name": schema.StringAttribute{ + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + Required: false, + Optional: true, + Computed: false, + }, + + "optional": schema.BoolAttribute{ + Description: "Specify whether the Secret or its key must be defined", + MarkdownDescription: "Specify whether the Secret or its key must be defined", + Required: false, Optional: true, Computed: false, }, @@ -6280,14 +6356,97 @@ func (r *MonitoringCoreosComScrapeConfigV1Alpha1Manifest) Schema(_ context.Conte Computed: false, }, }, - Required: true, - Optional: false, + Required: false, + Optional: true, Computed: false, }, - "client_secret": schema.SingleNestedAttribute{ - Description: "'clientSecret' specifies a key of a Secret containing the OAuth2client's secret.", - MarkdownDescription: "'clientSecret' specifies a key of a Secret containing the OAuth2client's secret.", + "cert": schema.SingleNestedAttribute{ + Description: "Client certificate to present when doing client-authentication.", + MarkdownDescription: "Client certificate to present when doing client-authentication.", + Attributes: map[string]schema.Attribute{ + "config_map": schema.SingleNestedAttribute{ + Description: "ConfigMap containing data to use for the targets.", + MarkdownDescription: "ConfigMap containing data to use for the targets.", + Attributes: map[string]schema.Attribute{ + "key": schema.StringAttribute{ + Description: "The key to select.", + MarkdownDescription: "The key to select.", + Required: true, + Optional: false, + Computed: false, + }, + + "name": schema.StringAttribute{ + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + Required: false, + Optional: true, + Computed: false, + }, + + "optional": schema.BoolAttribute{ + Description: "Specify whether the ConfigMap or its key must be defined", + MarkdownDescription: "Specify whether the ConfigMap or its key must be defined", + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + + "secret": schema.SingleNestedAttribute{ + Description: "Secret containing data to use for the targets.", + MarkdownDescription: "Secret containing data to use for the targets.", + Attributes: map[string]schema.Attribute{ + "key": schema.StringAttribute{ + Description: "The key of the secret to select from. Must be a valid secret key.", + MarkdownDescription: "The key of the secret to select from. Must be a valid secret key.", + Required: true, + Optional: false, + Computed: false, + }, + + "name": schema.StringAttribute{ + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + Required: false, + Optional: true, + Computed: false, + }, + + "optional": schema.BoolAttribute{ + Description: "Specify whether the Secret or its key must be defined", + MarkdownDescription: "Specify whether the Secret or its key must be defined", + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + + "insecure_skip_verify": schema.BoolAttribute{ + Description: "Disable target certificate validation.", + MarkdownDescription: "Disable target certificate validation.", + Required: false, + Optional: true, + Computed: false, + }, + + "key_secret": schema.SingleNestedAttribute{ + Description: "Secret containing the client key file for the targets.", + MarkdownDescription: "Secret containing the client key file for the targets.", Attributes: map[string]schema.Attribute{ "key": schema.StringAttribute{ Description: "The key of the secret to select from. Must be a valid secret key.", @@ -6313,212 +6472,248 @@ func (r *MonitoringCoreosComScrapeConfigV1Alpha1Manifest) Schema(_ context.Conte Computed: false, }, }, - Required: true, - Optional: false, + Required: false, + Optional: true, Computed: false, }, - "endpoint_params": schema.MapAttribute{ - Description: "'endpointParams' configures the HTTP parameters to append to the tokenURL.", - MarkdownDescription: "'endpointParams' configures the HTTP parameters to append to the tokenURL.", - ElementType: types.StringType, + "max_version": schema.StringAttribute{ + Description: "Maximum acceptable TLS version.It requires Prometheus >= v2.41.0.", + MarkdownDescription: "Maximum acceptable TLS version.It requires Prometheus >= v2.41.0.", Required: false, Optional: true, Computed: false, + Validators: []validator.String{ + stringvalidator.OneOf("TLS10", "TLS11", "TLS12", "TLS13"), + }, }, - "no_proxy": schema.StringAttribute{ - Description: "'noProxy' is a comma-separated string that can contain IPs, CIDR notation, domain namesthat should be excluded from proxying. IP and domain names cancontain port numbers.It requires Prometheus >= v2.43.0.", - MarkdownDescription: "'noProxy' is a comma-separated string that can contain IPs, CIDR notation, domain namesthat should be excluded from proxying. IP and domain names cancontain port numbers.It requires Prometheus >= v2.43.0.", + "min_version": schema.StringAttribute{ + Description: "Minimum acceptable TLS version.It requires Prometheus >= v2.35.0.", + MarkdownDescription: "Minimum acceptable TLS version.It requires Prometheus >= v2.35.0.", Required: false, Optional: true, Computed: false, + Validators: []validator.String{ + stringvalidator.OneOf("TLS10", "TLS11", "TLS12", "TLS13"), + }, }, - "proxy_connect_header": schema.MapAttribute{ - Description: "ProxyConnectHeader optionally specifies headers to send toproxies during CONNECT requests.It requires Prometheus >= v2.43.0.", - MarkdownDescription: "ProxyConnectHeader optionally specifies headers to send toproxies during CONNECT requests.It requires Prometheus >= v2.43.0.", - ElementType: types.StringType, - Required: false, - Optional: true, - Computed: false, - }, - - "proxy_from_environment": schema.BoolAttribute{ - Description: "Whether to use the proxy configuration defined by environment variables (HTTP_PROXY, HTTPS_PROXY, and NO_PROXY).If unset, Prometheus uses its default value.It requires Prometheus >= v2.43.0.", - MarkdownDescription: "Whether to use the proxy configuration defined by environment variables (HTTP_PROXY, HTTPS_PROXY, and NO_PROXY).If unset, Prometheus uses its default value.It requires Prometheus >= v2.43.0.", + "server_name": schema.StringAttribute{ + Description: "Used to verify the hostname for the targets.", + MarkdownDescription: "Used to verify the hostname for the targets.", Required: false, Optional: true, Computed: false, }, + }, + Required: false, + Optional: true, + Computed: false, + }, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, - "proxy_url": schema.StringAttribute{ - Description: "'proxyURL' defines the HTTP proxy server to use.", - MarkdownDescription: "'proxyURL' defines the HTTP proxy server to use.", - Required: false, - Optional: true, - Computed: false, - Validators: []validator.String{ - stringvalidator.RegexMatches(regexp.MustCompile(`^http(s)?://.+$`), ""), + "enable_compression": schema.BoolAttribute{ + Description: "When false, Prometheus will request uncompressed response from the scraped target.It requires Prometheus >= v2.49.0.If unset, Prometheus uses true by default.", + MarkdownDescription: "When false, Prometheus will request uncompressed response from the scraped target.It requires Prometheus >= v2.49.0.If unset, Prometheus uses true by default.", + Required: false, + Optional: true, + Computed: false, + }, + + "eureka_sd_configs": schema.ListNestedAttribute{ + Description: "EurekaSDConfigs defines a list of Eureka service discovery configurations.", + MarkdownDescription: "EurekaSDConfigs defines a list of Eureka service discovery configurations.", + NestedObject: schema.NestedAttributeObject{ + Attributes: map[string]schema.Attribute{ + "authorization": schema.SingleNestedAttribute{ + Description: "Authorization header to use on every scrape request.", + MarkdownDescription: "Authorization header to use on every scrape request.", + Attributes: map[string]schema.Attribute{ + "credentials": schema.SingleNestedAttribute{ + Description: "Selects a key of a Secret in the namespace that contains the credentials for authentication.", + MarkdownDescription: "Selects a key of a Secret in the namespace that contains the credentials for authentication.", + Attributes: map[string]schema.Attribute{ + "key": schema.StringAttribute{ + Description: "The key of the secret to select from. Must be a valid secret key.", + MarkdownDescription: "The key of the secret to select from. Must be a valid secret key.", + Required: true, + Optional: false, + Computed: false, + }, + + "name": schema.StringAttribute{ + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + Required: false, + Optional: true, + Computed: false, + }, + + "optional": schema.BoolAttribute{ + Description: "Specify whether the Secret or its key must be defined", + MarkdownDescription: "Specify whether the Secret or its key must be defined", + Required: false, + Optional: true, + Computed: false, + }, }, + Required: false, + Optional: true, + Computed: false, }, - "scopes": schema.ListAttribute{ - Description: "'scopes' defines the OAuth2 scopes used for the token request.", - MarkdownDescription: "'scopes' defines the OAuth2 scopes used for the token request.", - ElementType: types.StringType, + "type": schema.StringAttribute{ + Description: "Defines the authentication type. The value is case-insensitive.'Basic' is not a supported value.Default: 'Bearer'", + MarkdownDescription: "Defines the authentication type. The value is case-insensitive.'Basic' is not a supported value.Default: 'Bearer'", Required: false, Optional: true, Computed: false, }, + }, + Required: false, + Optional: true, + Computed: false, + }, - "tls_config": schema.SingleNestedAttribute{ - Description: "TLS configuration to use when connecting to the OAuth2 server.It requires Prometheus >= v2.43.0.", - MarkdownDescription: "TLS configuration to use when connecting to the OAuth2 server.It requires Prometheus >= v2.43.0.", + "basic_auth": schema.SingleNestedAttribute{ + Description: "BasicAuth information to use on every scrape request.", + MarkdownDescription: "BasicAuth information to use on every scrape request.", + Attributes: map[string]schema.Attribute{ + "password": schema.SingleNestedAttribute{ + Description: "'password' specifies a key of a Secret containing the password forauthentication.", + MarkdownDescription: "'password' specifies a key of a Secret containing the password forauthentication.", Attributes: map[string]schema.Attribute{ - "ca": schema.SingleNestedAttribute{ - Description: "Certificate authority used when verifying server certificates.", - MarkdownDescription: "Certificate authority used when verifying server certificates.", - Attributes: map[string]schema.Attribute{ - "config_map": schema.SingleNestedAttribute{ - Description: "ConfigMap containing data to use for the targets.", - MarkdownDescription: "ConfigMap containing data to use for the targets.", - Attributes: map[string]schema.Attribute{ - "key": schema.StringAttribute{ - Description: "The key to select.", - MarkdownDescription: "The key to select.", - Required: true, - Optional: false, - Computed: false, - }, + "key": schema.StringAttribute{ + Description: "The key of the secret to select from. Must be a valid secret key.", + MarkdownDescription: "The key of the secret to select from. Must be a valid secret key.", + Required: true, + Optional: false, + Computed: false, + }, - "name": schema.StringAttribute{ - Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", - MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", - Required: false, - Optional: true, - Computed: false, - }, + "name": schema.StringAttribute{ + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + Required: false, + Optional: true, + Computed: false, + }, - "optional": schema.BoolAttribute{ - Description: "Specify whether the ConfigMap or its key must be defined", - MarkdownDescription: "Specify whether the ConfigMap or its key must be defined", - Required: false, - Optional: true, - Computed: false, - }, - }, - Required: false, - Optional: true, - Computed: false, - }, + "optional": schema.BoolAttribute{ + Description: "Specify whether the Secret or its key must be defined", + MarkdownDescription: "Specify whether the Secret or its key must be defined", + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, - "secret": schema.SingleNestedAttribute{ - Description: "Secret containing data to use for the targets.", - MarkdownDescription: "Secret containing data to use for the targets.", - Attributes: map[string]schema.Attribute{ - "key": schema.StringAttribute{ - Description: "The key of the secret to select from. Must be a valid secret key.", - MarkdownDescription: "The key of the secret to select from. Must be a valid secret key.", - Required: true, - Optional: false, - Computed: false, - }, + "username": schema.SingleNestedAttribute{ + Description: "'username' specifies a key of a Secret containing the username forauthentication.", + MarkdownDescription: "'username' specifies a key of a Secret containing the username forauthentication.", + Attributes: map[string]schema.Attribute{ + "key": schema.StringAttribute{ + Description: "The key of the secret to select from. Must be a valid secret key.", + MarkdownDescription: "The key of the secret to select from. Must be a valid secret key.", + Required: true, + Optional: false, + Computed: false, + }, - "name": schema.StringAttribute{ - Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", - MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", - Required: false, - Optional: true, - Computed: false, - }, + "name": schema.StringAttribute{ + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + Required: false, + Optional: true, + Computed: false, + }, - "optional": schema.BoolAttribute{ - Description: "Specify whether the Secret or its key must be defined", - MarkdownDescription: "Specify whether the Secret or its key must be defined", - Required: false, - Optional: true, - Computed: false, - }, - }, - Required: false, - Optional: true, - Computed: false, - }, - }, - Required: false, - Optional: true, - Computed: false, + "optional": schema.BoolAttribute{ + Description: "Specify whether the Secret or its key must be defined", + MarkdownDescription: "Specify whether the Secret or its key must be defined", + Required: false, + Optional: true, + Computed: false, }, + }, + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, - "cert": schema.SingleNestedAttribute{ - Description: "Client certificate to present when doing client-authentication.", - MarkdownDescription: "Client certificate to present when doing client-authentication.", - Attributes: map[string]schema.Attribute{ - "config_map": schema.SingleNestedAttribute{ - Description: "ConfigMap containing data to use for the targets.", - MarkdownDescription: "ConfigMap containing data to use for the targets.", - Attributes: map[string]schema.Attribute{ - "key": schema.StringAttribute{ - Description: "The key to select.", - MarkdownDescription: "The key to select.", - Required: true, - Optional: false, - Computed: false, - }, + "enable_http2": schema.BoolAttribute{ + Description: "Whether to enable HTTP2.", + MarkdownDescription: "Whether to enable HTTP2.", + Required: false, + Optional: true, + Computed: false, + }, - "name": schema.StringAttribute{ - Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", - MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", - Required: false, - Optional: true, - Computed: false, - }, + "follow_redirects": schema.BoolAttribute{ + Description: "Configure whether HTTP requests follow HTTP 3xx redirects.", + MarkdownDescription: "Configure whether HTTP requests follow HTTP 3xx redirects.", + Required: false, + Optional: true, + Computed: false, + }, - "optional": schema.BoolAttribute{ - Description: "Specify whether the ConfigMap or its key must be defined", - MarkdownDescription: "Specify whether the ConfigMap or its key must be defined", - Required: false, - Optional: true, - Computed: false, - }, - }, - Required: false, - Optional: true, - Computed: false, - }, + "no_proxy": schema.StringAttribute{ + Description: "'noProxy' is a comma-separated string that can contain IPs, CIDR notation, domain namesthat should be excluded from proxying. IP and domain names cancontain port numbers.It requires Prometheus >= v2.43.0.", + MarkdownDescription: "'noProxy' is a comma-separated string that can contain IPs, CIDR notation, domain namesthat should be excluded from proxying. IP and domain names cancontain port numbers.It requires Prometheus >= v2.43.0.", + Required: false, + Optional: true, + Computed: false, + }, - "secret": schema.SingleNestedAttribute{ - Description: "Secret containing data to use for the targets.", - MarkdownDescription: "Secret containing data to use for the targets.", - Attributes: map[string]schema.Attribute{ - "key": schema.StringAttribute{ - Description: "The key of the secret to select from. Must be a valid secret key.", - MarkdownDescription: "The key of the secret to select from. Must be a valid secret key.", - Required: true, - Optional: false, - Computed: false, - }, + "oauth2": schema.SingleNestedAttribute{ + Description: "Optional OAuth 2.0 configuration.Cannot be set at the same time as 'authorization' or 'basic_auth'.", + MarkdownDescription: "Optional OAuth 2.0 configuration.Cannot be set at the same time as 'authorization' or 'basic_auth'.", + Attributes: map[string]schema.Attribute{ + "client_id": schema.SingleNestedAttribute{ + Description: "'clientId' specifies a key of a Secret or ConfigMap containing theOAuth2 client's ID.", + MarkdownDescription: "'clientId' specifies a key of a Secret or ConfigMap containing theOAuth2 client's ID.", + Attributes: map[string]schema.Attribute{ + "config_map": schema.SingleNestedAttribute{ + Description: "ConfigMap containing data to use for the targets.", + MarkdownDescription: "ConfigMap containing data to use for the targets.", + Attributes: map[string]schema.Attribute{ + "key": schema.StringAttribute{ + Description: "The key to select.", + MarkdownDescription: "The key to select.", + Required: true, + Optional: false, + Computed: false, + }, - "name": schema.StringAttribute{ - Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", - MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", - Required: false, - Optional: true, - Computed: false, - }, + "name": schema.StringAttribute{ + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + Required: false, + Optional: true, + Computed: false, + }, - "optional": schema.BoolAttribute{ - Description: "Specify whether the Secret or its key must be defined", - MarkdownDescription: "Specify whether the Secret or its key must be defined", - Required: false, - Optional: true, - Computed: false, - }, - }, - Required: false, - Optional: true, - Computed: false, + "optional": schema.BoolAttribute{ + Description: "Specify whether the ConfigMap or its key must be defined", + MarkdownDescription: "Specify whether the ConfigMap or its key must be defined", + Required: false, + Optional: true, + Computed: false, }, }, Required: false, @@ -6526,17 +6721,9 @@ func (r *MonitoringCoreosComScrapeConfigV1Alpha1Manifest) Schema(_ context.Conte Computed: false, }, - "insecure_skip_verify": schema.BoolAttribute{ - Description: "Disable target certificate validation.", - MarkdownDescription: "Disable target certificate validation.", - Required: false, - Optional: true, - Computed: false, - }, - - "key_secret": schema.SingleNestedAttribute{ - Description: "Secret containing the client key file for the targets.", - MarkdownDescription: "Secret containing the client key file for the targets.", + "secret": schema.SingleNestedAttribute{ + Description: "Secret containing data to use for the targets.", + MarkdownDescription: "Secret containing data to use for the targets.", Attributes: map[string]schema.Attribute{ "key": schema.StringAttribute{ Description: "The key of the secret to select from. Must be a valid secret key.", @@ -6566,229 +6753,246 @@ func (r *MonitoringCoreosComScrapeConfigV1Alpha1Manifest) Schema(_ context.Conte Optional: true, Computed: false, }, + }, + Required: true, + Optional: false, + Computed: false, + }, - "max_version": schema.StringAttribute{ - Description: "Maximum acceptable TLS version.It requires Prometheus >= v2.41.0.", - MarkdownDescription: "Maximum acceptable TLS version.It requires Prometheus >= v2.41.0.", - Required: false, - Optional: true, + "client_secret": schema.SingleNestedAttribute{ + Description: "'clientSecret' specifies a key of a Secret containing the OAuth2client's secret.", + MarkdownDescription: "'clientSecret' specifies a key of a Secret containing the OAuth2client's secret.", + Attributes: map[string]schema.Attribute{ + "key": schema.StringAttribute{ + Description: "The key of the secret to select from. Must be a valid secret key.", + MarkdownDescription: "The key of the secret to select from. Must be a valid secret key.", + Required: true, + Optional: false, Computed: false, - Validators: []validator.String{ - stringvalidator.OneOf("TLS10", "TLS11", "TLS12", "TLS13"), - }, }, - "min_version": schema.StringAttribute{ - Description: "Minimum acceptable TLS version.It requires Prometheus >= v2.35.0.", - MarkdownDescription: "Minimum acceptable TLS version.It requires Prometheus >= v2.35.0.", + "name": schema.StringAttribute{ + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", Required: false, Optional: true, Computed: false, - Validators: []validator.String{ - stringvalidator.OneOf("TLS10", "TLS11", "TLS12", "TLS13"), - }, }, - "server_name": schema.StringAttribute{ - Description: "Used to verify the hostname for the targets.", - MarkdownDescription: "Used to verify the hostname for the targets.", + "optional": schema.BoolAttribute{ + Description: "Specify whether the Secret or its key must be defined", + MarkdownDescription: "Specify whether the Secret or its key must be defined", Required: false, Optional: true, Computed: false, }, }, - Required: false, - Optional: true, + Required: true, + Optional: false, Computed: false, }, - "token_url": schema.StringAttribute{ - Description: "'tokenURL' configures the URL to fetch the token from.", - MarkdownDescription: "'tokenURL' configures the URL to fetch the token from.", - Required: true, - Optional: false, + "endpoint_params": schema.MapAttribute{ + Description: "'endpointParams' configures the HTTP parameters to append to the tokenURL.", + MarkdownDescription: "'endpointParams' configures the HTTP parameters to append to the tokenURL.", + ElementType: types.StringType, + Required: false, + Optional: true, Computed: false, - Validators: []validator.String{ - stringvalidator.LengthAtLeast(1), - }, }, - }, - Required: false, - Optional: true, - Computed: false, - }, - - "port": schema.Int64Attribute{ - Description: "The port to scrape metrics from, when 'role' is nodes, and for discoveredtasks and services that don't have published ports.", - MarkdownDescription: "The port to scrape metrics from, when 'role' is nodes, and for discoveredtasks and services that don't have published ports.", - Required: false, - Optional: true, - Computed: false, - Validators: []validator.Int64{ - int64validator.AtLeast(0), - int64validator.AtMost(65535), - }, - }, - - "proxy_connect_header": schema.MapAttribute{ - Description: "ProxyConnectHeader optionally specifies headers to send toproxies during CONNECT requests.It requires Prometheus >= v2.43.0.", - MarkdownDescription: "ProxyConnectHeader optionally specifies headers to send toproxies during CONNECT requests.It requires Prometheus >= v2.43.0.", - ElementType: types.StringType, - Required: false, - Optional: true, - Computed: false, - }, - "proxy_from_environment": schema.BoolAttribute{ - Description: "Whether to use the proxy configuration defined by environment variables (HTTP_PROXY, HTTPS_PROXY, and NO_PROXY).If unset, Prometheus uses its default value.It requires Prometheus >= v2.43.0.", - MarkdownDescription: "Whether to use the proxy configuration defined by environment variables (HTTP_PROXY, HTTPS_PROXY, and NO_PROXY).If unset, Prometheus uses its default value.It requires Prometheus >= v2.43.0.", - Required: false, - Optional: true, - Computed: false, - }, + "no_proxy": schema.StringAttribute{ + Description: "'noProxy' is a comma-separated string that can contain IPs, CIDR notation, domain namesthat should be excluded from proxying. IP and domain names cancontain port numbers.It requires Prometheus >= v2.43.0.", + MarkdownDescription: "'noProxy' is a comma-separated string that can contain IPs, CIDR notation, domain namesthat should be excluded from proxying. IP and domain names cancontain port numbers.It requires Prometheus >= v2.43.0.", + Required: false, + Optional: true, + Computed: false, + }, - "proxy_url": schema.StringAttribute{ - Description: "'proxyURL' defines the HTTP proxy server to use.", - MarkdownDescription: "'proxyURL' defines the HTTP proxy server to use.", - Required: false, - Optional: true, - Computed: false, - Validators: []validator.String{ - stringvalidator.RegexMatches(regexp.MustCompile(`^http(s)?://.+$`), ""), - }, - }, + "proxy_connect_header": schema.MapAttribute{ + Description: "ProxyConnectHeader optionally specifies headers to send toproxies during CONNECT requests.It requires Prometheus >= v2.43.0.", + MarkdownDescription: "ProxyConnectHeader optionally specifies headers to send toproxies during CONNECT requests.It requires Prometheus >= v2.43.0.", + ElementType: types.StringType, + Required: false, + Optional: true, + Computed: false, + }, - "refresh_interval": schema.StringAttribute{ - Description: "The time after which the service discovery data is refreshed.", - MarkdownDescription: "The time after which the service discovery data is refreshed.", - Required: false, - Optional: true, - Computed: false, - Validators: []validator.String{ - stringvalidator.RegexMatches(regexp.MustCompile(`^(0|(([0-9]+)y)?(([0-9]+)w)?(([0-9]+)d)?(([0-9]+)h)?(([0-9]+)m)?(([0-9]+)s)?(([0-9]+)ms)?)$`), ""), - }, - }, + "proxy_from_environment": schema.BoolAttribute{ + Description: "Whether to use the proxy configuration defined by environment variables (HTTP_PROXY, HTTPS_PROXY, and NO_PROXY).If unset, Prometheus uses its default value.It requires Prometheus >= v2.43.0.", + MarkdownDescription: "Whether to use the proxy configuration defined by environment variables (HTTP_PROXY, HTTPS_PROXY, and NO_PROXY).If unset, Prometheus uses its default value.It requires Prometheus >= v2.43.0.", + Required: false, + Optional: true, + Computed: false, + }, - "role": schema.StringAttribute{ - Description: "Role of the targets to retrieve. Must be 'Services', 'Tasks', or 'Nodes'.", - MarkdownDescription: "Role of the targets to retrieve. Must be 'Services', 'Tasks', or 'Nodes'.", - Required: true, - Optional: false, - Computed: false, - Validators: []validator.String{ - stringvalidator.OneOf("Services", "Tasks", "Nodes"), - }, - }, + "proxy_url": schema.StringAttribute{ + Description: "'proxyURL' defines the HTTP proxy server to use.", + MarkdownDescription: "'proxyURL' defines the HTTP proxy server to use.", + Required: false, + Optional: true, + Computed: false, + Validators: []validator.String{ + stringvalidator.RegexMatches(regexp.MustCompile(`^http(s)?://.+$`), ""), + }, + }, - "tls_config": schema.SingleNestedAttribute{ - Description: "TLS configuration to use on every scrape request", - MarkdownDescription: "TLS configuration to use on every scrape request", - Attributes: map[string]schema.Attribute{ - "ca": schema.SingleNestedAttribute{ - Description: "Certificate authority used when verifying server certificates.", - MarkdownDescription: "Certificate authority used when verifying server certificates.", + "scopes": schema.ListAttribute{ + Description: "'scopes' defines the OAuth2 scopes used for the token request.", + MarkdownDescription: "'scopes' defines the OAuth2 scopes used for the token request.", + ElementType: types.StringType, + Required: false, + Optional: true, + Computed: false, + }, + + "tls_config": schema.SingleNestedAttribute{ + Description: "TLS configuration to use when connecting to the OAuth2 server.It requires Prometheus >= v2.43.0.", + MarkdownDescription: "TLS configuration to use when connecting to the OAuth2 server.It requires Prometheus >= v2.43.0.", Attributes: map[string]schema.Attribute{ - "config_map": schema.SingleNestedAttribute{ - Description: "ConfigMap containing data to use for the targets.", - MarkdownDescription: "ConfigMap containing data to use for the targets.", + "ca": schema.SingleNestedAttribute{ + Description: "Certificate authority used when verifying server certificates.", + MarkdownDescription: "Certificate authority used when verifying server certificates.", Attributes: map[string]schema.Attribute{ - "key": schema.StringAttribute{ - Description: "The key to select.", - MarkdownDescription: "The key to select.", - Required: true, - Optional: false, - Computed: false, - }, + "config_map": schema.SingleNestedAttribute{ + Description: "ConfigMap containing data to use for the targets.", + MarkdownDescription: "ConfigMap containing data to use for the targets.", + Attributes: map[string]schema.Attribute{ + "key": schema.StringAttribute{ + Description: "The key to select.", + MarkdownDescription: "The key to select.", + Required: true, + Optional: false, + Computed: false, + }, - "name": schema.StringAttribute{ - Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", - MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", - Required: false, - Optional: true, - Computed: false, - }, + "name": schema.StringAttribute{ + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + Required: false, + Optional: true, + Computed: false, + }, - "optional": schema.BoolAttribute{ - Description: "Specify whether the ConfigMap or its key must be defined", - MarkdownDescription: "Specify whether the ConfigMap or its key must be defined", - Required: false, - Optional: true, - Computed: false, + "optional": schema.BoolAttribute{ + Description: "Specify whether the ConfigMap or its key must be defined", + MarkdownDescription: "Specify whether the ConfigMap or its key must be defined", + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, }, - }, - Required: false, - Optional: true, - Computed: false, - }, - "secret": schema.SingleNestedAttribute{ - Description: "Secret containing data to use for the targets.", - MarkdownDescription: "Secret containing data to use for the targets.", - Attributes: map[string]schema.Attribute{ - "key": schema.StringAttribute{ - Description: "The key of the secret to select from. Must be a valid secret key.", - MarkdownDescription: "The key of the secret to select from. Must be a valid secret key.", - Required: true, - Optional: false, - Computed: false, - }, + "secret": schema.SingleNestedAttribute{ + Description: "Secret containing data to use for the targets.", + MarkdownDescription: "Secret containing data to use for the targets.", + Attributes: map[string]schema.Attribute{ + "key": schema.StringAttribute{ + Description: "The key of the secret to select from. Must be a valid secret key.", + MarkdownDescription: "The key of the secret to select from. Must be a valid secret key.", + Required: true, + Optional: false, + Computed: false, + }, - "name": schema.StringAttribute{ - Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", - MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", - Required: false, - Optional: true, - Computed: false, - }, + "name": schema.StringAttribute{ + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + Required: false, + Optional: true, + Computed: false, + }, - "optional": schema.BoolAttribute{ - Description: "Specify whether the Secret or its key must be defined", - MarkdownDescription: "Specify whether the Secret or its key must be defined", - Required: false, - Optional: true, - Computed: false, + "optional": schema.BoolAttribute{ + Description: "Specify whether the Secret or its key must be defined", + MarkdownDescription: "Specify whether the Secret or its key must be defined", + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, }, }, Required: false, Optional: true, Computed: false, }, - }, - Required: false, - Optional: true, - Computed: false, - }, - "cert": schema.SingleNestedAttribute{ - Description: "Client certificate to present when doing client-authentication.", - MarkdownDescription: "Client certificate to present when doing client-authentication.", - Attributes: map[string]schema.Attribute{ - "config_map": schema.SingleNestedAttribute{ - Description: "ConfigMap containing data to use for the targets.", - MarkdownDescription: "ConfigMap containing data to use for the targets.", + "cert": schema.SingleNestedAttribute{ + Description: "Client certificate to present when doing client-authentication.", + MarkdownDescription: "Client certificate to present when doing client-authentication.", Attributes: map[string]schema.Attribute{ - "key": schema.StringAttribute{ - Description: "The key to select.", - MarkdownDescription: "The key to select.", - Required: true, - Optional: false, - Computed: false, - }, + "config_map": schema.SingleNestedAttribute{ + Description: "ConfigMap containing data to use for the targets.", + MarkdownDescription: "ConfigMap containing data to use for the targets.", + Attributes: map[string]schema.Attribute{ + "key": schema.StringAttribute{ + Description: "The key to select.", + MarkdownDescription: "The key to select.", + Required: true, + Optional: false, + Computed: false, + }, - "name": schema.StringAttribute{ - Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", - MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", - Required: false, - Optional: true, - Computed: false, + "name": schema.StringAttribute{ + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + Required: false, + Optional: true, + Computed: false, + }, + + "optional": schema.BoolAttribute{ + Description: "Specify whether the ConfigMap or its key must be defined", + MarkdownDescription: "Specify whether the ConfigMap or its key must be defined", + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, }, - "optional": schema.BoolAttribute{ - Description: "Specify whether the ConfigMap or its key must be defined", - MarkdownDescription: "Specify whether the ConfigMap or its key must be defined", - Required: false, - Optional: true, - Computed: false, + "secret": schema.SingleNestedAttribute{ + Description: "Secret containing data to use for the targets.", + MarkdownDescription: "Secret containing data to use for the targets.", + Attributes: map[string]schema.Attribute{ + "key": schema.StringAttribute{ + Description: "The key of the secret to select from. Must be a valid secret key.", + MarkdownDescription: "The key of the secret to select from. Must be a valid secret key.", + Required: true, + Optional: false, + Computed: false, + }, + + "name": schema.StringAttribute{ + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + Required: false, + Optional: true, + Computed: false, + }, + + "optional": schema.BoolAttribute{ + Description: "Specify whether the Secret or its key must be defined", + MarkdownDescription: "Specify whether the Secret or its key must be defined", + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, }, }, Required: false, @@ -6796,9 +7000,17 @@ func (r *MonitoringCoreosComScrapeConfigV1Alpha1Manifest) Schema(_ context.Conte Computed: false, }, - "secret": schema.SingleNestedAttribute{ - Description: "Secret containing data to use for the targets.", - MarkdownDescription: "Secret containing data to use for the targets.", + "insecure_skip_verify": schema.BoolAttribute{ + Description: "Disable target certificate validation.", + MarkdownDescription: "Disable target certificate validation.", + Required: false, + Optional: true, + Computed: false, + }, + + "key_secret": schema.SingleNestedAttribute{ + Description: "Secret containing the client key file for the targets.", + MarkdownDescription: "Secret containing the client key file for the targets.", Attributes: map[string]schema.Attribute{ "key": schema.StringAttribute{ Description: "The key of the secret to select from. Must be a valid secret key.", @@ -6828,43 +7040,32 @@ func (r *MonitoringCoreosComScrapeConfigV1Alpha1Manifest) Schema(_ context.Conte Optional: true, Computed: false, }, - }, - Required: false, - Optional: true, - Computed: false, - }, - - "insecure_skip_verify": schema.BoolAttribute{ - Description: "Disable target certificate validation.", - MarkdownDescription: "Disable target certificate validation.", - Required: false, - Optional: true, - Computed: false, - }, - "key_secret": schema.SingleNestedAttribute{ - Description: "Secret containing the client key file for the targets.", - MarkdownDescription: "Secret containing the client key file for the targets.", - Attributes: map[string]schema.Attribute{ - "key": schema.StringAttribute{ - Description: "The key of the secret to select from. Must be a valid secret key.", - MarkdownDescription: "The key of the secret to select from. Must be a valid secret key.", - Required: true, - Optional: false, + "max_version": schema.StringAttribute{ + Description: "Maximum acceptable TLS version.It requires Prometheus >= v2.41.0.", + MarkdownDescription: "Maximum acceptable TLS version.It requires Prometheus >= v2.41.0.", + Required: false, + Optional: true, Computed: false, + Validators: []validator.String{ + stringvalidator.OneOf("TLS10", "TLS11", "TLS12", "TLS13"), + }, }, - "name": schema.StringAttribute{ - Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", - MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + "min_version": schema.StringAttribute{ + Description: "Minimum acceptable TLS version.It requires Prometheus >= v2.35.0.", + MarkdownDescription: "Minimum acceptable TLS version.It requires Prometheus >= v2.35.0.", Required: false, Optional: true, Computed: false, + Validators: []validator.String{ + stringvalidator.OneOf("TLS10", "TLS11", "TLS12", "TLS13"), + }, }, - "optional": schema.BoolAttribute{ - Description: "Specify whether the Secret or its key must be defined", - MarkdownDescription: "Specify whether the Secret or its key must be defined", + "server_name": schema.StringAttribute{ + Description: "Used to verify the hostname for the targets.", + MarkdownDescription: "Used to verify the hostname for the targets.", Required: false, Optional: true, Computed: false, @@ -6875,113 +7076,14 @@ func (r *MonitoringCoreosComScrapeConfigV1Alpha1Manifest) Schema(_ context.Conte Computed: false, }, - "max_version": schema.StringAttribute{ - Description: "Maximum acceptable TLS version.It requires Prometheus >= v2.41.0.", - MarkdownDescription: "Maximum acceptable TLS version.It requires Prometheus >= v2.41.0.", - Required: false, - Optional: true, - Computed: false, - Validators: []validator.String{ - stringvalidator.OneOf("TLS10", "TLS11", "TLS12", "TLS13"), - }, - }, - - "min_version": schema.StringAttribute{ - Description: "Minimum acceptable TLS version.It requires Prometheus >= v2.35.0.", - MarkdownDescription: "Minimum acceptable TLS version.It requires Prometheus >= v2.35.0.", - Required: false, - Optional: true, - Computed: false, - Validators: []validator.String{ - stringvalidator.OneOf("TLS10", "TLS11", "TLS12", "TLS13"), - }, - }, - - "server_name": schema.StringAttribute{ - Description: "Used to verify the hostname for the targets.", - MarkdownDescription: "Used to verify the hostname for the targets.", - Required: false, - Optional: true, - Computed: false, - }, - }, - Required: false, - Optional: true, - Computed: false, - }, - }, - }, - Required: false, - Optional: true, - Computed: false, - }, - - "ec2_sd_configs": schema.ListNestedAttribute{ - Description: "EC2SDConfigs defines a list of EC2 service discovery configurations.", - MarkdownDescription: "EC2SDConfigs defines a list of EC2 service discovery configurations.", - NestedObject: schema.NestedAttributeObject{ - Attributes: map[string]schema.Attribute{ - "access_key": schema.SingleNestedAttribute{ - Description: "AccessKey is the AWS API key.", - MarkdownDescription: "AccessKey is the AWS API key.", - Attributes: map[string]schema.Attribute{ - "key": schema.StringAttribute{ - Description: "The key of the secret to select from. Must be a valid secret key.", - MarkdownDescription: "The key of the secret to select from. Must be a valid secret key.", + "token_url": schema.StringAttribute{ + Description: "'tokenURL' configures the URL to fetch the token from.", + MarkdownDescription: "'tokenURL' configures the URL to fetch the token from.", Required: true, Optional: false, Computed: false, - }, - - "name": schema.StringAttribute{ - Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", - MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", - Required: false, - Optional: true, - Computed: false, - }, - - "optional": schema.BoolAttribute{ - Description: "Specify whether the Secret or its key must be defined", - MarkdownDescription: "Specify whether the Secret or its key must be defined", - Required: false, - Optional: true, - Computed: false, - }, - }, - Required: false, - Optional: true, - Computed: false, - }, - - "enable_http2": schema.BoolAttribute{ - Description: "Whether to enable HTTP2.It requires Prometheus >= v2.41.0", - MarkdownDescription: "Whether to enable HTTP2.It requires Prometheus >= v2.41.0", - Required: false, - Optional: true, - Computed: false, - }, - - "filters": schema.ListNestedAttribute{ - Description: "Filters can be used optionally to filter the instance list by other criteria.Available filter criteria can be found here:https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeInstances.htmlFilter API documentation: https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_Filter.htmlIt requires Prometheus >= v2.3.0", - MarkdownDescription: "Filters can be used optionally to filter the instance list by other criteria.Available filter criteria can be found here:https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeInstances.htmlFilter API documentation: https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_Filter.htmlIt requires Prometheus >= v2.3.0", - NestedObject: schema.NestedAttributeObject{ - Attributes: map[string]schema.Attribute{ - "name": schema.StringAttribute{ - Description: "Name of the Filter.", - MarkdownDescription: "Name of the Filter.", - Required: true, - Optional: false, - Computed: false, - }, - - "values": schema.ListAttribute{ - Description: "Value to filter on.", - MarkdownDescription: "Value to filter on.", - ElementType: types.StringType, - Required: true, - Optional: false, - Computed: false, + Validators: []validator.String{ + stringvalidator.LengthAtLeast(1), }, }, }, @@ -6990,34 +7092,6 @@ func (r *MonitoringCoreosComScrapeConfigV1Alpha1Manifest) Schema(_ context.Conte Computed: false, }, - "follow_redirects": schema.BoolAttribute{ - Description: "Configure whether HTTP requests follow HTTP 3xx redirects.It requires Prometheus >= v2.41.0", - MarkdownDescription: "Configure whether HTTP requests follow HTTP 3xx redirects.It requires Prometheus >= v2.41.0", - Required: false, - Optional: true, - Computed: false, - }, - - "no_proxy": schema.StringAttribute{ - Description: "'noProxy' is a comma-separated string that can contain IPs, CIDR notation, domain namesthat should be excluded from proxying. IP and domain names cancontain port numbers.It requires Prometheus >= v2.43.0.", - MarkdownDescription: "'noProxy' is a comma-separated string that can contain IPs, CIDR notation, domain namesthat should be excluded from proxying. IP and domain names cancontain port numbers.It requires Prometheus >= v2.43.0.", - Required: false, - Optional: true, - Computed: false, - }, - - "port": schema.Int64Attribute{ - Description: "The port to scrape metrics from. If using the public IP address, this mustinstead be specified in the relabeling rule.", - MarkdownDescription: "The port to scrape metrics from. If using the public IP address, this mustinstead be specified in the relabeling rule.", - Required: false, - Optional: true, - Computed: false, - Validators: []validator.Int64{ - int64validator.AtLeast(0), - int64validator.AtMost(65535), - }, - }, - "proxy_connect_header": schema.MapAttribute{ Description: "ProxyConnectHeader optionally specifies headers to send toproxies during CONNECT requests.It requires Prometheus >= v2.43.0.", MarkdownDescription: "ProxyConnectHeader optionally specifies headers to send toproxies during CONNECT requests.It requires Prometheus >= v2.43.0.", @@ -7047,8 +7121,8 @@ func (r *MonitoringCoreosComScrapeConfigV1Alpha1Manifest) Schema(_ context.Conte }, "refresh_interval": schema.StringAttribute{ - Description: "RefreshInterval configures the refresh interval at which Prometheus will re-read the instance list.", - MarkdownDescription: "RefreshInterval configures the refresh interval at which Prometheus will re-read the instance list.", + Description: "Refresh interval to re-read the instance list.", + MarkdownDescription: "Refresh interval to re-read the instance list.", Required: false, Optional: true, Computed: false, @@ -7057,64 +7131,20 @@ func (r *MonitoringCoreosComScrapeConfigV1Alpha1Manifest) Schema(_ context.Conte }, }, - "region": schema.StringAttribute{ - Description: "The AWS region.", - MarkdownDescription: "The AWS region.", - Required: false, - Optional: true, - Computed: false, - Validators: []validator.String{ - stringvalidator.LengthAtLeast(1), - }, - }, - - "role_arn": schema.StringAttribute{ - Description: "AWS Role ARN, an alternative to using AWS API keys.", - MarkdownDescription: "AWS Role ARN, an alternative to using AWS API keys.", - Required: false, - Optional: true, + "server": schema.StringAttribute{ + Description: "The URL to connect to the Eureka server.", + MarkdownDescription: "The URL to connect to the Eureka server.", + Required: true, + Optional: false, Computed: false, Validators: []validator.String{ stringvalidator.LengthAtLeast(1), }, }, - "secret_key": schema.SingleNestedAttribute{ - Description: "SecretKey is the AWS API secret.", - MarkdownDescription: "SecretKey is the AWS API secret.", - Attributes: map[string]schema.Attribute{ - "key": schema.StringAttribute{ - Description: "The key of the secret to select from. Must be a valid secret key.", - MarkdownDescription: "The key of the secret to select from. Must be a valid secret key.", - Required: true, - Optional: false, - Computed: false, - }, - - "name": schema.StringAttribute{ - Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", - MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", - Required: false, - Optional: true, - Computed: false, - }, - - "optional": schema.BoolAttribute{ - Description: "Specify whether the Secret or its key must be defined", - MarkdownDescription: "Specify whether the Secret or its key must be defined", - Required: false, - Optional: true, - Computed: false, - }, - }, - Required: false, - Optional: true, - Computed: false, - }, - "tls_config": schema.SingleNestedAttribute{ - Description: "TLS configuration to connect to the AWS EC2 API.It requires Prometheus >= v2.41.0", - MarkdownDescription: "TLS configuration to connect to the AWS EC2 API.It requires Prometheus >= v2.41.0", + Description: "TLS configuration applying to the target HTTP endpoint.", + MarkdownDescription: "TLS configuration applying to the target HTTP endpoint.", Attributes: map[string]schema.Attribute{ "ca": schema.SingleNestedAttribute{ Description: "Certificate authority used when verifying server certificates.", @@ -7348,22 +7378,113 @@ func (r *MonitoringCoreosComScrapeConfigV1Alpha1Manifest) Schema(_ context.Conte Computed: false, }, - "enable_compression": schema.BoolAttribute{ - Description: "When false, Prometheus will request uncompressed response from the scraped target.It requires Prometheus >= v2.49.0.If unset, Prometheus uses true by default.", - MarkdownDescription: "When false, Prometheus will request uncompressed response from the scraped target.It requires Prometheus >= v2.49.0.If unset, Prometheus uses true by default.", - Required: false, - Optional: true, - Computed: false, + "file_sd_configs": schema.ListNestedAttribute{ + Description: "FileSDConfigs defines a list of file service discovery configurations.", + MarkdownDescription: "FileSDConfigs defines a list of file service discovery configurations.", + NestedObject: schema.NestedAttributeObject{ + Attributes: map[string]schema.Attribute{ + "files": schema.ListAttribute{ + Description: "List of files to be used for file discovery. Recommendation: use absolute paths. While relative paths work, theprometheus-operator project makes no guarantees about the working directory where the configuration file isstored.Files must be mounted using Prometheus.ConfigMaps or Prometheus.Secrets.", + MarkdownDescription: "List of files to be used for file discovery. Recommendation: use absolute paths. While relative paths work, theprometheus-operator project makes no guarantees about the working directory where the configuration file isstored.Files must be mounted using Prometheus.ConfigMaps or Prometheus.Secrets.", + ElementType: types.StringType, + Required: true, + Optional: false, + Computed: false, + }, + + "refresh_interval": schema.StringAttribute{ + Description: "RefreshInterval configures the refresh interval at which Prometheus will reload the content of the files.", + MarkdownDescription: "RefreshInterval configures the refresh interval at which Prometheus will reload the content of the files.", + Required: false, + Optional: true, + Computed: false, + Validators: []validator.String{ + stringvalidator.RegexMatches(regexp.MustCompile(`^(0|(([0-9]+)y)?(([0-9]+)w)?(([0-9]+)d)?(([0-9]+)h)?(([0-9]+)m)?(([0-9]+)s)?(([0-9]+)ms)?)$`), ""), + }, + }, + }, + }, + Required: false, + Optional: true, + Computed: false, }, - "eureka_sd_configs": schema.ListNestedAttribute{ - Description: "EurekaSDConfigs defines a list of Eureka service discovery configurations.", - MarkdownDescription: "EurekaSDConfigs defines a list of Eureka service discovery configurations.", + "gce_sd_configs": schema.ListNestedAttribute{ + Description: "GCESDConfigs defines a list of GCE service discovery configurations.", + MarkdownDescription: "GCESDConfigs defines a list of GCE service discovery configurations.", + NestedObject: schema.NestedAttributeObject{ + Attributes: map[string]schema.Attribute{ + "filter": schema.StringAttribute{ + Description: "Filter can be used optionally to filter the instance list by other criteriaSyntax of this filter is described in the filter query parameter section:https://cloud.google.com/compute/docs/reference/latest/instances/list", + MarkdownDescription: "Filter can be used optionally to filter the instance list by other criteriaSyntax of this filter is described in the filter query parameter section:https://cloud.google.com/compute/docs/reference/latest/instances/list", + Required: false, + Optional: true, + Computed: false, + }, + + "port": schema.Int64Attribute{ + Description: "The port to scrape metrics from. If using the public IP address, this mustinstead be specified in the relabeling rule.", + MarkdownDescription: "The port to scrape metrics from. If using the public IP address, this mustinstead be specified in the relabeling rule.", + Required: false, + Optional: true, + Computed: false, + }, + + "project": schema.StringAttribute{ + Description: "The Google Cloud Project ID", + MarkdownDescription: "The Google Cloud Project ID", + Required: true, + Optional: false, + Computed: false, + Validators: []validator.String{ + stringvalidator.LengthAtLeast(1), + }, + }, + + "refresh_interval": schema.StringAttribute{ + Description: "RefreshInterval configures the refresh interval at which Prometheus will re-read the instance list.", + MarkdownDescription: "RefreshInterval configures the refresh interval at which Prometheus will re-read the instance list.", + Required: false, + Optional: true, + Computed: false, + Validators: []validator.String{ + stringvalidator.RegexMatches(regexp.MustCompile(`^(0|(([0-9]+)y)?(([0-9]+)w)?(([0-9]+)d)?(([0-9]+)h)?(([0-9]+)m)?(([0-9]+)s)?(([0-9]+)ms)?)$`), ""), + }, + }, + + "tag_separator": schema.StringAttribute{ + Description: "The tag separator is used to separate the tags on concatenation", + MarkdownDescription: "The tag separator is used to separate the tags on concatenation", + Required: false, + Optional: true, + Computed: false, + }, + + "zone": schema.StringAttribute{ + Description: "The zone of the scrape targets. If you need multiple zones use multiple GCESDConfigs.", + MarkdownDescription: "The zone of the scrape targets. If you need multiple zones use multiple GCESDConfigs.", + Required: true, + Optional: false, + Computed: false, + Validators: []validator.String{ + stringvalidator.LengthAtLeast(1), + }, + }, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + + "hetzner_sd_configs": schema.ListNestedAttribute{ + Description: "HetznerSDConfigs defines a list of Hetzner service discovery configurations.", + MarkdownDescription: "HetznerSDConfigs defines a list of Hetzner service discovery configurations.", NestedObject: schema.NestedAttributeObject{ Attributes: map[string]schema.Attribute{ "authorization": schema.SingleNestedAttribute{ - Description: "Authorization header to use on every scrape request.", - MarkdownDescription: "Authorization header to use on every scrape request.", + Description: "Authorization header configuration, required when role is hcloud.Role robot does not support bearer token authentication.", + MarkdownDescription: "Authorization header configuration, required when role is hcloud.Role robot does not support bearer token authentication.", Attributes: map[string]schema.Attribute{ "credentials": schema.SingleNestedAttribute{ Description: "Selects a key of a Secret in the namespace that contains the credentials for authentication.", @@ -7412,8 +7533,8 @@ func (r *MonitoringCoreosComScrapeConfigV1Alpha1Manifest) Schema(_ context.Conte }, "basic_auth": schema.SingleNestedAttribute{ - Description: "BasicAuth information to use on every scrape request.", - MarkdownDescription: "BasicAuth information to use on every scrape request.", + Description: "BasicAuth information to use on every scrape request, required when role is robot.Role hcloud does not support basic auth.", + MarkdownDescription: "BasicAuth information to use on every scrape request, required when role is robot.Role hcloud does not support basic auth.", Attributes: map[string]schema.Attribute{ "password": schema.SingleNestedAttribute{ Description: "'password' specifies a key of a Secret containing the password forauthentication.", @@ -7511,8 +7632,8 @@ func (r *MonitoringCoreosComScrapeConfigV1Alpha1Manifest) Schema(_ context.Conte }, "oauth2": schema.SingleNestedAttribute{ - Description: "Optional OAuth 2.0 configuration.Cannot be set at the same time as 'authorization' or 'basic_auth'.", - MarkdownDescription: "Optional OAuth 2.0 configuration.Cannot be set at the same time as 'authorization' or 'basic_auth'.", + Description: "Optional OAuth 2.0 configuration.Cannot be used at the same time as 'basic_auth' or 'authorization'.", + MarkdownDescription: "Optional OAuth 2.0 configuration.Cannot be used at the same time as 'basic_auth' or 'authorization'.", Attributes: map[string]schema.Attribute{ "client_id": schema.SingleNestedAttribute{ Description: "'clientId' specifies a key of a Secret or ConfigMap containing theOAuth2 client's ID.", @@ -7922,6 +8043,14 @@ func (r *MonitoringCoreosComScrapeConfigV1Alpha1Manifest) Schema(_ context.Conte Computed: false, }, + "port": schema.Int64Attribute{ + Description: "The port to scrape metrics from.", + MarkdownDescription: "The port to scrape metrics from.", + Required: false, + Optional: true, + Computed: false, + }, + "proxy_connect_header": schema.MapAttribute{ Description: "ProxyConnectHeader optionally specifies headers to send toproxies during CONNECT requests.It requires Prometheus >= v2.43.0.", MarkdownDescription: "ProxyConnectHeader optionally specifies headers to send toproxies during CONNECT requests.It requires Prometheus >= v2.43.0.", @@ -7951,8 +8080,8 @@ func (r *MonitoringCoreosComScrapeConfigV1Alpha1Manifest) Schema(_ context.Conte }, "refresh_interval": schema.StringAttribute{ - Description: "Refresh interval to re-read the instance list.", - MarkdownDescription: "Refresh interval to re-read the instance list.", + Description: "The time after which the servers are refreshed.", + MarkdownDescription: "The time after which the servers are refreshed.", Required: false, Optional: true, Computed: false, @@ -7961,20 +8090,20 @@ func (r *MonitoringCoreosComScrapeConfigV1Alpha1Manifest) Schema(_ context.Conte }, }, - "server": schema.StringAttribute{ - Description: "The URL to connect to the Eureka server.", - MarkdownDescription: "The URL to connect to the Eureka server.", + "role": schema.StringAttribute{ + Description: "The Hetzner role of entities that should be discovered.", + MarkdownDescription: "The Hetzner role of entities that should be discovered.", Required: true, Optional: false, Computed: false, Validators: []validator.String{ - stringvalidator.LengthAtLeast(1), + stringvalidator.OneOf("hcloud", "Hcloud", "robot", "Robot"), }, }, "tls_config": schema.SingleNestedAttribute{ - Description: "TLS configuration applying to the target HTTP endpoint.", - MarkdownDescription: "TLS configuration applying to the target HTTP endpoint.", + Description: "TLS configuration to use on every scrape request.", + MarkdownDescription: "TLS configuration to use on every scrape request.", Attributes: map[string]schema.Attribute{ "ca": schema.SingleNestedAttribute{ Description: "Certificate authority used when verifying server certificates.", @@ -8208,113 +8337,30 @@ func (r *MonitoringCoreosComScrapeConfigV1Alpha1Manifest) Schema(_ context.Conte Computed: false, }, - "file_sd_configs": schema.ListNestedAttribute{ - Description: "FileSDConfigs defines a list of file service discovery configurations.", - MarkdownDescription: "FileSDConfigs defines a list of file service discovery configurations.", - NestedObject: schema.NestedAttributeObject{ - Attributes: map[string]schema.Attribute{ - "files": schema.ListAttribute{ - Description: "List of files to be used for file discovery. Recommendation: use absolute paths. While relative paths work, theprometheus-operator project makes no guarantees about the working directory where the configuration file isstored.Files must be mounted using Prometheus.ConfigMaps or Prometheus.Secrets.", - MarkdownDescription: "List of files to be used for file discovery. Recommendation: use absolute paths. While relative paths work, theprometheus-operator project makes no guarantees about the working directory where the configuration file isstored.Files must be mounted using Prometheus.ConfigMaps or Prometheus.Secrets.", - ElementType: types.StringType, - Required: true, - Optional: false, - Computed: false, - }, - - "refresh_interval": schema.StringAttribute{ - Description: "RefreshInterval configures the refresh interval at which Prometheus will reload the content of the files.", - MarkdownDescription: "RefreshInterval configures the refresh interval at which Prometheus will reload the content of the files.", - Required: false, - Optional: true, - Computed: false, - Validators: []validator.String{ - stringvalidator.RegexMatches(regexp.MustCompile(`^(0|(([0-9]+)y)?(([0-9]+)w)?(([0-9]+)d)?(([0-9]+)h)?(([0-9]+)m)?(([0-9]+)s)?(([0-9]+)ms)?)$`), ""), - }, - }, - }, - }, - Required: false, - Optional: true, - Computed: false, + "honor_labels": schema.BoolAttribute{ + Description: "HonorLabels chooses the metric's labels on collisions with target labels.", + MarkdownDescription: "HonorLabels chooses the metric's labels on collisions with target labels.", + Required: false, + Optional: true, + Computed: false, }, - "gce_sd_configs": schema.ListNestedAttribute{ - Description: "GCESDConfigs defines a list of GCE service discovery configurations.", - MarkdownDescription: "GCESDConfigs defines a list of GCE service discovery configurations.", - NestedObject: schema.NestedAttributeObject{ - Attributes: map[string]schema.Attribute{ - "filter": schema.StringAttribute{ - Description: "Filter can be used optionally to filter the instance list by other criteriaSyntax of this filter is described in the filter query parameter section:https://cloud.google.com/compute/docs/reference/latest/instances/list", - MarkdownDescription: "Filter can be used optionally to filter the instance list by other criteriaSyntax of this filter is described in the filter query parameter section:https://cloud.google.com/compute/docs/reference/latest/instances/list", - Required: false, - Optional: true, - Computed: false, - }, - - "port": schema.Int64Attribute{ - Description: "The port to scrape metrics from. If using the public IP address, this mustinstead be specified in the relabeling rule.", - MarkdownDescription: "The port to scrape metrics from. If using the public IP address, this mustinstead be specified in the relabeling rule.", - Required: false, - Optional: true, - Computed: false, - }, - - "project": schema.StringAttribute{ - Description: "The Google Cloud Project ID", - MarkdownDescription: "The Google Cloud Project ID", - Required: true, - Optional: false, - Computed: false, - Validators: []validator.String{ - stringvalidator.LengthAtLeast(1), - }, - }, - - "refresh_interval": schema.StringAttribute{ - Description: "RefreshInterval configures the refresh interval at which Prometheus will re-read the instance list.", - MarkdownDescription: "RefreshInterval configures the refresh interval at which Prometheus will re-read the instance list.", - Required: false, - Optional: true, - Computed: false, - Validators: []validator.String{ - stringvalidator.RegexMatches(regexp.MustCompile(`^(0|(([0-9]+)y)?(([0-9]+)w)?(([0-9]+)d)?(([0-9]+)h)?(([0-9]+)m)?(([0-9]+)s)?(([0-9]+)ms)?)$`), ""), - }, - }, - - "tag_separator": schema.StringAttribute{ - Description: "The tag separator is used to separate the tags on concatenation", - MarkdownDescription: "The tag separator is used to separate the tags on concatenation", - Required: false, - Optional: true, - Computed: false, - }, - - "zone": schema.StringAttribute{ - Description: "The zone of the scrape targets. If you need multiple zones use multiple GCESDConfigs.", - MarkdownDescription: "The zone of the scrape targets. If you need multiple zones use multiple GCESDConfigs.", - Required: true, - Optional: false, - Computed: false, - Validators: []validator.String{ - stringvalidator.LengthAtLeast(1), - }, - }, - }, - }, - Required: false, - Optional: true, - Computed: false, + "honor_timestamps": schema.BoolAttribute{ + Description: "HonorTimestamps controls whether Prometheus respects the timestamps present in scraped data.", + MarkdownDescription: "HonorTimestamps controls whether Prometheus respects the timestamps present in scraped data.", + Required: false, + Optional: true, + Computed: false, }, - "hetzner_sd_configs": schema.ListNestedAttribute{ - Description: "HetznerSDConfigs defines a list of Hetzner service discovery configurations.", - MarkdownDescription: "HetznerSDConfigs defines a list of Hetzner service discovery configurations.", + "http_sd_configs": schema.ListNestedAttribute{ + Description: "HTTPSDConfigs defines a list of HTTP service discovery configurations.", + MarkdownDescription: "HTTPSDConfigs defines a list of HTTP service discovery configurations.", NestedObject: schema.NestedAttributeObject{ Attributes: map[string]schema.Attribute{ "authorization": schema.SingleNestedAttribute{ - Description: "Authorization header configuration, required when role is hcloud.Role robot does not support bearer token authentication.", - MarkdownDescription: "Authorization header configuration, required when role is hcloud.Role robot does not support bearer token authentication.", + Description: "Authorization header configuration to authenticate against the target HTTP endpoint.Cannot be set at the same time as 'oAuth2', or 'basicAuth'.", + MarkdownDescription: "Authorization header configuration to authenticate against the target HTTP endpoint.Cannot be set at the same time as 'oAuth2', or 'basicAuth'.", Attributes: map[string]schema.Attribute{ "credentials": schema.SingleNestedAttribute{ Description: "Selects a key of a Secret in the namespace that contains the credentials for authentication.", @@ -8363,8 +8409,8 @@ func (r *MonitoringCoreosComScrapeConfigV1Alpha1Manifest) Schema(_ context.Conte }, "basic_auth": schema.SingleNestedAttribute{ - Description: "BasicAuth information to use on every scrape request, required when role is robot.Role hcloud does not support basic auth.", - MarkdownDescription: "BasicAuth information to use on every scrape request, required when role is robot.Role hcloud does not support basic auth.", + Description: "BasicAuth information to authenticate against the target HTTP endpoint.More info: https://prometheus.io/docs/operating/configuration/#endpointsCannot be set at the same time as 'authorization', or 'oAuth2'.", + MarkdownDescription: "BasicAuth information to authenticate against the target HTTP endpoint.More info: https://prometheus.io/docs/operating/configuration/#endpointsCannot be set at the same time as 'authorization', or 'oAuth2'.", Attributes: map[string]schema.Attribute{ "password": schema.SingleNestedAttribute{ Description: "'password' specifies a key of a Secret containing the password forauthentication.", @@ -8462,8 +8508,8 @@ func (r *MonitoringCoreosComScrapeConfigV1Alpha1Manifest) Schema(_ context.Conte }, "oauth2": schema.SingleNestedAttribute{ - Description: "Optional OAuth 2.0 configuration.Cannot be used at the same time as 'basic_auth' or 'authorization'.", - MarkdownDescription: "Optional OAuth 2.0 configuration.Cannot be used at the same time as 'basic_auth' or 'authorization'.", + Description: "Optional OAuth 2.0 configuration to authenticate against the target HTTP endpoint.Cannot be set at the same time as 'authorization', or 'basicAuth'.", + MarkdownDescription: "Optional OAuth 2.0 configuration to authenticate against the target HTTP endpoint.Cannot be set at the same time as 'authorization', or 'basicAuth'.", Attributes: map[string]schema.Attribute{ "client_id": schema.SingleNestedAttribute{ Description: "'clientId' specifies a key of a Secret or ConfigMap containing theOAuth2 client's ID.", @@ -8688,17 +8734,264 @@ func (r *MonitoringCoreosComScrapeConfigV1Alpha1Manifest) Schema(_ context.Conte Computed: false, }, - "optional": schema.BoolAttribute{ - Description: "Specify whether the Secret or its key must be defined", - MarkdownDescription: "Specify whether the Secret or its key must be defined", - Required: false, - Optional: true, - Computed: false, - }, - }, - Required: false, - Optional: true, - Computed: false, + "optional": schema.BoolAttribute{ + Description: "Specify whether the Secret or its key must be defined", + MarkdownDescription: "Specify whether the Secret or its key must be defined", + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + + "cert": schema.SingleNestedAttribute{ + Description: "Client certificate to present when doing client-authentication.", + MarkdownDescription: "Client certificate to present when doing client-authentication.", + Attributes: map[string]schema.Attribute{ + "config_map": schema.SingleNestedAttribute{ + Description: "ConfigMap containing data to use for the targets.", + MarkdownDescription: "ConfigMap containing data to use for the targets.", + Attributes: map[string]schema.Attribute{ + "key": schema.StringAttribute{ + Description: "The key to select.", + MarkdownDescription: "The key to select.", + Required: true, + Optional: false, + Computed: false, + }, + + "name": schema.StringAttribute{ + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + Required: false, + Optional: true, + Computed: false, + }, + + "optional": schema.BoolAttribute{ + Description: "Specify whether the ConfigMap or its key must be defined", + MarkdownDescription: "Specify whether the ConfigMap or its key must be defined", + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + + "secret": schema.SingleNestedAttribute{ + Description: "Secret containing data to use for the targets.", + MarkdownDescription: "Secret containing data to use for the targets.", + Attributes: map[string]schema.Attribute{ + "key": schema.StringAttribute{ + Description: "The key of the secret to select from. Must be a valid secret key.", + MarkdownDescription: "The key of the secret to select from. Must be a valid secret key.", + Required: true, + Optional: false, + Computed: false, + }, + + "name": schema.StringAttribute{ + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + Required: false, + Optional: true, + Computed: false, + }, + + "optional": schema.BoolAttribute{ + Description: "Specify whether the Secret or its key must be defined", + MarkdownDescription: "Specify whether the Secret or its key must be defined", + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + + "insecure_skip_verify": schema.BoolAttribute{ + Description: "Disable target certificate validation.", + MarkdownDescription: "Disable target certificate validation.", + Required: false, + Optional: true, + Computed: false, + }, + + "key_secret": schema.SingleNestedAttribute{ + Description: "Secret containing the client key file for the targets.", + MarkdownDescription: "Secret containing the client key file for the targets.", + Attributes: map[string]schema.Attribute{ + "key": schema.StringAttribute{ + Description: "The key of the secret to select from. Must be a valid secret key.", + MarkdownDescription: "The key of the secret to select from. Must be a valid secret key.", + Required: true, + Optional: false, + Computed: false, + }, + + "name": schema.StringAttribute{ + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + Required: false, + Optional: true, + Computed: false, + }, + + "optional": schema.BoolAttribute{ + Description: "Specify whether the Secret or its key must be defined", + MarkdownDescription: "Specify whether the Secret or its key must be defined", + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + + "max_version": schema.StringAttribute{ + Description: "Maximum acceptable TLS version.It requires Prometheus >= v2.41.0.", + MarkdownDescription: "Maximum acceptable TLS version.It requires Prometheus >= v2.41.0.", + Required: false, + Optional: true, + Computed: false, + Validators: []validator.String{ + stringvalidator.OneOf("TLS10", "TLS11", "TLS12", "TLS13"), + }, + }, + + "min_version": schema.StringAttribute{ + Description: "Minimum acceptable TLS version.It requires Prometheus >= v2.35.0.", + MarkdownDescription: "Minimum acceptable TLS version.It requires Prometheus >= v2.35.0.", + Required: false, + Optional: true, + Computed: false, + Validators: []validator.String{ + stringvalidator.OneOf("TLS10", "TLS11", "TLS12", "TLS13"), + }, + }, + + "server_name": schema.StringAttribute{ + Description: "Used to verify the hostname for the targets.", + MarkdownDescription: "Used to verify the hostname for the targets.", + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + + "token_url": schema.StringAttribute{ + Description: "'tokenURL' configures the URL to fetch the token from.", + MarkdownDescription: "'tokenURL' configures the URL to fetch the token from.", + Required: true, + Optional: false, + Computed: false, + Validators: []validator.String{ + stringvalidator.LengthAtLeast(1), + }, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + + "proxy_connect_header": schema.MapAttribute{ + Description: "ProxyConnectHeader optionally specifies headers to send toproxies during CONNECT requests.It requires Prometheus >= v2.43.0.", + MarkdownDescription: "ProxyConnectHeader optionally specifies headers to send toproxies during CONNECT requests.It requires Prometheus >= v2.43.0.", + ElementType: types.StringType, + Required: false, + Optional: true, + Computed: false, + }, + + "proxy_from_environment": schema.BoolAttribute{ + Description: "Whether to use the proxy configuration defined by environment variables (HTTP_PROXY, HTTPS_PROXY, and NO_PROXY).If unset, Prometheus uses its default value.It requires Prometheus >= v2.43.0.", + MarkdownDescription: "Whether to use the proxy configuration defined by environment variables (HTTP_PROXY, HTTPS_PROXY, and NO_PROXY).If unset, Prometheus uses its default value.It requires Prometheus >= v2.43.0.", + Required: false, + Optional: true, + Computed: false, + }, + + "proxy_url": schema.StringAttribute{ + Description: "'proxyURL' defines the HTTP proxy server to use.", + MarkdownDescription: "'proxyURL' defines the HTTP proxy server to use.", + Required: false, + Optional: true, + Computed: false, + Validators: []validator.String{ + stringvalidator.RegexMatches(regexp.MustCompile(`^http(s)?://.+$`), ""), + }, + }, + + "refresh_interval": schema.StringAttribute{ + Description: "RefreshInterval configures the refresh interval at which Prometheus will re-query theendpoint to update the target list.", + MarkdownDescription: "RefreshInterval configures the refresh interval at which Prometheus will re-query theendpoint to update the target list.", + Required: false, + Optional: true, + Computed: false, + Validators: []validator.String{ + stringvalidator.RegexMatches(regexp.MustCompile(`^(0|(([0-9]+)y)?(([0-9]+)w)?(([0-9]+)d)?(([0-9]+)h)?(([0-9]+)m)?(([0-9]+)s)?(([0-9]+)ms)?)$`), ""), + }, + }, + + "tls_config": schema.SingleNestedAttribute{ + Description: "TLS configuration applying to the target HTTP endpoint.", + MarkdownDescription: "TLS configuration applying to the target HTTP endpoint.", + Attributes: map[string]schema.Attribute{ + "ca": schema.SingleNestedAttribute{ + Description: "Certificate authority used when verifying server certificates.", + MarkdownDescription: "Certificate authority used when verifying server certificates.", + Attributes: map[string]schema.Attribute{ + "config_map": schema.SingleNestedAttribute{ + Description: "ConfigMap containing data to use for the targets.", + MarkdownDescription: "ConfigMap containing data to use for the targets.", + Attributes: map[string]schema.Attribute{ + "key": schema.StringAttribute{ + Description: "The key to select.", + MarkdownDescription: "The key to select.", + Required: true, + Optional: false, + Computed: false, + }, + + "name": schema.StringAttribute{ + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + Required: false, + Optional: true, + Computed: false, + }, + + "optional": schema.BoolAttribute{ + Description: "Specify whether the ConfigMap or its key must be defined", + MarkdownDescription: "Specify whether the ConfigMap or its key must be defined", + Required: false, + Optional: true, + Computed: false, }, }, Required: false, @@ -8706,74 +8999,74 @@ func (r *MonitoringCoreosComScrapeConfigV1Alpha1Manifest) Schema(_ context.Conte Computed: false, }, - "cert": schema.SingleNestedAttribute{ - Description: "Client certificate to present when doing client-authentication.", - MarkdownDescription: "Client certificate to present when doing client-authentication.", + "secret": schema.SingleNestedAttribute{ + Description: "Secret containing data to use for the targets.", + MarkdownDescription: "Secret containing data to use for the targets.", Attributes: map[string]schema.Attribute{ - "config_map": schema.SingleNestedAttribute{ - Description: "ConfigMap containing data to use for the targets.", - MarkdownDescription: "ConfigMap containing data to use for the targets.", - Attributes: map[string]schema.Attribute{ - "key": schema.StringAttribute{ - Description: "The key to select.", - MarkdownDescription: "The key to select.", - Required: true, - Optional: false, - Computed: false, - }, + "key": schema.StringAttribute{ + Description: "The key of the secret to select from. Must be a valid secret key.", + MarkdownDescription: "The key of the secret to select from. Must be a valid secret key.", + Required: true, + Optional: false, + Computed: false, + }, - "name": schema.StringAttribute{ - Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", - MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", - Required: false, - Optional: true, - Computed: false, - }, + "name": schema.StringAttribute{ + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + Required: false, + Optional: true, + Computed: false, + }, - "optional": schema.BoolAttribute{ - Description: "Specify whether the ConfigMap or its key must be defined", - MarkdownDescription: "Specify whether the ConfigMap or its key must be defined", - Required: false, - Optional: true, - Computed: false, - }, - }, - Required: false, - Optional: true, - Computed: false, + "optional": schema.BoolAttribute{ + Description: "Specify whether the Secret or its key must be defined", + MarkdownDescription: "Specify whether the Secret or its key must be defined", + Required: false, + Optional: true, + Computed: false, }, + }, + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, - "secret": schema.SingleNestedAttribute{ - Description: "Secret containing data to use for the targets.", - MarkdownDescription: "Secret containing data to use for the targets.", - Attributes: map[string]schema.Attribute{ - "key": schema.StringAttribute{ - Description: "The key of the secret to select from. Must be a valid secret key.", - MarkdownDescription: "The key of the secret to select from. Must be a valid secret key.", - Required: true, - Optional: false, - Computed: false, - }, + "cert": schema.SingleNestedAttribute{ + Description: "Client certificate to present when doing client-authentication.", + MarkdownDescription: "Client certificate to present when doing client-authentication.", + Attributes: map[string]schema.Attribute{ + "config_map": schema.SingleNestedAttribute{ + Description: "ConfigMap containing data to use for the targets.", + MarkdownDescription: "ConfigMap containing data to use for the targets.", + Attributes: map[string]schema.Attribute{ + "key": schema.StringAttribute{ + Description: "The key to select.", + MarkdownDescription: "The key to select.", + Required: true, + Optional: false, + Computed: false, + }, - "name": schema.StringAttribute{ - Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", - MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", - Required: false, - Optional: true, - Computed: false, - }, + "name": schema.StringAttribute{ + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + Required: false, + Optional: true, + Computed: false, + }, - "optional": schema.BoolAttribute{ - Description: "Specify whether the Secret or its key must be defined", - MarkdownDescription: "Specify whether the Secret or its key must be defined", - Required: false, - Optional: true, - Computed: false, - }, - }, - Required: false, - Optional: true, - Computed: false, + "optional": schema.BoolAttribute{ + Description: "Specify whether the ConfigMap or its key must be defined", + MarkdownDescription: "Specify whether the ConfigMap or its key must be defined", + Required: false, + Optional: true, + Computed: false, }, }, Required: false, @@ -8781,17 +9074,9 @@ func (r *MonitoringCoreosComScrapeConfigV1Alpha1Manifest) Schema(_ context.Conte Computed: false, }, - "insecure_skip_verify": schema.BoolAttribute{ - Description: "Disable target certificate validation.", - MarkdownDescription: "Disable target certificate validation.", - Required: false, - Optional: true, - Computed: false, - }, - - "key_secret": schema.SingleNestedAttribute{ - Description: "Secret containing the client key file for the targets.", - MarkdownDescription: "Secret containing the client key file for the targets.", + "secret": schema.SingleNestedAttribute{ + Description: "Secret containing data to use for the targets.", + MarkdownDescription: "Secret containing data to use for the targets.", Attributes: map[string]schema.Attribute{ "key": schema.StringAttribute{ Description: "The key of the secret to select from. Must be a valid secret key.", @@ -8821,32 +9106,138 @@ func (r *MonitoringCoreosComScrapeConfigV1Alpha1Manifest) Schema(_ context.Conte Optional: true, Computed: false, }, + }, + Required: false, + Optional: true, + Computed: false, + }, + + "insecure_skip_verify": schema.BoolAttribute{ + Description: "Disable target certificate validation.", + MarkdownDescription: "Disable target certificate validation.", + Required: false, + Optional: true, + Computed: false, + }, + + "key_secret": schema.SingleNestedAttribute{ + Description: "Secret containing the client key file for the targets.", + MarkdownDescription: "Secret containing the client key file for the targets.", + Attributes: map[string]schema.Attribute{ + "key": schema.StringAttribute{ + Description: "The key of the secret to select from. Must be a valid secret key.", + MarkdownDescription: "The key of the secret to select from. Must be a valid secret key.", + Required: true, + Optional: false, + Computed: false, + }, + + "name": schema.StringAttribute{ + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + Required: false, + Optional: true, + Computed: false, + }, + + "optional": schema.BoolAttribute{ + Description: "Specify whether the Secret or its key must be defined", + MarkdownDescription: "Specify whether the Secret or its key must be defined", + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + + "max_version": schema.StringAttribute{ + Description: "Maximum acceptable TLS version.It requires Prometheus >= v2.41.0.", + MarkdownDescription: "Maximum acceptable TLS version.It requires Prometheus >= v2.41.0.", + Required: false, + Optional: true, + Computed: false, + Validators: []validator.String{ + stringvalidator.OneOf("TLS10", "TLS11", "TLS12", "TLS13"), + }, + }, + + "min_version": schema.StringAttribute{ + Description: "Minimum acceptable TLS version.It requires Prometheus >= v2.35.0.", + MarkdownDescription: "Minimum acceptable TLS version.It requires Prometheus >= v2.35.0.", + Required: false, + Optional: true, + Computed: false, + Validators: []validator.String{ + stringvalidator.OneOf("TLS10", "TLS11", "TLS12", "TLS13"), + }, + }, + + "server_name": schema.StringAttribute{ + Description: "Used to verify the hostname for the targets.", + MarkdownDescription: "Used to verify the hostname for the targets.", + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + + "url": schema.StringAttribute{ + Description: "URL from which the targets are fetched.", + MarkdownDescription: "URL from which the targets are fetched.", + Required: true, + Optional: false, + Computed: false, + Validators: []validator.String{ + stringvalidator.LengthAtLeast(1), + stringvalidator.RegexMatches(regexp.MustCompile(`^http(s)?://.+$`), ""), + }, + }, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, - "max_version": schema.StringAttribute{ - Description: "Maximum acceptable TLS version.It requires Prometheus >= v2.41.0.", - MarkdownDescription: "Maximum acceptable TLS version.It requires Prometheus >= v2.41.0.", - Required: false, - Optional: true, + "ionos_sd_configs": schema.ListNestedAttribute{ + Description: "IonosSDConfigs defines a list of IONOS service discovery configurations.", + MarkdownDescription: "IonosSDConfigs defines a list of IONOS service discovery configurations.", + NestedObject: schema.NestedAttributeObject{ + Attributes: map[string]schema.Attribute{ + "authorization": schema.SingleNestedAttribute{ + Description: "Authorization' header configuration, required when using IONOS.", + MarkdownDescription: "Authorization' header configuration, required when using IONOS.", + Attributes: map[string]schema.Attribute{ + "credentials": schema.SingleNestedAttribute{ + Description: "Selects a key of a Secret in the namespace that contains the credentials for authentication.", + MarkdownDescription: "Selects a key of a Secret in the namespace that contains the credentials for authentication.", + Attributes: map[string]schema.Attribute{ + "key": schema.StringAttribute{ + Description: "The key of the secret to select from. Must be a valid secret key.", + MarkdownDescription: "The key of the secret to select from. Must be a valid secret key.", + Required: true, + Optional: false, Computed: false, - Validators: []validator.String{ - stringvalidator.OneOf("TLS10", "TLS11", "TLS12", "TLS13"), - }, }, - "min_version": schema.StringAttribute{ - Description: "Minimum acceptable TLS version.It requires Prometheus >= v2.35.0.", - MarkdownDescription: "Minimum acceptable TLS version.It requires Prometheus >= v2.35.0.", + "name": schema.StringAttribute{ + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", Required: false, Optional: true, Computed: false, - Validators: []validator.String{ - stringvalidator.OneOf("TLS10", "TLS11", "TLS12", "TLS13"), - }, }, - "server_name": schema.StringAttribute{ - Description: "Used to verify the hostname for the targets.", - MarkdownDescription: "Used to verify the hostname for the targets.", + "optional": schema.BoolAttribute{ + Description: "Specify whether the Secret or its key must be defined", + MarkdownDescription: "Specify whether the Secret or its key must be defined", Required: false, Optional: true, Computed: false, @@ -8857,28 +9248,64 @@ func (r *MonitoringCoreosComScrapeConfigV1Alpha1Manifest) Schema(_ context.Conte Computed: false, }, - "token_url": schema.StringAttribute{ - Description: "'tokenURL' configures the URL to fetch the token from.", - MarkdownDescription: "'tokenURL' configures the URL to fetch the token from.", - Required: true, - Optional: false, + "type": schema.StringAttribute{ + Description: "Defines the authentication type. The value is case-insensitive.'Basic' is not a supported value.Default: 'Bearer'", + MarkdownDescription: "Defines the authentication type. The value is case-insensitive.'Basic' is not a supported value.Default: 'Bearer'", + Required: false, + Optional: true, Computed: false, - Validators: []validator.String{ - stringvalidator.LengthAtLeast(1), - }, }, }, - Required: false, - Optional: true, + Required: true, + Optional: false, Computed: false, }, + "datacenter_id": schema.StringAttribute{ + Description: "The unique ID of the IONOS data center.", + MarkdownDescription: "The unique ID of the IONOS data center.", + Required: true, + Optional: false, + Computed: false, + Validators: []validator.String{ + stringvalidator.LengthAtLeast(1), + }, + }, + + "enable_http2": schema.BoolAttribute{ + Description: "Configure whether to enable HTTP2.", + MarkdownDescription: "Configure whether to enable HTTP2.", + Required: false, + Optional: true, + Computed: false, + }, + + "follow_redirects": schema.BoolAttribute{ + Description: "Configure whether the HTTP requests should follow HTTP 3xx redirects.", + MarkdownDescription: "Configure whether the HTTP requests should follow HTTP 3xx redirects.", + Required: false, + Optional: true, + Computed: false, + }, + + "no_proxy": schema.StringAttribute{ + Description: "'noProxy' is a comma-separated string that can contain IPs, CIDR notation, domain namesthat should be excluded from proxying. IP and domain names cancontain port numbers.It requires Prometheus >= v2.43.0.", + MarkdownDescription: "'noProxy' is a comma-separated string that can contain IPs, CIDR notation, domain namesthat should be excluded from proxying. IP and domain names cancontain port numbers.It requires Prometheus >= v2.43.0.", + Required: false, + Optional: true, + Computed: false, + }, + "port": schema.Int64Attribute{ - Description: "The port to scrape metrics from.", - MarkdownDescription: "The port to scrape metrics from.", + Description: "Port to scrape the metrics from.", + MarkdownDescription: "Port to scrape the metrics from.", Required: false, Optional: true, Computed: false, + Validators: []validator.Int64{ + int64validator.AtLeast(0), + int64validator.AtMost(65535), + }, }, "proxy_connect_header": schema.MapAttribute{ @@ -8910,8 +9337,8 @@ func (r *MonitoringCoreosComScrapeConfigV1Alpha1Manifest) Schema(_ context.Conte }, "refresh_interval": schema.StringAttribute{ - Description: "The time after which the servers are refreshed.", - MarkdownDescription: "The time after which the servers are refreshed.", + Description: "Refresh interval to re-read the list of resources.", + MarkdownDescription: "Refresh interval to re-read the list of resources.", Required: false, Optional: true, Computed: false, @@ -8920,20 +9347,9 @@ func (r *MonitoringCoreosComScrapeConfigV1Alpha1Manifest) Schema(_ context.Conte }, }, - "role": schema.StringAttribute{ - Description: "The Hetzner role of entities that should be discovered.", - MarkdownDescription: "The Hetzner role of entities that should be discovered.", - Required: true, - Optional: false, - Computed: false, - Validators: []validator.String{ - stringvalidator.OneOf("hcloud", "Hcloud", "robot", "Robot"), - }, - }, - "tls_config": schema.SingleNestedAttribute{ - Description: "TLS configuration to use on every scrape request.", - MarkdownDescription: "TLS configuration to use on every scrape request.", + Description: "TLS configuration to use when connecting to the IONOS API.", + MarkdownDescription: "TLS configuration to use when connecting to the IONOS API.", Attributes: map[string]schema.Attribute{ "ca": schema.SingleNestedAttribute{ Description: "Certificate authority used when verifying server certificates.", @@ -9167,30 +9583,61 @@ func (r *MonitoringCoreosComScrapeConfigV1Alpha1Manifest) Schema(_ context.Conte Computed: false, }, - "honor_labels": schema.BoolAttribute{ - Description: "HonorLabels chooses the metric's labels on collisions with target labels.", - MarkdownDescription: "HonorLabels chooses the metric's labels on collisions with target labels.", + "job_name": schema.StringAttribute{ + Description: "The value of the 'job' label assigned to the scraped metrics by default.The 'job_name' field in the rendered scrape configuration is always controlled by theoperator to prevent duplicate job names, which Prometheus does not allow. Instead the'job' label is set by means of relabeling configs.", + MarkdownDescription: "The value of the 'job' label assigned to the scraped metrics by default.The 'job_name' field in the rendered scrape configuration is always controlled by theoperator to prevent duplicate job names, which Prometheus does not allow. Instead the'job' label is set by means of relabeling configs.", Required: false, Optional: true, Computed: false, + Validators: []validator.String{ + stringvalidator.LengthAtLeast(1), + }, }, - "honor_timestamps": schema.BoolAttribute{ - Description: "HonorTimestamps controls whether Prometheus respects the timestamps present in scraped data.", - MarkdownDescription: "HonorTimestamps controls whether Prometheus respects the timestamps present in scraped data.", + "keep_dropped_targets": schema.Int64Attribute{ + Description: "Per-scrape limit on the number of targets dropped by relabelingthat will be kept in memory. 0 means no limit.It requires Prometheus >= v2.47.0.", + MarkdownDescription: "Per-scrape limit on the number of targets dropped by relabelingthat will be kept in memory. 0 means no limit.It requires Prometheus >= v2.47.0.", Required: false, Optional: true, Computed: false, }, - "http_sd_configs": schema.ListNestedAttribute{ - Description: "HTTPSDConfigs defines a list of HTTP service discovery configurations.", - MarkdownDescription: "HTTPSDConfigs defines a list of HTTP service discovery configurations.", + "kubernetes_sd_configs": schema.ListNestedAttribute{ + Description: "KubernetesSDConfigs defines a list of Kubernetes service discovery configurations.", + MarkdownDescription: "KubernetesSDConfigs defines a list of Kubernetes service discovery configurations.", NestedObject: schema.NestedAttributeObject{ Attributes: map[string]schema.Attribute{ + "api_server": schema.StringAttribute{ + Description: "The API server address consisting of a hostname or IP address followedby an optional port number.If left empty, Prometheus is assumed to run insideof the cluster. It will discover API servers automatically and use the pod'sCA certificate and bearer token file at /var/run/secrets/kubernetes.io/serviceaccount/.", + MarkdownDescription: "The API server address consisting of a hostname or IP address followedby an optional port number.If left empty, Prometheus is assumed to run insideof the cluster. It will discover API servers automatically and use the pod'sCA certificate and bearer token file at /var/run/secrets/kubernetes.io/serviceaccount/.", + Required: false, + Optional: true, + Computed: false, + Validators: []validator.String{ + stringvalidator.LengthAtLeast(1), + }, + }, + + "attach_metadata": schema.SingleNestedAttribute{ + Description: "Optional metadata to attach to discovered targets.It requires Prometheus >= v2.35.0 when using the 'Pod' role andPrometheus >= v2.37.0 for 'Endpoints' and 'Endpointslice' roles.", + MarkdownDescription: "Optional metadata to attach to discovered targets.It requires Prometheus >= v2.35.0 when using the 'Pod' role andPrometheus >= v2.37.0 for 'Endpoints' and 'Endpointslice' roles.", + Attributes: map[string]schema.Attribute{ + "node": schema.BoolAttribute{ + Description: "Attaches node metadata to discovered targets.When set to true, Prometheus must have the 'get' permission on the'Nodes' objects.Only valid for Pod, Endpoint and Endpointslice roles.", + MarkdownDescription: "Attaches node metadata to discovered targets.When set to true, Prometheus must have the 'get' permission on the'Nodes' objects.Only valid for Pod, Endpoint and Endpointslice roles.", + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + "authorization": schema.SingleNestedAttribute{ - Description: "Authorization header configuration to authenticate against the target HTTP endpoint.Cannot be set at the same time as 'oAuth2', or 'basicAuth'.", - MarkdownDescription: "Authorization header configuration to authenticate against the target HTTP endpoint.Cannot be set at the same time as 'oAuth2', or 'basicAuth'.", + Description: "Authorization header to use on every scrape request.Cannot be set at the same time as 'basicAuth', or 'oauth2'.", + MarkdownDescription: "Authorization header to use on every scrape request.Cannot be set at the same time as 'basicAuth', or 'oauth2'.", Attributes: map[string]schema.Attribute{ "credentials": schema.SingleNestedAttribute{ Description: "Selects a key of a Secret in the namespace that contains the credentials for authentication.", @@ -9239,8 +9686,8 @@ func (r *MonitoringCoreosComScrapeConfigV1Alpha1Manifest) Schema(_ context.Conte }, "basic_auth": schema.SingleNestedAttribute{ - Description: "BasicAuth information to authenticate against the target HTTP endpoint.More info: https://prometheus.io/docs/operating/configuration/#endpointsCannot be set at the same time as 'authorization', or 'oAuth2'.", - MarkdownDescription: "BasicAuth information to authenticate against the target HTTP endpoint.More info: https://prometheus.io/docs/operating/configuration/#endpointsCannot be set at the same time as 'authorization', or 'oAuth2'.", + Description: "BasicAuth information to use on every scrape request.Cannot be set at the same time as 'authorization', or 'oauth2'.", + MarkdownDescription: "BasicAuth information to use on every scrape request.Cannot be set at the same time as 'authorization', or 'oauth2'.", Attributes: map[string]schema.Attribute{ "password": schema.SingleNestedAttribute{ Description: "'password' specifies a key of a Secret containing the password forauthentication.", @@ -9329,6 +9776,32 @@ func (r *MonitoringCoreosComScrapeConfigV1Alpha1Manifest) Schema(_ context.Conte Computed: false, }, + "namespaces": schema.SingleNestedAttribute{ + Description: "Optional namespace discovery. If omitted, Prometheus discovers targets across all namespaces.", + MarkdownDescription: "Optional namespace discovery. If omitted, Prometheus discovers targets across all namespaces.", + Attributes: map[string]schema.Attribute{ + "names": schema.ListAttribute{ + Description: "List of namespaces where to watch for resources.If empty and 'ownNamespace' isn't true, Prometheus watches for resources in all namespaces.", + MarkdownDescription: "List of namespaces where to watch for resources.If empty and 'ownNamespace' isn't true, Prometheus watches for resources in all namespaces.", + ElementType: types.StringType, + Required: false, + Optional: true, + Computed: false, + }, + + "own_namespace": schema.BoolAttribute{ + Description: "Includes the namespace in which the Prometheus pod runs to the list of watched namespaces.", + MarkdownDescription: "Includes the namespace in which the Prometheus pod runs to the list of watched namespaces.", + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + "no_proxy": schema.StringAttribute{ Description: "'noProxy' is a comma-separated string that can contain IPs, CIDR notation, domain namesthat should be excluded from proxying. IP and domain names cancontain port numbers.It requires Prometheus >= v2.43.0.", MarkdownDescription: "'noProxy' is a comma-separated string that can contain IPs, CIDR notation, domain namesthat should be excluded from proxying. IP and domain names cancontain port numbers.It requires Prometheus >= v2.43.0.", @@ -9338,8 +9811,8 @@ func (r *MonitoringCoreosComScrapeConfigV1Alpha1Manifest) Schema(_ context.Conte }, "oauth2": schema.SingleNestedAttribute{ - Description: "Optional OAuth 2.0 configuration to authenticate against the target HTTP endpoint.Cannot be set at the same time as 'authorization', or 'basicAuth'.", - MarkdownDescription: "Optional OAuth 2.0 configuration to authenticate against the target HTTP endpoint.Cannot be set at the same time as 'authorization', or 'basicAuth'.", + Description: "Optional OAuth 2.0 configuration.Cannot be set at the same time as 'authorization', or 'basicAuth'.", + MarkdownDescription: "Optional OAuth 2.0 configuration.Cannot be set at the same time as 'authorization', or 'basicAuth'.", Attributes: map[string]schema.Attribute{ "client_id": schema.SingleNestedAttribute{ Description: "'clientId' specifies a key of a Secret or ConfigMap containing theOAuth2 client's ID.", @@ -9777,20 +10250,64 @@ func (r *MonitoringCoreosComScrapeConfigV1Alpha1Manifest) Schema(_ context.Conte }, }, - "refresh_interval": schema.StringAttribute{ - Description: "RefreshInterval configures the refresh interval at which Prometheus will re-query theendpoint to update the target list.", - MarkdownDescription: "RefreshInterval configures the refresh interval at which Prometheus will re-query theendpoint to update the target list.", - Required: false, - Optional: true, + "role": schema.StringAttribute{ + Description: "Role of the Kubernetes entities that should be discovered.Role 'Endpointslice' requires Prometheus >= v2.21.0", + MarkdownDescription: "Role of the Kubernetes entities that should be discovered.Role 'Endpointslice' requires Prometheus >= v2.21.0", + Required: true, + Optional: false, Computed: false, Validators: []validator.String{ - stringvalidator.RegexMatches(regexp.MustCompile(`^(0|(([0-9]+)y)?(([0-9]+)w)?(([0-9]+)d)?(([0-9]+)h)?(([0-9]+)m)?(([0-9]+)s)?(([0-9]+)ms)?)$`), ""), + stringvalidator.OneOf("Pod", "Endpoints", "Ingress", "Service", "Node", "EndpointSlice"), + }, + }, + + "selectors": schema.ListNestedAttribute{ + Description: "Selector to select objects.It requires Prometheus >= v2.17.0", + MarkdownDescription: "Selector to select objects.It requires Prometheus >= v2.17.0", + NestedObject: schema.NestedAttributeObject{ + Attributes: map[string]schema.Attribute{ + "field": schema.StringAttribute{ + Description: "An optional field selector to limit the service discovery to resources which have fields with specific values.e.g: 'metadata.name=foobar'", + MarkdownDescription: "An optional field selector to limit the service discovery to resources which have fields with specific values.e.g: 'metadata.name=foobar'", + Required: false, + Optional: true, + Computed: false, + Validators: []validator.String{ + stringvalidator.LengthAtLeast(1), + }, + }, + + "label": schema.StringAttribute{ + Description: "An optional label selector to limit the service discovery to resources with specific labels and label values.e.g: 'node.kubernetes.io/instance-type=master'", + MarkdownDescription: "An optional label selector to limit the service discovery to resources with specific labels and label values.e.g: 'node.kubernetes.io/instance-type=master'", + Required: false, + Optional: true, + Computed: false, + Validators: []validator.String{ + stringvalidator.LengthAtLeast(1), + }, + }, + + "role": schema.StringAttribute{ + Description: "Role specifies the type of Kubernetes resource to limit the service discovery to.Accepted values are: Node, Pod, Endpoints, EndpointSlice, Service, Ingress.", + MarkdownDescription: "Role specifies the type of Kubernetes resource to limit the service discovery to.Accepted values are: Node, Pod, Endpoints, EndpointSlice, Service, Ingress.", + Required: true, + Optional: false, + Computed: false, + Validators: []validator.String{ + stringvalidator.OneOf("Pod", "Endpoints", "Ingress", "Service", "Node", "EndpointSlice"), + }, + }, + }, }, + Required: false, + Optional: true, + Computed: false, }, "tls_config": schema.SingleNestedAttribute{ - Description: "TLS configuration applying to the target HTTP endpoint.", - MarkdownDescription: "TLS configuration applying to the target HTTP endpoint.", + Description: "TLS configuration to connect to the Kubernetes API.", + MarkdownDescription: "TLS configuration to connect to the Kubernetes API.", Attributes: map[string]schema.Attribute{ "ca": schema.SingleNestedAttribute{ Description: "Certificate authority used when verifying server certificates.", @@ -10017,18 +10534,6 @@ func (r *MonitoringCoreosComScrapeConfigV1Alpha1Manifest) Schema(_ context.Conte Optional: true, Computed: false, }, - - "url": schema.StringAttribute{ - Description: "URL from which the targets are fetched.", - MarkdownDescription: "URL from which the targets are fetched.", - Required: true, - Optional: false, - Computed: false, - Validators: []validator.String{ - stringvalidator.LengthAtLeast(1), - stringvalidator.RegexMatches(regexp.MustCompile(`^http(s)?://.+$`), ""), - }, - }, }, }, Required: false, @@ -10036,61 +10541,14 @@ func (r *MonitoringCoreosComScrapeConfigV1Alpha1Manifest) Schema(_ context.Conte Computed: false, }, - "job_name": schema.StringAttribute{ - Description: "The value of the 'job' label assigned to the scraped metrics by default.The 'job_name' field in the rendered scrape configuration is always controlled by theoperator to prevent duplicate job names, which Prometheus does not allow. Instead the'job' label is set by means of relabeling configs.", - MarkdownDescription: "The value of the 'job' label assigned to the scraped metrics by default.The 'job_name' field in the rendered scrape configuration is always controlled by theoperator to prevent duplicate job names, which Prometheus does not allow. Instead the'job' label is set by means of relabeling configs.", - Required: false, - Optional: true, - Computed: false, - Validators: []validator.String{ - stringvalidator.LengthAtLeast(1), - }, - }, - - "keep_dropped_targets": schema.Int64Attribute{ - Description: "Per-scrape limit on the number of targets dropped by relabelingthat will be kept in memory. 0 means no limit.It requires Prometheus >= v2.47.0.", - MarkdownDescription: "Per-scrape limit on the number of targets dropped by relabelingthat will be kept in memory. 0 means no limit.It requires Prometheus >= v2.47.0.", - Required: false, - Optional: true, - Computed: false, - }, - - "kubernetes_sd_configs": schema.ListNestedAttribute{ - Description: "KubernetesSDConfigs defines a list of Kubernetes service discovery configurations.", - MarkdownDescription: "KubernetesSDConfigs defines a list of Kubernetes service discovery configurations.", + "kuma_sd_configs": schema.ListNestedAttribute{ + Description: "KumaSDConfigs defines a list of Kuma service discovery configurations.", + MarkdownDescription: "KumaSDConfigs defines a list of Kuma service discovery configurations.", NestedObject: schema.NestedAttributeObject{ Attributes: map[string]schema.Attribute{ - "api_server": schema.StringAttribute{ - Description: "The API server address consisting of a hostname or IP address followedby an optional port number.If left empty, Prometheus is assumed to run insideof the cluster. It will discover API servers automatically and use the pod'sCA certificate and bearer token file at /var/run/secrets/kubernetes.io/serviceaccount/.", - MarkdownDescription: "The API server address consisting of a hostname or IP address followedby an optional port number.If left empty, Prometheus is assumed to run insideof the cluster. It will discover API servers automatically and use the pod'sCA certificate and bearer token file at /var/run/secrets/kubernetes.io/serviceaccount/.", - Required: false, - Optional: true, - Computed: false, - Validators: []validator.String{ - stringvalidator.LengthAtLeast(1), - }, - }, - - "attach_metadata": schema.SingleNestedAttribute{ - Description: "Optional metadata to attach to discovered targets.It requires Prometheus >= v2.35.0 when using the 'Pod' role andPrometheus >= v2.37.0 for 'Endpoints' and 'Endpointslice' roles.", - MarkdownDescription: "Optional metadata to attach to discovered targets.It requires Prometheus >= v2.35.0 when using the 'Pod' role andPrometheus >= v2.37.0 for 'Endpoints' and 'Endpointslice' roles.", - Attributes: map[string]schema.Attribute{ - "node": schema.BoolAttribute{ - Description: "Attaches node metadata to discovered targets.When set to true, Prometheus must have the 'get' permission on the'Nodes' objects.Only valid for Pod, Endpoint and Endpointslice roles.", - MarkdownDescription: "Attaches node metadata to discovered targets.When set to true, Prometheus must have the 'get' permission on the'Nodes' objects.Only valid for Pod, Endpoint and Endpointslice roles.", - Required: false, - Optional: true, - Computed: false, - }, - }, - Required: false, - Optional: true, - Computed: false, - }, - "authorization": schema.SingleNestedAttribute{ - Description: "Authorization header to use on every scrape request.Cannot be set at the same time as 'basicAuth', or 'oauth2'.", - MarkdownDescription: "Authorization header to use on every scrape request.Cannot be set at the same time as 'basicAuth', or 'oauth2'.", + Description: "Authorization header to use on every scrape request.", + MarkdownDescription: "Authorization header to use on every scrape request.", Attributes: map[string]schema.Attribute{ "credentials": schema.SingleNestedAttribute{ Description: "Selects a key of a Secret in the namespace that contains the credentials for authentication.", @@ -10139,8 +10597,8 @@ func (r *MonitoringCoreosComScrapeConfigV1Alpha1Manifest) Schema(_ context.Conte }, "basic_auth": schema.SingleNestedAttribute{ - Description: "BasicAuth information to use on every scrape request.Cannot be set at the same time as 'authorization', or 'oauth2'.", - MarkdownDescription: "BasicAuth information to use on every scrape request.Cannot be set at the same time as 'authorization', or 'oauth2'.", + Description: "BasicAuth information to use on every scrape request.", + MarkdownDescription: "BasicAuth information to use on every scrape request.", Attributes: map[string]schema.Attribute{ "password": schema.SingleNestedAttribute{ Description: "'password' specifies a key of a Secret containing the password forauthentication.", @@ -10213,6 +10671,14 @@ func (r *MonitoringCoreosComScrapeConfigV1Alpha1Manifest) Schema(_ context.Conte Computed: false, }, + "client_id": schema.StringAttribute{ + Description: "Client id is used by Kuma Control Plane to compute Monitoring Assignment for specific Prometheus backend.", + MarkdownDescription: "Client id is used by Kuma Control Plane to compute Monitoring Assignment for specific Prometheus backend.", + Required: false, + Optional: true, + Computed: false, + }, + "enable_http2": schema.BoolAttribute{ Description: "Whether to enable HTTP2.", MarkdownDescription: "Whether to enable HTTP2.", @@ -10221,6 +10687,17 @@ func (r *MonitoringCoreosComScrapeConfigV1Alpha1Manifest) Schema(_ context.Conte Computed: false, }, + "fetch_timeout": schema.StringAttribute{ + Description: "The time after which the monitoring assignments are refreshed.", + MarkdownDescription: "The time after which the monitoring assignments are refreshed.", + Required: false, + Optional: true, + Computed: false, + Validators: []validator.String{ + stringvalidator.RegexMatches(regexp.MustCompile(`^(0|(([0-9]+)y)?(([0-9]+)w)?(([0-9]+)d)?(([0-9]+)h)?(([0-9]+)m)?(([0-9]+)s)?(([0-9]+)ms)?)$`), ""), + }, + }, + "follow_redirects": schema.BoolAttribute{ Description: "Configure whether HTTP requests follow HTTP 3xx redirects.", MarkdownDescription: "Configure whether HTTP requests follow HTTP 3xx redirects.", @@ -10229,32 +10706,6 @@ func (r *MonitoringCoreosComScrapeConfigV1Alpha1Manifest) Schema(_ context.Conte Computed: false, }, - "namespaces": schema.SingleNestedAttribute{ - Description: "Optional namespace discovery. If omitted, Prometheus discovers targets across all namespaces.", - MarkdownDescription: "Optional namespace discovery. If omitted, Prometheus discovers targets across all namespaces.", - Attributes: map[string]schema.Attribute{ - "names": schema.ListAttribute{ - Description: "List of namespaces where to watch for resources.If empty and 'ownNamespace' isn't true, Prometheus watches for resources in all namespaces.", - MarkdownDescription: "List of namespaces where to watch for resources.If empty and 'ownNamespace' isn't true, Prometheus watches for resources in all namespaces.", - ElementType: types.StringType, - Required: false, - Optional: true, - Computed: false, - }, - - "own_namespace": schema.BoolAttribute{ - Description: "Includes the namespace in which the Prometheus pod runs to the list of watched namespaces.", - MarkdownDescription: "Includes the namespace in which the Prometheus pod runs to the list of watched namespaces.", - Required: false, - Optional: true, - Computed: false, - }, - }, - Required: false, - Optional: true, - Computed: false, - }, - "no_proxy": schema.StringAttribute{ Description: "'noProxy' is a comma-separated string that can contain IPs, CIDR notation, domain namesthat should be excluded from proxying. IP and domain names cancontain port numbers.It requires Prometheus >= v2.43.0.", MarkdownDescription: "'noProxy' is a comma-separated string that can contain IPs, CIDR notation, domain namesthat should be excluded from proxying. IP and domain names cancontain port numbers.It requires Prometheus >= v2.43.0.", @@ -10703,64 +11154,31 @@ func (r *MonitoringCoreosComScrapeConfigV1Alpha1Manifest) Schema(_ context.Conte }, }, - "role": schema.StringAttribute{ - Description: "Role of the Kubernetes entities that should be discovered.Role 'Endpointslice' requires Prometheus >= v2.21.0", - MarkdownDescription: "Role of the Kubernetes entities that should be discovered.Role 'Endpointslice' requires Prometheus >= v2.21.0", - Required: true, - Optional: false, + "refresh_interval": schema.StringAttribute{ + Description: "The time to wait between polling update requests.", + MarkdownDescription: "The time to wait between polling update requests.", + Required: false, + Optional: true, Computed: false, Validators: []validator.String{ - stringvalidator.OneOf("Pod", "Endpoints", "Ingress", "Service", "Node", "EndpointSlice"), + stringvalidator.RegexMatches(regexp.MustCompile(`^(0|(([0-9]+)y)?(([0-9]+)w)?(([0-9]+)d)?(([0-9]+)h)?(([0-9]+)m)?(([0-9]+)s)?(([0-9]+)ms)?)$`), ""), }, }, - "selectors": schema.ListNestedAttribute{ - Description: "Selector to select objects.It requires Prometheus >= v2.17.0", - MarkdownDescription: "Selector to select objects.It requires Prometheus >= v2.17.0", - NestedObject: schema.NestedAttributeObject{ - Attributes: map[string]schema.Attribute{ - "field": schema.StringAttribute{ - Description: "An optional field selector to limit the service discovery to resources which have fields with specific values.e.g: 'metadata.name=foobar'", - MarkdownDescription: "An optional field selector to limit the service discovery to resources which have fields with specific values.e.g: 'metadata.name=foobar'", - Required: false, - Optional: true, - Computed: false, - Validators: []validator.String{ - stringvalidator.LengthAtLeast(1), - }, - }, - - "label": schema.StringAttribute{ - Description: "An optional label selector to limit the service discovery to resources with specific labels and label values.e.g: 'node.kubernetes.io/instance-type=master'", - MarkdownDescription: "An optional label selector to limit the service discovery to resources with specific labels and label values.e.g: 'node.kubernetes.io/instance-type=master'", - Required: false, - Optional: true, - Computed: false, - Validators: []validator.String{ - stringvalidator.LengthAtLeast(1), - }, - }, - - "role": schema.StringAttribute{ - Description: "Role specifies the type of Kubernetes resource to limit the service discovery to.Accepted values are: Node, Pod, Endpoints, EndpointSlice, Service, Ingress.", - MarkdownDescription: "Role specifies the type of Kubernetes resource to limit the service discovery to.Accepted values are: Node, Pod, Endpoints, EndpointSlice, Service, Ingress.", - Required: true, - Optional: false, - Computed: false, - Validators: []validator.String{ - stringvalidator.OneOf("Pod", "Endpoints", "Ingress", "Service", "Node", "EndpointSlice"), - }, - }, - }, + "server": schema.StringAttribute{ + Description: "Address of the Kuma Control Plane's MADS xDS server.", + MarkdownDescription: "Address of the Kuma Control Plane's MADS xDS server.", + Required: true, + Optional: false, + Computed: false, + Validators: []validator.String{ + stringvalidator.LengthAtLeast(1), }, - Required: false, - Optional: true, - Computed: false, }, "tls_config": schema.SingleNestedAttribute{ - Description: "TLS configuration to connect to the Kubernetes API.", - MarkdownDescription: "TLS configuration to connect to the Kubernetes API.", + Description: "TLS configuration to use on every scrape request", + MarkdownDescription: "TLS configuration to use on every scrape request", Attributes: map[string]schema.Attribute{ "ca": schema.SingleNestedAttribute{ Description: "Certificate authority used when verifying server certificates.", @@ -10994,14 +11412,71 @@ func (r *MonitoringCoreosComScrapeConfigV1Alpha1Manifest) Schema(_ context.Conte Computed: false, }, - "kuma_sd_configs": schema.ListNestedAttribute{ - Description: "KumaSDConfigs defines a list of Kuma service discovery configurations.", - MarkdownDescription: "KumaSDConfigs defines a list of Kuma service discovery configurations.", + "label_limit": schema.Int64Attribute{ + Description: "Per-scrape limit on number of labels that will be accepted for a sample.Only valid in Prometheus versions 2.27.0 and newer.", + MarkdownDescription: "Per-scrape limit on number of labels that will be accepted for a sample.Only valid in Prometheus versions 2.27.0 and newer.", + Required: false, + Optional: true, + Computed: false, + }, + + "label_name_length_limit": schema.Int64Attribute{ + Description: "Per-scrape limit on length of labels name that will be accepted for a sample.Only valid in Prometheus versions 2.27.0 and newer.", + MarkdownDescription: "Per-scrape limit on length of labels name that will be accepted for a sample.Only valid in Prometheus versions 2.27.0 and newer.", + Required: false, + Optional: true, + Computed: false, + }, + + "label_value_length_limit": schema.Int64Attribute{ + Description: "Per-scrape limit on length of labels value that will be accepted for a sample.Only valid in Prometheus versions 2.27.0 and newer.", + MarkdownDescription: "Per-scrape limit on length of labels value that will be accepted for a sample.Only valid in Prometheus versions 2.27.0 and newer.", + Required: false, + Optional: true, + Computed: false, + }, + + "light_sail_sd_configs": schema.ListNestedAttribute{ + Description: "LightsailSDConfigs defines a list of Lightsail service discovery configurations.", + MarkdownDescription: "LightsailSDConfigs defines a list of Lightsail service discovery configurations.", NestedObject: schema.NestedAttributeObject{ Attributes: map[string]schema.Attribute{ + "access_key": schema.SingleNestedAttribute{ + Description: "AccessKey is the AWS API key.", + MarkdownDescription: "AccessKey is the AWS API key.", + Attributes: map[string]schema.Attribute{ + "key": schema.StringAttribute{ + Description: "The key of the secret to select from. Must be a valid secret key.", + MarkdownDescription: "The key of the secret to select from. Must be a valid secret key.", + Required: true, + Optional: false, + Computed: false, + }, + + "name": schema.StringAttribute{ + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + Required: false, + Optional: true, + Computed: false, + }, + + "optional": schema.BoolAttribute{ + Description: "Specify whether the Secret or its key must be defined", + MarkdownDescription: "Specify whether the Secret or its key must be defined", + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + "authorization": schema.SingleNestedAttribute{ - Description: "Authorization header to use on every scrape request.", - MarkdownDescription: "Authorization header to use on every scrape request.", + Description: "Optional 'authorization' HTTP header configuration.Cannot be set at the same time as 'basicAuth', or 'oauth2'.", + MarkdownDescription: "Optional 'authorization' HTTP header configuration.Cannot be set at the same time as 'basicAuth', or 'oauth2'.", Attributes: map[string]schema.Attribute{ "credentials": schema.SingleNestedAttribute{ Description: "Selects a key of a Secret in the namespace that contains the credentials for authentication.", @@ -11050,8 +11525,8 @@ func (r *MonitoringCoreosComScrapeConfigV1Alpha1Manifest) Schema(_ context.Conte }, "basic_auth": schema.SingleNestedAttribute{ - Description: "BasicAuth information to use on every scrape request.", - MarkdownDescription: "BasicAuth information to use on every scrape request.", + Description: "Optional HTTP basic authentication information.Cannot be set at the same time as 'authorization', or 'oauth2'.", + MarkdownDescription: "Optional HTTP basic authentication information.Cannot be set at the same time as 'authorization', or 'oauth2'.", Attributes: map[string]schema.Attribute{ "password": schema.SingleNestedAttribute{ Description: "'password' specifies a key of a Secret containing the password forauthentication.", @@ -11124,36 +11599,28 @@ func (r *MonitoringCoreosComScrapeConfigV1Alpha1Manifest) Schema(_ context.Conte Computed: false, }, - "client_id": schema.StringAttribute{ - Description: "Client id is used by Kuma Control Plane to compute Monitoring Assignment for specific Prometheus backend.", - MarkdownDescription: "Client id is used by Kuma Control Plane to compute Monitoring Assignment for specific Prometheus backend.", - Required: false, - Optional: true, - Computed: false, - }, - "enable_http2": schema.BoolAttribute{ - Description: "Whether to enable HTTP2.", - MarkdownDescription: "Whether to enable HTTP2.", + Description: "Configure whether to enable HTTP2.", + MarkdownDescription: "Configure whether to enable HTTP2.", Required: false, Optional: true, Computed: false, }, - "fetch_timeout": schema.StringAttribute{ - Description: "The time after which the monitoring assignments are refreshed.", - MarkdownDescription: "The time after which the monitoring assignments are refreshed.", + "endpoint": schema.StringAttribute{ + Description: "Custom endpoint to be used.", + MarkdownDescription: "Custom endpoint to be used.", Required: false, Optional: true, Computed: false, Validators: []validator.String{ - stringvalidator.RegexMatches(regexp.MustCompile(`^(0|(([0-9]+)y)?(([0-9]+)w)?(([0-9]+)d)?(([0-9]+)h)?(([0-9]+)m)?(([0-9]+)s)?(([0-9]+)ms)?)$`), ""), + stringvalidator.LengthAtLeast(1), }, }, "follow_redirects": schema.BoolAttribute{ - Description: "Configure whether HTTP requests follow HTTP 3xx redirects.", - MarkdownDescription: "Configure whether HTTP requests follow HTTP 3xx redirects.", + Description: "Configure whether the HTTP requests should follow HTTP 3xx redirects.", + MarkdownDescription: "Configure whether the HTTP requests should follow HTTP 3xx redirects.", Required: false, Optional: true, Computed: false, @@ -11168,8 +11635,8 @@ func (r *MonitoringCoreosComScrapeConfigV1Alpha1Manifest) Schema(_ context.Conte }, "oauth2": schema.SingleNestedAttribute{ - Description: "Optional OAuth 2.0 configuration.Cannot be set at the same time as 'authorization', or 'basicAuth'.", - MarkdownDescription: "Optional OAuth 2.0 configuration.Cannot be set at the same time as 'authorization', or 'basicAuth'.", + Description: "Optional OAuth2.0 configuration.Cannot be set at the same time as 'basicAuth', or 'authorization'.", + MarkdownDescription: "Optional OAuth2.0 configuration.Cannot be set at the same time as 'basicAuth', or 'authorization'.", Attributes: map[string]schema.Attribute{ "client_id": schema.SingleNestedAttribute{ Description: "'clientId' specifies a key of a Secret or ConfigMap containing theOAuth2 client's ID.", @@ -11579,6 +12046,18 @@ func (r *MonitoringCoreosComScrapeConfigV1Alpha1Manifest) Schema(_ context.Conte Computed: false, }, + "port": schema.Int64Attribute{ + Description: "Port to scrape the metrics from.If using the public IP address, this must instead be specified in the relabeling rule.", + MarkdownDescription: "Port to scrape the metrics from.If using the public IP address, this must instead be specified in the relabeling rule.", + Required: false, + Optional: true, + Computed: false, + Validators: []validator.Int64{ + int64validator.AtLeast(0), + int64validator.AtMost(65535), + }, + }, + "proxy_connect_header": schema.MapAttribute{ Description: "ProxyConnectHeader optionally specifies headers to send toproxies during CONNECT requests.It requires Prometheus >= v2.43.0.", MarkdownDescription: "ProxyConnectHeader optionally specifies headers to send toproxies during CONNECT requests.It requires Prometheus >= v2.43.0.", @@ -11608,8 +12087,8 @@ func (r *MonitoringCoreosComScrapeConfigV1Alpha1Manifest) Schema(_ context.Conte }, "refresh_interval": schema.StringAttribute{ - Description: "The time to wait between polling update requests.", - MarkdownDescription: "The time to wait between polling update requests.", + Description: "Refresh interval to re-read the list of instances.", + MarkdownDescription: "Refresh interval to re-read the list of instances.", Required: false, Optional: true, Computed: false, @@ -11618,20 +12097,61 @@ func (r *MonitoringCoreosComScrapeConfigV1Alpha1Manifest) Schema(_ context.Conte }, }, - "server": schema.StringAttribute{ - Description: "Address of the Kuma Control Plane's MADS xDS server.", - MarkdownDescription: "Address of the Kuma Control Plane's MADS xDS server.", - Required: true, - Optional: false, + "region": schema.StringAttribute{ + Description: "The AWS region.", + MarkdownDescription: "The AWS region.", + Required: false, + Optional: true, Computed: false, Validators: []validator.String{ stringvalidator.LengthAtLeast(1), }, }, + "role_arn": schema.StringAttribute{ + Description: "AWS Role ARN, an alternative to using AWS API keys.", + MarkdownDescription: "AWS Role ARN, an alternative to using AWS API keys.", + Required: false, + Optional: true, + Computed: false, + }, + + "secret_key": schema.SingleNestedAttribute{ + Description: "SecretKey is the AWS API secret.", + MarkdownDescription: "SecretKey is the AWS API secret.", + Attributes: map[string]schema.Attribute{ + "key": schema.StringAttribute{ + Description: "The key of the secret to select from. Must be a valid secret key.", + MarkdownDescription: "The key of the secret to select from. Must be a valid secret key.", + Required: true, + Optional: false, + Computed: false, + }, + + "name": schema.StringAttribute{ + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + Required: false, + Optional: true, + Computed: false, + }, + + "optional": schema.BoolAttribute{ + Description: "Specify whether the Secret or its key must be defined", + MarkdownDescription: "Specify whether the Secret or its key must be defined", + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + "tls_config": schema.SingleNestedAttribute{ - Description: "TLS configuration to use on every scrape request", - MarkdownDescription: "TLS configuration to use on every scrape request", + Description: "TLS configuration to connect to the Puppet DB.", + MarkdownDescription: "TLS configuration to connect to the Puppet DB.", Attributes: map[string]schema.Attribute{ "ca": schema.SingleNestedAttribute{ Description: "Certificate authority used when verifying server certificates.", @@ -11865,158 +12385,18 @@ func (r *MonitoringCoreosComScrapeConfigV1Alpha1Manifest) Schema(_ context.Conte Computed: false, }, - "label_limit": schema.Int64Attribute{ - Description: "Per-scrape limit on number of labels that will be accepted for a sample.Only valid in Prometheus versions 2.27.0 and newer.", - MarkdownDescription: "Per-scrape limit on number of labels that will be accepted for a sample.Only valid in Prometheus versions 2.27.0 and newer.", - Required: false, - Optional: true, - Computed: false, - }, - - "label_name_length_limit": schema.Int64Attribute{ - Description: "Per-scrape limit on length of labels name that will be accepted for a sample.Only valid in Prometheus versions 2.27.0 and newer.", - MarkdownDescription: "Per-scrape limit on length of labels name that will be accepted for a sample.Only valid in Prometheus versions 2.27.0 and newer.", - Required: false, - Optional: true, - Computed: false, - }, - - "label_value_length_limit": schema.Int64Attribute{ - Description: "Per-scrape limit on length of labels value that will be accepted for a sample.Only valid in Prometheus versions 2.27.0 and newer.", - MarkdownDescription: "Per-scrape limit on length of labels value that will be accepted for a sample.Only valid in Prometheus versions 2.27.0 and newer.", - Required: false, - Optional: true, - Computed: false, - }, - - "light_sail_sd_configs": schema.ListNestedAttribute{ - Description: "LightsailSDConfigs defines a list of Lightsail service discovery configurations.", - MarkdownDescription: "LightsailSDConfigs defines a list of Lightsail service discovery configurations.", + "linode_sd_configs": schema.ListNestedAttribute{ + Description: "LinodeSDConfigs defines a list of Linode service discovery configurations.", + MarkdownDescription: "LinodeSDConfigs defines a list of Linode service discovery configurations.", NestedObject: schema.NestedAttributeObject{ Attributes: map[string]schema.Attribute{ - "access_key": schema.SingleNestedAttribute{ - Description: "AccessKey is the AWS API key.", - MarkdownDescription: "AccessKey is the AWS API key.", - Attributes: map[string]schema.Attribute{ - "key": schema.StringAttribute{ - Description: "The key of the secret to select from. Must be a valid secret key.", - MarkdownDescription: "The key of the secret to select from. Must be a valid secret key.", - Required: true, - Optional: false, - Computed: false, - }, - - "name": schema.StringAttribute{ - Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", - MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", - Required: false, - Optional: true, - Computed: false, - }, - - "optional": schema.BoolAttribute{ - Description: "Specify whether the Secret or its key must be defined", - MarkdownDescription: "Specify whether the Secret or its key must be defined", - Required: false, - Optional: true, - Computed: false, - }, - }, - Required: false, - Optional: true, - Computed: false, - }, - "authorization": schema.SingleNestedAttribute{ - Description: "Optional 'authorization' HTTP header configuration.Cannot be set at the same time as 'basicAuth', or 'oauth2'.", - MarkdownDescription: "Optional 'authorization' HTTP header configuration.Cannot be set at the same time as 'basicAuth', or 'oauth2'.", + Description: "Authorization header configuration.", + MarkdownDescription: "Authorization header configuration.", Attributes: map[string]schema.Attribute{ "credentials": schema.SingleNestedAttribute{ - Description: "Selects a key of a Secret in the namespace that contains the credentials for authentication.", - MarkdownDescription: "Selects a key of a Secret in the namespace that contains the credentials for authentication.", - Attributes: map[string]schema.Attribute{ - "key": schema.StringAttribute{ - Description: "The key of the secret to select from. Must be a valid secret key.", - MarkdownDescription: "The key of the secret to select from. Must be a valid secret key.", - Required: true, - Optional: false, - Computed: false, - }, - - "name": schema.StringAttribute{ - Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", - MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", - Required: false, - Optional: true, - Computed: false, - }, - - "optional": schema.BoolAttribute{ - Description: "Specify whether the Secret or its key must be defined", - MarkdownDescription: "Specify whether the Secret or its key must be defined", - Required: false, - Optional: true, - Computed: false, - }, - }, - Required: false, - Optional: true, - Computed: false, - }, - - "type": schema.StringAttribute{ - Description: "Defines the authentication type. The value is case-insensitive.'Basic' is not a supported value.Default: 'Bearer'", - MarkdownDescription: "Defines the authentication type. The value is case-insensitive.'Basic' is not a supported value.Default: 'Bearer'", - Required: false, - Optional: true, - Computed: false, - }, - }, - Required: false, - Optional: true, - Computed: false, - }, - - "basic_auth": schema.SingleNestedAttribute{ - Description: "Optional HTTP basic authentication information.Cannot be set at the same time as 'authorization', or 'oauth2'.", - MarkdownDescription: "Optional HTTP basic authentication information.Cannot be set at the same time as 'authorization', or 'oauth2'.", - Attributes: map[string]schema.Attribute{ - "password": schema.SingleNestedAttribute{ - Description: "'password' specifies a key of a Secret containing the password forauthentication.", - MarkdownDescription: "'password' specifies a key of a Secret containing the password forauthentication.", - Attributes: map[string]schema.Attribute{ - "key": schema.StringAttribute{ - Description: "The key of the secret to select from. Must be a valid secret key.", - MarkdownDescription: "The key of the secret to select from. Must be a valid secret key.", - Required: true, - Optional: false, - Computed: false, - }, - - "name": schema.StringAttribute{ - Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", - MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", - Required: false, - Optional: true, - Computed: false, - }, - - "optional": schema.BoolAttribute{ - Description: "Specify whether the Secret or its key must be defined", - MarkdownDescription: "Specify whether the Secret or its key must be defined", - Required: false, - Optional: true, - Computed: false, - }, - }, - Required: false, - Optional: true, - Computed: false, - }, - - "username": schema.SingleNestedAttribute{ - Description: "'username' specifies a key of a Secret containing the username forauthentication.", - MarkdownDescription: "'username' specifies a key of a Secret containing the username forauthentication.", + Description: "Selects a key of a Secret in the namespace that contains the credentials for authentication.", + MarkdownDescription: "Selects a key of a Secret in the namespace that contains the credentials for authentication.", Attributes: map[string]schema.Attribute{ "key": schema.StringAttribute{ Description: "The key of the secret to select from. Must be a valid secret key.", @@ -12046,6 +12426,14 @@ func (r *MonitoringCoreosComScrapeConfigV1Alpha1Manifest) Schema(_ context.Conte Optional: true, Computed: false, }, + + "type": schema.StringAttribute{ + Description: "Defines the authentication type. The value is case-insensitive.'Basic' is not a supported value.Default: 'Bearer'", + MarkdownDescription: "Defines the authentication type. The value is case-insensitive.'Basic' is not a supported value.Default: 'Bearer'", + Required: false, + Optional: true, + Computed: false, + }, }, Required: false, Optional: true, @@ -12053,27 +12441,16 @@ func (r *MonitoringCoreosComScrapeConfigV1Alpha1Manifest) Schema(_ context.Conte }, "enable_http2": schema.BoolAttribute{ - Description: "Configure whether to enable HTTP2.", - MarkdownDescription: "Configure whether to enable HTTP2.", - Required: false, - Optional: true, - Computed: false, - }, - - "endpoint": schema.StringAttribute{ - Description: "Custom endpoint to be used.", - MarkdownDescription: "Custom endpoint to be used.", + Description: "Whether to enable HTTP2.", + MarkdownDescription: "Whether to enable HTTP2.", Required: false, Optional: true, Computed: false, - Validators: []validator.String{ - stringvalidator.LengthAtLeast(1), - }, }, "follow_redirects": schema.BoolAttribute{ - Description: "Configure whether the HTTP requests should follow HTTP 3xx redirects.", - MarkdownDescription: "Configure whether the HTTP requests should follow HTTP 3xx redirects.", + Description: "Configure whether HTTP requests follow HTTP 3xx redirects.", + MarkdownDescription: "Configure whether HTTP requests follow HTTP 3xx redirects.", Required: false, Optional: true, Computed: false, @@ -12088,8 +12465,8 @@ func (r *MonitoringCoreosComScrapeConfigV1Alpha1Manifest) Schema(_ context.Conte }, "oauth2": schema.SingleNestedAttribute{ - Description: "Optional OAuth2.0 configuration.Cannot be set at the same time as 'basicAuth', or 'authorization'.", - MarkdownDescription: "Optional OAuth2.0 configuration.Cannot be set at the same time as 'basicAuth', or 'authorization'.", + Description: "Optional OAuth 2.0 configuration.Cannot be used at the same time as 'authorization'.", + MarkdownDescription: "Optional OAuth 2.0 configuration.Cannot be used at the same time as 'authorization'.", Attributes: map[string]schema.Attribute{ "client_id": schema.SingleNestedAttribute{ Description: "'clientId' specifies a key of a Secret or ConfigMap containing theOAuth2 client's ID.", @@ -12500,8 +12877,8 @@ func (r *MonitoringCoreosComScrapeConfigV1Alpha1Manifest) Schema(_ context.Conte }, "port": schema.Int64Attribute{ - Description: "Port to scrape the metrics from.If using the public IP address, this must instead be specified in the relabeling rule.", - MarkdownDescription: "Port to scrape the metrics from.If using the public IP address, this must instead be specified in the relabeling rule.", + Description: "Default port to scrape metrics from.", + MarkdownDescription: "Default port to scrape metrics from.", Required: false, Optional: true, Computed: false, @@ -12540,8 +12917,8 @@ func (r *MonitoringCoreosComScrapeConfigV1Alpha1Manifest) Schema(_ context.Conte }, "refresh_interval": schema.StringAttribute{ - Description: "Refresh interval to re-read the list of instances.", - MarkdownDescription: "Refresh interval to re-read the list of instances.", + Description: "Time after which the linode instances are refreshed.", + MarkdownDescription: "Time after which the linode instances are refreshed.", Required: false, Optional: true, Computed: false, @@ -12551,8 +12928,8 @@ func (r *MonitoringCoreosComScrapeConfigV1Alpha1Manifest) Schema(_ context.Conte }, "region": schema.StringAttribute{ - Description: "The AWS region.", - MarkdownDescription: "The AWS region.", + Description: "Optional region to filter on.", + MarkdownDescription: "Optional region to filter on.", Required: false, Optional: true, Computed: false, @@ -12561,50 +12938,20 @@ func (r *MonitoringCoreosComScrapeConfigV1Alpha1Manifest) Schema(_ context.Conte }, }, - "role_arn": schema.StringAttribute{ - Description: "AWS Role ARN, an alternative to using AWS API keys.", - MarkdownDescription: "AWS Role ARN, an alternative to using AWS API keys.", + "tag_separator": schema.StringAttribute{ + Description: "The string by which Linode Instance tags are joined into the tag label.", + MarkdownDescription: "The string by which Linode Instance tags are joined into the tag label.", Required: false, Optional: true, Computed: false, - }, - - "secret_key": schema.SingleNestedAttribute{ - Description: "SecretKey is the AWS API secret.", - MarkdownDescription: "SecretKey is the AWS API secret.", - Attributes: map[string]schema.Attribute{ - "key": schema.StringAttribute{ - Description: "The key of the secret to select from. Must be a valid secret key.", - MarkdownDescription: "The key of the secret to select from. Must be a valid secret key.", - Required: true, - Optional: false, - Computed: false, - }, - - "name": schema.StringAttribute{ - Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", - MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", - Required: false, - Optional: true, - Computed: false, - }, - - "optional": schema.BoolAttribute{ - Description: "Specify whether the Secret or its key must be defined", - MarkdownDescription: "Specify whether the Secret or its key must be defined", - Required: false, - Optional: true, - Computed: false, - }, + Validators: []validator.String{ + stringvalidator.LengthAtLeast(1), }, - Required: false, - Optional: true, - Computed: false, }, "tls_config": schema.SingleNestedAttribute{ - Description: "TLS configuration to connect to the Puppet DB.", - MarkdownDescription: "TLS configuration to connect to the Puppet DB.", + Description: "TLS configuration applying to the target HTTP endpoint.", + MarkdownDescription: "TLS configuration applying to the target HTTP endpoint.", Attributes: map[string]schema.Attribute{ "ca": schema.SingleNestedAttribute{ Description: "Certificate authority used when verifying server certificates.", @@ -12756,17 +13103,198 @@ func (r *MonitoringCoreosComScrapeConfigV1Alpha1Manifest) Schema(_ context.Conte Computed: false, }, - "insecure_skip_verify": schema.BoolAttribute{ - Description: "Disable target certificate validation.", - MarkdownDescription: "Disable target certificate validation.", - Required: false, - Optional: true, - Computed: false, - }, + "insecure_skip_verify": schema.BoolAttribute{ + Description: "Disable target certificate validation.", + MarkdownDescription: "Disable target certificate validation.", + Required: false, + Optional: true, + Computed: false, + }, + + "key_secret": schema.SingleNestedAttribute{ + Description: "Secret containing the client key file for the targets.", + MarkdownDescription: "Secret containing the client key file for the targets.", + Attributes: map[string]schema.Attribute{ + "key": schema.StringAttribute{ + Description: "The key of the secret to select from. Must be a valid secret key.", + MarkdownDescription: "The key of the secret to select from. Must be a valid secret key.", + Required: true, + Optional: false, + Computed: false, + }, + + "name": schema.StringAttribute{ + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + Required: false, + Optional: true, + Computed: false, + }, + + "optional": schema.BoolAttribute{ + Description: "Specify whether the Secret or its key must be defined", + MarkdownDescription: "Specify whether the Secret or its key must be defined", + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + + "max_version": schema.StringAttribute{ + Description: "Maximum acceptable TLS version.It requires Prometheus >= v2.41.0.", + MarkdownDescription: "Maximum acceptable TLS version.It requires Prometheus >= v2.41.0.", + Required: false, + Optional: true, + Computed: false, + Validators: []validator.String{ + stringvalidator.OneOf("TLS10", "TLS11", "TLS12", "TLS13"), + }, + }, + + "min_version": schema.StringAttribute{ + Description: "Minimum acceptable TLS version.It requires Prometheus >= v2.35.0.", + MarkdownDescription: "Minimum acceptable TLS version.It requires Prometheus >= v2.35.0.", + Required: false, + Optional: true, + Computed: false, + Validators: []validator.String{ + stringvalidator.OneOf("TLS10", "TLS11", "TLS12", "TLS13"), + }, + }, + + "server_name": schema.StringAttribute{ + Description: "Used to verify the hostname for the targets.", + MarkdownDescription: "Used to verify the hostname for the targets.", + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + + "metric_relabelings": schema.ListNestedAttribute{ + Description: "MetricRelabelConfigs to apply to samples before ingestion.", + MarkdownDescription: "MetricRelabelConfigs to apply to samples before ingestion.", + NestedObject: schema.NestedAttributeObject{ + Attributes: map[string]schema.Attribute{ + "action": schema.StringAttribute{ + Description: "Action to perform based on the regex matching.'Uppercase' and 'Lowercase' actions require Prometheus >= v2.36.0.'DropEqual' and 'KeepEqual' actions require Prometheus >= v2.41.0.Default: 'Replace'", + MarkdownDescription: "Action to perform based on the regex matching.'Uppercase' and 'Lowercase' actions require Prometheus >= v2.36.0.'DropEqual' and 'KeepEqual' actions require Prometheus >= v2.41.0.Default: 'Replace'", + Required: false, + Optional: true, + Computed: false, + Validators: []validator.String{ + stringvalidator.OneOf("replace", "Replace", "keep", "Keep", "drop", "Drop", "hashmod", "HashMod", "labelmap", "LabelMap", "labeldrop", "LabelDrop", "labelkeep", "LabelKeep", "lowercase", "Lowercase", "uppercase", "Uppercase", "keepequal", "KeepEqual", "dropequal", "DropEqual"), + }, + }, + + "modulus": schema.Int64Attribute{ + Description: "Modulus to take of the hash of the source label values.Only applicable when the action is 'HashMod'.", + MarkdownDescription: "Modulus to take of the hash of the source label values.Only applicable when the action is 'HashMod'.", + Required: false, + Optional: true, + Computed: false, + }, + + "regex": schema.StringAttribute{ + Description: "Regular expression against which the extracted value is matched.", + MarkdownDescription: "Regular expression against which the extracted value is matched.", + Required: false, + Optional: true, + Computed: false, + }, + + "replacement": schema.StringAttribute{ + Description: "Replacement value against which a Replace action is performed if theregular expression matches.Regex capture groups are available.", + MarkdownDescription: "Replacement value against which a Replace action is performed if theregular expression matches.Regex capture groups are available.", + Required: false, + Optional: true, + Computed: false, + }, + + "separator": schema.StringAttribute{ + Description: "Separator is the string between concatenated SourceLabels.", + MarkdownDescription: "Separator is the string between concatenated SourceLabels.", + Required: false, + Optional: true, + Computed: false, + }, + + "source_labels": schema.ListAttribute{ + Description: "The source labels select values from existing labels. Their content isconcatenated using the configured Separator and matched against theconfigured regular expression.", + MarkdownDescription: "The source labels select values from existing labels. Their content isconcatenated using the configured Separator and matched against theconfigured regular expression.", + ElementType: types.StringType, + Required: false, + Optional: true, + Computed: false, + }, + + "target_label": schema.StringAttribute{ + Description: "Label to which the resulting string is written in a replacement.It is mandatory for 'Replace', 'HashMod', 'Lowercase', 'Uppercase','KeepEqual' and 'DropEqual' actions.Regex capture groups are available.", + MarkdownDescription: "Label to which the resulting string is written in a replacement.It is mandatory for 'Replace', 'HashMod', 'Lowercase', 'Uppercase','KeepEqual' and 'DropEqual' actions.Regex capture groups are available.", + Required: false, + Optional: true, + Computed: false, + }, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + + "metrics_path": schema.StringAttribute{ + Description: "MetricsPath HTTP path to scrape for metrics. If empty, Prometheus uses the default value (e.g. /metrics).", + MarkdownDescription: "MetricsPath HTTP path to scrape for metrics. If empty, Prometheus uses the default value (e.g. /metrics).", + Required: false, + Optional: true, + Computed: false, + Validators: []validator.String{ + stringvalidator.LengthAtLeast(1), + }, + }, + + "no_proxy": schema.StringAttribute{ + Description: "'noProxy' is a comma-separated string that can contain IPs, CIDR notation, domain namesthat should be excluded from proxying. IP and domain names cancontain port numbers.It requires Prometheus >= v2.43.0.", + MarkdownDescription: "'noProxy' is a comma-separated string that can contain IPs, CIDR notation, domain namesthat should be excluded from proxying. IP and domain names cancontain port numbers.It requires Prometheus >= v2.43.0.", + Required: false, + Optional: true, + Computed: false, + }, + + "nomad_sd_configs": schema.ListNestedAttribute{ + Description: "NomadSDConfigs defines a list of Nomad service discovery configurations.", + MarkdownDescription: "NomadSDConfigs defines a list of Nomad service discovery configurations.", + NestedObject: schema.NestedAttributeObject{ + Attributes: map[string]schema.Attribute{ + "allow_stale": schema.BoolAttribute{ + Description: "The information to access the Nomad API. It is to be definedas the Nomad documentation requires.", + MarkdownDescription: "The information to access the Nomad API. It is to be definedas the Nomad documentation requires.", + Required: false, + Optional: true, + Computed: false, + }, - "key_secret": schema.SingleNestedAttribute{ - Description: "Secret containing the client key file for the targets.", - MarkdownDescription: "Secret containing the client key file for the targets.", + "authorization": schema.SingleNestedAttribute{ + Description: "Authorization header to use on every scrape request.", + MarkdownDescription: "Authorization header to use on every scrape request.", + Attributes: map[string]schema.Attribute{ + "credentials": schema.SingleNestedAttribute{ + Description: "Selects a key of a Secret in the namespace that contains the credentials for authentication.", + MarkdownDescription: "Selects a key of a Secret in the namespace that contains the credentials for authentication.", Attributes: map[string]schema.Attribute{ "key": schema.StringAttribute{ Description: "The key of the secret to select from. Must be a valid secret key.", @@ -12797,31 +13325,9 @@ func (r *MonitoringCoreosComScrapeConfigV1Alpha1Manifest) Schema(_ context.Conte Computed: false, }, - "max_version": schema.StringAttribute{ - Description: "Maximum acceptable TLS version.It requires Prometheus >= v2.41.0.", - MarkdownDescription: "Maximum acceptable TLS version.It requires Prometheus >= v2.41.0.", - Required: false, - Optional: true, - Computed: false, - Validators: []validator.String{ - stringvalidator.OneOf("TLS10", "TLS11", "TLS12", "TLS13"), - }, - }, - - "min_version": schema.StringAttribute{ - Description: "Minimum acceptable TLS version.It requires Prometheus >= v2.35.0.", - MarkdownDescription: "Minimum acceptable TLS version.It requires Prometheus >= v2.35.0.", - Required: false, - Optional: true, - Computed: false, - Validators: []validator.String{ - stringvalidator.OneOf("TLS10", "TLS11", "TLS12", "TLS13"), - }, - }, - - "server_name": schema.StringAttribute{ - Description: "Used to verify the hostname for the targets.", - MarkdownDescription: "Used to verify the hostname for the targets.", + "type": schema.StringAttribute{ + Description: "Defines the authentication type. The value is case-insensitive.'Basic' is not a supported value.Default: 'Bearer'", + MarkdownDescription: "Defines the authentication type. The value is case-insensitive.'Basic' is not a supported value.Default: 'Bearer'", Required: false, Optional: true, Computed: false, @@ -12831,25 +13337,14 @@ func (r *MonitoringCoreosComScrapeConfigV1Alpha1Manifest) Schema(_ context.Conte Optional: true, Computed: false, }, - }, - }, - Required: false, - Optional: true, - Computed: false, - }, - "linode_sd_configs": schema.ListNestedAttribute{ - Description: "LinodeSDConfigs defines a list of Linode service discovery configurations.", - MarkdownDescription: "LinodeSDConfigs defines a list of Linode service discovery configurations.", - NestedObject: schema.NestedAttributeObject{ - Attributes: map[string]schema.Attribute{ - "authorization": schema.SingleNestedAttribute{ - Description: "Authorization header configuration.", - MarkdownDescription: "Authorization header configuration.", + "basic_auth": schema.SingleNestedAttribute{ + Description: "BasicAuth information to use on every scrape request.", + MarkdownDescription: "BasicAuth information to use on every scrape request.", Attributes: map[string]schema.Attribute{ - "credentials": schema.SingleNestedAttribute{ - Description: "Selects a key of a Secret in the namespace that contains the credentials for authentication.", - MarkdownDescription: "Selects a key of a Secret in the namespace that contains the credentials for authentication.", + "password": schema.SingleNestedAttribute{ + Description: "'password' specifies a key of a Secret containing the password forauthentication.", + MarkdownDescription: "'password' specifies a key of a Secret containing the password forauthentication.", Attributes: map[string]schema.Attribute{ "key": schema.StringAttribute{ Description: "The key of the secret to select from. Must be a valid secret key.", @@ -12880,12 +13375,37 @@ func (r *MonitoringCoreosComScrapeConfigV1Alpha1Manifest) Schema(_ context.Conte Computed: false, }, - "type": schema.StringAttribute{ - Description: "Defines the authentication type. The value is case-insensitive.'Basic' is not a supported value.Default: 'Bearer'", - MarkdownDescription: "Defines the authentication type. The value is case-insensitive.'Basic' is not a supported value.Default: 'Bearer'", - Required: false, - Optional: true, - Computed: false, + "username": schema.SingleNestedAttribute{ + Description: "'username' specifies a key of a Secret containing the username forauthentication.", + MarkdownDescription: "'username' specifies a key of a Secret containing the username forauthentication.", + Attributes: map[string]schema.Attribute{ + "key": schema.StringAttribute{ + Description: "The key of the secret to select from. Must be a valid secret key.", + MarkdownDescription: "The key of the secret to select from. Must be a valid secret key.", + Required: true, + Optional: false, + Computed: false, + }, + + "name": schema.StringAttribute{ + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + Required: false, + Optional: true, + Computed: false, + }, + + "optional": schema.BoolAttribute{ + Description: "Specify whether the Secret or its key must be defined", + MarkdownDescription: "Specify whether the Secret or its key must be defined", + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, }, }, Required: false, @@ -12909,6 +13429,14 @@ func (r *MonitoringCoreosComScrapeConfigV1Alpha1Manifest) Schema(_ context.Conte Computed: false, }, + "namespace": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: false, + Optional: true, + Computed: false, + }, + "no_proxy": schema.StringAttribute{ Description: "'noProxy' is a comma-separated string that can contain IPs, CIDR notation, domain namesthat should be excluded from proxying. IP and domain names cancontain port numbers.It requires Prometheus >= v2.43.0.", MarkdownDescription: "'noProxy' is a comma-separated string that can contain IPs, CIDR notation, domain namesthat should be excluded from proxying. IP and domain names cancontain port numbers.It requires Prometheus >= v2.43.0.", @@ -12918,8 +13446,8 @@ func (r *MonitoringCoreosComScrapeConfigV1Alpha1Manifest) Schema(_ context.Conte }, "oauth2": schema.SingleNestedAttribute{ - Description: "Optional OAuth 2.0 configuration.Cannot be used at the same time as 'authorization'.", - MarkdownDescription: "Optional OAuth 2.0 configuration.Cannot be used at the same time as 'authorization'.", + Description: "Optional OAuth 2.0 configuration.Cannot be set at the same time as 'authorization' or 'basic_auth'.", + MarkdownDescription: "Optional OAuth 2.0 configuration.Cannot be set at the same time as 'authorization' or 'basic_auth'.", Attributes: map[string]schema.Attribute{ "client_id": schema.SingleNestedAttribute{ Description: "'clientId' specifies a key of a Secret or ConfigMap containing theOAuth2 client's ID.", @@ -13329,18 +13857,6 @@ func (r *MonitoringCoreosComScrapeConfigV1Alpha1Manifest) Schema(_ context.Conte Computed: false, }, - "port": schema.Int64Attribute{ - Description: "Default port to scrape metrics from.", - MarkdownDescription: "Default port to scrape metrics from.", - Required: false, - Optional: true, - Computed: false, - Validators: []validator.Int64{ - int64validator.AtLeast(0), - int64validator.AtMost(65535), - }, - }, - "proxy_connect_header": schema.MapAttribute{ Description: "ProxyConnectHeader optionally specifies headers to send toproxies during CONNECT requests.It requires Prometheus >= v2.43.0.", MarkdownDescription: "ProxyConnectHeader optionally specifies headers to send toproxies during CONNECT requests.It requires Prometheus >= v2.43.0.", @@ -13370,8 +13886,8 @@ func (r *MonitoringCoreosComScrapeConfigV1Alpha1Manifest) Schema(_ context.Conte }, "refresh_interval": schema.StringAttribute{ - Description: "Time after which the linode instances are refreshed.", - MarkdownDescription: "Time after which the linode instances are refreshed.", + Description: "Duration is a valid time duration that can be parsed by Prometheus model.ParseDuration() function.Supported units: y, w, d, h, m, s, msExamples: '30s', '1m', '1h20m15s', '15d'", + MarkdownDescription: "Duration is a valid time duration that can be parsed by Prometheus model.ParseDuration() function.Supported units: y, w, d, h, m, s, msExamples: '30s', '1m', '1h20m15s', '15d'", Required: false, Optional: true, Computed: false, @@ -13381,25 +13897,30 @@ func (r *MonitoringCoreosComScrapeConfigV1Alpha1Manifest) Schema(_ context.Conte }, "region": schema.StringAttribute{ - Description: "Optional region to filter on.", - MarkdownDescription: "Optional region to filter on.", + Description: "", + MarkdownDescription: "", Required: false, Optional: true, Computed: false, + }, + + "server": schema.StringAttribute{ + Description: "", + MarkdownDescription: "", + Required: true, + Optional: false, + Computed: false, Validators: []validator.String{ stringvalidator.LengthAtLeast(1), }, }, "tag_separator": schema.StringAttribute{ - Description: "The string by which Linode Instance tags are joined into the tag label.", - MarkdownDescription: "The string by which Linode Instance tags are joined into the tag label.", + Description: "", + MarkdownDescription: "", Required: false, Optional: true, Computed: false, - Validators: []validator.String{ - stringvalidator.LengthAtLeast(1), - }, }, "tls_config": schema.SingleNestedAttribute{ @@ -13638,96 +14159,9 @@ func (r *MonitoringCoreosComScrapeConfigV1Alpha1Manifest) Schema(_ context.Conte Computed: false, }, - "metric_relabelings": schema.ListNestedAttribute{ - Description: "MetricRelabelConfigs to apply to samples before ingestion.", - MarkdownDescription: "MetricRelabelConfigs to apply to samples before ingestion.", - NestedObject: schema.NestedAttributeObject{ - Attributes: map[string]schema.Attribute{ - "action": schema.StringAttribute{ - Description: "Action to perform based on the regex matching.'Uppercase' and 'Lowercase' actions require Prometheus >= v2.36.0.'DropEqual' and 'KeepEqual' actions require Prometheus >= v2.41.0.Default: 'Replace'", - MarkdownDescription: "Action to perform based on the regex matching.'Uppercase' and 'Lowercase' actions require Prometheus >= v2.36.0.'DropEqual' and 'KeepEqual' actions require Prometheus >= v2.41.0.Default: 'Replace'", - Required: false, - Optional: true, - Computed: false, - Validators: []validator.String{ - stringvalidator.OneOf("replace", "Replace", "keep", "Keep", "drop", "Drop", "hashmod", "HashMod", "labelmap", "LabelMap", "labeldrop", "LabelDrop", "labelkeep", "LabelKeep", "lowercase", "Lowercase", "uppercase", "Uppercase", "keepequal", "KeepEqual", "dropequal", "DropEqual"), - }, - }, - - "modulus": schema.Int64Attribute{ - Description: "Modulus to take of the hash of the source label values.Only applicable when the action is 'HashMod'.", - MarkdownDescription: "Modulus to take of the hash of the source label values.Only applicable when the action is 'HashMod'.", - Required: false, - Optional: true, - Computed: false, - }, - - "regex": schema.StringAttribute{ - Description: "Regular expression against which the extracted value is matched.", - MarkdownDescription: "Regular expression against which the extracted value is matched.", - Required: false, - Optional: true, - Computed: false, - }, - - "replacement": schema.StringAttribute{ - Description: "Replacement value against which a Replace action is performed if theregular expression matches.Regex capture groups are available.", - MarkdownDescription: "Replacement value against which a Replace action is performed if theregular expression matches.Regex capture groups are available.", - Required: false, - Optional: true, - Computed: false, - }, - - "separator": schema.StringAttribute{ - Description: "Separator is the string between concatenated SourceLabels.", - MarkdownDescription: "Separator is the string between concatenated SourceLabels.", - Required: false, - Optional: true, - Computed: false, - }, - - "source_labels": schema.ListAttribute{ - Description: "The source labels select values from existing labels. Their content isconcatenated using the configured Separator and matched against theconfigured regular expression.", - MarkdownDescription: "The source labels select values from existing labels. Their content isconcatenated using the configured Separator and matched against theconfigured regular expression.", - ElementType: types.StringType, - Required: false, - Optional: true, - Computed: false, - }, - - "target_label": schema.StringAttribute{ - Description: "Label to which the resulting string is written in a replacement.It is mandatory for 'Replace', 'HashMod', 'Lowercase', 'Uppercase','KeepEqual' and 'DropEqual' actions.Regex capture groups are available.", - MarkdownDescription: "Label to which the resulting string is written in a replacement.It is mandatory for 'Replace', 'HashMod', 'Lowercase', 'Uppercase','KeepEqual' and 'DropEqual' actions.Regex capture groups are available.", - Required: false, - Optional: true, - Computed: false, - }, - }, - }, - Required: false, - Optional: true, - Computed: false, - }, - - "metrics_path": schema.StringAttribute{ - Description: "MetricsPath HTTP path to scrape for metrics. If empty, Prometheus uses the default value (e.g. /metrics).", - MarkdownDescription: "MetricsPath HTTP path to scrape for metrics. If empty, Prometheus uses the default value (e.g. /metrics).", - Required: false, - Optional: true, - Computed: false, - }, - - "no_proxy": schema.StringAttribute{ - Description: "'noProxy' is a comma-separated string that can contain IPs, CIDR notation, domain namesthat should be excluded from proxying. IP and domain names cancontain port numbers.It requires Prometheus >= v2.43.0.", - MarkdownDescription: "'noProxy' is a comma-separated string that can contain IPs, CIDR notation, domain namesthat should be excluded from proxying. IP and domain names cancontain port numbers.It requires Prometheus >= v2.43.0.", - Required: false, - Optional: true, - Computed: false, - }, - "oauth2": schema.SingleNestedAttribute{ - Description: "OAuth2 client credentials used to fetch a token for the targets.", - MarkdownDescription: "OAuth2 client credentials used to fetch a token for the targets.", + Description: "OAuth2 configuration to use on every scrape request.", + MarkdownDescription: "OAuth2 configuration to use on every scrape request.", Attributes: map[string]schema.Attribute{ "client_id": schema.SingleNestedAttribute{ Description: "'clientId' specifies a key of a Secret or ConfigMap containing theOAuth2 client's ID.", diff --git a/internal/provider/networkfirewall_services_k8s_aws_v1alpha1/networkfirewall_services_k8s_aws_rule_group_v1alpha1_manifest.go b/internal/provider/networkfirewall_services_k8s_aws_v1alpha1/networkfirewall_services_k8s_aws_rule_group_v1alpha1_manifest.go index 082a02595..05f38c5bb 100644 --- a/internal/provider/networkfirewall_services_k8s_aws_v1alpha1/networkfirewall_services_k8s_aws_rule_group_v1alpha1_manifest.go +++ b/internal/provider/networkfirewall_services_k8s_aws_v1alpha1/networkfirewall_services_k8s_aws_rule_group_v1alpha1_manifest.go @@ -53,14 +53,14 @@ type NetworkfirewallServicesK8SAwsRuleGroupV1Alpha1ManifestData struct { } `tfsdk:"encryption_configuration" json:"encryptionConfiguration,omitempty"` RuleGroup *struct { ReferenceSets *struct { - IPSetReferences *struct { + IpSetReferences *struct { ReferenceARN *string `tfsdk:"reference_arn" json:"referenceARN,omitempty"` - } `tfsdk:"i_p_set_references" json:"iPSetReferences,omitempty"` + } `tfsdk:"ip_set_references" json:"ipSetReferences,omitempty"` } `tfsdk:"reference_sets" json:"referenceSets,omitempty"` RuleVariables *struct { - IPSets *struct { + IpSets *struct { Definition *[]string `tfsdk:"definition" json:"definition,omitempty"` - } `tfsdk:"i_p_sets" json:"iPSets,omitempty"` + } `tfsdk:"ip_sets" json:"ipSets,omitempty"` PortSets *struct { Definition *[]string `tfsdk:"definition" json:"definition,omitempty"` } `tfsdk:"port_sets" json:"portSets,omitempty"` @@ -287,7 +287,7 @@ func (r *NetworkfirewallServicesK8SAwsRuleGroupV1Alpha1Manifest) Schema(_ contex Description: "Contains a set of IP set references.", MarkdownDescription: "Contains a set of IP set references.", Attributes: map[string]schema.Attribute{ - "i_p_set_references": schema.SingleNestedAttribute{ + "ip_set_references": schema.SingleNestedAttribute{ Description: "", MarkdownDescription: "", Attributes: map[string]schema.Attribute{ @@ -313,7 +313,7 @@ func (r *NetworkfirewallServicesK8SAwsRuleGroupV1Alpha1Manifest) Schema(_ contex Description: "Settings that are available for use in the rules in the RuleGroup where thisis defined.", MarkdownDescription: "Settings that are available for use in the rules in the RuleGroup where thisis defined.", Attributes: map[string]schema.Attribute{ - "i_p_sets": schema.SingleNestedAttribute{ + "ip_sets": schema.SingleNestedAttribute{ Description: "", MarkdownDescription: "", Attributes: map[string]schema.Attribute{ diff --git a/internal/provider/pgv2_percona_com_v2/pgv2_percona_com_percona_pg_cluster_v2_manifest.go b/internal/provider/pgv2_percona_com_v2/pgv2_percona_com_percona_pg_cluster_v2_manifest.go index c6ad40cce..19a057f2f 100644 --- a/internal/provider/pgv2_percona_com_v2/pgv2_percona_com_percona_pg_cluster_v2_manifest.go +++ b/internal/provider/pgv2_percona_com_v2/pgv2_percona_com_percona_pg_cluster_v2_manifest.go @@ -105,7 +105,8 @@ type Pgv2PerconaComPerconaPgclusterV2ManifestData struct { Pgbackrest *struct { Resources *struct { Claims *[]struct { - Name *string `tfsdk:"name" json:"name,omitempty"` + Name *string `tfsdk:"name" json:"name,omitempty"` + Request *string `tfsdk:"request" json:"request,omitempty"` } `tfsdk:"claims" json:"claims,omitempty"` Limits *map[string]string `tfsdk:"limits" json:"limits,omitempty"` Requests *map[string]string `tfsdk:"requests" json:"requests,omitempty"` @@ -114,7 +115,8 @@ type Pgv2PerconaComPerconaPgclusterV2ManifestData struct { PgbackrestConfig *struct { Resources *struct { Claims *[]struct { - Name *string `tfsdk:"name" json:"name,omitempty"` + Name *string `tfsdk:"name" json:"name,omitempty"` + Request *string `tfsdk:"request" json:"request,omitempty"` } `tfsdk:"claims" json:"claims,omitempty"` Limits *map[string]string `tfsdk:"limits" json:"limits,omitempty"` Requests *map[string]string `tfsdk:"requests" json:"requests,omitempty"` @@ -258,7 +260,8 @@ type Pgv2PerconaComPerconaPgclusterV2ManifestData struct { PriorityClassName *string `tfsdk:"priority_class_name" json:"priorityClassName,omitempty"` Resources *struct { Claims *[]struct { - Name *string `tfsdk:"name" json:"name,omitempty"` + Name *string `tfsdk:"name" json:"name,omitempty"` + Request *string `tfsdk:"request" json:"request,omitempty"` } `tfsdk:"claims" json:"claims,omitempty"` Limits *map[string]string `tfsdk:"limits" json:"limits,omitempty"` Requests *map[string]string `tfsdk:"requests" json:"requests,omitempty"` @@ -283,8 +286,9 @@ type Pgv2PerconaComPerconaPgclusterV2ManifestData struct { LocalhostProfile *string `tfsdk:"localhost_profile" json:"localhostProfile,omitempty"` Type *string `tfsdk:"type" json:"type,omitempty"` } `tfsdk:"seccomp_profile" json:"seccompProfile,omitempty"` - SupplementalGroups *[]string `tfsdk:"supplemental_groups" json:"supplementalGroups,omitempty"` - Sysctls *[]struct { + SupplementalGroups *[]string `tfsdk:"supplemental_groups" json:"supplementalGroups,omitempty"` + SupplementalGroupsPolicy *string `tfsdk:"supplemental_groups_policy" json:"supplementalGroupsPolicy,omitempty"` + Sysctls *[]struct { Name *string `tfsdk:"name" json:"name,omitempty"` Value *string `tfsdk:"value" json:"value,omitempty"` } `tfsdk:"sysctls" json:"sysctls,omitempty"` @@ -447,7 +451,8 @@ type Pgv2PerconaComPerconaPgclusterV2ManifestData struct { PriorityClassName *string `tfsdk:"priority_class_name" json:"priorityClassName,omitempty"` Resources *struct { Claims *[]struct { - Name *string `tfsdk:"name" json:"name,omitempty"` + Name *string `tfsdk:"name" json:"name,omitempty"` + Request *string `tfsdk:"request" json:"request,omitempty"` } `tfsdk:"claims" json:"claims,omitempty"` Limits *map[string]string `tfsdk:"limits" json:"limits,omitempty"` Requests *map[string]string `tfsdk:"requests" json:"requests,omitempty"` @@ -472,8 +477,9 @@ type Pgv2PerconaComPerconaPgclusterV2ManifestData struct { LocalhostProfile *string `tfsdk:"localhost_profile" json:"localhostProfile,omitempty"` Type *string `tfsdk:"type" json:"type,omitempty"` } `tfsdk:"seccomp_profile" json:"seccompProfile,omitempty"` - SupplementalGroups *[]string `tfsdk:"supplemental_groups" json:"supplementalGroups,omitempty"` - Sysctls *[]struct { + SupplementalGroups *[]string `tfsdk:"supplemental_groups" json:"supplementalGroups,omitempty"` + SupplementalGroupsPolicy *string `tfsdk:"supplemental_groups_policy" json:"supplementalGroupsPolicy,omitempty"` + Sysctls *[]struct { Name *string `tfsdk:"name" json:"name,omitempty"` Value *string `tfsdk:"value" json:"value,omitempty"` } `tfsdk:"sysctls" json:"sysctls,omitempty"` @@ -718,7 +724,8 @@ type Pgv2PerconaComPerconaPgclusterV2ManifestData struct { RepoName *string `tfsdk:"repo_name" json:"repoName,omitempty"` Resources *struct { Claims *[]struct { - Name *string `tfsdk:"name" json:"name,omitempty"` + Name *string `tfsdk:"name" json:"name,omitempty"` + Request *string `tfsdk:"request" json:"request,omitempty"` } `tfsdk:"claims" json:"claims,omitempty"` Limits *map[string]string `tfsdk:"limits" json:"limits,omitempty"` Requests *map[string]string `tfsdk:"requests" json:"requests,omitempty"` @@ -735,7 +742,8 @@ type Pgv2PerconaComPerconaPgclusterV2ManifestData struct { Pgbackrest *struct { Resources *struct { Claims *[]struct { - Name *string `tfsdk:"name" json:"name,omitempty"` + Name *string `tfsdk:"name" json:"name,omitempty"` + Request *string `tfsdk:"request" json:"request,omitempty"` } `tfsdk:"claims" json:"claims,omitempty"` Limits *map[string]string `tfsdk:"limits" json:"limits,omitempty"` Requests *map[string]string `tfsdk:"requests" json:"requests,omitempty"` @@ -744,7 +752,8 @@ type Pgv2PerconaComPerconaPgclusterV2ManifestData struct { PgbackrestConfig *struct { Resources *struct { Claims *[]struct { - Name *string `tfsdk:"name" json:"name,omitempty"` + Name *string `tfsdk:"name" json:"name,omitempty"` + Request *string `tfsdk:"request" json:"request,omitempty"` } `tfsdk:"claims" json:"claims,omitempty"` Limits *map[string]string `tfsdk:"limits" json:"limits,omitempty"` Requests *map[string]string `tfsdk:"requests" json:"requests,omitempty"` @@ -752,6 +761,7 @@ type Pgv2PerconaComPerconaPgclusterV2ManifestData struct { } `tfsdk:"pgbackrest_config" json:"pgbackrestConfig,omitempty"` } `tfsdk:"sidecars" json:"sidecars,omitempty"` } `tfsdk:"pgbackrest" json:"pgbackrest,omitempty"` + TrackLatestRestorableTime *bool `tfsdk:"track_latest_restorable_time" json:"trackLatestRestorableTime,omitempty"` } `tfsdk:"backups" json:"backups,omitempty"` CrVersion *string `tfsdk:"cr_version" json:"crVersion,omitempty"` DataSource *struct { @@ -997,7 +1007,8 @@ type Pgv2PerconaComPerconaPgclusterV2ManifestData struct { } `tfsdk:"repo" json:"repo,omitempty"` Resources *struct { Claims *[]struct { - Name *string `tfsdk:"name" json:"name,omitempty"` + Name *string `tfsdk:"name" json:"name,omitempty"` + Request *string `tfsdk:"request" json:"request,omitempty"` } `tfsdk:"claims" json:"claims,omitempty"` Limits *map[string]string `tfsdk:"limits" json:"limits,omitempty"` Requests *map[string]string `tfsdk:"requests" json:"requests,omitempty"` @@ -1150,7 +1161,8 @@ type Pgv2PerconaComPerconaPgclusterV2ManifestData struct { RepoName *string `tfsdk:"repo_name" json:"repoName,omitempty"` Resources *struct { Claims *[]struct { - Name *string `tfsdk:"name" json:"name,omitempty"` + Name *string `tfsdk:"name" json:"name,omitempty"` + Request *string `tfsdk:"request" json:"request,omitempty"` } `tfsdk:"claims" json:"claims,omitempty"` Limits *map[string]string `tfsdk:"limits" json:"limits,omitempty"` Requests *map[string]string `tfsdk:"requests" json:"requests,omitempty"` @@ -1392,7 +1404,8 @@ type Pgv2PerconaComPerconaPgclusterV2ManifestData struct { ReplicaCertCopy *struct { Resources *struct { Claims *[]struct { - Name *string `tfsdk:"name" json:"name,omitempty"` + Name *string `tfsdk:"name" json:"name,omitempty"` + Request *string `tfsdk:"request" json:"request,omitempty"` } `tfsdk:"claims" json:"claims,omitempty"` Limits *map[string]string `tfsdk:"limits" json:"limits,omitempty"` Requests *map[string]string `tfsdk:"requests" json:"requests,omitempty"` @@ -1588,7 +1601,8 @@ type Pgv2PerconaComPerconaPgclusterV2ManifestData struct { } `tfsdk:"resize_policy" json:"resizePolicy,omitempty"` Resources *struct { Claims *[]struct { - Name *string `tfsdk:"name" json:"name,omitempty"` + Name *string `tfsdk:"name" json:"name,omitempty"` + Request *string `tfsdk:"request" json:"request,omitempty"` } `tfsdk:"claims" json:"claims,omitempty"` Limits *map[string]string `tfsdk:"limits" json:"limits,omitempty"` Requests *map[string]string `tfsdk:"requests" json:"requests,omitempty"` @@ -1686,7 +1700,8 @@ type Pgv2PerconaComPerconaPgclusterV2ManifestData struct { Replicas *int64 `tfsdk:"replicas" json:"replicas,omitempty"` Resources *struct { Claims *[]struct { - Name *string `tfsdk:"name" json:"name,omitempty"` + Name *string `tfsdk:"name" json:"name,omitempty"` + Request *string `tfsdk:"request" json:"request,omitempty"` } `tfsdk:"claims" json:"claims,omitempty"` Limits *map[string]string `tfsdk:"limits" json:"limits,omitempty"` Requests *map[string]string `tfsdk:"requests" json:"requests,omitempty"` @@ -1711,8 +1726,9 @@ type Pgv2PerconaComPerconaPgclusterV2ManifestData struct { LocalhostProfile *string `tfsdk:"localhost_profile" json:"localhostProfile,omitempty"` Type *string `tfsdk:"type" json:"type,omitempty"` } `tfsdk:"seccomp_profile" json:"seccompProfile,omitempty"` - SupplementalGroups *[]string `tfsdk:"supplemental_groups" json:"supplementalGroups,omitempty"` - Sysctls *[]struct { + SupplementalGroups *[]string `tfsdk:"supplemental_groups" json:"supplementalGroups,omitempty"` + SupplementalGroupsPolicy *string `tfsdk:"supplemental_groups_policy" json:"supplementalGroupsPolicy,omitempty"` + Sysctls *[]struct { Name *string `tfsdk:"name" json:"name,omitempty"` Value *string `tfsdk:"value" json:"value,omitempty"` } `tfsdk:"sysctls" json:"sysctls,omitempty"` @@ -1882,7 +1898,8 @@ type Pgv2PerconaComPerconaPgclusterV2ManifestData struct { } `tfsdk:"resize_policy" json:"resizePolicy,omitempty"` Resources *struct { Claims *[]struct { - Name *string `tfsdk:"name" json:"name,omitempty"` + Name *string `tfsdk:"name" json:"name,omitempty"` + Request *string `tfsdk:"request" json:"request,omitempty"` } `tfsdk:"claims" json:"claims,omitempty"` Limits *map[string]string `tfsdk:"limits" json:"limits,omitempty"` Requests *map[string]string `tfsdk:"requests" json:"requests,omitempty"` @@ -2123,7 +2140,8 @@ type Pgv2PerconaComPerconaPgclusterV2ManifestData struct { ImagePullPolicy *string `tfsdk:"image_pull_policy" json:"imagePullPolicy,omitempty"` Resources *struct { Claims *[]struct { - Name *string `tfsdk:"name" json:"name,omitempty"` + Name *string `tfsdk:"name" json:"name,omitempty"` + Request *string `tfsdk:"request" json:"request,omitempty"` } `tfsdk:"claims" json:"claims,omitempty"` Limits *map[string]string `tfsdk:"limits" json:"limits,omitempty"` Requests *map[string]string `tfsdk:"requests" json:"requests,omitempty"` @@ -2330,7 +2348,8 @@ type Pgv2PerconaComPerconaPgclusterV2ManifestData struct { PgbouncerConfig *struct { Resources *struct { Claims *[]struct { - Name *string `tfsdk:"name" json:"name,omitempty"` + Name *string `tfsdk:"name" json:"name,omitempty"` + Request *string `tfsdk:"request" json:"request,omitempty"` } `tfsdk:"claims" json:"claims,omitempty"` Limits *map[string]string `tfsdk:"limits" json:"limits,omitempty"` Requests *map[string]string `tfsdk:"requests" json:"requests,omitempty"` @@ -2365,7 +2384,8 @@ type Pgv2PerconaComPerconaPgclusterV2ManifestData struct { Replicas *int64 `tfsdk:"replicas" json:"replicas,omitempty"` Resources *struct { Claims *[]struct { - Name *string `tfsdk:"name" json:"name,omitempty"` + Name *string `tfsdk:"name" json:"name,omitempty"` + Request *string `tfsdk:"request" json:"request,omitempty"` } `tfsdk:"claims" json:"claims,omitempty"` Limits *map[string]string `tfsdk:"limits" json:"limits,omitempty"` Requests *map[string]string `tfsdk:"requests" json:"requests,omitempty"` @@ -2390,8 +2410,9 @@ type Pgv2PerconaComPerconaPgclusterV2ManifestData struct { LocalhostProfile *string `tfsdk:"localhost_profile" json:"localhostProfile,omitempty"` Type *string `tfsdk:"type" json:"type,omitempty"` } `tfsdk:"seccomp_profile" json:"seccompProfile,omitempty"` - SupplementalGroups *[]string `tfsdk:"supplemental_groups" json:"supplementalGroups,omitempty"` - Sysctls *[]struct { + SupplementalGroups *[]string `tfsdk:"supplemental_groups" json:"supplementalGroups,omitempty"` + SupplementalGroupsPolicy *string `tfsdk:"supplemental_groups_policy" json:"supplementalGroupsPolicy,omitempty"` + Sysctls *[]struct { Name *string `tfsdk:"name" json:"name,omitempty"` Value *string `tfsdk:"value" json:"value,omitempty"` } `tfsdk:"sysctls" json:"sysctls,omitempty"` @@ -2561,7 +2582,8 @@ type Pgv2PerconaComPerconaPgclusterV2ManifestData struct { } `tfsdk:"resize_policy" json:"resizePolicy,omitempty"` Resources *struct { Claims *[]struct { - Name *string `tfsdk:"name" json:"name,omitempty"` + Name *string `tfsdk:"name" json:"name,omitempty"` + Request *string `tfsdk:"request" json:"request,omitempty"` } `tfsdk:"claims" json:"claims,omitempty"` Limits *map[string]string `tfsdk:"limits" json:"limits,omitempty"` Requests *map[string]string `tfsdk:"requests" json:"requests,omitempty"` @@ -2939,8 +2961,8 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d }, "name": schema.StringAttribute{ - Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", - MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", Required: false, Optional: true, Computed: false, @@ -3093,8 +3115,8 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d }, "name": schema.StringAttribute{ - Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", - MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", Required: false, Optional: true, Computed: false, @@ -3176,6 +3198,14 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d Optional: false, Computed: false, }, + + "request": schema.StringAttribute{ + Description: "Request is the name chosen for a request in the referenced claim.If empty, everything from the claim is made available, otherwiseonly the result of this request.", + MarkdownDescription: "Request is the name chosen for a request in the referenced claim.If empty, everything from the claim is made available, otherwiseonly the result of this request.", + Required: false, + Optional: true, + Computed: false, + }, }, }, Required: false, @@ -3231,6 +3261,14 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d Optional: false, Computed: false, }, + + "request": schema.StringAttribute{ + Description: "Request is the name chosen for a request in the referenced claim.If empty, everything from the claim is made available, otherwiseonly the result of this request.", + MarkdownDescription: "Request is the name chosen for a request in the referenced claim.If empty, everything from the claim is made available, otherwiseonly the result of this request.", + Required: false, + Optional: true, + Computed: false, + }, }, }, Required: false, @@ -3565,8 +3603,8 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d }, "match_label_keys": schema.ListAttribute{ - Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", - MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", + Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", + MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", ElementType: types.StringType, Required: false, Optional: true, @@ -3574,8 +3612,8 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d }, "mismatch_label_keys": schema.ListAttribute{ - Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", - MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", + Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", + MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", ElementType: types.StringType, Required: false, Optional: true, @@ -3732,8 +3770,8 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d }, "match_label_keys": schema.ListAttribute{ - Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", - MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", + Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", + MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", ElementType: types.StringType, Required: false, Optional: true, @@ -3741,8 +3779,8 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d }, "mismatch_label_keys": schema.ListAttribute{ - Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", - MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", + Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", + MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", ElementType: types.StringType, Required: false, Optional: true, @@ -3899,8 +3937,8 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d }, "match_label_keys": schema.ListAttribute{ - Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", - MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", + Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", + MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", ElementType: types.StringType, Required: false, Optional: true, @@ -3908,8 +3946,8 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d }, "mismatch_label_keys": schema.ListAttribute{ - Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", - MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", + Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", + MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", ElementType: types.StringType, Required: false, Optional: true, @@ -4066,8 +4104,8 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d }, "match_label_keys": schema.ListAttribute{ - Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", - MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", + Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", + MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", ElementType: types.StringType, Required: false, Optional: true, @@ -4075,8 +4113,8 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d }, "mismatch_label_keys": schema.ListAttribute{ - Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", - MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", + Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", + MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", ElementType: types.StringType, Required: false, Optional: true, @@ -4194,6 +4232,14 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d Optional: false, Computed: false, }, + + "request": schema.StringAttribute{ + Description: "Request is the name chosen for a request in the referenced claim.If empty, everything from the claim is made available, otherwiseonly the result of this request.", + MarkdownDescription: "Request is the name chosen for a request in the referenced claim.If empty, everything from the claim is made available, otherwiseonly the result of this request.", + Required: false, + Optional: true, + Computed: false, + }, }, }, Required: false, @@ -4360,14 +4406,22 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d }, "supplemental_groups": schema.ListAttribute{ - Description: "A list of groups applied to the first process run in each container, in additionto the container's primary GID, the fsGroup (if specified), and group membershipsdefined in the container image for the uid of the container process. If unspecified,no additional groups are added to any container. Note that group membershipsdefined in the container image for the uid of the container process are still effective,even if they are not included in this list.Note that this field cannot be set when spec.os.name is windows.", - MarkdownDescription: "A list of groups applied to the first process run in each container, in additionto the container's primary GID, the fsGroup (if specified), and group membershipsdefined in the container image for the uid of the container process. If unspecified,no additional groups are added to any container. Note that group membershipsdefined in the container image for the uid of the container process are still effective,even if they are not included in this list.Note that this field cannot be set when spec.os.name is windows.", + Description: "A list of groups applied to the first process run in each container, inaddition to the container's primary GID and fsGroup (if specified). Ifthe SupplementalGroupsPolicy feature is enabled, thesupplementalGroupsPolicy field determines whether these are in additionto or instead of any group memberships defined in the container image.If unspecified, no additional groups are added, though group membershipsdefined in the container image may still be used, depending on thesupplementalGroupsPolicy field.Note that this field cannot be set when spec.os.name is windows.", + MarkdownDescription: "A list of groups applied to the first process run in each container, inaddition to the container's primary GID and fsGroup (if specified). Ifthe SupplementalGroupsPolicy feature is enabled, thesupplementalGroupsPolicy field determines whether these are in additionto or instead of any group memberships defined in the container image.If unspecified, no additional groups are added, though group membershipsdefined in the container image may still be used, depending on thesupplementalGroupsPolicy field.Note that this field cannot be set when spec.os.name is windows.", ElementType: types.StringType, Required: false, Optional: true, Computed: false, }, + "supplemental_groups_policy": schema.StringAttribute{ + Description: "Defines how supplemental groups of the first container processes are calculated.Valid values are 'Merge' and 'Strict'. If not specified, 'Merge' is used.(Alpha) Using the field requires the SupplementalGroupsPolicy feature gate to be enabledand the container runtime must implement support for this feature.Note that this field cannot be set when spec.os.name is windows.", + MarkdownDescription: "Defines how supplemental groups of the first container processes are calculated.Valid values are 'Merge' and 'Strict'. If not specified, 'Merge' is used.(Alpha) Using the field requires the SupplementalGroupsPolicy feature gate to be enabledand the container runtime must implement support for this feature.Note that this field cannot be set when spec.os.name is windows.", + Required: false, + Optional: true, + Computed: false, + }, + "sysctls": schema.ListNestedAttribute{ Description: "Sysctls hold a list of namespaced sysctls used for the pod. Pods with unsupportedsysctls (by the container runtime) might fail to launch.Note that this field cannot be set when spec.os.name is windows.", MarkdownDescription: "Sysctls hold a list of namespaced sysctls used for the pod. Pods with unsupportedsysctls (by the container runtime) might fail to launch.Note that this field cannot be set when spec.os.name is windows.", @@ -4841,8 +4895,8 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d }, "match_label_keys": schema.ListAttribute{ - Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", - MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", + Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", + MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", ElementType: types.StringType, Required: false, Optional: true, @@ -4850,8 +4904,8 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d }, "mismatch_label_keys": schema.ListAttribute{ - Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", - MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", + Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", + MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", ElementType: types.StringType, Required: false, Optional: true, @@ -5008,8 +5062,8 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d }, "match_label_keys": schema.ListAttribute{ - Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", - MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", + Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", + MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", ElementType: types.StringType, Required: false, Optional: true, @@ -5017,8 +5071,8 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d }, "mismatch_label_keys": schema.ListAttribute{ - Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", - MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", + Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", + MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", ElementType: types.StringType, Required: false, Optional: true, @@ -5175,8 +5229,8 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d }, "match_label_keys": schema.ListAttribute{ - Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", - MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", + Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", + MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", ElementType: types.StringType, Required: false, Optional: true, @@ -5184,8 +5238,8 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d }, "mismatch_label_keys": schema.ListAttribute{ - Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", - MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", + Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", + MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", ElementType: types.StringType, Required: false, Optional: true, @@ -5342,8 +5396,8 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d }, "match_label_keys": schema.ListAttribute{ - Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", - MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", + Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", + MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", ElementType: types.StringType, Required: false, Optional: true, @@ -5351,8 +5405,8 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d }, "mismatch_label_keys": schema.ListAttribute{ - Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", - MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", + Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", + MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", ElementType: types.StringType, Required: false, Optional: true, @@ -5470,6 +5524,14 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d Optional: false, Computed: false, }, + + "request": schema.StringAttribute{ + Description: "Request is the name chosen for a request in the referenced claim.If empty, everything from the claim is made available, otherwiseonly the result of this request.", + MarkdownDescription: "Request is the name chosen for a request in the referenced claim.If empty, everything from the claim is made available, otherwiseonly the result of this request.", + Required: false, + Optional: true, + Computed: false, + }, }, }, Required: false, @@ -5636,14 +5698,22 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d }, "supplemental_groups": schema.ListAttribute{ - Description: "A list of groups applied to the first process run in each container, in additionto the container's primary GID, the fsGroup (if specified), and group membershipsdefined in the container image for the uid of the container process. If unspecified,no additional groups are added to any container. Note that group membershipsdefined in the container image for the uid of the container process are still effective,even if they are not included in this list.Note that this field cannot be set when spec.os.name is windows.", - MarkdownDescription: "A list of groups applied to the first process run in each container, in additionto the container's primary GID, the fsGroup (if specified), and group membershipsdefined in the container image for the uid of the container process. If unspecified,no additional groups are added to any container. Note that group membershipsdefined in the container image for the uid of the container process are still effective,even if they are not included in this list.Note that this field cannot be set when spec.os.name is windows.", + Description: "A list of groups applied to the first process run in each container, inaddition to the container's primary GID and fsGroup (if specified). Ifthe SupplementalGroupsPolicy feature is enabled, thesupplementalGroupsPolicy field determines whether these are in additionto or instead of any group memberships defined in the container image.If unspecified, no additional groups are added, though group membershipsdefined in the container image may still be used, depending on thesupplementalGroupsPolicy field.Note that this field cannot be set when spec.os.name is windows.", + MarkdownDescription: "A list of groups applied to the first process run in each container, inaddition to the container's primary GID and fsGroup (if specified). Ifthe SupplementalGroupsPolicy feature is enabled, thesupplementalGroupsPolicy field determines whether these are in additionto or instead of any group memberships defined in the container image.If unspecified, no additional groups are added, though group membershipsdefined in the container image may still be used, depending on thesupplementalGroupsPolicy field.Note that this field cannot be set when spec.os.name is windows.", ElementType: types.StringType, Required: false, Optional: true, Computed: false, }, + "supplemental_groups_policy": schema.StringAttribute{ + Description: "Defines how supplemental groups of the first container processes are calculated.Valid values are 'Merge' and 'Strict'. If not specified, 'Merge' is used.(Alpha) Using the field requires the SupplementalGroupsPolicy feature gate to be enabledand the container runtime must implement support for this feature.Note that this field cannot be set when spec.os.name is windows.", + MarkdownDescription: "Defines how supplemental groups of the first container processes are calculated.Valid values are 'Merge' and 'Strict'. If not specified, 'Merge' is used.(Alpha) Using the field requires the SupplementalGroupsPolicy feature gate to be enabledand the container runtime must implement support for this feature.Note that this field cannot be set when spec.os.name is windows.", + Required: false, + Optional: true, + Computed: false, + }, + "sysctls": schema.ListNestedAttribute{ Description: "Sysctls hold a list of namespaced sysctls used for the pod. Pods with unsupportedsysctls (by the container runtime) might fail to launch.Note that this field cannot be set when spec.os.name is windows.", MarkdownDescription: "Sysctls hold a list of namespaced sysctls used for the pod. Pods with unsupportedsysctls (by the container runtime) might fail to launch.Note that this field cannot be set when spec.os.name is windows.", @@ -5757,8 +5827,8 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d }, "name": schema.StringAttribute{ - Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", - MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", Required: false, Optional: true, Computed: false, @@ -5817,8 +5887,8 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d }, "name": schema.StringAttribute{ - Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", - MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", Required: false, Optional: true, Computed: false, @@ -6321,8 +6391,8 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d }, "volume_attributes_class_name": schema.StringAttribute{ - Description: "volumeAttributesClassName may be used to set the VolumeAttributesClass used by this claim.If specified, the CSI driver will create or update the volume with the attributes definedin the corresponding VolumeAttributesClass. This has a different purpose than storageClassName,it can be changed after the claim is created. An empty string value means that no VolumeAttributesClasswill be applied to the claim but it's not allowed to reset this field to empty string once it is set.If unspecified and the PersistentVolumeClaim is unbound, the default VolumeAttributesClasswill be set by the persistentvolume controller if it exists.If the resource referred to by volumeAttributesClass does not exist, this PersistentVolumeClaim will beset to a Pending state, as reflected by the modifyVolumeStatus field, until such as a resourceexists.More info: https://kubernetes.io/docs/concepts/storage/volume-attributes-classes/(Alpha) Using this field requires the VolumeAttributesClass feature gate to be enabled.", - MarkdownDescription: "volumeAttributesClassName may be used to set the VolumeAttributesClass used by this claim.If specified, the CSI driver will create or update the volume with the attributes definedin the corresponding VolumeAttributesClass. This has a different purpose than storageClassName,it can be changed after the claim is created. An empty string value means that no VolumeAttributesClasswill be applied to the claim but it's not allowed to reset this field to empty string once it is set.If unspecified and the PersistentVolumeClaim is unbound, the default VolumeAttributesClasswill be set by the persistentvolume controller if it exists.If the resource referred to by volumeAttributesClass does not exist, this PersistentVolumeClaim will beset to a Pending state, as reflected by the modifyVolumeStatus field, until such as a resourceexists.More info: https://kubernetes.io/docs/concepts/storage/volume-attributes-classes/(Alpha) Using this field requires the VolumeAttributesClass feature gate to be enabled.", + Description: "volumeAttributesClassName may be used to set the VolumeAttributesClass used by this claim.If specified, the CSI driver will create or update the volume with the attributes definedin the corresponding VolumeAttributesClass. This has a different purpose than storageClassName,it can be changed after the claim is created. An empty string value means that no VolumeAttributesClasswill be applied to the claim but it's not allowed to reset this field to empty string once it is set.If unspecified and the PersistentVolumeClaim is unbound, the default VolumeAttributesClasswill be set by the persistentvolume controller if it exists.If the resource referred to by volumeAttributesClass does not exist, this PersistentVolumeClaim will beset to a Pending state, as reflected by the modifyVolumeStatus field, until such as a resourceexists.More info: https://kubernetes.io/docs/concepts/storage/volume-attributes-classes/(Beta) Using this field requires the VolumeAttributesClass feature gate to be enabled (off by default).", + MarkdownDescription: "volumeAttributesClassName may be used to set the VolumeAttributesClass used by this claim.If specified, the CSI driver will create or update the volume with the attributes definedin the corresponding VolumeAttributesClass. This has a different purpose than storageClassName,it can be changed after the claim is created. An empty string value means that no VolumeAttributesClasswill be applied to the claim but it's not allowed to reset this field to empty string once it is set.If unspecified and the PersistentVolumeClaim is unbound, the default VolumeAttributesClasswill be set by the persistentvolume controller if it exists.If the resource referred to by volumeAttributesClass does not exist, this PersistentVolumeClaim will beset to a Pending state, as reflected by the modifyVolumeStatus field, until such as a resourceexists.More info: https://kubernetes.io/docs/concepts/storage/volume-attributes-classes/(Beta) Using this field requires the VolumeAttributesClass feature gate to be enabled (off by default).", Required: false, Optional: true, Computed: false, @@ -6637,8 +6707,8 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d }, "match_label_keys": schema.ListAttribute{ - Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", - MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", + Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", + MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", ElementType: types.StringType, Required: false, Optional: true, @@ -6646,8 +6716,8 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d }, "mismatch_label_keys": schema.ListAttribute{ - Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", - MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", + Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", + MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", ElementType: types.StringType, Required: false, Optional: true, @@ -6804,8 +6874,8 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d }, "match_label_keys": schema.ListAttribute{ - Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", - MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", + Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", + MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", ElementType: types.StringType, Required: false, Optional: true, @@ -6813,8 +6883,8 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d }, "mismatch_label_keys": schema.ListAttribute{ - Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", - MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", + Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", + MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", ElementType: types.StringType, Required: false, Optional: true, @@ -6971,8 +7041,8 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d }, "match_label_keys": schema.ListAttribute{ - Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", - MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", + Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", + MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", ElementType: types.StringType, Required: false, Optional: true, @@ -6980,8 +7050,8 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d }, "mismatch_label_keys": schema.ListAttribute{ - Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", - MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", + Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", + MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", ElementType: types.StringType, Required: false, Optional: true, @@ -7138,8 +7208,8 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d }, "match_label_keys": schema.ListAttribute{ - Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", - MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", + Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", + MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", ElementType: types.StringType, Required: false, Optional: true, @@ -7147,8 +7217,8 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d }, "mismatch_label_keys": schema.ListAttribute{ - Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", - MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", + Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", + MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", ElementType: types.StringType, Required: false, Optional: true, @@ -7310,6 +7380,14 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d Optional: false, Computed: false, }, + + "request": schema.StringAttribute{ + Description: "Request is the name chosen for a request in the referenced claim.If empty, everything from the claim is made available, otherwiseonly the result of this request.", + MarkdownDescription: "Request is the name chosen for a request in the referenced claim.If empty, everything from the claim is made available, otherwiseonly the result of this request.", + Required: false, + Optional: true, + Computed: false, + }, }, }, Required: false, @@ -7420,6 +7498,14 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d Optional: false, Computed: false, }, + + "request": schema.StringAttribute{ + Description: "Request is the name chosen for a request in the referenced claim.If empty, everything from the claim is made available, otherwiseonly the result of this request.", + MarkdownDescription: "Request is the name chosen for a request in the referenced claim.If empty, everything from the claim is made available, otherwiseonly the result of this request.", + Required: false, + Optional: true, + Computed: false, + }, }, }, Required: false, @@ -7475,6 +7561,14 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d Optional: false, Computed: false, }, + + "request": schema.StringAttribute{ + Description: "Request is the name chosen for a request in the referenced claim.If empty, everything from the claim is made available, otherwiseonly the result of this request.", + MarkdownDescription: "Request is the name chosen for a request in the referenced claim.If empty, everything from the claim is made available, otherwiseonly the result of this request.", + Required: false, + Optional: true, + Computed: false, + }, }, }, Required: false, @@ -7519,6 +7613,14 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d Optional: false, Computed: false, }, + + "track_latest_restorable_time": schema.BoolAttribute{ + Description: "Enable tracking latest restorable time", + MarkdownDescription: "Enable tracking latest restorable time", + Required: false, + Optional: true, + Computed: false, + }, }, Required: true, Optional: false, @@ -7814,8 +7916,8 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d }, "match_label_keys": schema.ListAttribute{ - Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", - MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", + Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", + MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", ElementType: types.StringType, Required: false, Optional: true, @@ -7823,8 +7925,8 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d }, "mismatch_label_keys": schema.ListAttribute{ - Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", - MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", + Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", + MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", ElementType: types.StringType, Required: false, Optional: true, @@ -7981,8 +8083,8 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d }, "match_label_keys": schema.ListAttribute{ - Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", - MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", + Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", + MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", ElementType: types.StringType, Required: false, Optional: true, @@ -7990,8 +8092,8 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d }, "mismatch_label_keys": schema.ListAttribute{ - Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", - MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", + Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", + MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", ElementType: types.StringType, Required: false, Optional: true, @@ -8148,8 +8250,8 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d }, "match_label_keys": schema.ListAttribute{ - Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", - MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", + Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", + MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", ElementType: types.StringType, Required: false, Optional: true, @@ -8157,8 +8259,8 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d }, "mismatch_label_keys": schema.ListAttribute{ - Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", - MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", + Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", + MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", ElementType: types.StringType, Required: false, Optional: true, @@ -8315,8 +8417,8 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d }, "match_label_keys": schema.ListAttribute{ - Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", - MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", + Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", + MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", ElementType: types.StringType, Required: false, Optional: true, @@ -8324,8 +8426,8 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d }, "mismatch_label_keys": schema.ListAttribute{ - Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", - MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", + Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", + MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", ElementType: types.StringType, Required: false, Optional: true, @@ -8559,8 +8661,8 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d }, "name": schema.StringAttribute{ - Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", - MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", Required: false, Optional: true, Computed: false, @@ -8713,8 +8815,8 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d }, "name": schema.StringAttribute{ - Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", - MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", Required: false, Optional: true, Computed: false, @@ -9103,8 +9205,8 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d }, "volume_attributes_class_name": schema.StringAttribute{ - Description: "volumeAttributesClassName may be used to set the VolumeAttributesClass used by this claim.If specified, the CSI driver will create or update the volume with the attributes definedin the corresponding VolumeAttributesClass. This has a different purpose than storageClassName,it can be changed after the claim is created. An empty string value means that no VolumeAttributesClasswill be applied to the claim but it's not allowed to reset this field to empty string once it is set.If unspecified and the PersistentVolumeClaim is unbound, the default VolumeAttributesClasswill be set by the persistentvolume controller if it exists.If the resource referred to by volumeAttributesClass does not exist, this PersistentVolumeClaim will beset to a Pending state, as reflected by the modifyVolumeStatus field, until such as a resourceexists.More info: https://kubernetes.io/docs/concepts/storage/volume-attributes-classes/(Alpha) Using this field requires the VolumeAttributesClass feature gate to be enabled.", - MarkdownDescription: "volumeAttributesClassName may be used to set the VolumeAttributesClass used by this claim.If specified, the CSI driver will create or update the volume with the attributes definedin the corresponding VolumeAttributesClass. This has a different purpose than storageClassName,it can be changed after the claim is created. An empty string value means that no VolumeAttributesClasswill be applied to the claim but it's not allowed to reset this field to empty string once it is set.If unspecified and the PersistentVolumeClaim is unbound, the default VolumeAttributesClasswill be set by the persistentvolume controller if it exists.If the resource referred to by volumeAttributesClass does not exist, this PersistentVolumeClaim will beset to a Pending state, as reflected by the modifyVolumeStatus field, until such as a resourceexists.More info: https://kubernetes.io/docs/concepts/storage/volume-attributes-classes/(Alpha) Using this field requires the VolumeAttributesClass feature gate to be enabled.", + Description: "volumeAttributesClassName may be used to set the VolumeAttributesClass used by this claim.If specified, the CSI driver will create or update the volume with the attributes definedin the corresponding VolumeAttributesClass. This has a different purpose than storageClassName,it can be changed after the claim is created. An empty string value means that no VolumeAttributesClasswill be applied to the claim but it's not allowed to reset this field to empty string once it is set.If unspecified and the PersistentVolumeClaim is unbound, the default VolumeAttributesClasswill be set by the persistentvolume controller if it exists.If the resource referred to by volumeAttributesClass does not exist, this PersistentVolumeClaim will beset to a Pending state, as reflected by the modifyVolumeStatus field, until such as a resourceexists.More info: https://kubernetes.io/docs/concepts/storage/volume-attributes-classes/(Beta) Using this field requires the VolumeAttributesClass feature gate to be enabled (off by default).", + MarkdownDescription: "volumeAttributesClassName may be used to set the VolumeAttributesClass used by this claim.If specified, the CSI driver will create or update the volume with the attributes definedin the corresponding VolumeAttributesClass. This has a different purpose than storageClassName,it can be changed after the claim is created. An empty string value means that no VolumeAttributesClasswill be applied to the claim but it's not allowed to reset this field to empty string once it is set.If unspecified and the PersistentVolumeClaim is unbound, the default VolumeAttributesClasswill be set by the persistentvolume controller if it exists.If the resource referred to by volumeAttributesClass does not exist, this PersistentVolumeClaim will beset to a Pending state, as reflected by the modifyVolumeStatus field, until such as a resourceexists.More info: https://kubernetes.io/docs/concepts/storage/volume-attributes-classes/(Beta) Using this field requires the VolumeAttributesClass feature gate to be enabled (off by default).", Required: false, Optional: true, Computed: false, @@ -9157,6 +9259,14 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d Optional: false, Computed: false, }, + + "request": schema.StringAttribute{ + Description: "Request is the name chosen for a request in the referenced claim.If empty, everything from the claim is made available, otherwiseonly the result of this request.", + MarkdownDescription: "Request is the name chosen for a request in the referenced claim.If empty, everything from the claim is made available, otherwiseonly the result of this request.", + Required: false, + Optional: true, + Computed: false, + }, }, }, Required: false, @@ -9528,8 +9638,8 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d }, "match_label_keys": schema.ListAttribute{ - Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", - MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", + Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", + MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", ElementType: types.StringType, Required: false, Optional: true, @@ -9537,8 +9647,8 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d }, "mismatch_label_keys": schema.ListAttribute{ - Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", - MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", + Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", + MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", ElementType: types.StringType, Required: false, Optional: true, @@ -9695,8 +9805,8 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d }, "match_label_keys": schema.ListAttribute{ - Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", - MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", + Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", + MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", ElementType: types.StringType, Required: false, Optional: true, @@ -9704,8 +9814,8 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d }, "mismatch_label_keys": schema.ListAttribute{ - Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", - MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", + Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", + MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", ElementType: types.StringType, Required: false, Optional: true, @@ -9862,8 +9972,8 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d }, "match_label_keys": schema.ListAttribute{ - Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", - MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", + Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", + MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", ElementType: types.StringType, Required: false, Optional: true, @@ -9871,8 +9981,8 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d }, "mismatch_label_keys": schema.ListAttribute{ - Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", - MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", + Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", + MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", ElementType: types.StringType, Required: false, Optional: true, @@ -10029,8 +10139,8 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d }, "match_label_keys": schema.ListAttribute{ - Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", - MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", + Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", + MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", ElementType: types.StringType, Required: false, Optional: true, @@ -10038,8 +10148,8 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d }, "mismatch_label_keys": schema.ListAttribute{ - Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", - MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", + Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", + MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", ElementType: types.StringType, Required: false, Optional: true, @@ -10193,6 +10303,14 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d Optional: false, Computed: false, }, + + "request": schema.StringAttribute{ + Description: "Request is the name chosen for a request in the referenced claim.If empty, everything from the claim is made available, otherwiseonly the result of this request.", + MarkdownDescription: "Request is the name chosen for a request in the referenced claim.If empty, everything from the claim is made available, otherwiseonly the result of this request.", + Required: false, + Optional: true, + Computed: false, + }, }, }, Required: false, @@ -10858,8 +10976,8 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d }, "name": schema.StringAttribute{ - Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", - MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", Required: false, Optional: true, Computed: false, @@ -10924,8 +11042,8 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d NestedObject: schema.NestedAttributeObject{ Attributes: map[string]schema.Attribute{ "name": schema.StringAttribute{ - Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", - MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", Required: false, Optional: true, Computed: false, @@ -11215,8 +11333,8 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d }, "match_label_keys": schema.ListAttribute{ - Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", - MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", + Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", + MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", ElementType: types.StringType, Required: false, Optional: true, @@ -11224,8 +11342,8 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d }, "mismatch_label_keys": schema.ListAttribute{ - Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", - MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", + Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", + MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", ElementType: types.StringType, Required: false, Optional: true, @@ -11382,8 +11500,8 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d }, "match_label_keys": schema.ListAttribute{ - Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", - MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", + Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", + MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", ElementType: types.StringType, Required: false, Optional: true, @@ -11391,8 +11509,8 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d }, "mismatch_label_keys": schema.ListAttribute{ - Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", - MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", + Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", + MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", ElementType: types.StringType, Required: false, Optional: true, @@ -11549,8 +11667,8 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d }, "match_label_keys": schema.ListAttribute{ - Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", - MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", + Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", + MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", ElementType: types.StringType, Required: false, Optional: true, @@ -11558,8 +11676,8 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d }, "mismatch_label_keys": schema.ListAttribute{ - Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", - MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", + Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", + MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", ElementType: types.StringType, Required: false, Optional: true, @@ -11716,8 +11834,8 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d }, "match_label_keys": schema.ListAttribute{ - Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", - MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", + Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", + MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", ElementType: types.StringType, Required: false, Optional: true, @@ -11725,8 +11843,8 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d }, "mismatch_label_keys": schema.ListAttribute{ - Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", - MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", + Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", + MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", ElementType: types.StringType, Required: false, Optional: true, @@ -11844,6 +11962,14 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d Optional: false, Computed: false, }, + + "request": schema.StringAttribute{ + Description: "Request is the name chosen for a request in the referenced claim.If empty, everything from the claim is made available, otherwiseonly the result of this request.", + MarkdownDescription: "Request is the name chosen for a request in the referenced claim.If empty, everything from the claim is made available, otherwiseonly the result of this request.", + Required: false, + Optional: true, + Computed: false, + }, }, }, Required: false, @@ -12061,8 +12187,8 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d }, "volume_attributes_class_name": schema.StringAttribute{ - Description: "volumeAttributesClassName may be used to set the VolumeAttributesClass used by this claim.If specified, the CSI driver will create or update the volume with the attributes definedin the corresponding VolumeAttributesClass. This has a different purpose than storageClassName,it can be changed after the claim is created. An empty string value means that no VolumeAttributesClasswill be applied to the claim but it's not allowed to reset this field to empty string once it is set.If unspecified and the PersistentVolumeClaim is unbound, the default VolumeAttributesClasswill be set by the persistentvolume controller if it exists.If the resource referred to by volumeAttributesClass does not exist, this PersistentVolumeClaim will beset to a Pending state, as reflected by the modifyVolumeStatus field, until such as a resourceexists.More info: https://kubernetes.io/docs/concepts/storage/volume-attributes-classes/(Alpha) Using this field requires the VolumeAttributesClass feature gate to be enabled.", - MarkdownDescription: "volumeAttributesClassName may be used to set the VolumeAttributesClass used by this claim.If specified, the CSI driver will create or update the volume with the attributes definedin the corresponding VolumeAttributesClass. This has a different purpose than storageClassName,it can be changed after the claim is created. An empty string value means that no VolumeAttributesClasswill be applied to the claim but it's not allowed to reset this field to empty string once it is set.If unspecified and the PersistentVolumeClaim is unbound, the default VolumeAttributesClasswill be set by the persistentvolume controller if it exists.If the resource referred to by volumeAttributesClass does not exist, this PersistentVolumeClaim will beset to a Pending state, as reflected by the modifyVolumeStatus field, until such as a resourceexists.More info: https://kubernetes.io/docs/concepts/storage/volume-attributes-classes/(Alpha) Using this field requires the VolumeAttributesClass feature gate to be enabled.", + Description: "volumeAttributesClassName may be used to set the VolumeAttributesClass used by this claim.If specified, the CSI driver will create or update the volume with the attributes definedin the corresponding VolumeAttributesClass. This has a different purpose than storageClassName,it can be changed after the claim is created. An empty string value means that no VolumeAttributesClasswill be applied to the claim but it's not allowed to reset this field to empty string once it is set.If unspecified and the PersistentVolumeClaim is unbound, the default VolumeAttributesClasswill be set by the persistentvolume controller if it exists.If the resource referred to by volumeAttributesClass does not exist, this PersistentVolumeClaim will beset to a Pending state, as reflected by the modifyVolumeStatus field, until such as a resourceexists.More info: https://kubernetes.io/docs/concepts/storage/volume-attributes-classes/(Beta) Using this field requires the VolumeAttributesClass feature gate to be enabled (off by default).", + MarkdownDescription: "volumeAttributesClassName may be used to set the VolumeAttributesClass used by this claim.If specified, the CSI driver will create or update the volume with the attributes definedin the corresponding VolumeAttributesClass. This has a different purpose than storageClassName,it can be changed after the claim is created. An empty string value means that no VolumeAttributesClasswill be applied to the claim but it's not allowed to reset this field to empty string once it is set.If unspecified and the PersistentVolumeClaim is unbound, the default VolumeAttributesClasswill be set by the persistentvolume controller if it exists.If the resource referred to by volumeAttributesClass does not exist, this PersistentVolumeClaim will beset to a Pending state, as reflected by the modifyVolumeStatus field, until such as a resourceexists.More info: https://kubernetes.io/docs/concepts/storage/volume-attributes-classes/(Beta) Using this field requires the VolumeAttributesClass feature gate to be enabled (off by default).", Required: false, Optional: true, Computed: false, @@ -12150,8 +12276,8 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d }, "name": schema.StringAttribute{ - Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", - MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", Required: false, Optional: true, Computed: false, @@ -12241,8 +12367,8 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d }, "name": schema.StringAttribute{ - Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", - MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", Required: false, Optional: true, Computed: false, @@ -12282,8 +12408,8 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d MarkdownDescription: "The ConfigMap to select from", Attributes: map[string]schema.Attribute{ "name": schema.StringAttribute{ - Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", - MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", Required: false, Optional: true, Computed: false, @@ -12315,8 +12441,8 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d MarkdownDescription: "The Secret to select from", Attributes: map[string]schema.Attribute{ "name": schema.StringAttribute{ - Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", - MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", Required: false, Optional: true, Computed: false, @@ -13128,6 +13254,14 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d Optional: false, Computed: false, }, + + "request": schema.StringAttribute{ + Description: "Request is the name chosen for a request in the referenced claim.If empty, everything from the claim is made available, otherwiseonly the result of this request.", + MarkdownDescription: "Request is the name chosen for a request in the referenced claim.If empty, everything from the claim is made available, otherwiseonly the result of this request.", + Required: false, + Optional: true, + Computed: false, + }, }, }, Required: false, @@ -13239,8 +13373,8 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d }, "proc_mount": schema.StringAttribute{ - Description: "procMount denotes the type of proc mount to use for the containers.The default is DefaultProcMount which uses the container runtime defaults forreadonly paths and masked paths.This requires the ProcMountType feature flag to be enabled.Note that this field cannot be set when spec.os.name is windows.", - MarkdownDescription: "procMount denotes the type of proc mount to use for the containers.The default is DefaultProcMount which uses the container runtime defaults forreadonly paths and masked paths.This requires the ProcMountType feature flag to be enabled.Note that this field cannot be set when spec.os.name is windows.", + Description: "procMount denotes the type of proc mount to use for the containers.The default value is Default which uses the container runtime defaults forreadonly paths and masked paths.This requires the ProcMountType feature flag to be enabled.Note that this field cannot be set when spec.os.name is windows.", + MarkdownDescription: "procMount denotes the type of proc mount to use for the containers.The default value is Default which uses the container runtime defaults forreadonly paths and masked paths.This requires the ProcMountType feature flag to be enabled.Note that this field cannot be set when spec.os.name is windows.", Required: false, Optional: true, Computed: false, @@ -13812,6 +13946,14 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d Optional: false, Computed: false, }, + + "request": schema.StringAttribute{ + Description: "Request is the name chosen for a request in the referenced claim.If empty, everything from the claim is made available, otherwiseonly the result of this request.", + MarkdownDescription: "Request is the name chosen for a request in the referenced claim.If empty, everything from the claim is made available, otherwiseonly the result of this request.", + Required: false, + Optional: true, + Computed: false, + }, }, }, Required: false, @@ -13978,14 +14120,22 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d }, "supplemental_groups": schema.ListAttribute{ - Description: "A list of groups applied to the first process run in each container, in additionto the container's primary GID, the fsGroup (if specified), and group membershipsdefined in the container image for the uid of the container process. If unspecified,no additional groups are added to any container. Note that group membershipsdefined in the container image for the uid of the container process are still effective,even if they are not included in this list.Note that this field cannot be set when spec.os.name is windows.", - MarkdownDescription: "A list of groups applied to the first process run in each container, in additionto the container's primary GID, the fsGroup (if specified), and group membershipsdefined in the container image for the uid of the container process. If unspecified,no additional groups are added to any container. Note that group membershipsdefined in the container image for the uid of the container process are still effective,even if they are not included in this list.Note that this field cannot be set when spec.os.name is windows.", + Description: "A list of groups applied to the first process run in each container, inaddition to the container's primary GID and fsGroup (if specified). Ifthe SupplementalGroupsPolicy feature is enabled, thesupplementalGroupsPolicy field determines whether these are in additionto or instead of any group memberships defined in the container image.If unspecified, no additional groups are added, though group membershipsdefined in the container image may still be used, depending on thesupplementalGroupsPolicy field.Note that this field cannot be set when spec.os.name is windows.", + MarkdownDescription: "A list of groups applied to the first process run in each container, inaddition to the container's primary GID and fsGroup (if specified). Ifthe SupplementalGroupsPolicy feature is enabled, thesupplementalGroupsPolicy field determines whether these are in additionto or instead of any group memberships defined in the container image.If unspecified, no additional groups are added, though group membershipsdefined in the container image may still be used, depending on thesupplementalGroupsPolicy field.Note that this field cannot be set when spec.os.name is windows.", ElementType: types.StringType, Required: false, Optional: true, Computed: false, }, + "supplemental_groups_policy": schema.StringAttribute{ + Description: "Defines how supplemental groups of the first container processes are calculated.Valid values are 'Merge' and 'Strict'. If not specified, 'Merge' is used.(Alpha) Using the field requires the SupplementalGroupsPolicy feature gate to be enabledand the container runtime must implement support for this feature.Note that this field cannot be set when spec.os.name is windows.", + MarkdownDescription: "Defines how supplemental groups of the first container processes are calculated.Valid values are 'Merge' and 'Strict'. If not specified, 'Merge' is used.(Alpha) Using the field requires the SupplementalGroupsPolicy feature gate to be enabledand the container runtime must implement support for this feature.Note that this field cannot be set when spec.os.name is windows.", + Required: false, + Optional: true, + Computed: false, + }, + "sysctls": schema.ListNestedAttribute{ Description: "Sysctls hold a list of namespaced sysctls used for the pod. Pods with unsupportedsysctls (by the container runtime) might fail to launch.Note that this field cannot be set when spec.os.name is windows.", MarkdownDescription: "Sysctls hold a list of namespaced sysctls used for the pod. Pods with unsupportedsysctls (by the container runtime) might fail to launch.Note that this field cannot be set when spec.os.name is windows.", @@ -14120,8 +14270,8 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d }, "name": schema.StringAttribute{ - Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", - MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", Required: false, Optional: true, Computed: false, @@ -14211,8 +14361,8 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d }, "name": schema.StringAttribute{ - Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", - MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", Required: false, Optional: true, Computed: false, @@ -14252,8 +14402,8 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d MarkdownDescription: "The ConfigMap to select from", Attributes: map[string]schema.Attribute{ "name": schema.StringAttribute{ - Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", - MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", Required: false, Optional: true, Computed: false, @@ -14285,8 +14435,8 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d MarkdownDescription: "The Secret to select from", Attributes: map[string]schema.Attribute{ "name": schema.StringAttribute{ - Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", - MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", Required: false, Optional: true, Computed: false, @@ -15098,6 +15248,14 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d Optional: false, Computed: false, }, + + "request": schema.StringAttribute{ + Description: "Request is the name chosen for a request in the referenced claim.If empty, everything from the claim is made available, otherwiseonly the result of this request.", + MarkdownDescription: "Request is the name chosen for a request in the referenced claim.If empty, everything from the claim is made available, otherwiseonly the result of this request.", + Required: false, + Optional: true, + Computed: false, + }, }, }, Required: false, @@ -15209,8 +15367,8 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d }, "proc_mount": schema.StringAttribute{ - Description: "procMount denotes the type of proc mount to use for the containers.The default is DefaultProcMount which uses the container runtime defaults forreadonly paths and masked paths.This requires the ProcMountType feature flag to be enabled.Note that this field cannot be set when spec.os.name is windows.", - MarkdownDescription: "procMount denotes the type of proc mount to use for the containers.The default is DefaultProcMount which uses the container runtime defaults forreadonly paths and masked paths.This requires the ProcMountType feature flag to be enabled.Note that this field cannot be set when spec.os.name is windows.", + Description: "procMount denotes the type of proc mount to use for the containers.The default value is Default which uses the container runtime defaults forreadonly paths and masked paths.This requires the ProcMountType feature flag to be enabled.Note that this field cannot be set when spec.os.name is windows.", + MarkdownDescription: "procMount denotes the type of proc mount to use for the containers.The default value is Default which uses the container runtime defaults forreadonly paths and masked paths.This requires the ProcMountType feature flag to be enabled.Note that this field cannot be set when spec.os.name is windows.", Required: false, Optional: true, Computed: false, @@ -15883,8 +16041,8 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d }, "volume_attributes_class_name": schema.StringAttribute{ - Description: "volumeAttributesClassName may be used to set the VolumeAttributesClass used by this claim.If specified, the CSI driver will create or update the volume with the attributes definedin the corresponding VolumeAttributesClass. This has a different purpose than storageClassName,it can be changed after the claim is created. An empty string value means that no VolumeAttributesClasswill be applied to the claim but it's not allowed to reset this field to empty string once it is set.If unspecified and the PersistentVolumeClaim is unbound, the default VolumeAttributesClasswill be set by the persistentvolume controller if it exists.If the resource referred to by volumeAttributesClass does not exist, this PersistentVolumeClaim will beset to a Pending state, as reflected by the modifyVolumeStatus field, until such as a resourceexists.More info: https://kubernetes.io/docs/concepts/storage/volume-attributes-classes/(Alpha) Using this field requires the VolumeAttributesClass feature gate to be enabled.", - MarkdownDescription: "volumeAttributesClassName may be used to set the VolumeAttributesClass used by this claim.If specified, the CSI driver will create or update the volume with the attributes definedin the corresponding VolumeAttributesClass. This has a different purpose than storageClassName,it can be changed after the claim is created. An empty string value means that no VolumeAttributesClasswill be applied to the claim but it's not allowed to reset this field to empty string once it is set.If unspecified and the PersistentVolumeClaim is unbound, the default VolumeAttributesClasswill be set by the persistentvolume controller if it exists.If the resource referred to by volumeAttributesClass does not exist, this PersistentVolumeClaim will beset to a Pending state, as reflected by the modifyVolumeStatus field, until such as a resourceexists.More info: https://kubernetes.io/docs/concepts/storage/volume-attributes-classes/(Alpha) Using this field requires the VolumeAttributesClass feature gate to be enabled.", + Description: "volumeAttributesClassName may be used to set the VolumeAttributesClass used by this claim.If specified, the CSI driver will create or update the volume with the attributes definedin the corresponding VolumeAttributesClass. This has a different purpose than storageClassName,it can be changed after the claim is created. An empty string value means that no VolumeAttributesClasswill be applied to the claim but it's not allowed to reset this field to empty string once it is set.If unspecified and the PersistentVolumeClaim is unbound, the default VolumeAttributesClasswill be set by the persistentvolume controller if it exists.If the resource referred to by volumeAttributesClass does not exist, this PersistentVolumeClaim will beset to a Pending state, as reflected by the modifyVolumeStatus field, until such as a resourceexists.More info: https://kubernetes.io/docs/concepts/storage/volume-attributes-classes/(Beta) Using this field requires the VolumeAttributesClass feature gate to be enabled (off by default).", + MarkdownDescription: "volumeAttributesClassName may be used to set the VolumeAttributesClass used by this claim.If specified, the CSI driver will create or update the volume with the attributes definedin the corresponding VolumeAttributesClass. This has a different purpose than storageClassName,it can be changed after the claim is created. An empty string value means that no VolumeAttributesClasswill be applied to the claim but it's not allowed to reset this field to empty string once it is set.If unspecified and the PersistentVolumeClaim is unbound, the default VolumeAttributesClasswill be set by the persistentvolume controller if it exists.If the resource referred to by volumeAttributesClass does not exist, this PersistentVolumeClaim will beset to a Pending state, as reflected by the modifyVolumeStatus field, until such as a resourceexists.More info: https://kubernetes.io/docs/concepts/storage/volume-attributes-classes/(Beta) Using this field requires the VolumeAttributesClass feature gate to be enabled (off by default).", Required: false, Optional: true, Computed: false, @@ -16346,8 +16504,8 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d }, "volume_attributes_class_name": schema.StringAttribute{ - Description: "volumeAttributesClassName may be used to set the VolumeAttributesClass used by this claim.If specified, the CSI driver will create or update the volume with the attributes definedin the corresponding VolumeAttributesClass. This has a different purpose than storageClassName,it can be changed after the claim is created. An empty string value means that no VolumeAttributesClasswill be applied to the claim but it's not allowed to reset this field to empty string once it is set.If unspecified and the PersistentVolumeClaim is unbound, the default VolumeAttributesClasswill be set by the persistentvolume controller if it exists.If the resource referred to by volumeAttributesClass does not exist, this PersistentVolumeClaim will beset to a Pending state, as reflected by the modifyVolumeStatus field, until such as a resourceexists.More info: https://kubernetes.io/docs/concepts/storage/volume-attributes-classes/(Alpha) Using this field requires the VolumeAttributesClass feature gate to be enabled.", - MarkdownDescription: "volumeAttributesClassName may be used to set the VolumeAttributesClass used by this claim.If specified, the CSI driver will create or update the volume with the attributes definedin the corresponding VolumeAttributesClass. This has a different purpose than storageClassName,it can be changed after the claim is created. An empty string value means that no VolumeAttributesClasswill be applied to the claim but it's not allowed to reset this field to empty string once it is set.If unspecified and the PersistentVolumeClaim is unbound, the default VolumeAttributesClasswill be set by the persistentvolume controller if it exists.If the resource referred to by volumeAttributesClass does not exist, this PersistentVolumeClaim will beset to a Pending state, as reflected by the modifyVolumeStatus field, until such as a resourceexists.More info: https://kubernetes.io/docs/concepts/storage/volume-attributes-classes/(Alpha) Using this field requires the VolumeAttributesClass feature gate to be enabled.", + Description: "volumeAttributesClassName may be used to set the VolumeAttributesClass used by this claim.If specified, the CSI driver will create or update the volume with the attributes definedin the corresponding VolumeAttributesClass. This has a different purpose than storageClassName,it can be changed after the claim is created. An empty string value means that no VolumeAttributesClasswill be applied to the claim but it's not allowed to reset this field to empty string once it is set.If unspecified and the PersistentVolumeClaim is unbound, the default VolumeAttributesClasswill be set by the persistentvolume controller if it exists.If the resource referred to by volumeAttributesClass does not exist, this PersistentVolumeClaim will beset to a Pending state, as reflected by the modifyVolumeStatus field, until such as a resourceexists.More info: https://kubernetes.io/docs/concepts/storage/volume-attributes-classes/(Beta) Using this field requires the VolumeAttributesClass feature gate to be enabled (off by default).", + MarkdownDescription: "volumeAttributesClassName may be used to set the VolumeAttributesClass used by this claim.If specified, the CSI driver will create or update the volume with the attributes definedin the corresponding VolumeAttributesClass. This has a different purpose than storageClassName,it can be changed after the claim is created. An empty string value means that no VolumeAttributesClasswill be applied to the claim but it's not allowed to reset this field to empty string once it is set.If unspecified and the PersistentVolumeClaim is unbound, the default VolumeAttributesClasswill be set by the persistentvolume controller if it exists.If the resource referred to by volumeAttributesClass does not exist, this PersistentVolumeClaim will beset to a Pending state, as reflected by the modifyVolumeStatus field, until such as a resourceexists.More info: https://kubernetes.io/docs/concepts/storage/volume-attributes-classes/(Beta) Using this field requires the VolumeAttributesClass feature gate to be enabled (off by default).", Required: false, Optional: true, Computed: false, @@ -16587,8 +16745,8 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d }, "proc_mount": schema.StringAttribute{ - Description: "procMount denotes the type of proc mount to use for the containers.The default is DefaultProcMount which uses the container runtime defaults forreadonly paths and masked paths.This requires the ProcMountType feature flag to be enabled.Note that this field cannot be set when spec.os.name is windows.", - MarkdownDescription: "procMount denotes the type of proc mount to use for the containers.The default is DefaultProcMount which uses the container runtime defaults forreadonly paths and masked paths.This requires the ProcMountType feature flag to be enabled.Note that this field cannot be set when spec.os.name is windows.", + Description: "procMount denotes the type of proc mount to use for the containers.The default value is Default which uses the container runtime defaults forreadonly paths and masked paths.This requires the ProcMountType feature flag to be enabled.Note that this field cannot be set when spec.os.name is windows.", + MarkdownDescription: "procMount denotes the type of proc mount to use for the containers.The default value is Default which uses the container runtime defaults forreadonly paths and masked paths.This requires the ProcMountType feature flag to be enabled.Note that this field cannot be set when spec.os.name is windows.", Required: false, Optional: true, Computed: false, @@ -16781,6 +16939,14 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d Optional: false, Computed: false, }, + + "request": schema.StringAttribute{ + Description: "Request is the name chosen for a request in the referenced claim.If empty, everything from the claim is made available, otherwiseonly the result of this request.", + MarkdownDescription: "Request is the name chosen for a request in the referenced claim.If empty, everything from the claim is made available, otherwiseonly the result of this request.", + Required: false, + Optional: true, + Computed: false, + }, }, }, Required: false, @@ -16822,16 +16988,16 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d "secret": schema.StringAttribute{ Description: "", MarkdownDescription: "", - Required: false, - Optional: true, + Required: true, + Optional: false, Computed: false, }, "server_host": schema.StringAttribute{ Description: "", MarkdownDescription: "", - Required: false, - Optional: true, + Required: true, + Optional: false, Computed: false, }, }, @@ -17144,8 +17310,8 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d }, "match_label_keys": schema.ListAttribute{ - Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", - MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", + Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", + MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", ElementType: types.StringType, Required: false, Optional: true, @@ -17153,8 +17319,8 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d }, "mismatch_label_keys": schema.ListAttribute{ - Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", - MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", + Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", + MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", ElementType: types.StringType, Required: false, Optional: true, @@ -17311,8 +17477,8 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d }, "match_label_keys": schema.ListAttribute{ - Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", - MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", + Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", + MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", ElementType: types.StringType, Required: false, Optional: true, @@ -17320,8 +17486,8 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d }, "mismatch_label_keys": schema.ListAttribute{ - Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", - MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", + Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", + MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", ElementType: types.StringType, Required: false, Optional: true, @@ -17478,8 +17644,8 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d }, "match_label_keys": schema.ListAttribute{ - Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", - MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", + Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", + MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", ElementType: types.StringType, Required: false, Optional: true, @@ -17487,8 +17653,8 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d }, "mismatch_label_keys": schema.ListAttribute{ - Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", - MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", + Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", + MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", ElementType: types.StringType, Required: false, Optional: true, @@ -17645,8 +17811,8 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d }, "match_label_keys": schema.ListAttribute{ - Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", - MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", + Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", + MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", ElementType: types.StringType, Required: false, Optional: true, @@ -17654,8 +17820,8 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d }, "mismatch_label_keys": schema.ListAttribute{ - Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", - MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", + Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", + MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", ElementType: types.StringType, Required: false, Optional: true, @@ -17902,8 +18068,8 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d }, "name": schema.StringAttribute{ - Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", - MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", Required: false, Optional: true, Computed: false, @@ -18056,8 +18222,8 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d }, "name": schema.StringAttribute{ - Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", - MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", Required: false, Optional: true, Computed: false, @@ -18162,6 +18328,14 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d Optional: false, Computed: false, }, + + "request": schema.StringAttribute{ + Description: "Request is the name chosen for a request in the referenced claim.If empty, everything from the claim is made available, otherwiseonly the result of this request.", + MarkdownDescription: "Request is the name chosen for a request in the referenced claim.If empty, everything from the claim is made available, otherwiseonly the result of this request.", + Required: false, + Optional: true, + Computed: false, + }, }, }, Required: false, @@ -18242,8 +18416,8 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d }, "name": schema.StringAttribute{ - Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", - MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", Required: false, Optional: true, Computed: false, @@ -18414,6 +18588,14 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d Optional: false, Computed: false, }, + + "request": schema.StringAttribute{ + Description: "Request is the name chosen for a request in the referenced claim.If empty, everything from the claim is made available, otherwiseonly the result of this request.", + MarkdownDescription: "Request is the name chosen for a request in the referenced claim.If empty, everything from the claim is made available, otherwiseonly the result of this request.", + Required: false, + Optional: true, + Computed: false, + }, }, }, Required: false, @@ -18580,14 +18762,22 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d }, "supplemental_groups": schema.ListAttribute{ - Description: "A list of groups applied to the first process run in each container, in additionto the container's primary GID, the fsGroup (if specified), and group membershipsdefined in the container image for the uid of the container process. If unspecified,no additional groups are added to any container. Note that group membershipsdefined in the container image for the uid of the container process are still effective,even if they are not included in this list.Note that this field cannot be set when spec.os.name is windows.", - MarkdownDescription: "A list of groups applied to the first process run in each container, in additionto the container's primary GID, the fsGroup (if specified), and group membershipsdefined in the container image for the uid of the container process. If unspecified,no additional groups are added to any container. Note that group membershipsdefined in the container image for the uid of the container process are still effective,even if they are not included in this list.Note that this field cannot be set when spec.os.name is windows.", + Description: "A list of groups applied to the first process run in each container, inaddition to the container's primary GID and fsGroup (if specified). Ifthe SupplementalGroupsPolicy feature is enabled, thesupplementalGroupsPolicy field determines whether these are in additionto or instead of any group memberships defined in the container image.If unspecified, no additional groups are added, though group membershipsdefined in the container image may still be used, depending on thesupplementalGroupsPolicy field.Note that this field cannot be set when spec.os.name is windows.", + MarkdownDescription: "A list of groups applied to the first process run in each container, inaddition to the container's primary GID and fsGroup (if specified). Ifthe SupplementalGroupsPolicy feature is enabled, thesupplementalGroupsPolicy field determines whether these are in additionto or instead of any group memberships defined in the container image.If unspecified, no additional groups are added, though group membershipsdefined in the container image may still be used, depending on thesupplementalGroupsPolicy field.Note that this field cannot be set when spec.os.name is windows.", ElementType: types.StringType, Required: false, Optional: true, Computed: false, }, + "supplemental_groups_policy": schema.StringAttribute{ + Description: "Defines how supplemental groups of the first container processes are calculated.Valid values are 'Merge' and 'Strict'. If not specified, 'Merge' is used.(Alpha) Using the field requires the SupplementalGroupsPolicy feature gate to be enabledand the container runtime must implement support for this feature.Note that this field cannot be set when spec.os.name is windows.", + MarkdownDescription: "Defines how supplemental groups of the first container processes are calculated.Valid values are 'Merge' and 'Strict'. If not specified, 'Merge' is used.(Alpha) Using the field requires the SupplementalGroupsPolicy feature gate to be enabledand the container runtime must implement support for this feature.Note that this field cannot be set when spec.os.name is windows.", + Required: false, + Optional: true, + Computed: false, + }, + "sysctls": schema.ListNestedAttribute{ Description: "Sysctls hold a list of namespaced sysctls used for the pod. Pods with unsupportedsysctls (by the container runtime) might fail to launch.Note that this field cannot be set when spec.os.name is windows.", MarkdownDescription: "Sysctls hold a list of namespaced sysctls used for the pod. Pods with unsupportedsysctls (by the container runtime) might fail to launch.Note that this field cannot be set when spec.os.name is windows.", @@ -18722,8 +18912,8 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d }, "name": schema.StringAttribute{ - Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", - MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", Required: false, Optional: true, Computed: false, @@ -18813,8 +19003,8 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d }, "name": schema.StringAttribute{ - Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", - MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", Required: false, Optional: true, Computed: false, @@ -18854,8 +19044,8 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d MarkdownDescription: "The ConfigMap to select from", Attributes: map[string]schema.Attribute{ "name": schema.StringAttribute{ - Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", - MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", Required: false, Optional: true, Computed: false, @@ -18887,8 +19077,8 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d MarkdownDescription: "The Secret to select from", Attributes: map[string]schema.Attribute{ "name": schema.StringAttribute{ - Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", - MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", Required: false, Optional: true, Computed: false, @@ -19700,6 +19890,14 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d Optional: false, Computed: false, }, + + "request": schema.StringAttribute{ + Description: "Request is the name chosen for a request in the referenced claim.If empty, everything from the claim is made available, otherwiseonly the result of this request.", + MarkdownDescription: "Request is the name chosen for a request in the referenced claim.If empty, everything from the claim is made available, otherwiseonly the result of this request.", + Required: false, + Optional: true, + Computed: false, + }, }, }, Required: false, @@ -19811,8 +20009,8 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d }, "proc_mount": schema.StringAttribute{ - Description: "procMount denotes the type of proc mount to use for the containers.The default is DefaultProcMount which uses the container runtime defaults forreadonly paths and masked paths.This requires the ProcMountType feature flag to be enabled.Note that this field cannot be set when spec.os.name is windows.", - MarkdownDescription: "procMount denotes the type of proc mount to use for the containers.The default is DefaultProcMount which uses the container runtime defaults forreadonly paths and masked paths.This requires the ProcMountType feature flag to be enabled.Note that this field cannot be set when spec.os.name is windows.", + Description: "procMount denotes the type of proc mount to use for the containers.The default value is Default which uses the container runtime defaults forreadonly paths and masked paths.This requires the ProcMountType feature flag to be enabled.Note that this field cannot be set when spec.os.name is windows.", + MarkdownDescription: "procMount denotes the type of proc mount to use for the containers.The default value is Default which uses the container runtime defaults forreadonly paths and masked paths.This requires the ProcMountType feature flag to be enabled.Note that this field cannot be set when spec.os.name is windows.", Required: false, Optional: true, Computed: false, @@ -20530,8 +20728,8 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d }, "name": schema.StringAttribute{ - Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", - MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", Required: false, Optional: true, Computed: false, @@ -20590,8 +20788,8 @@ func (r *Pgv2PerconaComPerconaPgclusterV2Manifest) Schema(_ context.Context, _ d }, "name": schema.StringAttribute{ - Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", - MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", Required: false, Optional: true, Computed: false, diff --git a/internal/provider/pgv2_percona_com_v2/pgv2_percona_com_percona_pg_upgrade_v2_manifest.go b/internal/provider/pgv2_percona_com_v2/pgv2_percona_com_percona_pg_upgrade_v2_manifest.go index 63b93de0e..3833a97a5 100644 --- a/internal/provider/pgv2_percona_com_v2/pgv2_percona_com_percona_pg_upgrade_v2_manifest.go +++ b/internal/provider/pgv2_percona_com_v2/pgv2_percona_com_percona_pg_upgrade_v2_manifest.go @@ -340,7 +340,8 @@ type Pgv2PerconaComPerconaPgupgradeV2ManifestData struct { } `tfsdk:"resize_policy" json:"resizePolicy,omitempty"` Resources *struct { Claims *[]struct { - Name *string `tfsdk:"name" json:"name,omitempty"` + Name *string `tfsdk:"name" json:"name,omitempty"` + Request *string `tfsdk:"request" json:"request,omitempty"` } `tfsdk:"claims" json:"claims,omitempty"` Limits *map[string]string `tfsdk:"limits" json:"limits,omitempty"` Requests *map[string]string `tfsdk:"requests" json:"requests,omitempty"` @@ -436,7 +437,8 @@ type Pgv2PerconaComPerconaPgupgradeV2ManifestData struct { PriorityClassName *string `tfsdk:"priority_class_name" json:"priorityClassName,omitempty"` Resources *struct { Claims *[]struct { - Name *string `tfsdk:"name" json:"name,omitempty"` + Name *string `tfsdk:"name" json:"name,omitempty"` + Request *string `tfsdk:"request" json:"request,omitempty"` } `tfsdk:"claims" json:"claims,omitempty"` Limits *map[string]string `tfsdk:"limits" json:"limits,omitempty"` Requests *map[string]string `tfsdk:"requests" json:"requests,omitempty"` @@ -814,8 +816,8 @@ func (r *Pgv2PerconaComPerconaPgupgradeV2Manifest) Schema(_ context.Context, _ d }, "match_label_keys": schema.ListAttribute{ - Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", - MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", + Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", + MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", ElementType: types.StringType, Required: false, Optional: true, @@ -823,8 +825,8 @@ func (r *Pgv2PerconaComPerconaPgupgradeV2Manifest) Schema(_ context.Context, _ d }, "mismatch_label_keys": schema.ListAttribute{ - Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", - MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", + Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", + MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", ElementType: types.StringType, Required: false, Optional: true, @@ -981,8 +983,8 @@ func (r *Pgv2PerconaComPerconaPgupgradeV2Manifest) Schema(_ context.Context, _ d }, "match_label_keys": schema.ListAttribute{ - Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", - MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", + Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", + MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", ElementType: types.StringType, Required: false, Optional: true, @@ -990,8 +992,8 @@ func (r *Pgv2PerconaComPerconaPgupgradeV2Manifest) Schema(_ context.Context, _ d }, "mismatch_label_keys": schema.ListAttribute{ - Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", - MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", + Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", + MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", ElementType: types.StringType, Required: false, Optional: true, @@ -1148,8 +1150,8 @@ func (r *Pgv2PerconaComPerconaPgupgradeV2Manifest) Schema(_ context.Context, _ d }, "match_label_keys": schema.ListAttribute{ - Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", - MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", + Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", + MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", ElementType: types.StringType, Required: false, Optional: true, @@ -1157,8 +1159,8 @@ func (r *Pgv2PerconaComPerconaPgupgradeV2Manifest) Schema(_ context.Context, _ d }, "mismatch_label_keys": schema.ListAttribute{ - Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", - MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", + Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", + MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", ElementType: types.StringType, Required: false, Optional: true, @@ -1315,8 +1317,8 @@ func (r *Pgv2PerconaComPerconaPgupgradeV2Manifest) Schema(_ context.Context, _ d }, "match_label_keys": schema.ListAttribute{ - Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", - MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", + Description: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", + MarkdownDescription: "MatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key in (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both matchLabelKeys and labelSelector.Also, matchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", ElementType: types.StringType, Required: false, Optional: true, @@ -1324,8 +1326,8 @@ func (r *Pgv2PerconaComPerconaPgupgradeV2Manifest) Schema(_ context.Context, _ d }, "mismatch_label_keys": schema.ListAttribute{ - Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", - MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is an alpha field and requires enabling MatchLabelKeysInPodAffinity feature gate.", + Description: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", + MarkdownDescription: "MismatchLabelKeys is a set of pod label keys to select which pods willbe taken into consideration. The keys are used to lookup values from theincoming pod labels, those key-value labels are merged with 'labelSelector' as 'key notin (value)'to select the group of existing pods which pods will be taken into considerationfor the incoming pod's pod (anti) affinity. Keys that don't exist in the incomingpod labels will be ignored. The default value is empty.The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.Also, mismatchLabelKeys cannot be set when labelSelector isn't set.This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", ElementType: types.StringType, Required: false, Optional: true, @@ -1456,8 +1458,8 @@ func (r *Pgv2PerconaComPerconaPgupgradeV2Manifest) Schema(_ context.Context, _ d NestedObject: schema.NestedAttributeObject{ Attributes: map[string]schema.Attribute{ "name": schema.StringAttribute{ - Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", - MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", Required: false, Optional: true, Computed: false, @@ -1530,8 +1532,8 @@ func (r *Pgv2PerconaComPerconaPgupgradeV2Manifest) Schema(_ context.Context, _ d }, "name": schema.StringAttribute{ - Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", - MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", Required: false, Optional: true, Computed: false, @@ -1621,8 +1623,8 @@ func (r *Pgv2PerconaComPerconaPgupgradeV2Manifest) Schema(_ context.Context, _ d }, "name": schema.StringAttribute{ - Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", - MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", Required: false, Optional: true, Computed: false, @@ -1662,8 +1664,8 @@ func (r *Pgv2PerconaComPerconaPgupgradeV2Manifest) Schema(_ context.Context, _ d MarkdownDescription: "The ConfigMap to select from", Attributes: map[string]schema.Attribute{ "name": schema.StringAttribute{ - Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", - MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", Required: false, Optional: true, Computed: false, @@ -1695,8 +1697,8 @@ func (r *Pgv2PerconaComPerconaPgupgradeV2Manifest) Schema(_ context.Context, _ d MarkdownDescription: "The Secret to select from", Attributes: map[string]schema.Attribute{ "name": schema.StringAttribute{ - Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", - MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", Required: false, Optional: true, Computed: false, @@ -2508,6 +2510,14 @@ func (r *Pgv2PerconaComPerconaPgupgradeV2Manifest) Schema(_ context.Context, _ d Optional: false, Computed: false, }, + + "request": schema.StringAttribute{ + Description: "Request is the name chosen for a request in the referenced claim.If empty, everything from the claim is made available, otherwiseonly the result of this request.", + MarkdownDescription: "Request is the name chosen for a request in the referenced claim.If empty, everything from the claim is made available, otherwiseonly the result of this request.", + Required: false, + Optional: true, + Computed: false, + }, }, }, Required: false, @@ -2619,8 +2629,8 @@ func (r *Pgv2PerconaComPerconaPgupgradeV2Manifest) Schema(_ context.Context, _ d }, "proc_mount": schema.StringAttribute{ - Description: "procMount denotes the type of proc mount to use for the containers.The default is DefaultProcMount which uses the container runtime defaults forreadonly paths and masked paths.This requires the ProcMountType feature flag to be enabled.Note that this field cannot be set when spec.os.name is windows.", - MarkdownDescription: "procMount denotes the type of proc mount to use for the containers.The default is DefaultProcMount which uses the container runtime defaults forreadonly paths and masked paths.This requires the ProcMountType feature flag to be enabled.Note that this field cannot be set when spec.os.name is windows.", + Description: "procMount denotes the type of proc mount to use for the containers.The default value is Default which uses the container runtime defaults forreadonly paths and masked paths.This requires the ProcMountType feature flag to be enabled.Note that this field cannot be set when spec.os.name is windows.", + MarkdownDescription: "procMount denotes the type of proc mount to use for the containers.The default value is Default which uses the container runtime defaults forreadonly paths and masked paths.This requires the ProcMountType feature flag to be enabled.Note that this field cannot be set when spec.os.name is windows.", Required: false, Optional: true, Computed: false, @@ -3173,6 +3183,14 @@ func (r *Pgv2PerconaComPerconaPgupgradeV2Manifest) Schema(_ context.Context, _ d Optional: false, Computed: false, }, + + "request": schema.StringAttribute{ + Description: "Request is the name chosen for a request in the referenced claim.If empty, everything from the claim is made available, otherwiseonly the result of this request.", + MarkdownDescription: "Request is the name chosen for a request in the referenced claim.If empty, everything from the claim is made available, otherwiseonly the result of this request.", + Required: false, + Optional: true, + Computed: false, + }, }, }, Required: false, diff --git a/internal/provider/pkg_crossplane_io_v1/pkg_crossplane_io_configuration_revision_v1_manifest.go b/internal/provider/pkg_crossplane_io_v1/pkg_crossplane_io_configuration_revision_v1_manifest.go index 5a615a94b..0265676f5 100644 --- a/internal/provider/pkg_crossplane_io_v1/pkg_crossplane_io_configuration_revision_v1_manifest.go +++ b/internal/provider/pkg_crossplane_io_v1/pkg_crossplane_io_configuration_revision_v1_manifest.go @@ -167,8 +167,8 @@ func (r *PkgCrossplaneIoConfigurationRevisionV1Manifest) Schema(_ context.Contex NestedObject: schema.NestedAttributeObject{ Attributes: map[string]schema.Attribute{ "name": schema.StringAttribute{ - Description: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?", - MarkdownDescription: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?", + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", Required: false, Optional: true, Computed: false, diff --git a/internal/provider/pkg_crossplane_io_v1/pkg_crossplane_io_configuration_v1_manifest.go b/internal/provider/pkg_crossplane_io_v1/pkg_crossplane_io_configuration_v1_manifest.go index 3b910d8f0..8c4121efe 100644 --- a/internal/provider/pkg_crossplane_io_v1/pkg_crossplane_io_configuration_v1_manifest.go +++ b/internal/provider/pkg_crossplane_io_v1/pkg_crossplane_io_configuration_v1_manifest.go @@ -159,8 +159,8 @@ func (r *PkgCrossplaneIoConfigurationV1Manifest) Schema(_ context.Context, _ dat NestedObject: schema.NestedAttributeObject{ Attributes: map[string]schema.Attribute{ "name": schema.StringAttribute{ - Description: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?", - MarkdownDescription: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?", + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", Required: false, Optional: true, Computed: false, diff --git a/internal/provider/pkg_crossplane_io_v1/pkg_crossplane_io_provider_revision_v1_manifest.go b/internal/provider/pkg_crossplane_io_v1/pkg_crossplane_io_provider_revision_v1_manifest.go index 4f1f07f3c..19209bcf0 100644 --- a/internal/provider/pkg_crossplane_io_v1/pkg_crossplane_io_provider_revision_v1_manifest.go +++ b/internal/provider/pkg_crossplane_io_v1/pkg_crossplane_io_provider_revision_v1_manifest.go @@ -194,8 +194,8 @@ func (r *PkgCrossplaneIoProviderRevisionV1Manifest) Schema(_ context.Context, _ NestedObject: schema.NestedAttributeObject{ Attributes: map[string]schema.Attribute{ "name": schema.StringAttribute{ - Description: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?", - MarkdownDescription: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?", + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", Required: false, Optional: true, Computed: false, diff --git a/internal/provider/pkg_crossplane_io_v1/pkg_crossplane_io_provider_v1_manifest.go b/internal/provider/pkg_crossplane_io_v1/pkg_crossplane_io_provider_v1_manifest.go index 38d69194d..3510b7f99 100644 --- a/internal/provider/pkg_crossplane_io_v1/pkg_crossplane_io_provider_v1_manifest.go +++ b/internal/provider/pkg_crossplane_io_v1/pkg_crossplane_io_provider_v1_manifest.go @@ -184,8 +184,8 @@ func (r *PkgCrossplaneIoProviderV1Manifest) Schema(_ context.Context, _ datasour NestedObject: schema.NestedAttributeObject{ Attributes: map[string]schema.Attribute{ "name": schema.StringAttribute{ - Description: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?", - MarkdownDescription: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?", + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", Required: false, Optional: true, Computed: false, diff --git a/internal/provider/pkg_crossplane_io_v1alpha1/pkg_crossplane_io_controller_config_v1alpha1_manifest.go b/internal/provider/pkg_crossplane_io_v1alpha1/pkg_crossplane_io_controller_config_v1alpha1_manifest.go index 0545721d0..6bcebb839 100644 --- a/internal/provider/pkg_crossplane_io_v1alpha1/pkg_crossplane_io_controller_config_v1alpha1_manifest.go +++ b/internal/provider/pkg_crossplane_io_v1alpha1/pkg_crossplane_io_controller_config_v1alpha1_manifest.go @@ -1622,8 +1622,8 @@ func (r *PkgCrossplaneIoControllerConfigV1Alpha1Manifest) Schema(_ context.Conte }, "name": schema.StringAttribute{ - Description: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?", - MarkdownDescription: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?", + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", Required: false, Optional: true, Computed: false, @@ -1713,8 +1713,8 @@ func (r *PkgCrossplaneIoControllerConfigV1Alpha1Manifest) Schema(_ context.Conte }, "name": schema.StringAttribute{ - Description: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?", - MarkdownDescription: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?", + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", Required: false, Optional: true, Computed: false, @@ -1754,8 +1754,8 @@ func (r *PkgCrossplaneIoControllerConfigV1Alpha1Manifest) Schema(_ context.Conte MarkdownDescription: "The ConfigMap to select from", Attributes: map[string]schema.Attribute{ "name": schema.StringAttribute{ - Description: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?", - MarkdownDescription: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?", + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", Required: false, Optional: true, Computed: false, @@ -1787,8 +1787,8 @@ func (r *PkgCrossplaneIoControllerConfigV1Alpha1Manifest) Schema(_ context.Conte MarkdownDescription: "The Secret to select from", Attributes: map[string]schema.Attribute{ "name": schema.StringAttribute{ - Description: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?", - MarkdownDescription: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?", + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", Required: false, Optional: true, Computed: false, @@ -1835,8 +1835,8 @@ func (r *PkgCrossplaneIoControllerConfigV1Alpha1Manifest) Schema(_ context.Conte NestedObject: schema.NestedAttributeObject{ Attributes: map[string]schema.Attribute{ "name": schema.StringAttribute{ - Description: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?", - MarkdownDescription: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?", + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", Required: false, Optional: true, Computed: false, @@ -2758,8 +2758,8 @@ func (r *PkgCrossplaneIoControllerConfigV1Alpha1Manifest) Schema(_ context.Conte MarkdownDescription: "secretRef is Optional: SecretRef is reference to the authentication secret for User, default is empty.More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it", Attributes: map[string]schema.Attribute{ "name": schema.StringAttribute{ - Description: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?", - MarkdownDescription: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?", + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", Required: false, Optional: true, Computed: false, @@ -2808,8 +2808,8 @@ func (r *PkgCrossplaneIoControllerConfigV1Alpha1Manifest) Schema(_ context.Conte MarkdownDescription: "secretRef is optional: points to a secret object containing parameters used to connectto OpenStack.", Attributes: map[string]schema.Attribute{ "name": schema.StringAttribute{ - Description: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?", - MarkdownDescription: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?", + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", Required: false, Optional: true, Computed: false, @@ -2881,8 +2881,8 @@ func (r *PkgCrossplaneIoControllerConfigV1Alpha1Manifest) Schema(_ context.Conte }, "name": schema.StringAttribute{ - Description: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?", - MarkdownDescription: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?", + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", Required: false, Optional: true, Computed: false, @@ -2926,8 +2926,8 @@ func (r *PkgCrossplaneIoControllerConfigV1Alpha1Manifest) Schema(_ context.Conte MarkdownDescription: "nodePublishSecretRef is a reference to the secret object containingsensitive information to pass to the CSI driver to complete the CSINodePublishVolume and NodeUnpublishVolume calls.This field is optional, and may be empty if no secret is required. If thesecret object contains more than one secret, all secret references are passed.", Attributes: map[string]schema.Attribute{ "name": schema.StringAttribute{ - Description: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?", - MarkdownDescription: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?", + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", Required: false, Optional: true, Computed: false, @@ -3455,8 +3455,8 @@ func (r *PkgCrossplaneIoControllerConfigV1Alpha1Manifest) Schema(_ context.Conte MarkdownDescription: "secretRef is Optional: secretRef is reference to the secret object containingsensitive information to pass to the plugin scripts. This may beempty if no secret object is specified. If the secret objectcontains more than one secret, all secrets are passed to the pluginscripts.", Attributes: map[string]schema.Attribute{ "name": schema.StringAttribute{ - Description: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?", - MarkdownDescription: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?", + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", Required: false, Optional: true, Computed: false, @@ -3711,8 +3711,8 @@ func (r *PkgCrossplaneIoControllerConfigV1Alpha1Manifest) Schema(_ context.Conte MarkdownDescription: "secretRef is the CHAP Secret for iSCSI target and initiator authentication", Attributes: map[string]schema.Attribute{ "name": schema.StringAttribute{ - Description: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?", - MarkdownDescription: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?", + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", Required: false, Optional: true, Computed: false, @@ -4012,8 +4012,8 @@ func (r *PkgCrossplaneIoControllerConfigV1Alpha1Manifest) Schema(_ context.Conte }, "name": schema.StringAttribute{ - Description: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?", - MarkdownDescription: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?", + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", Required: false, Optional: true, Computed: false, @@ -4166,8 +4166,8 @@ func (r *PkgCrossplaneIoControllerConfigV1Alpha1Manifest) Schema(_ context.Conte }, "name": schema.StringAttribute{ - Description: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?", - MarkdownDescription: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?", + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", Required: false, Optional: true, Computed: false, @@ -4345,8 +4345,8 @@ func (r *PkgCrossplaneIoControllerConfigV1Alpha1Manifest) Schema(_ context.Conte MarkdownDescription: "secretRef is name of the authentication secret for RBDUser. If providedoverrides keyring.Default is nil.More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it", Attributes: map[string]schema.Attribute{ "name": schema.StringAttribute{ - Description: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?", - MarkdownDescription: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?", + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", Required: false, Optional: true, Computed: false, @@ -4411,8 +4411,8 @@ func (r *PkgCrossplaneIoControllerConfigV1Alpha1Manifest) Schema(_ context.Conte MarkdownDescription: "secretRef references to the secret for ScaleIO user and othersensitive information. If this is not provided, Login operation will fail.", Attributes: map[string]schema.Attribute{ "name": schema.StringAttribute{ - Description: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?", - MarkdownDescription: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?", + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", Required: false, Optional: true, Computed: false, @@ -4561,8 +4561,8 @@ func (r *PkgCrossplaneIoControllerConfigV1Alpha1Manifest) Schema(_ context.Conte MarkdownDescription: "secretRef specifies the secret to use for obtaining the StorageOS APIcredentials. If not specified, default values will be attempted.", Attributes: map[string]schema.Attribute{ "name": schema.StringAttribute{ - Description: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?", - MarkdownDescription: "Name of the referent.More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Add other useful fields. apiVersion, kind, uid?", + Description: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", + MarkdownDescription: "Name of the referent.This field is effectively required, but due to backwards compatibility isallowed to be empty. Instances of this type with an empty value here arealmost certainly wrong.TODO: Add other useful fields. apiVersion, kind, uid?More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#namesTODO: Drop 'kubebuilder:default' when controller-gen doesn't need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.", Required: false, Optional: true, Computed: false, diff --git a/internal/provider/scheduling_koordinator_sh_v1alpha1/scheduling_koordinator_sh_reservation_v1alpha1_manifest.go b/internal/provider/scheduling_koordinator_sh_v1alpha1/scheduling_koordinator_sh_reservation_v1alpha1_manifest.go index a3ae5c47c..aa3d55934 100644 --- a/internal/provider/scheduling_koordinator_sh_v1alpha1/scheduling_koordinator_sh_reservation_v1alpha1_manifest.go +++ b/internal/provider/scheduling_koordinator_sh_v1alpha1/scheduling_koordinator_sh_reservation_v1alpha1_manifest.go @@ -75,7 +75,13 @@ type SchedulingKoordinatorShReservationV1Alpha1ManifestData struct { Uid *string `tfsdk:"uid" json:"uid,omitempty"` } `tfsdk:"object" json:"object,omitempty"` } `tfsdk:"owners" json:"owners,omitempty"` - PreAllocation *bool `tfsdk:"pre_allocation" json:"preAllocation,omitempty"` + PreAllocation *bool `tfsdk:"pre_allocation" json:"preAllocation,omitempty"` + Taints *[]struct { + Effect *string `tfsdk:"effect" json:"effect,omitempty"` + Key *string `tfsdk:"key" json:"key,omitempty"` + TimeAdded *string `tfsdk:"time_added" json:"timeAdded,omitempty"` + Value *string `tfsdk:"value" json:"value,omitempty"` + } `tfsdk:"taints" json:"taints,omitempty"` Template *map[string]string `tfsdk:"template" json:"template,omitempty"` Ttl *string `tfsdk:"ttl" json:"ttl,omitempty"` Unschedulable *bool `tfsdk:"unschedulable" json:"unschedulable,omitempty"` @@ -389,6 +395,52 @@ func (r *SchedulingKoordinatorShReservationV1Alpha1Manifest) Schema(_ context.Co Computed: false, }, + "taints": schema.ListNestedAttribute{ + Description: "Specifies the reservation's taints. This can be toleranted by the reservation tolerance.Eviction is not supported for NoExecute taints", + MarkdownDescription: "Specifies the reservation's taints. This can be toleranted by the reservation tolerance.Eviction is not supported for NoExecute taints", + NestedObject: schema.NestedAttributeObject{ + Attributes: map[string]schema.Attribute{ + "effect": schema.StringAttribute{ + Description: "Required. The effect of the taint on podsthat do not tolerate the taint.Valid effects are NoSchedule, PreferNoSchedule and NoExecute.", + MarkdownDescription: "Required. The effect of the taint on podsthat do not tolerate the taint.Valid effects are NoSchedule, PreferNoSchedule and NoExecute.", + Required: true, + Optional: false, + Computed: false, + }, + + "key": schema.StringAttribute{ + Description: "Required. The taint key to be applied to a node.", + MarkdownDescription: "Required. The taint key to be applied to a node.", + Required: true, + Optional: false, + Computed: false, + }, + + "time_added": schema.StringAttribute{ + Description: "TimeAdded represents the time at which the taint was added.It is only written for NoExecute taints.", + MarkdownDescription: "TimeAdded represents the time at which the taint was added.It is only written for NoExecute taints.", + Required: false, + Optional: true, + Computed: false, + Validators: []validator.String{ + validators.DateTime64Validator(), + }, + }, + + "value": schema.StringAttribute{ + Description: "The taint value corresponding to the taint key.", + MarkdownDescription: "The taint value corresponding to the taint key.", + Required: false, + Optional: true, + Computed: false, + }, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + "template": schema.MapAttribute{ Description: "Template defines the scheduling requirements (resources, affinities, images, ...) processed by the scheduler justlike a normal pod.If the 'template.spec.nodeName' is specified, the scheduler will not choose another node but reserve resources onthe specified node.", MarkdownDescription: "Template defines the scheduling requirements (resources, affinities, images, ...) processed by the scheduler justlike a normal pod.If the 'template.spec.nodeName' is specified, the scheduler will not choose another node but reserve resources onthe specified node.", diff --git a/internal/provider/scheduling_volcano_sh_v1beta1/scheduling_volcano_sh_queue_v1beta1_manifest.go b/internal/provider/scheduling_volcano_sh_v1beta1/scheduling_volcano_sh_queue_v1beta1_manifest.go index 50a1c528b..582321ddc 100644 --- a/internal/provider/scheduling_volcano_sh_v1beta1/scheduling_volcano_sh_queue_v1beta1_manifest.go +++ b/internal/provider/scheduling_volcano_sh_v1beta1/scheduling_volcano_sh_queue_v1beta1_manifest.go @@ -63,6 +63,7 @@ type SchedulingVolcanoShQueueV1Beta1ManifestData struct { Resource *map[string]string `tfsdk:"resource" json:"resource,omitempty"` } `tfsdk:"guarantee" json:"guarantee,omitempty"` Parent *string `tfsdk:"parent" json:"parent,omitempty"` + Priority *int64 `tfsdk:"priority" json:"priority,omitempty"` Reclaimable *bool `tfsdk:"reclaimable" json:"reclaimable,omitempty"` Type *string `tfsdk:"type" json:"type,omitempty"` Weight *int64 `tfsdk:"weight" json:"weight,omitempty"` @@ -277,6 +278,14 @@ func (r *SchedulingVolcanoShQueueV1Beta1Manifest) Schema(_ context.Context, _ da Computed: false, }, + "priority": schema.Int64Attribute{ + Description: "Priority define the priority of queue. Higher values are prioritized for scheduling and considered later during reclamation.", + MarkdownDescription: "Priority define the priority of queue. Higher values are prioritized for scheduling and considered later during reclamation.", + Required: false, + Optional: true, + Computed: false, + }, + "reclaimable": schema.BoolAttribute{ Description: "Reclaimable indicate whether the queue can be reclaimed by other queue", MarkdownDescription: "Reclaimable indicate whether the queue can be reclaimed by other queue", diff --git a/internal/provider/scylla_scylladb_com_v1alpha1/scylla_scylladb_com_scylla_operator_config_v1alpha1_manifest.go b/internal/provider/scylla_scylladb_com_v1alpha1/scylla_scylladb_com_scylla_operator_config_v1alpha1_manifest.go index 13e8dfeb1..976c1c86a 100644 --- a/internal/provider/scylla_scylladb_com_v1alpha1/scylla_scylladb_com_scylla_operator_config_v1alpha1_manifest.go +++ b/internal/provider/scylla_scylladb_com_v1alpha1/scylla_scylladb_com_scylla_operator_config_v1alpha1_manifest.go @@ -42,7 +42,10 @@ type ScyllaScylladbComScyllaOperatorConfigV1Alpha1ManifestData struct { } `tfsdk:"metadata" json:"metadata"` Spec *struct { - ScyllaUtilsImage *string `tfsdk:"scylla_utils_image" json:"scyllaUtilsImage,omitempty"` + ScyllaUtilsImage *string `tfsdk:"scylla_utils_image" json:"scyllaUtilsImage,omitempty"` + UnsupportedBashToolsImageOverride *string `tfsdk:"unsupported_bash_tools_image_override" json:"unsupportedBashToolsImageOverride,omitempty"` + UnsupportedGrafanaImageOverride *string `tfsdk:"unsupported_grafana_image_override" json:"unsupportedGrafanaImageOverride,omitempty"` + UnsupportedPrometheusVersionOverride *string `tfsdk:"unsupported_prometheus_version_override" json:"unsupportedPrometheusVersionOverride,omitempty"` } `tfsdk:"spec" json:"spec,omitempty"` } @@ -112,14 +115,35 @@ func (r *ScyllaScylladbComScyllaOperatorConfigV1Alpha1Manifest) Schema(_ context MarkdownDescription: "spec defines the desired state of the operator.", Attributes: map[string]schema.Attribute{ "scylla_utils_image": schema.StringAttribute{ - Description: "scyllaUtilsImage is a Scylla image used for running scylla utilities.", - MarkdownDescription: "scyllaUtilsImage is a Scylla image used for running scylla utilities.", + Description: "scyllaUtilsImage is a ScyllaDB image used for running ScyllaDB utilities.", + MarkdownDescription: "scyllaUtilsImage is a ScyllaDB image used for running ScyllaDB utilities.", + Required: false, + Optional: true, + Computed: false, + }, + + "unsupported_bash_tools_image_override": schema.StringAttribute{ + Description: "unsupportedBashToolsImageOverride allows to adjust a generic Bash image with extra tools used by the operator for auxiliary purposes. Setting this field renders your cluster unsupported. Use at your own risk.", + MarkdownDescription: "unsupportedBashToolsImageOverride allows to adjust a generic Bash image with extra tools used by the operator for auxiliary purposes. Setting this field renders your cluster unsupported. Use at your own risk.", + Required: false, + Optional: true, + Computed: false, + }, + + "unsupported_grafana_image_override": schema.StringAttribute{ + Description: "unsupportedGrafanaImageOverride allows to adjust Grafana image used by the operator for testing, dev or emergencies. Setting this field renders your cluster unsupported. Use at your own risk.", + MarkdownDescription: "unsupportedGrafanaImageOverride allows to adjust Grafana image used by the operator for testing, dev or emergencies. Setting this field renders your cluster unsupported. Use at your own risk.", + Required: false, + Optional: true, + Computed: false, + }, + + "unsupported_prometheus_version_override": schema.StringAttribute{ + Description: "unsupportedPrometheusVersionOverride allows to adjust Prometheus version used by the operator for testing, dev or emergencies. Setting this field renders your cluster unsupported. Use at your own risk.", + MarkdownDescription: "unsupportedPrometheusVersionOverride allows to adjust Prometheus version used by the operator for testing, dev or emergencies. Setting this field renders your cluster unsupported. Use at your own risk.", Required: false, Optional: true, Computed: false, - Validators: []validator.String{ - stringvalidator.LengthAtLeast(1), - }, }, }, Required: false, diff --git a/internal/provider/tempo_grafana_com_v1alpha1/tempo_grafana_com_tempo_stack_v1alpha1_manifest.go b/internal/provider/tempo_grafana_com_v1alpha1/tempo_grafana_com_tempo_stack_v1alpha1_manifest.go index e3efe22c6..8ba52118e 100644 --- a/internal/provider/tempo_grafana_com_v1alpha1/tempo_grafana_com_tempo_stack_v1alpha1_manifest.go +++ b/internal/provider/tempo_grafana_com_v1alpha1/tempo_grafana_com_tempo_stack_v1alpha1_manifest.go @@ -52,6 +52,7 @@ type TempoGrafanaComTempoStackV1Alpha1ManifestData struct { } `tfsdk:"memberlist" json:"memberlist,omitempty"` } `tfsdk:"hash_ring" json:"hashRing,omitempty"` Images *struct { + JaegerQuery *string `tfsdk:"jaeger_query" json:"jaegerQuery,omitempty"` OauthProxy *string `tfsdk:"oauth_proxy" json:"oauthProxy,omitempty"` Tempo *string `tfsdk:"tempo" json:"tempo,omitempty"` TempoGateway *string `tfsdk:"tempo_gateway" json:"tempoGateway,omitempty"` @@ -310,6 +311,15 @@ type TempoGrafanaComTempoStackV1Alpha1ManifestData struct { Requests *map[string]string `tfsdk:"requests" json:"requests,omitempty"` } `tfsdk:"resources" json:"resources,omitempty"` ServicesQueryDuration *string `tfsdk:"services_query_duration" json:"servicesQueryDuration,omitempty"` + TempoQuery *struct { + Resources *struct { + Claims *[]struct { + Name *string `tfsdk:"name" json:"name,omitempty"` + } `tfsdk:"claims" json:"claims,omitempty"` + Limits *map[string]string `tfsdk:"limits" json:"limits,omitempty"` + Requests *map[string]string `tfsdk:"requests" json:"requests,omitempty"` + } `tfsdk:"resources" json:"resources,omitempty"` + } `tfsdk:"tempo_query" json:"tempoQuery,omitempty"` } `tfsdk:"jaeger_query" json:"jaegerQuery,omitempty"` } `tfsdk:"query_frontend" json:"queryFrontend,omitempty"` } `tfsdk:"template" json:"template,omitempty"` @@ -473,6 +483,14 @@ func (r *TempoGrafanaComTempoStackV1Alpha1Manifest) Schema(_ context.Context, _ Description: "Images defines the image for each container.", MarkdownDescription: "Images defines the image for each container.", Attributes: map[string]schema.Attribute{ + "jaeger_query": schema.StringAttribute{ + Description: "JaegerQuery defines the tempo-query container image.", + MarkdownDescription: "JaegerQuery defines the tempo-query container image.", + Required: false, + Optional: true, + Computed: false, + }, + "oauth_proxy": schema.StringAttribute{ Description: "OauthProxy defines the oauth proxy image used to protect the jaegerUI on single tenant.", MarkdownDescription: "OauthProxy defines the oauth proxy image used to protect the jaegerUI on single tenant.", @@ -2182,6 +2200,61 @@ func (r *TempoGrafanaComTempoStackV1Alpha1Manifest) Schema(_ context.Context, _ Optional: true, Computed: false, }, + + "tempo_query": schema.SingleNestedAttribute{ + Description: "TempoQuery defines options specific to the Tempoo Query component.", + MarkdownDescription: "TempoQuery defines options specific to the Tempoo Query component.", + Attributes: map[string]schema.Attribute{ + "resources": schema.SingleNestedAttribute{ + Description: "Resources defines resources for this component, this will override the calculated resources derived from total", + MarkdownDescription: "Resources defines resources for this component, this will override the calculated resources derived from total", + Attributes: map[string]schema.Attribute{ + "claims": schema.ListNestedAttribute{ + Description: "Claims lists the names of resources, defined in spec.resourceClaims,that are used by this container.This is an alpha field and requires enabling theDynamicResourceAllocation feature gate.This field is immutable. It can only be set for containers.", + MarkdownDescription: "Claims lists the names of resources, defined in spec.resourceClaims,that are used by this container.This is an alpha field and requires enabling theDynamicResourceAllocation feature gate.This field is immutable. It can only be set for containers.", + NestedObject: schema.NestedAttributeObject{ + Attributes: map[string]schema.Attribute{ + "name": schema.StringAttribute{ + Description: "Name must match the name of one entry in pod.spec.resourceClaims ofthe Pod where this field is used. It makes that resource availableinside a container.", + MarkdownDescription: "Name must match the name of one entry in pod.spec.resourceClaims ofthe Pod where this field is used. It makes that resource availableinside a container.", + Required: true, + Optional: false, + Computed: false, + }, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + + "limits": schema.MapAttribute{ + Description: "Limits describes the maximum amount of compute resources allowed.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/", + MarkdownDescription: "Limits describes the maximum amount of compute resources allowed.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/", + ElementType: types.StringType, + Required: false, + Optional: true, + Computed: false, + }, + + "requests": schema.MapAttribute{ + Description: "Requests describes the minimum amount of compute resources required.If Requests is omitted for a container, it defaults to Limits if that is explicitly specified,otherwise to an implementation-defined value. Requests cannot exceed Limits.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/", + MarkdownDescription: "Requests describes the minimum amount of compute resources required.If Requests is omitted for a container, it defaults to Limits if that is explicitly specified,otherwise to an implementation-defined value. Requests cannot exceed Limits.More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/", + ElementType: types.StringType, + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, + }, + Required: false, + Optional: true, + Computed: false, + }, }, Required: false, Optional: true, diff --git a/internal/provider/traefik_io_v1alpha1/traefik_io_traefik_service_v1alpha1_manifest.go b/internal/provider/traefik_io_v1alpha1/traefik_io_traefik_service_v1alpha1_manifest.go index b4c6894f9..c5f7293a6 100644 --- a/internal/provider/traefik_io_v1alpha1/traefik_io_traefik_service_v1alpha1_manifest.go +++ b/internal/provider/traefik_io_v1alpha1/traefik_io_traefik_service_v1alpha1_manifest.go @@ -59,6 +59,7 @@ type TraefikIoTraefikServiceV1Alpha1ManifestData struct { } `tfsdk:"health_check" json:"healthCheck,omitempty"` Kind *string `tfsdk:"kind" json:"kind,omitempty"` MaxBodySize *int64 `tfsdk:"max_body_size" json:"maxBodySize,omitempty"` + MirrorBody *bool `tfsdk:"mirror_body" json:"mirrorBody,omitempty"` Mirrors *[]struct { HealthCheck *struct { FollowRedirects *bool `tfsdk:"follow_redirects" json:"followRedirects,omitempty"` @@ -371,6 +372,14 @@ func (r *TraefikIoTraefikServiceV1Alpha1Manifest) Schema(_ context.Context, _ da Computed: false, }, + "mirror_body": schema.BoolAttribute{ + Description: "MirrorBody defines whether the body of the request should be mirrored.Default value is true.", + MarkdownDescription: "MirrorBody defines whether the body of the request should be mirrored.Default value is true.", + Required: false, + Optional: true, + Computed: false, + }, + "mirrors": schema.ListNestedAttribute{ Description: "Mirrors defines the list of mirrors where Traefik will duplicate the traffic.", MarkdownDescription: "Mirrors defines the list of mirrors where Traefik will duplicate the traffic.", diff --git a/schemas/openapi_v2/kubernetes/kubernetes/swagger.json b/schemas/openapi_v2/kubernetes/kubernetes/swagger.json index e920ab676..4be71c478 100644 --- a/schemas/openapi_v2/kubernetes/kubernetes/swagger.json +++ b/schemas/openapi_v2/kubernetes/kubernetes/swagger.json @@ -11555,7 +11555,7 @@ "description": "sessionAffinityConfig contains the configurations of session affinity." }, "trafficDistribution": { - "description": "TrafficDistribution offers a way to express preferences for how traffic is distributed to Service endpoints. Implementations can use this field as a hint, but are not required to guarantee strict adherence. If the field is not set, the implementation will apply its default routing strategy. If set to \"PreferClose\", implementations should prioritize endpoints that are topologically close (e.g., same zone). This is an alpha field and requires enabling ServiceTrafficDistribution feature.", + "description": "TrafficDistribution offers a way to express preferences for how traffic is distributed to Service endpoints. Implementations can use this field as a hint, but are not required to guarantee strict adherence. If the field is not set, the implementation will apply its default routing strategy. If set to \"PreferClose\", implementations should prioritize endpoints that are topologically close (e.g., same zone). This is a beta field and requires enabling ServiceTrafficDistribution feature.", "type": "string" }, "type": {